Commit Graph
270 Commits
Author SHA1 Message Date
Andreas Steffen a76ad38365 Migrated attr_plugin_t to INIT/METHOD macros 2010-11-25 22:52:32 +01:00
Andreas Steffen bd801f1b97 Migrated attr_sql_plugin_t to INIT/METHOD macros 2010-11-25 22:49:44 +01:00
Martin Willi 213884f947 Print full source route on DBG2 that gets installed 2010-11-11 09:59:02 +01:00
Tobias Brunner ec0c756d07 Do not fire roam events based on local route changes.
These kernel events are triggered on address changes, which is
problematic when deleting virtual IP addresses.
2010-10-12 11:11:04 +02:00
Tobias Brunner 29607690a8 If a changed route has no src, try to find it via interface. 2010-10-12 11:11:04 +02:00
Tobias Brunner 0ac6d2e658 Get source address from interface if the route does not provide one. 2010-10-12 11:11:04 +02:00
Andreas Steffen 91a0825c39 added non-standard SERPENT and TWOFISH support to kernel_netlink plugin 2010-09-08 07:22:31 +02:00
Tobias Brunner b8bf01ddee Do not install routes for pluto.
There are some incompatibilities with e.g. passthrough policies.
Pluto installs required source routes via updown script.
2010-09-02 19:04:24 +02:00
Tobias Brunner 06cdeac25f Charon specific strongswan.conf options generalized. 2010-09-02 19:04:22 +02:00
Tobias Brunner 34cf6def83 Fixing installation of trap policies (SPI=0) in kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner 6da26f3008 Do not overwrite the original mode when installing policies.
The mode is later used to decide if a route has to be installed.
2010-09-02 19:04:20 +02:00
Tobias Brunner 749d3cccaf Added support for different policy types in kernel_netlink plugin. 2010-09-02 19:04:19 +02:00
Tobias Brunner bd7a2f3bfc Added an option to specify the type of a policy to kernel_ipsec.add_policy.
This will later allow us to support pluto's passthrough and drop
policies in charon.
2010-09-02 19:04:19 +02:00
Tobias Brunner 55be07a15f Added support for combined IPComp/ESP/AH policies in kernel_netlink plugin. 2010-09-02 19:04:19 +02:00
Tobias Brunner b4872c1e09 Replaced the protocol argument in add_policy with an optional SPI for an AH SA. 2010-09-02 19:04:19 +02:00
Tobias Brunner bb381e26c6 Refer to scheduler and processor via lib and not hydra. 2010-09-02 19:04:18 +02:00
Tobias Brunner e18556e9e9 Moved scheduler and thread pool to libstrongswan. 2010-09-02 19:04:18 +02:00
Tobias Brunner 062a602216 Moved all kernel plugins to libhydra. 2010-09-02 19:01:26 +02:00
Tobias Brunner 08c0d340b8 Moved ipsec_transform_t to kernel_ipsec.h in libhydra.
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
2010-09-02 19:01:25 +02:00
Tobias Brunner 6f449d2efd Moved kernel interface to libhydra. 2010-09-02 19:01:25 +02:00
Tobias Brunner 8c387909eb Moved scheduler_t to libhydra. 2010-09-02 19:01:24 +02:00
Tobias Brunner 74f15e9320 Do not include files from libcharon in libhydra. 2010-09-02 19:01:22 +02:00
Tobias Brunner 07500cda69 Move callback_job_t to libhydra. 2010-09-02 19:01:22 +02:00
Tobias Brunner 222a64d892 Fixing Doxygen groups after moving processor. 2010-09-02 19:01:22 +02:00
Tobias Brunner c5f7146b17 Refer to processor via hydra and not charon. 2010-09-02 19:01:22 +02:00
Tobias Brunner 633fbe4fde Move processor_t (thread-pool) to libhydra. 2010-09-02 19:01:22 +02:00
Martin Willi 8f01815143 Build dedicated plugin lists for each strongSwan component 2010-08-12 14:46:57 +02:00
Martin Willi e82186fb5a Reimplemented mem pool to support multiple leases for a single identity 2010-08-04 09:49:59 +02:00
Martin Willi 45c992474c Mem pool does not support multiple leases for an identity 2010-07-27 09:54:27 +02:00
Andreas Steffen c1918dc28f we need some ordering 2010-07-12 22:44:27 +02:00
Andreas Steffen c13a4b4030 changed ordering of statusattr output 2010-07-12 22:38:18 +02:00
Andreas Steffen 1cecc6a6ef fixed alignment of caption 2010-07-12 20:48:14 +02:00
Andreas Steffen cb0a9d58a3 output identities correctly 2010-07-12 20:28:34 +02:00
Heiko Hund ec7adea007 Added support for named attribute groups
Add the possibility to group attributes by a name and assign these
groups to connections. This allows a more granular configuration of
which client will receive what atrributes.
2010-07-09 13:09:31 +02:00
Martin Willi 6a4a47511f Show contents of the CP payload in message_t stringification 2010-06-24 15:46:28 +02:00
Martin Willi 1e723d739c Support the subnet attribute in the attr plugin 2010-06-24 15:46:28 +02:00
Heiko Hund 341372d525 Don't fail with an error if an attribute that is to be deleted does not exist 2010-06-18 05:01:06 +02:00
Andreas Steffen c77f4b305e fixed configuration attribute type determination 2010-06-02 11:52:17 +02:00
Andreas Steffen 616b13c7a5 ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known 2010-06-01 16:47:56 +02:00
Andreas Steffen 185d8b7335 added unity_def_domain keyword tip ipsec pool 2010-05-31 16:47:06 +02:00
Andreas Steffen d9c751daac added --leases command line option to synopsis 2010-05-29 13:29:23 +02:00
Andreas Steffen 751379e5e8 added --showattr command line option to synopsys 2010-05-29 13:23:20 +02:00
Andreas Steffen e2bd6b616e several subnets can be concatenated 2010-05-22 22:53:24 +02:00
Andreas Steffen 2111dc1b84 added --showattr command to usage() 2010-05-22 10:46:15 +02:00
Andreas Steffen 3e3059ba7c oops, removed stray parenthesis 2010-05-20 17:39:10 +02:00
Andreas Steffen 36c1650b19 range check for configuration attribute types 2010-05-20 17:35:10 +02:00
Andreas Steffen c2d10df6e7 implement ipsec pool -showattr function 2010-05-20 17:24:43 +02:00
Andreas Steffen 05f1096cd8 removed deprecated use of ipsec pool --attr|del dns|nbns from usage() 2010-05-20 16:30:15 +02:00
Andreas Steffen ad6dbc41e5 management of any attribute by ipsec pool 2010-05-19 21:51:21 +02:00
Andreas Steffen 03b5e4d8d7 refactoring of Mode Config functionality allows transport and handling of any attribute 2010-05-14 17:07:03 +02:00