Martin Willi
5f47296f22
Migrated sim_manager to INIT/METHOD macros
2011-03-08 16:42:27 +01:00
Martin Willi
7b3bfe4b6c
Protect sim card/provider/hook (un-)registration with a rwlock
2011-03-08 16:42:27 +01:00
Martin Willi
f58db72482
Splitted sim_manager.h header to sim_{card,provider,hooks}.h
2011-03-08 16:42:27 +01:00
Andreas Steffen
25ed5672a6
initiate or route all child configs if they have different names from their parent peer config
2011-03-04 07:02:31 +01:00
Andreas Steffen
ea1c20d14b
initiate or route child configs which don't have a peer config of the same name
2011-03-01 22:24:19 +01:00
Andreas Steffen
a2ebc1bd69
put DN in double quotes
2011-03-01 22:19:59 +01:00
Martin Willi
007c47088c
Implemented permanent certificate coupling plugin
2011-02-28 16:39:40 +01:00
Martin Willi
0d6d992589
Update duplicheck entry during IKE rekeying
2011-02-28 15:37:18 +00:00
Martin Willi
b85be69079
Remove entry from active duplicate list only if it was not in checking
2011-02-28 15:37:18 +00:00
Martin Willi
ee0f53e189
Added an example application listening to duplicheck notifications
2011-02-28 15:37:18 +00:00
Martin Willi
3883150779
Notify duplicate detections over a UNIX sockets to listening applications
2011-02-28 15:37:18 +00:00
Martin Willi
3e74ebbecc
Added an advanced duplicate checking plugin with liveness check of old SA
2011-02-28 15:37:18 +00:00
Martin Willi
8ce567e69e
Invert check to delete unestablished IKE_SAs to not delete them once established
2011-02-28 15:37:17 +00:00
Martin Willi
c893bf7e5c
Added a whitelist command line utility to control whitelist plugin
2011-02-28 15:00:46 +01:00
Martin Willi
53f2a7c712
Added a UNIX socket based control backend to whitelist plugin
2011-02-28 15:00:46 +01:00
Martin Willi
5e603aba4e
Implemented a in-memory peer identity whitelist plugin
2011-02-28 15:00:46 +01:00
Tobias Brunner
dcab9d39a2
Fixed a possible segfault after termination of IKE and child SAs.
...
Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.
2011-02-28 13:29:09 +01:00
Martin Willi
e44ebdcfc8
Slightly change IKE_SA destruction order to inherit properly during ike_rekey task destruction
2011-02-28 10:31:36 +00:00
Tobias Brunner
35fe7f8cbd
Compiler warning fixed.
2011-02-10 16:49:42 +01:00
Andreas Steffen
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
Andreas Steffen
3cd805a115
Migrated update_sa_job_t to INIT/METHOD macros
2011-02-10 08:31:46 +01:00
Andreas Steffen
51d6a0d44a
Migrated send_keepalive_job_t to INIT/METHOD macros
2011-02-10 08:28:19 +01:00
Andreas Steffen
bcf071d9d5
Migrated send_dpd_job_t to INIT/METHOD macros
2011-02-10 08:25:41 +01:00
Andreas Steffen
e76d12bb9e
Migrated roam_job_t to INIT/METHOD macros
2011-02-10 08:22:57 +01:00
Andreas Steffen
ac226a1a60
Migrated retransmit_job_t to INIT/METHOD macros
2011-02-10 08:19:47 +01:00
Andreas Steffen
84e8fa47dc
Migrated rekey_ike_sa_job_t to INIT/METHOD macros
2011-02-10 08:16:23 +01:00
Andreas Steffen
44836c50ff
Migrated rekey_child_sa_job_t to INIT/METHOD macros
2011-02-10 08:13:01 +01:00
Andreas Steffen
76331a6493
Migrated process_message_job_t to INIT/METHOD macros
2011-02-10 08:09:36 +01:00
Andreas Steffen
8125dcca59
Migrated migrate_job_t to INIT/METHOD macros
2011-02-10 08:06:06 +01:00
Andreas Steffen
43c4a21bd9
_ prefix not required
2011-02-10 07:59:43 +01:00
Andreas Steffen
fc83263403
Migrated delete_ike_sa_job_t to INIT/METHOD macros
2011-02-10 07:56:53 +01:00
Andreas Steffen
1328423985
Migrated delete_child_sa_job_t to INIT/METHOD macros
2011-02-10 07:53:34 +01:00
Andreas Steffen
be02b8a094
Migrated acquire_job_t to INIT/METHOD macros
2011-02-10 07:49:05 +01:00
Andreas Steffen
f04d1c2dfe
replaced ipsec up %startall command by start_action job
2011-02-09 22:27:04 +01:00
Tobias Brunner
feb8ada613
maemo: Create DBUS service file with correct path to charon.
2011-02-08 15:17:36 +01:00
Martin Willi
caf20266e0
Fixed tnc-imc/imv library names when building monolithic
2011-02-08 11:22:02 +01:00
Martin Willi
234955d1ea
Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS
2011-02-08 11:11:01 +01:00
Martin Willi
91f8ce562d
tnccs_11 does not link against libtls, just uses its headers
2011-02-08 11:09:27 +01:00
Martin Willi
6ccb23e80b
Whitespace cleanups in tnc code
2011-02-08 11:03:10 +01:00
Martin Willi
c6c7c7001c
Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv
2011-02-08 11:03:10 +01:00
Martin Willi
3683c0424f
Fixed compiler warning
2011-02-08 11:03:10 +01:00
Martin Willi
3af88e4657
tnccs_11 does not link to libtnc anymore
2011-02-08 11:03:10 +01:00
Martin Willi
10a6019ec6
Implement correct signature for pb_tnc_msg->process()
2011-02-08 10:57:41 +01:00
Martin Willi
11a6f29944
Fixed doxygen groups in libcharon tnc subtree
2011-02-08 10:57:41 +01:00
Martin Willi
6cc11bccd1
Fixed various doxygen errors in tnc plugins
2011-02-08 10:57:40 +01:00
Martin Willi
0700c153e7
Fixed function parameter description
2011-02-08 10:14:56 +01:00
Martin Willi
94030a670b
Report correct key size if a cipher is not supported
2011-02-07 16:39:33 +01:00
Tobias Brunner
84545f6e7c
Some typos fixed.
2011-02-07 11:39:41 +01:00
Tobias Brunner
56f57e5814
maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes.
...
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
2011-02-04 18:02:48 +01:00
Martin Willi
b49d047bfc
Invoke the per-round authorize() hook before purging current auth info on IKE_SA
2011-02-03 17:08:39 +01:00