Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix detection and use of netinet/ip6.h on FreeBSD | Tobias Brunner | 2013-03-27 | 1 | -0/+1 |
| | |||||
* | android: Remove/filter header files from LOCAL_SRC_FILES | Tobias Brunner | 2013-03-20 | 1 | -1/+3 |
| | | | | This avoids huge warnings when building the native code. | ||||
* | ipsec: Increased log level for message in case no outbound policy is found | Tobias Brunner | 2013-03-20 | 1 | -1/+1 |
| | | | | | | | This might happen on Android if sockets are bound to the physical IP address but packets are still routed via TUN device. Since it seems to happen quite often (or for stuff that requires regular traffic) this hides these messages from the default log. | ||||
* | Add a DSCP value with getter/setter on packet_t | Martin Willi | 2013-02-06 | 1 | -0/+14 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 10 | -10/+10 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 5 | -7/+7 |
| | |||||
* | Moved packet_t and tun_device_t to networking folder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 |
| | |||||
* | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 6 | -6/+6 |
| | |||||
* | Log IP addresses for discarded inbound IPsec packets | Tobias Brunner | 2012-10-16 | 1 | -1/+3 |
| | |||||
* | Use pointers for lookups in IPsec SA manager | Tobias Brunner | 2012-10-16 | 1 | -16/+16 |
| | |||||
* | IPsec SA manager implements update_sa() | Tobias Brunner | 2012-10-16 | 2 | -0/+60 |
| | |||||
* | Setter for src and destination address of ipsec_sa_t added | Tobias Brunner | 2012-10-16 | 2 | -0/+30 |
| | |||||
* | Fix parsing of IPv6 headers in ip_packet_t | Tobias Brunner | 2012-09-28 | 1 | -0/+1 |
| | |||||
* | struct iphdr is Linux specific use struct ip instead | Tobias Brunner | 2012-08-29 | 1 | -6/+6 |
| | |||||
* | Include stdint.h for UINT32_MAX on FreeBSD | Tobias Brunner | 2012-08-29 | 1 | -0/+1 |
| | |||||
* | Fixed ip_packet_t if IPv6 is not available | Tobias Brunner | 2012-08-08 | 1 | -0/+4 |
| | |||||
* | Added IPsec processor which is responsible for handling in- and outbound packets | Tobias Brunner | 2012-08-08 | 6 | -0/+449 |
| | | | | | | Two callbacks can be registered that get called when new inbound plaintext and outbound ESP packets have been processed. Inbound ESP and outbound plaintext packets can be queued for processing with two other methods. | ||||
* | Represent the payload of an ESP packet as ip_packet_t instead of a chunk_t | Tobias Brunner | 2012-08-08 | 2 | -41/+76 |
| | |||||
* | IPsec policies can be looked up based on an IP packet | Tobias Brunner | 2012-08-08 | 4 | -1/+62 |
| | |||||
* | ip_packet_t parses the header of IP packets | Tobias Brunner | 2012-08-08 | 4 | -0/+286 |
| | |||||
* | Order IPsec policies by a pseudo-priority based on the traffic selectors | Tobias Brunner | 2012-08-08 | 1 | -28/+127 |
| | | | | | This allows a simple lookup, i.e. just use the first policy that matches a given IP packet. | ||||
* | Implemented a checkout/checkin mechanism for IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -25/+285 |
| | | | | | SAs can only be checked out by a single thread and all other threads block until the SA is checked in again. | ||||
* | IPsec policy manager added | Tobias Brunner | 2012-08-08 | 6 | -0/+278 |
| | | | | This version only provides the very simplest management functions. | ||||
* | Method added to easily compare IPsec policies | Tobias Brunner | 2012-08-08 | 2 | -0/+29 |
| | |||||
* | Class representing an IPsec policy added | Tobias Brunner | 2012-08-08 | 4 | -0/+302 |
| | |||||
* | Schedule and relay expiration events for created IPsec SAs | Tobias Brunner | 2012-08-08 | 1 | -0/+95 |
| | |||||
* | Added class to relay IPsec events (like expiration) to listeners | Tobias Brunner | 2012-08-08 | 7 | -0/+332 |
| | | | | | Currently, only expiration of IPsec SAs is supported. Later other events for e.g. acquires or changed NAT endpoints could be added. | ||||
* | Added IPsec SA manager | Tobias Brunner | 2012-08-08 | 6 | -7/+458 |
| | |||||
* | Add methods to easily compare IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -0/+51 |
| | |||||
* | Class representing an IPsec SA added | Tobias Brunner | 2012-08-08 | 4 | -2/+356 |
| | | | | The IPsec SA also manages the respective ESP context. | ||||
* | Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan | Tobias Brunner | 2012-08-08 | 2 | -4/+2 |
| | | | | This avoids a dependency of libipsec to libhydra. | ||||
* | esp_packet_t implements packet_t interface | Tobias Brunner | 2012-08-08 | 2 | -66/+100 |
| | | | | This should allow to avoid unnecessary cloning of packet data. | ||||
* | Headers from libhydra (kernel interface related) are required in libipsec | Tobias Brunner | 2012-08-08 | 1 | -1/+3 |
| | |||||
* | ESP packet wrapper added, handles encryption/decryption/verification etc. | Tobias Brunner | 2012-08-08 | 4 | -2/+554 |
| | |||||
* | Adding class to manage ESP context (crypto, sequence numbers) | Tobias Brunner | 2012-08-08 | 4 | -2/+414 |
| | |||||
* | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 4 | -0/+174 |