Commit Graph
84 Commits
Author SHA1 Message Date
Tobias Brunner cb186f9922 Added some IPv6 tweaks for Android.
Android 1.6 does not yet support the Advanced Sockets API for IPv6 as defined in
RFC 3542. Also, in6addr_any is missing.
2009-12-23 17:03:42 +01:00
Tobias Brunner a37cf4580a Semicolon removed. 2009-12-23 17:03:42 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Martin Willi 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) 2009-09-04 15:02:11 +02:00
Martin Willi 323f9f990f replaces four spaces by tabs, where appropriate 2009-09-04 14:50:23 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Martin Willi 6180a55852 use time_monotonic() instead of time() for statistics and time difference calculations 2009-08-31 18:00:28 +02:00
Tobias Brunner 932fdc38de Enable CMSG headers and macros on OpenSolaris. 2009-08-14 14:50:52 +02:00
Tobias Brunner 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. 2009-08-14 13:30:59 +02:00
Tobias Brunner 7da1f4a0ff Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not required as this is done using sysctl). 2009-08-05 12:31:10 +02:00
Tobias Brunner 789ba17024 Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel. 2009-07-30 14:06:26 +02:00
Martin Willi 2fdca5e3cb apply is_anyaddr fix from socket also to socket-raw 2009-06-03 17:56:55 +02:00
Tobias Brunner c1532e840d fixed compiler warning 2009-05-14 17:38:27 +02:00
Tobias Brunner 9015c073de make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542) 2009-05-14 17:16:21 +02:00
Martin Willi d50746febe identation cleanups 2009-05-13 15:57:31 +02:00
Martin Willi ad65a713e4 fixed identation 2009-05-13 14:55:35 +02:00
Tobias Brunner 75a354bb6b fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD) 2009-05-12 17:40:43 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi 1490ff4d9b updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Tobias Brunner 69e9698b17 allow to globally disable DOS protection by setting charon.dos_protection to no. 2008-11-26 09:22:19 +00:00
Tobias Brunner ed6146ffbe performance optimization for the DOS protection.
* half-open SAs per peer are tracked in a hash table
 * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold
 * chunk_hash function added
2008-11-25 13:16:05 +00:00
Martin Willi addfea95df moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build 2008-11-24 08:22:05 +00:00
Martin Willi bbbe605fe3 updated API doc for socket.h 2008-11-13 07:48:27 +00:00
Martin Willi 8120943583 ported socket enumerator to raw-socket.c
some cleanups in socket.c
2008-11-13 07:15:45 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Martin Willi 465fe85ee1 fixed sender destruction order 2008-11-05 12:24:36 +00:00
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Martin Willi 21632b76e0 added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check 2008-07-30 08:27:08 +00:00
Andreas Steffen 0005cee527 fixed typo 2008-05-21 21:52:59 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Tobias Brunner 8e91a36314 thread locking for sender and processor optimized 2008-04-03 09:19:12 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
2007-11-26 11:20:00 +00:00
Tobias Brunner 183ddc20a9 typo 2007-10-02 13:56:58 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job:
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
2007-06-11 10:57:19 +00:00
Martin Willi 76042f8471 proper thread cancellation when using the charon->interfaces 2007-05-23 09:08:13 +00:00
Andreas Steffen 8a664830d0 cosmetics 2007-05-15 19:03:23 +00:00
Martin Willi a6a039aa10 simplified capability dropping 2007-05-09 13:12:06 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi 66560f4267 reducing capabilities of the threads to a minimum
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
2007-05-03 14:21:22 +00:00
Martin Willi 594e830eb7 forcing proper autoload of af_key kernel module in charon 2007-04-27 07:43:42 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi 3b138b8422 cleaned up apidoc
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Martin Willi e0fe765152 restructured file layout
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Martin Willi 73390cce24 removed unneded includes 2007-03-30 12:24:31 +00:00