Martin Willi
3cd3f48428
properly implemented interface_managers initiate, terminte_[ike|child]
...
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
2007-05-09 12:33:08 +00:00
Martin Willi
d08b27799a
properly ignoring signals rised by a thread which is in listening state
2007-05-08 12:58:33 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a4a3884c83
extended interface_manager (more work needed here)
2007-05-03 14:22:52 +00:00
Martin Willi
586b7474a2
allow to have listening state TRUE while sending singal ourself
2007-05-03 14:22:15 +00:00
Martin Willi
66560f4267
reducing capabilities of the threads to a minimum
...
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
2007-05-03 14:21:22 +00:00
Martin Willi
0ccb275a93
added more API documentation to backends/interfaces
2007-04-30 10:23:01 +00:00
Andreas Steffen
9c53c47bde
added interface.h
2007-04-27 21:29:31 +00:00
Andreas Steffen
42577f4062
fixed casting
2007-04-27 21:28:54 +00:00
Andreas Steffen
0f00a094b3
added writeable_backend.h
2007-04-27 20:58:45 +00:00
Andreas Steffen
bc1214096b
fixed typo
2007-04-27 18:13:57 +00:00
Martin Willi
a84fb01b96
restructuring of configuration backends
...
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi
594e830eb7
forcing proper autoload of af_key kernel module in charon
2007-04-27 07:43:42 +00:00
Martin Willi
f47e450be9
properly checking received IDr as initiator
2007-04-25 06:06:13 +00:00
Martin Willi
c80e8ba11a
added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20)
2007-04-23 13:00:20 +00:00
Martin Willi
17712ea866
fixed CHILD_SA proposal selection when not using DH exchange
2007-04-23 12:59:10 +00:00
Martin Willi
63c477244d
fixed keyingtries
2007-04-23 12:19:23 +00:00
Andreas Steffen
4841189b72
implementation of strictcrlpolicy=ifuri
2007-04-20 11:12:08 +00:00
Martin Willi
0706c39cda
added support for EAP methods not establishing an MSK
2007-04-19 12:37:48 +00:00
Martin Willi
04a7b6d868
added most problematic linux headers to distribution
...
other/real linux header may be selected using --with-linux-headers=dir
2007-04-19 08:59:36 +00:00
Martin Willi
1fd5383e61
added PDF support for CHILD_SAs
...
support for INVALID_KE_PAYLOAD negotiation for rekeying
2007-04-19 08:02:19 +00:00
Martin Willi
41ab00da6b
fixed memleak in IKE_SA manager
2007-04-19 07:04:35 +00:00
Martin Willi
217e985b41
moved initiate() code to the generic controller_t class
2007-04-16 12:52:49 +00:00
Andreas Steffen
ddf1b3e09e
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
2007-04-14 17:33:29 +00:00
Andreas Steffen
f880eb2dca
started support of X.509 attribute certificates
2007-04-12 17:49:33 +00:00
Andreas Steffen
0dbe579a51
added AA and AATR cert paths
2007-04-12 16:43:21 +00:00
Andreas Steffen
4cda602393
fixed output of list_auth_certificates()
2007-04-12 16:42:07 +00:00
Martin Willi
a1b2d82db0
removed %Q, %Y, %W, %U printf handlers
2007-04-12 09:44:26 +00:00
Martin Willi
db97fd8298
not using %m printf handler, as late errno interpration over bus may be problematic
2007-04-12 08:52:36 +00:00
Martin Willi
1dad08b035
fixed DPD delay in peer_cfg
2007-04-12 06:20:42 +00:00
Martin Willi
092958c89d
fixed payload debug message
2007-04-12 06:20:14 +00:00
Martin Willi
5f088665ad
removed IKE_SA_ID (%J) printf hook, two more to go
2007-04-11 13:01:08 +00:00
Martin Willi
3c662c30ee
cleanup and fixes for status & statusall
2007-04-11 12:43:52 +00:00
Martin Willi
015912016c
using %V time delta for rekeying times
2007-04-11 12:33:02 +00:00
Martin Willi
a3ce4bc214
removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go
2007-04-11 12:14:51 +00:00
Martin Willi
cd08b6880b
removed %M printf handler, five more to go
2007-04-11 09:12:21 +00:00
Martin Willi
82240938ca
fixed virtual ip configuration bug introduced with the previous commit
2007-04-11 08:34:21 +00:00
Martin Willi
3b138b8422
cleaned up apidoc
...
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Martin Willi
de55c6895f
accepting stroke initiation by a name of a child_cfg
2007-04-11 05:58:38 +00:00
Andreas Steffen
86b7215627
fixed bug with roadwarrior and wildcard IDs
2007-04-10 22:39:09 +00:00
Andreas Steffen
a07aad39dc
edited comment and debug output
2007-04-10 22:38:06 +00:00
Andreas Steffen
4876f521d6
best must be initialized to 2*MAX_WILDCARDS+1
2007-04-10 22:35:45 +00:00
Martin Willi
00ccb87671
requesting the same virtual IP on reauthentication
2007-04-10 15:02:57 +00:00
Martin Willi
d3e1da2378
proper notification handling
2007-04-10 15:00:51 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Andreas Steffen
4c56bd64e5
removed list_crls() and list_ocsp() methods
2007-04-06 09:43:20 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
e58afb1a0a
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
2007-04-04 07:49:05 +00:00
Martin Willi
80b7162531
improved log output for checkout_by_message()
2007-04-04 07:11:12 +00:00
Andreas Steffen
a0eaa59b50
implemented dynamic http-based CRL fetching
2007-04-03 21:11:23 +00:00
Martin Willi