Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | pluto: Added --debug-kernel as alias for --debug-klips. | Tobias Brunner | 2010-09-02 | 2 | -3/+4 | |
| | ||||||
* | pluto: Replaced DBG_KLIPS with DBG_KERNEL. | Tobias Brunner | 2010-09-02 | 6 | -19/+19 | |
| | ||||||
* | pluto: Removed the KLIPS preprocessor flag. | Tobias Brunner | 2010-09-02 | 10 | -98/+6 | |
| | ||||||
* | pluto: Removed unneeded kernel abstractions. | Tobias Brunner | 2010-09-02 | 6 | -1482/+0 | |
| | ||||||
* | pluto: Completely removed struct kernel_ops. | Tobias Brunner | 2010-09-02 | 3 | -70/+0 | |
| | ||||||
* | pluto: Refactored PF_KEY capabilities registration. | Tobias Brunner | 2010-09-02 | 3 | -239/+108 | |
| | | | | | Although we use the kernel interface from libhydra we still need this to make the available algorithms known to pluto. | |||||
* | pluto: Removed unneeded functions from PF_KEY interface. | Tobias Brunner | 2010-09-02 | 3 | -427/+31 | |
| | | | | We still use the algorithm registration. | |||||
* | pluto: Completely removed orphaned_holds. | Tobias Brunner | 2010-09-02 | 3 | -54/+0 | |
| | ||||||
* | pluto: Install IN policy of a shunt eroute with protocol. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 | |
| | ||||||
* | pluto: Fixed byte-order of ports in traffic selectors. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Listen for kernel events via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 4 | -38/+86 | |
| | ||||||
* | pluto: Adapted kernel.c to changed kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -47/+45 | |
| | ||||||
* | pluto: Do not close all file descriptors on startup, just redirect stdin, ↵ | Tobias Brunner | 2010-09-02 | 1 | -16/+8 | |
| | | | | | | | stdout and stderr to /dev/null. Otherwise the pipe used to synchronize pluto->events with the main thread would be closed. | |||||
* | pluto: Added a generic event queue. | Tobias Brunner | 2010-09-02 | 6 | -1/+292 | |
| | | | | | This allows to easily execute arbitrary callbacks in the context of the pluto main thread (e.g. in order to synchronize with threads from the thread-pool). | |||||
* | pluto: Fixed the reqid that is passed to the updown script. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -352/+113 | |
| | ||||||
* | pluto: Removed unneeded get_proto_reqid. | Tobias Brunner | 2010-09-02 | 1 | -18/+0 | |
| | | | | We will use the same reqid for all protocols, as in charon. | |||||
* | pluto: Added missing return_on in out_sa. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| | ||||||
* | pluto: Use time_monotonic() instead of time() for use time calculation. | Tobias Brunner | 2010-09-02 | 2 | -2/+2 | |
| | | | | That's because get_sa_info now returns a monotonic timestamp. | |||||
* | pluto: Removed KLIPS specific code from was_eroute_idle. | Tobias Brunner | 2010-09-02 | 1 | -89/+4 | |
| | ||||||
* | pluto: Migrated get_sa_info to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -42/+56 | |
| | ||||||
* | pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -92/+40 | |
| | ||||||
* | pluto: Adapted sag_eroute to the new signature of eroute_connection. | Tobias Brunner | 2010-09-02 | 1 | -43/+18 | |
| | ||||||
* | pluto: Migrated raw_eroute to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -61/+132 | |
| | | | | | | This introduces a new struct to pass the protocol information like spis. Also adapted eroute_connection and the simple calls of raw_eroute to the new signature. | |||||
* | pluto: Added a function to create a traffic_selector_t from an ip_subnet. | Tobias Brunner | 2010-09-02 | 1 | -0/+14 | |
| | ||||||
* | pluto: Migrated update_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -20/+21 | |
| | ||||||
* | pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added. | Tobias Brunner | 2010-09-02 | 2 | -3/+45 | |
| | ||||||
* | pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions. | Tobias Brunner | 2010-09-02 | 1 | -165/+145 | |
| | ||||||
* | pluto: Removed KLIPS specific algorithm detection. | Tobias Brunner | 2010-09-02 | 2 | -61/+0 | |
| | ||||||
* | pluto: Removed KLIPS specific bare shunt scanning. | Tobias Brunner | 2010-09-02 | 5 | -340/+0 | |
| | ||||||
* | pluto: Migrated get_my_cpi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 3 | -82/+10 | |
| | ||||||
* | pluto: Migrated get_ipsec_spi to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -46/+20 | |
| | ||||||
* | Initialize the thread pool in pluto. | Tobias Brunner | 2010-09-02 | 1 | -0/+10 | |
| | ||||||
* | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 2 | -9/+4 | |
| | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | |||||
* | Fixed pluto smartcard support after introducing encryption schemes | Martin Willi | 2010-08-30 | 1 | -2/+2 | |
| | ||||||
* | Fixed documentation of XAUTH in ipsec.secrets. | Tobias Brunner | 2010-08-26 | 1 | -3/+3 | |
| | ||||||
* | Use IV length of a crypter instead of block size for IV calculations | Martin Willi | 2010-08-13 | 3 | -12/+14 | |
| | ||||||
* | Build dedicated plugin lists for each strongSwan component | Martin Willi | 2010-08-12 | 1 | -1/+1 | |
| | ||||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 4 | -10/+8 | |
| | ||||||
* | Added support for different encryption schemes to private/public keys | Martin Willi | 2010-08-10 | 1 | -2/+2 | |
| | ||||||
* | Pass type of requested key in the callback credential set | Martin Willi | 2010-08-04 | 1 | -1/+6 | |
| | ||||||
* | Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵ | Martin Willi | 2010-08-04 | 4 | -95/+120 | |
| | | | | credential sets | |||||
* | Updated ipsec.secrets.5 regarding IKEv2 smartcard support | Martin Willi | 2010-08-04 | 1 | -5/+7 | |
| | ||||||
* | substitute obsolete function calls(bzero/index) | Waldemar Brodkorb | 2010-08-01 | 1 | -1/+1 | |
| | ||||||
* | Fix use of snprintf() in pluto subjectAltName enumeration | Martin Willi | 2010-07-28 | 1 | -0/+4 | |
| | ||||||
* | Support different encoding types in certificate.get_encoding() | Martin Willi | 2010-07-13 | 4 | -21/+32 | |
| | ||||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 5 | -12/+12 | |
| | | | | encoding | |||||
* | Charon uses a generic trunstchain length limit, not only for X509 certificates | Martin Willi | 2010-07-13 | 1 | -0/+2 | |
| | ||||||
* | Added support for named attribute groups | Heiko Hund | 2010-07-09 | 1 | -4/+4 | |
| | | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes. | |||||
* | Ignore IKEv2 packets in pluto with any minor version | Martin Willi | 2010-06-22 | 1 | -1/+1 | |
| |