Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 2d4c347af9 While checking for redundant quick modes, compare traffic selectors Martin Willi 2012-06-08 10:18:52 +02:00
• 106b938b6b Store shorter soft lifetime of in- and outbound SAs only Martin Willi 2012-06-05 16:16:07 +02:00
• 7a5f372c57 Initiate quick mode rekeying with narrowed traffic selectors Martin Willi 2012-06-05 15:32:28 +02:00
• d61f2906d4 Use traffic selectors passed to quick mode constructor as initiator Martin Willi 2012-06-05 15:27:34 +02:00
• 1e24fa4614 Instead of rekeying, delete a quick mode if we have a fresher instance Martin Willi 2012-06-05 15:03:10 +02:00
• 9e9295ed10 Properly handle empty RDN values in DN strings. Tobias Brunner 2012-06-07 16:50:11 +02:00
• 9041c074b3 Properly install policies with ports in PF_KEY kernel interface. Tobias Brunner 2012-06-07 14:36:17 +02:00
• ab24a32edf As responder, enforce the same configuration while rekeying CHILD_SAs Martin Willi 2012-06-06 16:00:58 +02:00
• b200fa573b starter: Only handle SIGCHLD asynchronously and the rest in pselect(2). Tobias Brunner 2012-06-06 14:23:25 +02:00
• 21043198ff Show expiration time of rekeyed CHILD_SAs in statusall Martin Willi 2012-06-05 10:29:06 +02:00
• 18a3741042 starter: (De-)Initialize logging when forking. Tobias Brunner 2012-06-04 12:55:05 +02:00
• 402ae88af9 starter: Close open file descriptors when forking daemons. Tobias Brunner 2012-05-31 16:44:03 +02:00
• 89c97952bd starter: Changed signal handling now that starter is multi-threaded. Tobias Brunner 2012-05-31 15:53:47 +02:00
• c8f7a114b6 Mark CHILD_SAs used for trap policies to uninstall them properly. Tobias Brunner 2012-06-04 17:43:38 +02:00
• 93d9a02e9e NEWS for 4.6.4 added. Tobias Brunner 2012-05-28 12:44:38 +02:00
• 79d5c4f06b Fixed return values of several functions (e.g. return FALSE for pointer types). Tobias Brunner 2012-05-07 15:47:00 +02:00
• 060b508e0e Fix boolean return value if an empty RSA signature is detected in gmp plugin Martin Willi 2012-05-07 13:51:46 +02:00
• 77e4282643 Avoid queueing more than one retry initiate job. Tobias Brunner 2012-05-25 16:09:31 +02:00
• 60c82591c5 Retry IKE_SA initiation if DNS resolution failed. Tobias Brunner 2012-05-25 15:30:32 +02:00
• eac9d77059 Job added to re-initiate an IKE_SA. Tobias Brunner 2012-05-25 15:24:57 +02:00
• 6f948c5c8d added nonce plugin to gcrypt scenarios Andreas Steffen 2012-05-30 07:21:03 +02:00
• 08951eb7a8 upgraded ipv6 scenarios to 5.0.0 Andreas Steffen 2012-05-29 23:40:01 +02:00
• 53915f14ae Fix MOBIKE address update if responder address changed. Tobias Brunner 2012-05-09 17:53:34 +02:00
• a46fe56858 Resolve hosts before reauthenticating due to address change. Tobias Brunner 2012-05-09 15:46:17 +02:00
• c6da59f014 Don't queue delete_ike_sa job when setting IKE_DELETING. Tobias Brunner 2012-05-09 15:28:29 +02:00
• 7457143072 During reauthentication reestablish IKE_SA even if deleting the old one fails. Tobias Brunner 2012-05-09 15:15:43 +02:00
• 23470d849a Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. Tobias Brunner 2012-05-09 15:14:34 +02:00
• 12715f1953 Fixed route lookup in case MOBIKE is not enabled. Tobias Brunner 2012-05-08 16:48:51 +02:00
• be982b4c03 enable xauth-eap plugin in UML scenarios Andreas Steffen 2012-05-25 17:02:39 +02:00
• 2be46da56d added nonce plugin in default host configurations Andreas Steffen 2012-05-25 17:00:03 +02:00
• da7a46b73b upgraded ike scenarios to 5.0.0 Andreas Steffen 2012-05-25 16:58:17 +02:00
• d2933125d5 added IKEv1 IPCOMP pluto-charon interoperability scenarios Andreas Steffen 2012-05-25 12:52:21 +02:00
