Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 46 | -51/+66 | |
| | | | | tasks etc.). | |||||
* | Removed superfluous @param in bus.h. | Tobias Brunner | 2012-05-18 | 1 | -1/+0 | |
| | ||||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 | |
| | ||||||
* | pkcs8: Initialize salt and IV properly. | Tobias Brunner | 2012-05-18 | 1 | -1/+1 | |
| | ||||||
* | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | ||||||
* | Add enumerator for registered nonce generators. | Tobias Brunner | 2012-05-18 | 2 | -9/+33 | |
| | ||||||
* | Use nonce_gen instead of rng to generate nonces | Adrian-Ken Rueegsegger | 2012-05-18 | 4 | -34/+34 | |
| | | | | | Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper. | |||||
* | Add create_nonce_gen function to keymat interface | Adrian-Ken Rueegsegger | 2012-05-18 | 3 | -0/+24 | |
| | | | | This function returns a nonce generator object. | |||||
* | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+271 | |
| | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | |||||
* | Add nonce generator interface | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+163 | |
| | | | | | | | Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory. | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 19 | -25/+76 | |
| | ||||||
* | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 3 | -73/+72 | |
| | ||||||
* | Consider inbound ESP as a sign of liveness for DPD timeout | Martin Willi | 2012-05-15 | 1 | -2/+15 | |
| | ||||||
* | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 4 | -0/+177 | |
| | ||||||
* | Send unanswered follow up R_U_THERE messages with the same DPD seq | Martin Willi | 2012-05-15 | 1 | -1/+7 | |
| | ||||||
* | Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL | Martin Willi | 2012-05-15 | 1 | -11/+0 | |
| | ||||||
* | Free name of application using libcharon. | Tobias Brunner | 2012-05-15 | 1 | -0/+1 | |
| | ||||||
* | starter: Initialize thread pool so kernel events are consumed. | Tobias Brunner | 2012-05-15 | 1 | -0/+9 | |
| | ||||||
* | Explicitly cast from strict_t to crl_policy_t | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | ||||||
* | Use correct integrity_algorithm_t enum type in bench_signer() | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | ||||||
* | Make function pointer defined with METHOD() macro non-const | Martin Willi | 2012-05-14 | 1 | -2/+2 | |
| | | | | | clang complains about it being const, and the object code generated from gcc is the same. | |||||
* | Remove unused return value of INIT(), making clang happy | Martin Willi | 2012-05-14 | 1 | -3/+2 | |
| | ||||||
* | Register load-tester faked kernel interface before other kernel interfaces | Martin Willi | 2012-05-14 | 1 | -8/+9 | |
| | ||||||
* | Load tester can enforce a local IP to use | Martin Willi | 2012-05-14 | 1 | -2/+9 | |
| | ||||||
* | Add plugin features support to load-tester plugin | Martin Willi | 2012-05-14 | 1 | -48/+76 | |
| | ||||||
* | Fix route reinstallation if preferred source IP is not on outgoing interface. | Tobias Brunner | 2012-05-07 | 1 | -30/+18 | |
| | ||||||
* | Fixed #include in tnc-ifmap plugin. | Tobias Brunner | 2012-05-07 | 1 | -0/+1 | |
| | ||||||
* | allow private algorithms | Andreas Steffen | 2012-05-05 | 2 | -4/+16 | |
| | ||||||
* | fixed mapping of IKEv1 algorithms | Andreas Steffen | 2012-05-05 | 1 | -29/+184 | |
| | ||||||
* | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 2 | -4/+4 | |
| | ||||||
* | inserted space | Andreas Steffen | 2012-05-05 | 5 | -1/+1 | |
| | ||||||
* | missing references to daemon.h | Andreas Steffen | 2012-05-05 | 4 | -0/+6 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 2 | -0/+7 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | Use proper getter for settings in sender and receiver. | Tobias Brunner | 2012-05-03 | 2 | -2/+2 | |
| | ||||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 56 | -220/+279 | |
| | | | | Also fixes several whitespace errors. | |||||
* | Store the name of the binary using libcharon to enable specific settings. | Tobias Brunner | 2012-05-03 | 5 | -7/+14 | |
| | ||||||
* | Changed default path to charon for NM frontend. | Tobias Brunner | 2012-05-03 | 1 | -2/+2 | |
| | ||||||
* | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 12 | -80/+65 | |
| | ||||||
* | Added a small libcharon wrapper intended to directly host the nm plugin. | Tobias Brunner | 2012-05-03 | 3 | -0/+332 | |
| | | | | For this reason it reclaims the --enable-nm configure option. | |||||
* | Provide plugin list from charon, not internally in libcharon. | Tobias Brunner | 2012-05-03 | 7 | -26/+28 | |
| | ||||||
* | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 2 | -2/+2 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | If we load new features from a plugin, restart loading from first plugin | Martin Willi | 2012-05-03 | 1 | -0/+4 | |
| | ||||||
* | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | ||||||
* | Building CERT_ANY through PEM requires either a CERT_X509 or a CERT_PGP builder | Martin Willi | 2012-05-03 | 1 | -1/+2 | |
| | ||||||
* | Updated Android.mk for 5.0 (no IKEv1 support yet). | Tobias Brunner | 2012-05-03 | 1 | -25/+33 | |
| | ||||||
* | updated tnc-pdp plugin for 5.0.0 | Andreas Steffen | 2012-05-02 | 3 | -4/+4 | |
| | ||||||
* | Route reinstallation in kernel_ipsec_t implementations is not needed anymore. | Tobias Brunner | 2012-05-02 | 2 | -12/+2 | |
| | ||||||
* | Reinstall routes in kernel-netlink plugin, if interfaces get reactivated or ↵ | Tobias Brunner | 2012-05-02 | 1 | -4/+206 | |
| | | | | IPs reappear. |