Martin Willi
6e1be42744
some cleanups
...
not assigning %any virtual IPs to peer anymore
2007-03-05 22:07:36 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Martin Willi
5bf1be3c9f
fixed ID selection bug when peer doesn't include IDr payload
...
allowing vendor ID in any messag
2007-03-05 15:22:50 +00:00
Martin Willi
373b8a607f
fixed netlink socket receiver code
...
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
2007-03-03 14:56:24 +00:00
Martin Willi
1d51abb71b
implemented get_iface() using RTM_GETADDR
...
added support for multi-header netlink messages
really ugly now, need a lot of refactoring
2007-03-02 17:08:38 +00:00
Martin Willi
8f03147376
added firewalling support when using virtual IPs
2007-03-01 12:31:58 +00:00
Andreas Steffen
9b1f4540c6
preparations for PLUTO_MY_SOURCEIP
2007-03-01 07:45:43 +00:00
Andreas Steffen
7493cd0b6b
corrected typo
2007-03-01 00:00:35 +00:00
Martin Willi
9362e063b9
fixed reauthentication when connections other is %any
2007-02-28 14:17:31 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Martin Willi
cda642a152
removed eap aka module due nda
2007-02-13 15:19:30 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi
d3032a9a82
renamed all static clone() functions to avoid naming conflicts with uclibc
2007-02-01 15:24:10 +00:00
Martin Willi
42dcd01ffe
sending proper signal to the bus when detecting a dead peer
2007-02-01 15:23:31 +00:00
Andreas Steffen
883c1e3084
name the created CHILD_SA
2007-01-11 20:03:38 +00:00
Andreas Steffen
31e5d441d8
show rekeying|reauthentication time
2007-01-10 08:18:52 +00:00
Andreas Steffen
af53aa9ec0
show name of created CHILD_SA
2007-01-10 08:18:20 +00:00
Andreas Steffen
a40926c7eb
combined use_in and use_fwd
2007-01-10 08:17:48 +00:00
Martin Willi
a622c99240
fixed crash when CA for certrequest not found
2007-01-08 13:40:36 +00:00
Martin Willi
6a4be80d37
removed unused debugging code
2007-01-08 08:03:40 +00:00
Martin Willi
2dc9d7551b
fixed reauthentication when using %any hosts
2007-01-08 07:32:39 +00:00
Martin Willi
21f42524e0
support for transport in create_child_sa
...
include TRANSPORT/TUNNEL information in statusall
2007-01-08 06:55:50 +00:00
Andreas Steffen
42687ff5d1
fixed typo
2007-01-04 14:29:50 +00:00
Martin Willi
f73d4c9eb0
fixed reuathentication when connections other host is %any
2007-01-03 09:26:44 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
6fe03b0af0
implemented reauthentication using the new reauth=yes|no parameter
2006-12-19 07:30:07 +00:00
Andreas Steffen
730e2c0542
log IKE SPIs on a separate line
2006-11-01 20:29:04 +00:00
Andreas Steffen
efa0ed68cf
redesigned formatting of ipsec status|statusall
2006-11-01 17:28:47 +00:00
Martin Willi
e691a5c493
some fixes for doxygen
2006-10-31 15:24:08 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Andreas Steffen
29137c0cef
preparations to include certreqs in policy decisions
2006-10-31 07:04:15 +00:00
Andreas Steffen
914eea92d7
moved (myself) in log output
2006-10-31 06:31:21 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Martin Willi
5923be21b4
fixed SIGSEGV when setup of an additional CHILD_SA fails
2006-10-30 09:53:54 +00:00
Andreas Steffen
bcba0f0367
changed debug level of certreq log output
2006-10-29 09:11:50 +00:00
Andreas Steffen
a702b731cb
support of certreq payload in IKE_AUTH messages
2006-10-28 20:02:26 +00:00
Andreas Steffen
e44f4d7eef
send a certreq as initiator if other_ca is set
2006-10-28 15:37:23 +00:00
Martin Willi
ebdddb74d4
some improvements in signaling code
2006-10-27 10:46:56 +00:00
Martin Willi
ec92107923
include only source NATD payloads really needed
2006-10-27 10:46:35 +00:00
Martin Willi
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
Martin Willi
191a26a6a7
removed deprecated iterator methods (has_next & current)
...
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi
55bbff11ec
linked list cleanups
...
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
2006-10-24 08:46:17 +00:00
Martin Willi
e706c7f10b
code cleanups in printf handlers
2006-10-20 05:57:25 +00:00
Martin Willi
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi
9e22095ef3
fixed DPD to survive IKE_SA rekeying
2006-09-28 06:57:46 +00:00
Martin Willi
47f5027807
introduced printf() specifiers for:
...
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00
Martin Willi
1ce2ad09c3
fixed retransmission policy for responder
2006-09-25 07:24:08 +00:00
Martin Willi
397f344879
fixed dpd for responder
2006-09-25 06:38:58 +00:00
Andreas Steffen
7bd23b7ed5
added hostaccess support
2006-09-25 06:11:36 +00:00
Andreas Steffen
b826069dbb
moved auth_method to policy
2006-09-25 06:11:09 +00:00
Martin Willi