• daab61e51f Added encapsulation mode transform attribute to IPComp proposal. Tobias Brunner 2012-05-25 09:24:49 +02:00
• b253008544 upgraded ikev1/compress to 5.0.0 Andreas Steffen 2012-05-24 17:36:27 +02:00
• 18dac73f02 Updated ipsec.conf(5) to reflect changes to IPComp support. Tobias Brunner 2012-05-24 15:31:15 +02:00
• 6695b48582 Add an additional proposal without IPComp to SA payload. Tobias Brunner 2012-05-24 14:40:12 +02:00
• 3451ecd7ac Added log message if peer does not accept/provide IPComp proposal. Tobias Brunner 2012-05-24 14:36:57 +02:00
• 47b448b807 Added support to negotiate IPComp during Quick Mode. Tobias Brunner 2012-05-24 14:00:44 +02:00
• 647cd741e8 Added support for IKEv1 IPComp proposals in SA payload. Tobias Brunner 2012-05-24 13:31:53 +02:00
• 7a75cae856 Added support for IKEv1 IPComp proposals in proposal substructure. Tobias Brunner 2012-05-23 18:44:48 +02:00
• 00e11bcefd Fix memleak during Quick Mode in case no SPI can be allocated from kernel. Tobias Brunner 2012-05-23 18:09:21 +02:00
• 624bb24d12 Properly filter IKEv1 proposals consisting of multiple proposal payloads. Tobias Brunner 2012-05-23 17:55:41 +02:00
• fda9f104b4 Fixed check for loaded plugins with feature types that are not compared exactly. Tobias Brunner 2012-05-24 12:58:38 +02:00
• 0e5d587df7 get_match() method added to hashtable_t. Tobias Brunner 2012-05-24 12:54:38 +02:00
• fa50a89c95 added ikev1/xauth-rsa-eap-md5-radius scenario Andreas Steffen 2012-05-24 09:26:00 +02:00
• 9eac6106d0 Use a hashtable to check for already loaded plugin features. Tobias Brunner 2012-05-23 17:41:11 +02:00
• a9cfd29c10 Hash function for plugin features added. Tobias Brunner 2012-05-23 17:37:53 +02:00
• 31c83b973e load nonce plugin Andreas Steffen 2012-05-23 15:05:57 +02:00
• ad59f3a91a added ikev1 pluto-charon interoperability scenarios Andreas Steffen 2012-05-23 14:47:41 +02:00
• 148b643880 upgraded ikev1 scenarios to 5.0.0 Andreas Steffen 2012-05-23 14:45:15 +02:00
• 3c475660c5 Apply IDir before deriving keys as aggressive initiator Martin Willi 2012-05-23 12:27:47 +02:00
• 523ce7c20c Use received identity to look up PSK as aggressive responder Martin Willi 2012-05-23 12:18:45 +02:00
• 51754f6654 Check if we actually have an initiating packet to free while processing responses Martin Willi 2012-05-23 11:50:12 +02:00
• 2ac996cb71 list IKEv1 Aggressive Mode in ipsec statusall Andreas Steffen 2012-05-23 11:12:27 +02:00
• 1a624ff45a Switch to alternative peer config in IKEv1 Main and Aggressive Mode. Tobias Brunner 2012-05-21 12:07:17 +02:00
• 17949695bf Cancel pending retransmits when flushing active task queue Martin Willi 2012-05-21 14:53:40 +02:00
• 4ce92ef350 Cancel active quick mode task when receiving INFORMATIONAL error Martin Willi 2012-05-21 14:48:48 +02:00
• 7ce504e182 Flush task queues explicitly, not implicitly if task returns ALREADY_DONE Martin Willi 2012-05-21 14:17:09 +02:00
• cbc1a20ffe Wrap task managers flush_queue() in IKE_SA Martin Willi 2012-05-21 14:05:01 +02:00
• a5c799602f Make task managers flush_queue() method public Martin Willi 2012-05-21 14:02:35 +02:00
• 9e19cb912d Destroy Netlink socket only after deleting remaining source routes. Tobias Brunner 2012-05-21 13:19:57 +02:00
• 75d4e01c4a Enumerate correct list while removing nonce_gens, fix deregistration Martin Willi 2012-05-21 12:28:01 +02:00
• 32400cd91a Added a convenience function to dump backtraces for gdb-less debugging Martin Willi 2012-05-21 12:18:49 +02:00
• b5341bb07c Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed Martin Willi 2012-05-21 12:17:32 +02:00
• 769696450a Properly munmap/close file if loading IMC/IMV fails. Tobias Brunner 2012-05-18 12:26:03 +02:00
