aboutsummaryrefslogtreecommitdiffstats
path: root/src/pluto
Commit message (Collapse)AuthorAgeFilesLines
...
* pluto: Added --debug-kernel as alias for --debug-klips.Tobias Brunner2010-09-022-3/+4
|
* pluto: Replaced DBG_KLIPS with DBG_KERNEL.Tobias Brunner2010-09-026-19/+19
|
* pluto: Removed the KLIPS preprocessor flag.Tobias Brunner2010-09-0210-98/+6
|
* pluto: Removed unneeded kernel abstractions.Tobias Brunner2010-09-026-1482/+0
|
* pluto: Completely removed struct kernel_ops.Tobias Brunner2010-09-023-70/+0
|
* pluto: Refactored PF_KEY capabilities registration.Tobias Brunner2010-09-023-239/+108
| | | | | Although we use the kernel interface from libhydra we still need this to make the available algorithms known to pluto.
* pluto: Removed unneeded functions from PF_KEY interface.Tobias Brunner2010-09-023-427/+31
| | | | We still use the algorithm registration.
* pluto: Completely removed orphaned_holds.Tobias Brunner2010-09-023-54/+0
|
* pluto: Install IN policy of a shunt eroute with protocol.Tobias Brunner2010-09-021-1/+2
|
* pluto: Fixed byte-order of ports in traffic selectors.Tobias Brunner2010-09-021-1/+1
|
* pluto: Listen for kernel events via libhydra's kernel interface.Tobias Brunner2010-09-024-38/+86
|
* pluto: Adapted kernel.c to changed kernel interface.Tobias Brunner2010-09-021-47/+45
|
* pluto: Do not close all file descriptors on startup, just redirect stdin, ↵Tobias Brunner2010-09-021-16/+8
| | | | | | | stdout and stderr to /dev/null. Otherwise the pipe used to synchronize pluto->events with the main thread would be closed.
* pluto: Added a generic event queue.Tobias Brunner2010-09-026-1/+292
| | | | | This allows to easily execute arbitrary callbacks in the context of the pluto main thread (e.g. in order to synchronize with threads from the thread-pool).
* pluto: Fixed the reqid that is passed to the updown script.Tobias Brunner2010-09-021-1/+1
|
* pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface.Tobias Brunner2010-09-021-352/+113
|
* pluto: Removed unneeded get_proto_reqid.Tobias Brunner2010-09-021-18/+0
| | | | We will use the same reqid for all protocols, as in charon.
* pluto: Added missing return_on in out_sa.Tobias Brunner2010-09-021-2/+2
|
* pluto: Use time_monotonic() instead of time() for use time calculation.Tobias Brunner2010-09-022-2/+2
| | | | That's because get_sa_info now returns a monotonic timestamp.
* pluto: Removed KLIPS specific code from was_eroute_idle.Tobias Brunner2010-09-021-89/+4
|
* pluto: Migrated get_sa_info to libhydra's kernel interface.Tobias Brunner2010-09-021-42/+56
|
* pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface.Tobias Brunner2010-09-021-92/+40
|
* pluto: Adapted sag_eroute to the new signature of eroute_connection.Tobias Brunner2010-09-021-43/+18
|
* pluto: Migrated raw_eroute to libhydra's kernel interface.Tobias Brunner2010-09-021-61/+132
| | | | | | This introduces a new struct to pass the protocol information like spis. Also adapted eroute_connection and the simple calls of raw_eroute to the new signature.
* pluto: Added a function to create a traffic_selector_t from an ip_subnet.Tobias Brunner2010-09-021-0/+14
|
* pluto: Migrated update_ipsec_sa to libhydra's kernel interface.Tobias Brunner2010-09-021-20/+21
|
* pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added.Tobias Brunner2010-09-022-3/+45
|
* pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions.Tobias Brunner2010-09-021-165/+145
|
* pluto: Removed KLIPS specific algorithm detection.Tobias Brunner2010-09-022-61/+0
|
* pluto: Removed KLIPS specific bare shunt scanning.Tobias Brunner2010-09-025-340/+0
|
* pluto: Migrated get_my_cpi to libhydra's kernel interface.Tobias Brunner2010-09-023-82/+10
|
* pluto: Migrated get_ipsec_spi to libhydra's kernel interface.Tobias Brunner2010-09-021-46/+20
|
* Initialize the thread pool in pluto.Tobias Brunner2010-09-021-0/+10
|
* Moved ipsec_transform_t to kernel_ipsec.h in libhydra.Tobias Brunner2010-09-022-9/+4
| | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
* Fixed pluto smartcard support after introducing encryption schemesMartin Willi2010-08-301-2/+2
|
* Fixed documentation of XAUTH in ipsec.secrets.Tobias Brunner2010-08-261-3/+3
|
* Use IV length of a crypter instead of block size for IV calculationsMartin Willi2010-08-133-12/+14
|
* Build dedicated plugin lists for each strongSwan componentMartin Willi2010-08-121-1/+1
|
* Use bits instead of bytes for a private/public keyMartin Willi2010-08-104-10/+8
|
* Added support for different encryption schemes to private/public keysMartin Willi2010-08-101-2/+2
|
* Pass type of requested key in the callback credential setMartin Willi2010-08-041-1/+6
|
* Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵Martin Willi2010-08-044-95/+120
| | | | credential sets
* Updated ipsec.secrets.5 regarding IKEv2 smartcard supportMartin Willi2010-08-041-5/+7
|
* substitute obsolete function calls(bzero/index)Waldemar Brodkorb2010-08-011-1/+1
|
* Fix use of snprintf() in pluto subjectAltName enumerationMartin Willi2010-07-281-0/+4
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-134-21/+32
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-135-12/+12
| | | | encoding
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-131-0/+2
|
* Added support for named attribute groupsHeiko Hund2010-07-091-4/+4
| | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
* Ignore IKEv2 packets in pluto with any minor versionMartin Willi2010-06-221-1/+1
|