Martin Willi
|
090ba9453c
|
fixed compiler warnings on 64bit
|
2009-04-22 08:26:54 +00:00 |
|
Andreas Steffen
|
247e665a44
|
support of the ESP CAMELLIA-CBC cipher by charon
|
2009-04-17 09:15:15 +00:00 |
|
Martin Willi
|
a44bb9345f
|
merged multi-auth branch back into trunk
|
2009-04-14 10:34:24 +00:00 |
|
Martin Willi
|
1490ff4d9b
|
updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
|
2009-03-24 17:43:01 +00:00 |
|
Tobias Brunner
|
d25ce3701e
|
printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms).
|
2009-03-12 18:07:32 +00:00 |
|
Martin Willi
|
d9ad73d867
|
fixed format string argument error, resulting in crash
fixed memleak if pool not found
|
2009-03-03 14:56:17 +00:00 |
|
Andreas Steffen
|
16c6114ee7
|
this debug statement has only two arguments
|
2009-02-11 16:41:37 +00:00 |
|
Martin Willi
|
b81d8cd3cc
|
changed [4856] to dynamically choose traffic selector family
|
2009-02-11 13:09:52 +00:00 |
|
Andreas Steffen
|
c59825fbfc
|
support of dynamic/128 and %any6
|
2009-02-05 22:13:48 +00:00 |
|
Martin Willi
|
876d5c63a3
|
pass identity to release_address(), allows providers to do a lookup by id
|
2008-12-05 09:40:50 +00:00 |
|
Andreas Steffen
|
c333bb4678
|
extended changeset [4753]
|
2008-12-04 23:16:10 +00:00 |
|
Martin Willi
|
3bfd0fe3f2
|
handling peer_match with higher priority tan ike_match to select correct config if IPs are equal
|
2008-12-04 10:00:03 +00:00 |
|
Martin Willi
|
9a1263c3c1
|
fixed a double-unlock bug, showed up when using rwlocks in backend manager
|
2008-11-28 08:22:55 +00:00 |
|
Martin Willi
|
ced41695dc
|
use rwlocks in backend manager to allow simultaneous access
|
2008-11-27 15:34:17 +00:00 |
|
Martin Willi
|
96eb7b44a0
|
use a rwlock in attribute manager to allow simultaneous access
|
2008-11-27 15:22:41 +00:00 |
|
Martin Willi
|
a20abb81e9
|
added a MODP_NULL Diffie Hellman group to avoid calculation overhead in load-testing
|
2008-11-22 16:14:55 +00:00 |
|
Andreas Steffen
|
cd49134837
|
corrected unwanted deletion in comment
|
2008-11-12 22:57:46 +00:00 |
|
Martin Willi
|
b8cbb6451c
|
ported some hard-to-merge cherries back to trunk :-/
shame, svn, shame: this was ways to complicated
we should consider a switch to git...
|
2008-11-12 15:09:24 +00:00 |
|
Martin Willi
|
9fa5c75f48
|
fixing keylength bug at the right place:
we usually don't touch output parameters if operations fails
|
2008-11-12 08:27:48 +00:00 |
|
Andreas Steffen
|
137484895a
|
improved fix
|
2008-11-12 04:08:30 +00:00 |
|
Andreas Steffen
|
dbc277d908
|
fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material
|
2008-11-12 04:02:10 +00:00 |
|
Andreas Steffen
|
d487b4b727
|
preliminary support of Mobile IPv6
|
2008-11-11 06:37:37 +00:00 |
|
Andreas Steffen
|
91db979cdd
|
added the MIPv6 options use_proxy_mode and install_policy
|
2008-11-11 06:29:25 +00:00 |
|
Andreas Steffen
|
8ac4651ac3
|
cosmetics in debug output
|
2008-11-11 06:19:37 +00:00 |
|
Martin Willi
|
3ac5a0db8c
|
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
|
2008-11-05 11:29:56 +00:00 |
|
Andreas Steffen
|
ef6d339c09
|
migrate_job() finds a matching child_cfg
|
2008-11-03 02:05:41 +00:00 |
|
Andreas Steffen
|
bd354bee5f
|
corrected parameter description
|
2008-11-03 00:24:38 +00:00 |
|
Andreas Steffen
|
a066f7e6c2
|
corrected captions
|
2008-11-02 22:13:17 +00:00 |
|
Andreas Steffen
|
113a4afa55
|
corrected parameter description
|
2008-10-30 00:35:37 +00:00 |
|
Martin Willi
|
a1db79b31a
|
fixed some compiler warnings
|
2008-10-27 11:13:33 +00:00 |
|
Tobias Brunner
|
1adaa02bb2
|
merging kernel_pfkey plugin back from kernel-interface branch
|
2008-10-14 08:46:31 +00:00 |
|
Martin Willi
|
bb2059c60a
|
added proposal parsing of uncommon DH groups 3072/6144
|
2008-10-08 12:57:11 +00:00 |
|
Tobias Brunner
|
a341a68fac
|
merging renaming of mode_t to ipsec_mode_t back to trunk
|
2008-09-25 13:56:23 +00:00 |
|
Martin Willi
|
e577ad3985
|
creating default IKE proposals dynamically using algorithm enumeration API
|
2008-08-28 11:07:57 +00:00 |
|
Martin Willi
|
822901061b
|
ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
|
2008-08-22 10:44:51 +00:00 |
|
Andreas Steffen
|
af18c84ffb
|
display protoport in dynamic/32 traffic selectors
|
2008-07-21 19:08:03 +00:00 |
|
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
|
Martin Willi
|
d01783dba4
|
logging peer addresses in peer_cfg lookup
|
2008-07-01 11:10:37 +00:00 |
|
Martin Willi
|
9eeaa25f5d
|
added host match prio to debugging output
|
2008-07-01 11:01:27 +00:00 |
|
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
|
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
|
Martin Willi
|
035930fc4a
|
added %P printf handler for poposal_t
added some proposal selection debugging code
|
2008-06-12 11:42:19 +00:00 |
|
Andreas Steffen
|
7d4bb52073
|
make config_auth_method_t backward compatible to existing sql templates
|
2008-06-10 20:31:53 +00:00 |
|
Tobias Brunner
|
ea0823dffd
|
ECDSA with OpenSSL
|
2008-06-10 09:08:27 +00:00 |
|
Martin Willi
|
5a22a02156
|
DNS resolving of ike_cfg hosts dynamically on demand
|
2008-06-06 15:05:54 +00:00 |
|
Andreas Steffen
|
be1585c587
|
log received DH groups and PRFs if no common proposal is found
|
2008-05-22 14:18:44 +00:00 |
|
Tobias Brunner
|
346e9c5712
|
added the ECP groups from RFC 5114
|
2008-05-22 11:55:05 +00:00 |
|
Tobias Brunner
|
fc1a31d54b
|
added ECDH with OpenSSL (see RFC 4753)
|
2008-05-22 11:39:17 +00:00 |
|
Andreas Steffen
|
8bbb212f3a
|
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
|
2008-05-20 21:54:33 +00:00 |
|
Tobias Brunner
|
68ac3b44d1
|
fixed a bug introduced in [3973]
|
2008-05-19 08:48:44 +00:00 |
|