• 7a56c35fc9 Remove executable flag from source files. Tobias Brunner 2012-05-18 09:52:52 +02:00
• 22bf44c8b9 Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). Tobias Brunner 2012-05-18 09:52:15 +02:00
• 7959a3faec Removed superfluous @param in bus.h. Tobias Brunner 2012-05-18 08:37:32 +02:00
• 7684ca2e8c whitelist: Make sure listed IDs are null-terminated. Tobias Brunner 2012-05-18 09:27:24 +02:00
• 816f7f238f pkcs8: Initialize salt and IV properly. Tobias Brunner 2012-05-18 08:36:37 +02:00
• 5c162dd944 List registered nonce generators in statusall output. Tobias Brunner 2012-05-16 18:26:36 +02:00
• b826b192ba Add enumerator for registered nonce generators. Tobias Brunner 2012-05-16 18:25:25 +02:00
• afaf1bdf5e Use nonce_gen instead of rng to generate nonces Adrian-Ken Rueegsegger 2012-05-02 17:49:41 +02:00
• 5338fe5e79 Add create_nonce_gen function to keymat interface Adrian-Ken Rueegsegger 2012-05-02 17:49:35 +02:00
• 04024b5de8 Add nonce plugin implementation Adrian-Ken Rueegsegger 2012-05-02 17:49:32 +02:00
• e2fc09c186 Add nonce generator interface Adrian-Ken Rueegsegger 2012-05-02 17:49:26 +02:00
• 80c5b17d1a make IKEv1 DPD timeout configurable in charon Andreas Steffen 2012-05-17 19:49:22 +02:00
• 24742c0f83 Moved IKEv1 DPD processing to task manager, fix sequence issues Martin Willi 2012-05-15 16:10:47 +02:00
• b7dafb3f5b Consider inbound ESP as a sign of liveness for DPD timeout Martin Willi 2012-05-15 14:58:28 +02:00
• 4b38c22c00 Schedule a DPD timeout job that enforces the IKE message timeout policy Martin Willi 2012-05-15 14:44:30 +02:00
• ebf829f2eb Send unanswered follow up R_U_THERE messages with the same DPD seq Martin Willi 2012-05-15 14:27:16 +02:00
• 57a8418c88 Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL Martin Willi 2012-05-15 14:26:09 +02:00
• b3089ab74c Free name of application using libcharon. Tobias Brunner 2012-05-15 11:37:07 +02:00
• d3590016e9 starter: Initialize thread pool so kernel events are consumed. Tobias Brunner 2012-05-15 08:55:19 +02:00
• 9e25007646 Explicitly cast from strict_t to crl_policy_t Martin Willi 2012-05-14 14:11:54 +02:00
• 1b82fdb2e5 Use correct integrity_algorithm_t enum type in bench_signer() Martin Willi 2012-05-14 14:11:22 +02:00
• d185b6acee Make function pointer defined with METHOD() macro non-const Martin Willi 2012-05-14 14:10:00 +02:00
• 2e1f4a4631 Remove unused return value of INIT(), making clang happy Martin Willi 2012-05-14 14:07:00 +02:00
• 29b56078ea Register load-tester faked kernel interface before other kernel interfaces Martin Willi 2012-05-14 13:21:09 +02:00
• d4078ca796 Load tester can enforce a local IP to use Martin Willi 2012-05-14 10:03:05 +02:00
• d684242510 Add plugin features support to load-tester plugin Martin Willi 2012-05-14 09:52:53 +02:00
• 5cc6dc8b39 check for ESP in UDP encapsulation Andreas Steffen 2012-05-12 12:15:58 +02:00
• a56fdff194 upgraded ikev2 scenarios to 5.0.0 Andreas Steffen 2012-05-11 11:00:32 +02:00
• 0e1c6fa2a9 suppress leak detective output Andreas Steffen 2012-05-11 05:48:11 +02:00
• c732e22019 Fix route reinstallation if preferred source IP is not on outgoing interface. Tobias Brunner 2012-05-07 11:24:07 +02:00
• 5de5b04ce4 Fixed #include in tnc-ifmap plugin. Tobias Brunner 2012-05-07 11:22:51 +02:00
• 86aab92248 upgraded ha scenario for 5.0.0 Andreas Steffen 2012-05-06 15:03:26 +02:00
• 922e0d0975 added gcrypt-ikev1 pluto interoperability tests Andreas Steffen 2012-05-06 09:51:19 +02:00
• 949d08dfca upgraded gcrypt-ikev1 scenarios to 5.0.0 Andreas Steffen 2012-05-06 09:25:31 +02:00
• 04d7b1725d upgraded gcrypt-ikev2 scenarios to 5.0.0 Andreas Steffen 2012-05-06 09:23:09 +02:00