Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | Added IPsec processor which is responsible for handling in- and outbound packets | Tobias Brunner | 2012-08-08 | 6 | -0/+449 | |
| | | | | | | | | | | | | Two callbacks can be registered that get called when new inbound plaintext and outbound ESP packets have been processed. Inbound ESP and outbound plaintext packets can be queued for processing with two other methods. | |||||
| * | Represent the payload of an ESP packet as ip_packet_t instead of a chunk_t | Tobias Brunner | 2012-08-08 | 2 | -41/+76 | |
| | | ||||||
| * | IPsec policies can be looked up based on an IP packet | Tobias Brunner | 2012-08-08 | 4 | -1/+62 | |
| | | ||||||
| * | ip_packet_t parses the header of IP packets | Tobias Brunner | 2012-08-08 | 4 | -0/+286 | |
| | | ||||||
| * | Order IPsec policies by a pseudo-priority based on the traffic selectors | Tobias Brunner | 2012-08-08 | 1 | -28/+127 | |
| | | | | | | | | | | This allows a simple lookup, i.e. just use the first policy that matches a given IP packet. | |||||
| * | Implemented a checkout/checkin mechanism for IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -25/+285 | |
| | | | | | | | | | | SAs can only be checked out by a single thread and all other threads block until the SA is checked in again. | |||||
| * | IPsec policy manager added | Tobias Brunner | 2012-08-08 | 6 | -0/+278 | |
| | | | | | | | | This version only provides the very simplest management functions. | |||||
| * | Method added to easily compare IPsec policies | Tobias Brunner | 2012-08-08 | 2 | -0/+29 | |
| | | ||||||
| * | Class representing an IPsec policy added | Tobias Brunner | 2012-08-08 | 4 | -0/+302 | |
| | | ||||||
| * | Schedule and relay expiration events for created IPsec SAs | Tobias Brunner | 2012-08-08 | 1 | -0/+95 | |
| | | ||||||
| * | Added class to relay IPsec events (like expiration) to listeners | Tobias Brunner | 2012-08-08 | 7 | -0/+332 | |
| | | | | | | | | | | Currently, only expiration of IPsec SAs is supported. Later other events for e.g. acquires or changed NAT endpoints could be added. | |||||
| * | Added IPsec SA manager | Tobias Brunner | 2012-08-08 | 6 | -7/+458 | |
| | | ||||||
| * | Add methods to easily compare IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -0/+51 | |
| | | ||||||
| * | Class representing an IPsec SA added | Tobias Brunner | 2012-08-08 | 4 | -2/+356 | |
| | | | | | | | | The IPsec SA also manages the respective ESP context. | |||||
| * | Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan | Tobias Brunner | 2012-08-08 | 9 | -176/+223 | |
| | | | | | | | | This avoids a dependency of libipsec to libhydra. | |||||
| * | Use a CALLBACK feature to create charon's sender and receiver | Tobias Brunner | 2012-08-08 | 1 | -12/+31 | |
| | | ||||||
| * | Added a simple blocking queue around linked_list_t | Tobias Brunner | 2012-08-08 | 4 | -6/+232 | |
| | | ||||||
| * | esp_packet_t implements packet_t interface | Tobias Brunner | 2012-08-08 | 2 | -66/+100 | |
| | | | | | | | | This should allow to avoid unnecessary cloning of packet data. | |||||
| * | Extended constructor for packet_t added (takes src, dst and data) | Tobias Brunner | 2012-08-08 | 2 | -3/+24 | |
| | | ||||||
| * | Moved packet_t to libstrongswan | Tobias Brunner | 2012-08-08 | 13 | -54/+43 | |
| | | ||||||
| * | Headers from libhydra (kernel interface related) are required in libipsec | Tobias Brunner | 2012-08-08 | 1 | -1/+3 | |
| | | ||||||
| * | ESP packet wrapper added, handles encryption/decryption/verification etc. | Tobias Brunner | 2012-08-08 | 4 | -2/+554 | |
| | | ||||||
| * | Adding class to manage ESP context (crypto, sequence numbers) | Tobias Brunner | 2012-08-08 | 4 | -2/+414 | |
| | | ||||||
| * | Added a method to bio_writer_t that allows to skip a number of bytes | Tobias Brunner | 2012-08-08 | 2 | -0/+24 | |
| | | | | | | | | | | A chunk pointing to the skipped bytes is returned, allowing users of bio_writer_t to write/copy data to the skipped bytes themselves. | |||||
| * | Added a method to bio_writer_t that allows to extract the internal buffer | Tobias Brunner | 2012-08-08 | 2 | -0/+29 | |
| | | ||||||
| * | Added methods to bio_reader_t to read data from end of buffer | Tobias Brunner | 2012-08-08 | 2 | -24/+204 | |
| | | ||||||
| * | Increase log verbosity when sending NAT keep-alives | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | ||||||
| * | Only log the sending of regular packets in sender_t | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | | When sender_t is used to send ESP packets this would otherwise cause an extreme amount of debug messages. With this change all messages sent via sender_t.send_no_marker() cause no extra DBG1 log message, but for debugging purposes the socket plugins do log the same message again with DBG2 for all packets. | |||||
* | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 74 | -306/+1381 | |
|\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+9 | |
| | | | | | | | | outbound packets | |||||
| * | Allocate UDP ports randomly in Android NDK build. | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | ||||||
| * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -36/+84 | |
| | | | | | | | | Also added strongswan.conf options to change the ports. | |||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 14 | -20/+33 | |
| | | ||||||
| * | Added get_port() method to socket_t to learn the listening port. | Tobias Brunner | 2012-08-08 | 6 | -5/+59 | |
| | | ||||||
| * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 4 | -2/+7 | |
| | | ||||||
| * | Use send_no_marker to send NAT keepalives. | Tobias Brunner | 2012-08-08 | 2 | -9/+4 | |
| | | ||||||
| * | Avoid double-free when prepending Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | ||||||
| * | Function added to send packets without Non-ESP marker. | Tobias Brunner | 2012-08-08 | 2 | -20/+36 | |
| | | ||||||
| * | Avoid unnecessary copy of packet data when removing Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -2/+1 | |
| | | ||||||
| * | Added packet_t.skip_bytes method to skip bytes at the start of a packet. | Tobias Brunner | 2012-08-08 | 2 | -3/+26 | |
| | | ||||||
| * | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 4 | -24/+16 | |
| | | ||||||
| * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 10 | -90/+133 | |
| | | ||||||
| * | Callback for ESP packets added to receiver. | Tobias Brunner | 2012-08-08 | 2 | -6/+86 | |
| | | ||||||
| * | Add Non-ESP marker in sender and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 5 | -39/+23 | |
| | | ||||||
| * | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 4 | -40/+34 | |
| | | ||||||
| * | Java code style fixed (analogous to C code). | Tobias Brunner | 2012-08-08 | 2 | -14/+28 | |
| | | ||||||
| * | Load libipsec in Android app. | Tobias Brunner | 2012-08-08 | 4 | -1/+15 | |
| | | ||||||
| * | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 6 | -0/+183 | |
| | | ||||||
| * | Some NDK build info updated. | Tobias Brunner | 2012-08-08 | 1 | -4/+7 | |
| | | ||||||
| * | Changed minimal SDK/API level to 14. | Tobias Brunner | 2012-08-08 | 3 | -4/+4 | |
| | |