Andreas Steffen
929b9e367a
append new attribute certs at the end
2007-08-14 13:04:36 +00:00
Andreas Steffen
06faefe43d
adding attribute certficates to a chained list
2007-08-14 12:27:02 +00:00
Andreas Steffen
8f687a7591
has_rsa_private_key() must also be protected by keys_mutex
2007-08-10 12:10:36 +00:00
Andreas Steffen
c045d90a8e
corrected debug output
2007-08-10 11:23:45 +00:00
Andreas Steffen
8ff58b051c
ipsec stroke rereadaacerts|rereadacerts supported
2007-08-10 09:17:34 +00:00
Andreas Steffen
84db83336b
support of ipsec rereadsecrets for stroke
2007-08-10 07:16:32 +00:00
Martin Willi
939e93787e
made linked lists invoke() method consistent to clone_*() and destroy_*() methods
2007-08-09 12:43:11 +00:00
Andreas Steffen
037575682a
bug fix in linked_list deletion - instead of acerts destroyed certs twice
2007-08-08 06:02:59 +00:00
Andreas Steffen
f51d505e5e
implemented listing of attribute certificates
2007-08-07 20:32:11 +00:00
Martin Willi
3b574567ea
fixed segfault when sourceip in stroke message is NULL
2007-08-06 12:35:28 +00:00
Martin Willi
9ec19f13f7
allow starter to initiate connections simultaneously (on auto=start)
2007-08-06 07:41:19 +00:00
Tobias Brunner
c019260e01
backports from the p2p-nat-t branch:
...
* double assignment of function ''destroy'' in some jobs
* typos
2007-07-19 14:12:19 +00:00
Martin Willi
ac1557af51
updated XML interface to new schema
2007-07-19 10:57:33 +00:00
Martin Willi
c87395908a
not touching IKE_SA_INIT from ike_mobike_t anymore
2007-07-19 08:08:22 +00:00
Martin Willi
0308865282
fixed compiler warning
2007-07-16 07:10:14 +00:00
Martin Willi
cc68e173fe
fixed payload order (Nonce, KE) for IKE_SA_INIT
2007-07-16 07:01:49 +00:00
Andreas Steffen
db61efdbbb
include default route also in src address evaluation
2007-07-13 09:00:39 +00:00
Andreas Steffen
018219ae3a
include default route with missing dst field into route evaluation
2007-07-13 06:13:14 +00:00
Martin Willi
e5e868e430
doing route lookup in userspace to ignore routes installed by us
2007-07-11 12:37:24 +00:00
Martin Willi
9ba1d73890
using own routing table for installed routes (table 100, prio 100)
2007-07-11 06:55:11 +00:00
Martin Willi
19ff7d2207
added first draft of SMP relax-ng schema
2007-07-06 13:44:43 +00:00
Martin Willi
fa1bd44f23
ignoring unkown crl/ocsp uris
2007-07-04 12:00:33 +00:00
Martin Willi
1b8da84913
using correct nexthop for inserted route
2007-07-04 09:10:13 +00:00
Martin Willi
29100db902
changed mobike behavior to NOT use additional responder addresses until we have path discovery
2007-07-04 07:26:34 +00:00
Martin Willi
419201c15d
fixed responder initiated CHILD_SA rekeying when using virtual IPs
2007-07-04 06:27:33 +00:00
Martin Willi
7b8bae9941
fixed firewall script invocation when interface is not available anymore
2007-07-03 13:49:29 +00:00
Martin Willi
3bc62fe70e
improved MOBIKE:
...
prefer address family already used
do not change address implicit when mobike supported
handle multiple simultaneous roaming requests more properly
proper enabling/disabling of UDP encapsulation
2007-07-03 12:32:38 +00:00
Martin Willi
4979e85871
added message ID to message log
2007-07-03 09:00:16 +00:00
Martin Willi
cba7ba7f9d
show kind of notify contained in messages in log
2007-07-03 08:50:14 +00:00
Andreas Steffen
bcac22f3a6
DBG1 level for 'peer supports MOBIKE' debug message
2007-07-02 20:13:15 +00:00
Andreas Steffen
561f88e306
fixed typo
2007-07-02 20:10:26 +00:00
Martin Willi
3d928c9ffd
fixed mobike address update from and to NAT
2007-07-02 12:55:07 +00:00
Martin Willi
face844a87
proper update of IPsec SA when roaming a host-to-host tunnel
...
roaming of IPsec SAs using virtual IPs
2007-07-02 09:49:22 +00:00
Martin Willi
0d30da5dfd
updated charons architecture description
2007-06-29 09:21:28 +00:00
Martin Willi
ffbca197c1
fixed dpd=hold when using virtual IPs
2007-06-29 08:03:32 +00:00
Martin Willi
8ba7d34253
removed accidently checked in debbuging code
2007-06-29 07:40:04 +00:00
Martin Willi
c532d6460d
fixed IKE_SA reestablishment after DPD using port 500
2007-06-28 15:24:24 +00:00
Martin Willi
fc2d1c420f
further mobike improvements, regarding to NAT-T
2007-06-27 13:10:55 +00:00
Martin Willi
2b3100b5d0
simple roaming of the client works (not MOBIKE conform yet!)
2007-06-26 13:04:13 +00:00
Martin Willi
4cb9d7a758
further fixed for mobike roaming
2007-06-25 13:26:02 +00:00
Martin Willi
17d92e9732
further MOBIKE stuff:
...
kernel properly reports network reconfiguration and informs all IKE_SAs
MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
reestablishment of IKE_SAs on network reconfiguration kinda works
not stable yet!
2007-06-21 15:25:28 +00:00
Martin Willi
6835280041
fixed virtua IP: adding virtual IP to interface address list cache directly
...
corrected debug targets
2007-06-19 06:20:33 +00:00
Martin Willi
3b04350ab2
added extensions management to IKE_SA
...
fixed NATD payload (port) when using route lookup
2007-06-18 10:32:01 +00:00
Martin Willi
7068410b6f
source address lookup in kernel interface
...
use it for NAT detection if no source address known from config
support for %any...%any connections
2007-06-18 07:25:58 +00:00
Martin Willi
209c2e9049
support for left=%any change our address dynamically
2007-06-18 05:57:59 +00:00
Martin Willi
ca68a75eaf
increased receive buffer to handle more interfaces
2007-06-18 05:56:18 +00:00
Martin Willi
08a8f4496f
implemented more flexible iterator hook API
...
kernel interface handles interface changes and updates address list
2007-06-15 13:23:18 +00:00
Martin Willi
02b3ec0a10
implemented address change notification (for MOBIKE)
...
implemented up to date address list cache to list interfaces
2007-06-14 15:16:15 +00:00
Martin Willi
fede28be8b
fixed memleak when initiating to %any
2007-06-14 08:44:19 +00:00
Martin Willi
04f4e82d53
added missing files to the last commit
2007-06-14 08:17:23 +00:00
Andreas Steffen