Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | using same reqid if a child sa rekeys an existing one | Martin Willi | 2006-06-12 | 7 | -20/+37 | |
| | ||||||
* | NULL string argument is treated as %any | Andreas Steffen | 2006-06-12 | 1 | -0/+3 | |
| | ||||||
* | add_certificate() now returns pointer to added cert | Andreas Steffen | 2006-06-12 | 2 | -8/+8 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 4 | -101/+101 | |
| | ||||||
* | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 14 | -20/+107 | |
| | | | | | loading lifetime policies from ipsec.conf | |||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 19 | -99/+583 | |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | |||||
* | corrected type | Andreas Steffen | 2006-06-09 | 1 | -1/+1 | |
| | ||||||
* | improved kernel interface logging | Martin Willi | 2006-06-09 | 5 | -63/+50 | |
| | ||||||
* | fixed clone/destroy behavior when not using CAs | Martin Willi | 2006-06-09 | 1 | -5/+17 | |
| | ||||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 8 | -142/+171 | |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | |||||
* | added support for leftsendcert= and left|rightca= parameters | Andreas Steffen | 2006-06-09 | 8 | -30/+114 | |
| | ||||||
* | discard cert if CA basic constraints flag is not set and warn if cert is not ↵ | Andreas Steffen | 2006-06-09 | 1 | -5/+16 | |
| | | | | valide | |||||
* | added public methods is_ca() and is_valid() | Andreas Steffen | 2006-06-09 | 2 | -62/+97 | |
| | ||||||
* | changed ASN.1 CONTROL log output to LEVEL2 | Andreas Steffen | 2006-06-09 | 1 | -8/+8 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2006-06-09 | 1 | -1/+1 | |
| | ||||||
* | removed unused Makefile | Martin Willi | 2006-06-09 | 1 | -17/+0 | |
| | ||||||
* | stroke.h requires libstrongswan/types.h | Andreas Steffen | 2006-06-09 | 1 | -0/+1 | |
| | ||||||
* | fixed compile warnings when using -Wall | Martin Willi | 2006-06-08 | 25 | -206/+829 | |
| | | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing | |||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 36 | -1398/+1392 | |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | |||||
* | proper leak detective hook for realloc | Martin Willi | 2006-06-07 | 1 | -9/+36 | |
| | | | | | excluded pthread_setspecific from leak detective | |||||
* | fixed a memleak | Martin Willi | 2006-06-07 | 1 | -1/+5 | |
| | ||||||
* | created IPv6 environment | Andreas Steffen | 2006-06-06 | 3 | -21/+26 | |
| | ||||||
* | job management: | Martin Willi | 2006-05-31 | 31 | -738/+929 | |
| | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | |||||
* | - fixed some memleaks/freebugs | Martin Willi | 2006-05-31 | 3 | -9/+6 | |
| | | | | | - leak detective works almost usable now (?!) | |||||
* | - fixed host-host tunnel traffic selection, host-host works now | Martin Willi | 2006-05-31 | 4 | -8/+30 | |
| | ||||||
* | bug fixed circumventing an assertion in delete_connection when ikev1 is not set | Andreas Steffen | 2006-05-31 | 1 | -1/+2 | |
| | ||||||
* | minimized prefixed on stroke logger output | Andreas Steffen | 2006-05-31 | 2 | -8/+10 | |
| | ||||||
* | charon outputs strongSwan version | Andreas Steffen | 2006-05-31 | 1 | -0/+3 | |
| | ||||||
* | (no commit message) | Martin Willi | 2006-05-30 | 1 | -10/+13 | |
| | ||||||
* | - fixed event queue for events >36min | Martin Willi | 2006-05-30 | 1 | -30/+17 | |
| | ||||||
* | (no commit message) | Martin Willi | 2006-05-30 | 1 | -0/+1 | |
| | ||||||
* | - included charons module tests to build & dist | Martin Willi | 2006-05-30 | 9 | -11/+44 | |
| | ||||||
* | full support of ikev1 and ikev2 connection flags | Andreas Steffen | 2006-05-30 | 8 | -28/+47 | |
| | ||||||
* | cosmetics in log_status output | Andreas Steffen | 2006-05-30 | 1 | -1/+1 | |
| | ||||||
* | use of streq | Andreas Steffen | 2006-05-30 | 1 | -1/+1 | |
| | ||||||
* | lookup of private key based on keyid of public key | Andreas Steffen | 2006-05-30 | 1 | -24/+47 | |
| | ||||||
* | new functions to add certificates and retrieve private and public keys | Andreas Steffen | 2006-05-30 | 3 | -120/+182 | |
| | ||||||
* | changed log level | Andreas Steffen | 2006-05-30 | 1 | -2/+2 | |
| | ||||||
* | list ca certificates | Andreas Steffen | 2006-05-30 | 1 | -2/+3 | |
| | ||||||
* | computation of SHA-1 hash over publicKeyInfo object | Andreas Steffen | 2006-05-30 | 3 | -104/+128 | |
| | ||||||
* | moved abbreviated thread_id in front of brackets | Andreas Steffen | 2006-05-30 | 1 | -3/+3 | |
| | ||||||
* | added has_key parameter to log_certificates() | Andreas Steffen | 2006-05-30 | 1 | -2/+4 | |
| | ||||||
* | log_certificates() now shows keyid and availability of matching private key | Andreas Steffen | 2006-05-30 | 1 | -7/+11 | |
| | ||||||
* | indented loaded file log entry | Andreas Steffen | 2006-05-30 | 1 | -1/+1 | |
| | ||||||
* | moved TIMETOA_BUF definition to types.h | Andreas Steffen | 2006-05-30 | 1 | -3/+0 | |
| | ||||||
* | moved TIMETOA_BUF definition from asn1.h | Andreas Steffen | 2006-05-30 | 1 | -0/+1 | |
| | ||||||
* | define default CA_CERTIFICATE_DIR | Andreas Steffen | 2006-05-30 | 1 | -2/+9 | |
| | ||||||
* | load all ca certificates | Andreas Steffen | 2006-05-30 | 1 | -1/+1 | |
| | ||||||
* | - fixed daemon destruction order to prevent | Martin Willi | 2006-05-30 | 1 | -25/+33 | |
| | | | | | crashes on termination | |||||
* | - fixed memleak when deleting a connection | Martin Willi | 2006-05-29 | 1 | -1/+5 | |
| |