Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 1 | -2114/+0 |
| | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | ||||
* | pluto: Include fixed. | Tobias Brunner | 2011-10-14 | 1 | -1/+1 |
| | |||||
* | Remove policies in kernel interfaces based on their priority. | Tobias Brunner | 2011-07-27 | 1 | -6/+7 |
| | | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities. | ||||
* | Add the reqid to kernel_ipsec_t.del_policy. | Tobias Brunner | 2011-07-06 | 1 | -2/+2 |
| | |||||
* | Added an esn parameter to the kernel interface add_sa functions | Martin Willi | 2011-04-20 | 1 | -3/+3 |
| | |||||
* | Implemented Traffic Flow Confidentiality padding in kernel_interface | Martin Willi | 2010-12-20 | 1 | -3/+3 |
| | |||||
* | pluto: Install inbound policies together with outbound policies. | Tobias Brunner | 2010-10-14 | 1 | -26/+7 |
| | | | | | This avoids an error message when uninstalling the policies and charon did it already like this. | ||||
* | fixed memory leak | Andreas Steffen | 2010-09-09 | 1 | -0/+1 |
| | |||||
* | pluto: Removed unused lifetime from raw_eroute. | Tobias Brunner | 2010-09-02 | 1 | -7/+4 |
| | |||||
* | pluto: Make marks available in updown script. | Tobias Brunner | 2010-09-02 | 1 | -0/+18 |
| | |||||
* | pluto: Store xfrm marks on connection and use them when installing SAs and ↵ | Tobias Brunner | 2010-09-02 | 1 | -28/+34 |
| | | | | policies. | ||||
* | pluto: Added PLUTO_UDP_ENC argument to updown script. | Tobias Brunner | 2010-09-02 | 1 | -11/+20 |
| | | | | This contains the remote UDP port in case of UDP encapsulated ESP. | ||||
* | pluto: Return value fixed. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | |||||
* | pluto: Removed bare shunt table. | Tobias Brunner | 2010-09-02 | 1 | -286/+8 |
| | |||||
* | pluto: Handle changed NAT mappings via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -5/+41 |
| | |||||
* | pluto: Removed no_klips flag (--noklips option). | Tobias Brunner | 2010-09-02 | 1 | -69/+63 |
| | |||||
* | pluto: Replaced DBG_KLIPS with DBG_KERNEL. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 |
| | |||||
* | pluto: Removed the KLIPS preprocessor flag. | Tobias Brunner | 2010-09-02 | 1 | -67/+4 |
| | |||||
* | pluto: Removed unneeded kernel abstractions. | Tobias Brunner | 2010-09-02 | 1 | -2/+0 |
| | |||||
* | pluto: Completely removed struct kernel_ops. | Tobias Brunner | 2010-09-02 | 1 | -21/+0 |
| | |||||
* | pluto: Refactored PF_KEY capabilities registration. | Tobias Brunner | 2010-09-02 | 1 | -4/+2 |
| | | | | | Although we use the kernel interface from libhydra we still need this to make the available algorithms known to pluto. | ||||
* | pluto: Removed unneeded functions from PF_KEY interface. | Tobias Brunner | 2010-09-02 | 1 | -2/+0 |
| | | | | We still use the algorithm registration. | ||||
* | pluto: Completely removed orphaned_holds. | Tobias Brunner | 2010-09-02 | 1 | -27/+0 |
| | |||||
* | pluto: Install IN policy of a shunt eroute with protocol. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 |
| | |||||
* | pluto: Fixed byte-order of ports in traffic selectors. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | |||||
* | pluto: Listen for kernel events via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -11/+84 |
| | |||||
* | pluto: Adapted kernel.c to changed kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -47/+45 |
| | |||||
* | pluto: Fixed the reqid that is passed to the updown script. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | |||||
* | pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -352/+113 |
| | |||||
* | pluto: Removed unneeded get_proto_reqid. | Tobias Brunner | 2010-09-02 | 1 | -18/+0 |
| | | | | We will use the same reqid for all protocols, as in charon. | ||||
* | pluto: Use time_monotonic() instead of time() for use time calculation. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | | | | That's because get_sa_info now returns a monotonic timestamp. | ||||
* | pluto: Removed KLIPS specific code from was_eroute_idle. | Tobias Brunner | 2010-09-02 | 1 | -89/+4 |
| | |||||
* | pluto: Migrated get_sa_info to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -42/+56 |
| | |||||
* | pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -92/+40 |
| | |||||
* | pluto: Adapted sag_eroute to the new signature of eroute_connection. | Tobias Brunner | 2010-09-02 | 1 | -43/+18 |
| | |||||
* | pluto: Migrated raw_eroute to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -61/+132 |
| | | | | | | This introduces a new struct to pass the protocol information like spis. Also adapted eroute_connection and the simple calls of raw_eroute to the new signature. | ||||
* | pluto: Added a function to create a traffic_selector_t from an ip_subnet. | Tobias Brunner | 2010-09-02 | 1 | -0/+14 |
| | |||||
* | pluto: Migrated update_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -20/+21 |
| | |||||
* | pluto: Removed KLIPS specific bare shunt scanning. | Tobias Brunner | 2010-09-02 | 1 | -327/+0 |
| | |||||
* | pluto: Migrated get_my_cpi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -31/+10 |
| | |||||
* | pluto: Migrated get_ipsec_spi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -46/+20 |
| | |||||
* | refer to correct PLUTO_XAUTH_ID variable | Andreas Steffen | 2010-06-09 | 1 | -1/+1 |
| | |||||
* | rename environment variable to PLUTO_XAUTH_ID | Andreas Steffen | 2010-06-08 | 1 | -8/+9 |
| | |||||
* | make an optional XAUTH user ID available in the updown script | Andreas Steffen | 2010-06-08 | 1 | -1/+14 |
| | |||||
* | refactoring of Mode Config functionality allows transport and handling of ↵ | Andreas Steffen | 2010-05-14 | 1 | -5/+3 |
| | | | | any attribute | ||||
* | Adding support for AES GMAC (RFC4543). | Tobias Brunner | 2010-02-12 | 1 | -0/+1 |
| | |||||
* | IKEv1 support of ESP SHA2_HMAC with correct truncation | Andreas Steffen | 2009-12-09 | 1 | -2/+2 |
| | |||||
* | replaced struct id by identification_t | Andreas Steffen | 2009-10-10 | 1 | -7/+31 |
| | |||||
* | migrated public key IDs to identification_t | Andreas Steffen | 2009-10-08 | 1 | -3/+13 |
| | |||||
* | abbreviated struct connection by connection_t | Andreas Steffen | 2009-09-27 | 1 | -23/+23 |
| |