 Martin Willi
|
92ee45a0ee
|
cleanups in kernel interface code
added proper traffic selector to string conversion
some cleanups here & there
|
2006-07-18 12:53:54 +00:00 |
|
|
Martin Willi
|
325e497798
|
improved logging on verify errors for some payloads
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
|
2006-07-13 12:49:35 +00:00 |
|
|
Martin Willi
|
e7356568b2
|
added all currently known notify payload types
|
2006-07-12 14:05:57 +00:00 |
|
|
Martin Willi
|
c71d53ba4e
|
updated copyright information
|
2006-07-07 08:49:06 +00:00 |
|
|
Martin Willi
|
698d774918
|
reimplemented CHILD_SA rekeying & delete
no simultanous transaction with CHILD_SAs yet!
|
2006-07-07 07:04:07 +00:00 |
|
|
Martin Willi
|
3dd3c5f39e
|
redesigned IKE_SA using a transaction mechanism:
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
|
2006-07-05 10:53:20 +00:00 |
|
|
Andreas Steffen
|
971218c3ae
|
support of cert payloads
|
2006-07-03 06:27:45 +00:00 |
|
|
Martin Willi
|
1396815afb
|
first merge of NATT code
|
2006-06-22 06:36:28 +00:00 |
|
|
Martin Willi
|
c095388f7f
|
added support for "ike" and "esp" keywords
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
|
2006-06-15 11:09:11 +00:00 |
|
|
Andreas Steffen
|
c4a7413e72
|
cosmetics
|
2006-06-12 07:55:37 +00:00 |
|
|
Martin Willi
|
695723d4e8
|
old child_sa gets deleted after rekeying
rekeying almost complete, but:
IKE_SA get in an invalid state when both initiate rekeying at the same time,
|
2006-06-09 15:12:43 +00:00 |
|
|
Martin Willi
|
5c131a016b
|
specifying keysize in bits, as it is required in IKEv2
added generic kernel SA algorithm handling, which brings us:
aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
|
2006-06-09 07:31:30 +00:00 |
|
|
Martin Willi
|
8d77eddec2
|
further work for rekeying:
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
|
2006-06-07 13:26:23 +00:00 |
|
|
Martin Willi
|
3a13a78084
|
- handle IKE_SA setup without a piggy-packed CHILD_SA
more IKEv2 conform
|
2006-05-24 09:05:21 +00:00 |
|
|
Martin Willi
|
4a5bba25e2
|
- reimplemented proper IKE SA deletion using a seperate state,
should conform now to IKEv2
|
2006-05-23 08:01:49 +00:00 |
|
|
Martin Willi
|
f2c2d395ff
|
- introduced autotools
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
|
2006-05-16 14:24:03 +00:00 |
|
|
Martin Willi
|
b8577029d1
|
|
2006-05-10 08:02:49 +00:00 |
|