denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,188 Commits 1 Branch 0 Tags
d2de674b9a23b40bbafe98266fc3a0dfcf08cefb
Commit Graph
3188 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi d2de674b9a checkin of non-existing IKE_SAs 
removed unneeded checkin() return values
 2008-11-26 14:32:55 +00:00
Martin Willi 09f407a14f removed private parser function pointers, allows compiler to inline 2008-11-26 10:54:08 +00:00
Martin Willi 98bcdfe2c9 removed private generator function pointers, allows compiler to inline 2008-11-26 10:42:54 +00:00
Martin Willi e2cb07d713 inlined some short chunk functions, showed up in the profiler 2008-11-26 10:08:36 +00:00
Martin Willi 4fd233a73e memxor() tweaks, as it is heavily used in xcbc 2008-11-26 10:06:59 +00:00
Tobias Brunner 69e9698b17 allow to globally disable DOS protection by setting charon.dos_protection to no. 2008-11-26 09:22:19 +00:00
Tobias Brunner 999072ea02 optimized the scheduler for performance by replacing the linked list with a heap. 2008-11-25 19:56:05 +00:00
Tobias Brunner 6df2731e78 replacing the pthread_mutex in scheduler_t with the wrapped implementation. 
added a method to condvar_t which allows to wait for an absolute timeout.
 2008-11-25 19:30:02 +00:00
Tobias Brunner ed6146ffbe performance optimization for the DOS protection. 
* half-open SAs per peer are tracked in a hash table
 * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold
 * chunk_hash function added
 2008-11-25 13:16:05 +00:00
Andreas Steffen 28dd27be64 fixed crash due to missing function call parameter 2008-11-25 08:11:57 +00:00
Andreas Steffen 895a1156d5 use static IPsec policy iptables rule for alice in mobike scenario 2008-11-25 08:11:14 +00:00
Martin Willi f1f09810fb fixed set_message_id() on IKE_SA 
added missing bus->message() hook invocation
whitespace cleanups
 2008-11-24 13:59:30 +00:00
Martin Willi b09ca74720 set message IDs on IKE_SAs 2008-11-24 12:46:06 +00:00
Martin Willi addfea95df moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build 2008-11-24 08:22:05 +00:00
Martin Willi 18e2788fbe added a "load_tester.auth" option: "pubkey" (default) or "psk" 2008-11-23 11:58:41 +00:00
Martin Willi 88d4acd4de proper cancellation of load-testing initiators 2008-11-23 11:17:30 +00:00
Martin Willi a20abb81e9 added a MODP_NULL Diffie Hellman group to avoid calculation overhead in load-testing 2008-11-22 16:14:55 +00:00
Martin Willi 8f45ece098 expecting int sized length arguments to chunk_split, as vararg functions use integers 2008-11-21 08:11:24 +00:00
Tobias Brunner cdee592e38 fixing Makefile of the nm plugin (avoids including a .svn directory in the distribution) 2008-11-20 14:46:03 +00:00
Tobias Brunner ba2ecf6831 optimized ike_sa_manager for concurrent access (default behavior is still as before, needs configuration in strongswan.conf). 2008-11-20 13:30:23 +00:00
Martin Willi fc3ef71fa7 fixed lock-profiler help message 2008-11-19 15:37:46 +00:00
Martin Willi 3aaf7908d1 refactored and cleaned up child_sa interface 
replaced add/update calls by a install() call
	allocating SPIs always externally
	support installation of non-allocated CHILD_SAs
	some other cleanups
 2008-11-19 15:31:27 +00:00
Tobias Brunner 9dd1229407 fixing compilation on systems lacking linux/xfrm.h 2008-11-18 14:28:05 +00:00
Martin Willi 0d1a57e496 setting default port of own address to have a proper fallback if src addr lookup fails 2008-11-18 10:10:36 +00:00
Martin Willi 32f59c56f1 consider interfaces we do not monitor as up (e.g. lo) 
fixes load-testing against 127.0.0.1
 2008-11-18 09:52:28 +00:00
Andreas Steffen 50ae86017c version bump to 4.2.10 2008-11-18 00:02:59 +00:00
Martin Willi 49653b6bc3 separated updown listener to its own class 
caching interface names to properly remove rules if interface has changed
 2008-11-17 09:29:27 +00:00
Andreas Steffen 08c6ed9f14 fixed virtual IP re-installation failure in MOBIKE scenarios introduced with changeset 4662 2008-11-17 00:01:34 +00:00
Andreas Steffen 9a095db5e8 set release number back to 4.2.9 2008-11-16 22:25:16 +00:00
Andreas Steffen 4dc0dce886 added migration to NEWS 2008-11-16 21:23:56 +00:00
Andreas Steffen 7a915d627d completed migration of MIPv6 connections 2008-11-16 21:19:58 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Martin Willi 21bf86f740 using aligned buffers for netlink 2008-11-14 14:23:11 +00:00
Martin Willi 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying 2008-11-14 14:05:47 +00:00
Martin Willi dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS 2008-11-14 13:58:16 +00:00
Martin Willi 8d50c19833 also use correct encap parameter in PF_KEY 2008-11-14 13:15:26 +00:00
Martin Willi fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) 2008-11-14 13:12:07 +00:00
Martin Willi fb6c8591a3 do not use a route if outgoing interface is down 
other cleanups
 2008-11-14 13:04:22 +00:00
Martin Willi a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! 2008-11-14 10:30:26 +00:00
Martin Willi f5812086f8 do not use public interface for functions which are local anyway 2008-11-14 09:38:49 +00:00
Martin Willi 65c907cd71 reset IKE_SA on bus during child_sa destruction 2008-11-14 08:38:53 +00:00
Andreas Steffen 1ad0bacf5b adapted evaltest.dat to changed debug output 2008-11-13 21:38:16 +00:00
Martin Willi bbbe605fe3 updated API doc for socket.h 2008-11-13 07:48:27 +00:00
Martin Willi 8120943583 ported socket enumerator to raw-socket.c 
some cleanups in socket.c
 2008-11-13 07:15:45 +00:00
Andreas Steffen 84bec926a3 added type=transport_proxy and installpolicy=yes|no to man page 2008-11-13 06:29:53 +00:00
Andreas Steffen 509e07c5bc added MIPv6 functionality to NEWS 2008-11-13 05:46:51 +00:00
Andreas Steffen cd49134837 corrected unwanted deletion in comment 2008-11-12 22:57:46 +00:00
Martin Willi ce42db0921 BEET mode might want forwarding policies 2008-11-12 16:47:19 +00:00
Martin Willi e09481fb91 removed some obsolete includes 2008-11-12 16:10:34 +00:00
Martin Willi faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield 2008-11-12 16:07:17 +00:00