Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Martin Willi
fb6c8591a3
do not use a route if outgoing interface is down
...
other cleanups
2008-11-14 13:04:22 +00:00
Tobias Brunner
ea625fabf9
merging kernel_klips plugin back into trunk
2008-11-11 09:22:00 +00:00
Martin Willi
e517b4b174
passing chunks, not prf+, to kernel interface
...
gives us better control of keymat in CHILD_SA
2008-10-14 15:17:44 +00:00
Tobias Brunner
1adaa02bb2
merging kernel_pfkey plugin back from kernel-interface branch
2008-10-14 08:46:31 +00:00
Martin Willi
ce5b17082d
mobike: try to keep existing source address before switching to another
2008-10-08 08:23:46 +00:00
Tobias Brunner
a341a68fac
merging renaming of mode_t to ipsec_mode_t back to trunk
2008-09-25 13:56:23 +00:00
Tobias Brunner
507f26f685
merging modularized kernel interface back to trunk
2008-09-25 07:56:58 +00:00
Tobias Brunner
6283b1f1f8
typos
2008-09-03 07:44:46 +00:00
Martin Willi
3e45b3a1ad
do not return IPv6 src addresses for IPv4 destinations
2008-08-21 15:17:45 +00:00
Andreas Steffen
5cd07d18a3
charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE events. Useful for taking down hundreds of virtual IPs on the same host
2008-08-21 11:55:16 +00:00
Martin Willi
02e907fe66
avoid too many alloca()s in netlink send, problematic on MIPS
2008-08-21 07:55:16 +00:00
Martin Willi
475814ce5f
roam jobs for routing table changes not fired for virtual IP routes
2008-08-18 11:07:26 +00:00
Andreas Steffen
7cdf728586
do not fire a roam job when virtual IP is deleted
2008-08-15 19:15:52 +00:00
Andreas Steffen
26fd3f0057
temporary workaround to prevent roam jobs due to virtual IP installations
2008-08-11 19:04:48 +00:00
Martin Willi
7a4ad866b0
use condvar broadcasts to signal threads waiting for an IP, there might be more than one
2008-07-30 13:19:12 +00:00
Martin Willi
7c04589335
use XFRM_MSG_UPDPOLICY for existing policies only
2008-07-28 08:29:04 +00:00
Andreas Steffen
66da78b4bb
ipsec status lists IPCOMP CPIs
2008-07-22 12:03:58 +00:00
Andreas Steffen
eba7470b76
consistent logging of SPIs and CPIs
2008-07-22 10:16:45 +00:00
Andreas Steffen
fb34475b5c
consistent logging of IKE and CHILD SAs
2008-07-21 12:47:59 +00:00
Martin Willi
d61d1913e1
ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression
2008-07-17 08:25:34 +00:00
Martin Willi
7ca49551c8
do not distinguish different policy protocols in userland cache
2008-07-16 12:33:19 +00:00
Martin Willi
7b9e1ff0fd
do not complain about existing routes
2008-07-16 12:30:47 +00:00
Martin Willi
7beea2e99f
fixed acquire-delay bug by:
...
installing policies before states
updating policies if protocol has changed
2008-07-16 11:51:37 +00:00
Andreas Steffen
326bfd0450
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
2008-07-15 21:35:55 +00:00
Andreas Steffen
eb0cc33886
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
2008-07-15 15:28:00 +00:00
Martin Willi
c66a1b757f
ike/kernel protocol identifier conversion functions
2008-06-26 08:59:39 +00:00
Tobias Brunner
be33d1a51b
merging the ESP sequence numbers of an SA in update_sa (fixing #52 )
2008-06-24 15:35:09 +00:00
Martin Willi
285152b33d
do not use self-installed route for IKE if routing table is 0
2008-06-17 08:04:12 +00:00
Martin Willi
a8ed846be7
added strongswan.conf option "routing_table" and "routing_table_prio"
2008-06-10 07:51:21 +00:00
Martin Willi
5dcda9e25b
added strongswan.conf option to disable route installation
2008-06-10 06:58:39 +00:00
Tobias Brunner
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
2008-05-16 13:27:21 +00:00
Tobias Brunner
d4aad55434
IPComp for IKEv2
2008-05-08 16:19:11 +00:00
Tobias Brunner
1da06b295f
made some stuff static
2008-04-28 14:19:25 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
39a8e5a580
fixed some typos
2007-10-05 09:52:23 +00:00
Martin Willi
1169ab4ec7
removed recursive mutex and __USE_UNIX98, should fix uClibc build
2007-10-05 09:47:55 +00:00
Martin Willi
983d7cd292
made add_ip()/del_ip() calls synchron (waiting until kernel event received)
...
this should fix MOBIKE route migration with virtual IPs
2007-09-27 12:48:00 +00:00
Martin Willi
d9d69536b0
improved MOBIKE roaming between interfaces
2007-09-24 12:15:25 +00:00
Martin Willi
5474dc6500
implemented routeability checks for mobike (experimental)
2007-09-03 12:37:25 +00:00
Martin Willi
0308865282
fixed compiler warning
2007-07-16 07:10:14 +00:00
Andreas Steffen
db61efdbbb
include default route also in src address evaluation
2007-07-13 09:00:39 +00:00
Andreas Steffen
018219ae3a
include default route with missing dst field into route evaluation
2007-07-13 06:13:14 +00:00
Martin Willi
e5e868e430
doing route lookup in userspace to ignore routes installed by us
2007-07-11 12:37:24 +00:00
Martin Willi
9ba1d73890
using own routing table for installed routes (table 100, prio 100)
2007-07-11 06:55:11 +00:00
Martin Willi
1b8da84913
using correct nexthop for inserted route
2007-07-04 09:10:13 +00:00
Martin Willi
3bc62fe70e
improved MOBIKE:
...
prefer address family already used
do not change address implicit when mobike supported
handle multiple simultaneous roaming requests more properly
proper enabling/disabling of UDP encapsulation
2007-07-03 12:32:38 +00:00
Andreas Steffen
561f88e306
fixed typo
2007-07-02 20:10:26 +00:00
Martin Willi
face844a87
proper update of IPsec SA when roaming a host-to-host tunnel
...
roaming of IPsec SAs using virtual IPs
2007-07-02 09:49:22 +00:00
Martin Willi