Martin Willi
42dcd01ffe
sending proper signal to the bus when detecting a dead peer
2007-02-01 15:23:31 +00:00
Andreas Steffen
883c1e3084
name the created CHILD_SA
2007-01-11 20:03:38 +00:00
Andreas Steffen
31e5d441d8
show rekeying|reauthentication time
2007-01-10 08:18:52 +00:00
Andreas Steffen
af53aa9ec0
show name of created CHILD_SA
2007-01-10 08:18:20 +00:00
Andreas Steffen
a40926c7eb
combined use_in and use_fwd
2007-01-10 08:17:48 +00:00
Martin Willi
a622c99240
fixed crash when CA for certrequest not found
2007-01-08 13:40:36 +00:00
Martin Willi
6a4be80d37
removed unused debugging code
2007-01-08 08:03:40 +00:00
Martin Willi
2dc9d7551b
fixed reauthentication when using %any hosts
2007-01-08 07:32:39 +00:00
Martin Willi
21f42524e0
support for transport in create_child_sa
...
include TRANSPORT/TUNNEL information in statusall
2007-01-08 06:55:50 +00:00
Andreas Steffen
42687ff5d1
fixed typo
2007-01-04 14:29:50 +00:00
Martin Willi
f73d4c9eb0
fixed reuathentication when connections other host is %any
2007-01-03 09:26:44 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
6fe03b0af0
implemented reauthentication using the new reauth=yes|no parameter
2006-12-19 07:30:07 +00:00
Andreas Steffen
730e2c0542
log IKE SPIs on a separate line
2006-11-01 20:29:04 +00:00
Andreas Steffen
efa0ed68cf
redesigned formatting of ipsec status|statusall
2006-11-01 17:28:47 +00:00
Martin Willi
e691a5c493
some fixes for doxygen
2006-10-31 15:24:08 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Andreas Steffen
29137c0cef
preparations to include certreqs in policy decisions
2006-10-31 07:04:15 +00:00
Andreas Steffen
914eea92d7
moved (myself) in log output
2006-10-31 06:31:21 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Martin Willi
5923be21b4
fixed SIGSEGV when setup of an additional CHILD_SA fails
2006-10-30 09:53:54 +00:00
Andreas Steffen
bcba0f0367
changed debug level of certreq log output
2006-10-29 09:11:50 +00:00
Andreas Steffen
a702b731cb
support of certreq payload in IKE_AUTH messages
2006-10-28 20:02:26 +00:00
Andreas Steffen
e44f4d7eef
send a certreq as initiator if other_ca is set
2006-10-28 15:37:23 +00:00
Martin Willi
ebdddb74d4
some improvements in signaling code
2006-10-27 10:46:56 +00:00
Martin Willi
ec92107923
include only source NATD payloads really needed
2006-10-27 10:46:35 +00:00
Martin Willi
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
Martin Willi
191a26a6a7
removed deprecated iterator methods (has_next & current)
...
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi
55bbff11ec
linked list cleanups
...
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
2006-10-24 08:46:17 +00:00
Martin Willi
e706c7f10b
code cleanups in printf handlers
2006-10-20 05:57:25 +00:00
Martin Willi
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi
9e22095ef3
fixed DPD to survive IKE_SA rekeying
2006-09-28 06:57:46 +00:00
Martin Willi
47f5027807
introduced printf() specifiers for:
...
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00
Martin Willi
1ce2ad09c3
fixed retransmission policy for responder
2006-09-25 07:24:08 +00:00
Martin Willi
397f344879
fixed dpd for responder
2006-09-25 06:38:58 +00:00
Andreas Steffen
7bd23b7ed5
added hostaccess support
2006-09-25 06:11:36 +00:00
Andreas Steffen
b826069dbb
moved auth_method to policy
2006-09-25 06:11:09 +00:00
Andreas Steffen
d756cd1bd6
added hostaccess support
2006-09-25 06:10:28 +00:00
Andreas Steffen
7968c6a5ff
added hostaccess support
2006-09-25 06:10:02 +00:00
Andreas Steffen
a8960f997a
more consistent authentication logging
2006-09-25 05:59:38 +00:00
Andreas Steffen
fff4ee8a85
added hostaccess support
2006-09-25 05:58:45 +00:00
Martin Willi
6e9bbf18b8
added HOST_ACCESS for firewall script as default
2006-09-18 11:38:37 +00:00
Martin Willi
5fded5139e
more debugging output for PSK authentication
2006-09-18 11:38:11 +00:00
Andreas Steffen
e2de376c74
added PSK support
2006-09-18 07:42:57 +00:00
Martin Willi
b9024ee058
handle certificate parsing error more generous
2006-09-14 13:14:58 +00:00
Martin Willi
567e2a7822
fixed memleak when receiving invalid certificate
2006-09-14 12:15:41 +00:00
Martin Willi
d7934d0cfc
implemented updown script to handle firewalling
2006-09-12 13:50:14 +00:00
Martin Willi
a095243f60
add priority management for kernel policy
...
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
2006-09-08 13:10:52 +00:00
Martin Willi
1239c6f40b
implemented handling of dpdaction and dpddelay ipsec.conf parameters
2006-09-08 06:12:02 +00:00
Martin Willi
a655f5c09c
reuse reqid when a ROUTED child_sa gets INSTALLED
...
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
2006-09-05 14:07:25 +00:00
Martin Willi