Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | pluto: Store xfrm marks on connection and use them when installing SAs and ↵ | Tobias Brunner | 2010-09-02 | 3 | -29/+42 | |
| | | | | policies. | |||||
* | pluto: Added PLUTO_UDP_ENC argument to updown script. | Tobias Brunner | 2010-09-02 | 1 | -11/+20 | |
| | | | | This contains the remote UDP port in case of UDP encapsulated ESP. | |||||
* | pluto: Return value fixed. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Removed bare shunt table. | Tobias Brunner | 2010-09-02 | 4 | -339/+8 | |
| | ||||||
* | pluto: Handle changed NAT mappings via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 3 | -81/+87 | |
| | ||||||
* | pluto: Removed no_klips flag (--noklips option). | Tobias Brunner | 2010-09-02 | 7 | -168/+126 | |
| | ||||||
* | pluto: Removed references to KLIPS from documentation, log messages and ↵ | Tobias Brunner | 2010-09-02 | 4 | -66/+21 | |
| | | | | comments. | |||||
* | pluto: Added --debug-kernel as alias for --debug-klips. | Tobias Brunner | 2010-09-02 | 2 | -3/+4 | |
| | ||||||
* | pluto: Replaced DBG_KLIPS with DBG_KERNEL. | Tobias Brunner | 2010-09-02 | 6 | -19/+19 | |
| | ||||||
* | pluto: Removed the KLIPS preprocessor flag. | Tobias Brunner | 2010-09-02 | 10 | -98/+6 | |
| | ||||||
* | pluto: Removed unneeded kernel abstractions. | Tobias Brunner | 2010-09-02 | 6 | -1482/+0 | |
| | ||||||
* | pluto: Completely removed struct kernel_ops. | Tobias Brunner | 2010-09-02 | 3 | -70/+0 | |
| | ||||||
* | pluto: Refactored PF_KEY capabilities registration. | Tobias Brunner | 2010-09-02 | 3 | -239/+108 | |
| | | | | | Although we use the kernel interface from libhydra we still need this to make the available algorithms known to pluto. | |||||
* | pluto: Removed unneeded functions from PF_KEY interface. | Tobias Brunner | 2010-09-02 | 3 | -427/+31 | |
| | | | | We still use the algorithm registration. | |||||
* | pluto: Completely removed orphaned_holds. | Tobias Brunner | 2010-09-02 | 3 | -54/+0 | |
| | ||||||
* | pluto: Install IN policy of a shunt eroute with protocol. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 | |
| | ||||||
* | pluto: Fixed byte-order of ports in traffic selectors. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Listen for kernel events via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 4 | -38/+86 | |
| | ||||||
* | pluto: Adapted kernel.c to changed kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -47/+45 | |
| | ||||||
* | pluto: Do not close all file descriptors on startup, just redirect stdin, ↵ | Tobias Brunner | 2010-09-02 | 1 | -16/+8 | |
| | | | | | | | stdout and stderr to /dev/null. Otherwise the pipe used to synchronize pluto->events with the main thread would be closed. | |||||
* | pluto: Added a generic event queue. | Tobias Brunner | 2010-09-02 | 6 | -1/+292 | |
| | | | | | This allows to easily execute arbitrary callbacks in the context of the pluto main thread (e.g. in order to synchronize with threads from the thread-pool). | |||||
* | pluto: Fixed the reqid that is passed to the updown script. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -352/+113 | |
| | ||||||
* | pluto: Removed unneeded get_proto_reqid. | Tobias Brunner | 2010-09-02 | 1 | -18/+0 | |
| | | | | We will use the same reqid for all protocols, as in charon. | |||||
* | pluto: Added missing return_on in out_sa. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| | ||||||
* | pluto: Use time_monotonic() instead of time() for use time calculation. | Tobias Brunner | 2010-09-02 | 2 | -2/+2 | |
| | | | | That's because get_sa_info now returns a monotonic timestamp. | |||||
* | pluto: Removed KLIPS specific code from was_eroute_idle. | Tobias Brunner | 2010-09-02 | 1 | -89/+4 | |
| | ||||||
* | pluto: Migrated get_sa_info to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -42/+56 | |
| | ||||||
* | pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -92/+40 | |
| | ||||||
* | pluto: Adapted sag_eroute to the new signature of eroute_connection. | Tobias Brunner | 2010-09-02 | 1 | -43/+18 | |
| | ||||||
* | pluto: Migrated raw_eroute to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -61/+132 | |
| | | | | | | This introduces a new struct to pass the protocol information like spis. Also adapted eroute_connection and the simple calls of raw_eroute to the new signature. | |||||
* | pluto: Added a function to create a traffic_selector_t from an ip_subnet. | Tobias Brunner | 2010-09-02 | 1 | -0/+14 | |
| | ||||||
* | pluto: Migrated update_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -20/+21 | |
| | ||||||
* | pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added. | Tobias Brunner | 2010-09-02 | 2 | -3/+45 | |
| | ||||||
* | pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions. | Tobias Brunner | 2010-09-02 | 1 | -165/+145 | |
| | ||||||
* | pluto: Removed KLIPS specific algorithm detection. | Tobias Brunner | 2010-09-02 | 2 | -61/+0 | |
| | ||||||
* | pluto: Removed KLIPS specific bare shunt scanning. | Tobias Brunner | 2010-09-02 | 5 | -340/+0 | |
| | ||||||
* | pluto: Migrated get_my_cpi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 3 | -82/+10 | |
| | ||||||
* | pluto: Migrated get_ipsec_spi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -46/+20 | |
| | ||||||
* | Initialize the thread pool in pluto. | Tobias Brunner | 2010-09-02 | 1 | -0/+10 | |
| | ||||||
* | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 2 | -9/+4 | |
| | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | |||||
* | Fixed pluto smartcard support after introducing encryption schemes | Martin Willi | 2010-08-30 | 1 | -2/+2 | |
| | ||||||
* | Fixed documentation of XAUTH in ipsec.secrets. | Tobias Brunner | 2010-08-26 | 1 | -3/+3 | |
| | ||||||
* | Use IV length of a crypter instead of block size for IV calculations | Martin Willi | 2010-08-13 | 3 | -12/+14 | |
| | ||||||
* | Build dedicated plugin lists for each strongSwan component | Martin Willi | 2010-08-12 | 1 | -1/+1 | |
| | ||||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 4 | -10/+8 | |
| | ||||||
* | Added support for different encryption schemes to private/public keys | Martin Willi | 2010-08-10 | 1 | -2/+2 | |
| | ||||||
* | Pass type of requested key in the callback credential set | Martin Willi | 2010-08-04 | 1 | -1/+6 | |
| | ||||||
* | Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵ | Martin Willi | 2010-08-04 | 4 | -95/+120 | |
| | | | | credential sets | |||||
* | Updated ipsec.secrets.5 regarding IKEv2 smartcard support | Martin Willi | 2010-08-04 | 1 | -5/+7 | |
| |