 Martin Willi
|
4c23a8c9ec
|
moved interface enumeration code to socket, where it belongs
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
|
2006-08-28 08:45:22 +00:00 |
|
|
Martin Willi
|
fe04e93a8b
|
implemented IKE_SA rekeying
uses ikelifetime, rekeymargin and rekeyfuzz config settings
no handling of simultaneus exchanges yet!
|
2006-07-27 12:18:40 +00:00 |
|
|
Martin Willi
|
325e497798
|
improved logging on verify errors for some payloads
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
|
2006-07-13 12:49:35 +00:00 |
|
|
Martin Willi
|
c71d53ba4e
|
updated copyright information
|
2006-07-07 08:49:06 +00:00 |
|
|
Martin Willi
|
3dd3c5f39e
|
redesigned IKE_SA using a transaction mechanism:
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
|
2006-07-05 10:53:20 +00:00 |
|
|
Martin Willi
|
8d77eddec2
|
further work for rekeying:
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
|
2006-06-07 13:26:23 +00:00 |
|
|
Martin Willi
|
b8577029d1
|
|
2006-05-10 08:02:49 +00:00 |
|