Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• b74cd9573d pluto now requires attr plugin for dns and nbns server loading from strongswan.conf Andreas Steffen 2010-04-09 21:03:32 +02:00
• b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct Martin Willi 2010-04-08 15:08:35 +02:00
• 6c1dc87551 recovered private keys of no CDP certificates Andreas Steffen 2010-04-07 19:37:53 +02:00
• 589d175a05 recovered lost Duck CA certificates Andreas Steffen 2010-04-07 19:30:33 +02:00
• 613ceca96c Migrated scepclient/openac logging hooks to new signature Martin Willi 2010-04-07 15:51:55 +02:00
• 54e354f2d6 Remove to_referer() method, as it fails if no referer was given Martin Willi 2010-04-07 15:36:22 +02:00
• f7c32feec0 Renamed clone function to avoid name clash with uclibc Martin Willi 2010-04-07 14:54:22 +02:00
• d101a61f87 NEWS about HA plugin Martin Willi 2010-04-07 14:16:52 +02:00
• 140418453a Updated HA plugin to new APIs Martin Willi 2010-03-22 10:25:27 +00:00
• 647008c8a7 Updated location of traffic selector header Martin Willi 2010-03-19 19:06:53 +01:00
• 29a46aacad Moved ha plugin to libcharon Martin Willi 2010-03-19 19:03:46 +01:00
• 3e8caf6af6 Make resync/monitoring functionality optional Martin Willi 2009-09-30 16:23:58 +02:00
• f24ca1dd55 Listen to ike_updown/rekey hook instead of ike_state_change Martin Willi 2009-09-30 11:48:15 +02:00
• c866a42737 Request a complete resync after daemon startup Martin Willi 2009-09-30 11:04:22 +02:00
• 1466af8556 Do not automatically take over segments, as we need to resync first Martin Willi 2009-09-30 10:36:27 +02:00
• ea249cc6f0 Drop overlapping segments only if we have no active SAs on it Martin Willi 2009-09-29 16:40:58 +02:00
• a05e388540 Do not install iptables rules, they should stay active after shutdown Martin Willi 2009-09-29 16:05:46 +02:00
• e262f4e543 Take over all segments if heartbeat becomes silent Martin Willi 2009-09-29 16:04:51 +02:00
• d87489661c Renamed ha-sync plugin to ha Martin Willi 2009-09-29 12:56:10 +02:00
• 3c82381296 Try to send HA sync messages synchronously Martin Willi 2009-09-29 11:31:24 +02:00
• f4f394e67c Do not sync a delete for a child in a destroying IKE_SA Martin Willi 2009-09-29 11:30:44 +02:00
• 5a0a359b88 Include ICMP traffic in sync tunnel Martin Willi 2009-09-29 10:43:47 +02:00
• 874c0bd8b8 Refactored segment enabling/disabling Martin Willi 2009-09-29 10:34:04 +02:00
• 5d67259042 Use a connected UDP socket Martin Willi 2009-09-29 08:53:58 +02:00
• 06308d9ede Removed obsolete socket subclasses Martin Willi 2009-09-28 14:49:16 +02:00
• 3912fdb1ec Automatically segment cluster using periodically sent status messages Martin Willi 2009-09-28 14:31:39 +02:00
• b7f15be136 Do not enable/disable our own sync tunnel Martin Willi 2009-09-23 14:04:32 +02:00
• 9fdf5f712e Enable/disable inactive/active segments only Martin Willi 2009-09-23 10:42:05 +02:00
• 310498f3de Deactivate all active segments before shutting down Martin Willi 2009-09-22 17:10:25 +02:00
• 4e248733a8 HA kernel interface can mangle netfilter rules, currently with iptables invocation Martin Willi 2009-09-22 16:51:47 +02:00
• dbc91f7c84 Added support for kernel segment manipulation Martin Willi 2009-09-22 15:19:43 +02:00
• 6921e8d5a9 Moved segment configuration parsing to ha_sync_plugin Martin Willi 2009-09-22 14:53:03 +02:00
• 37459ea928 Propagate segment manipulation to cluster node Martin Willi 2009-09-22 14:33:38 +02:00
• 3d672d4b0a Segment manipulation in HA sync is thread save Martin Willi 2009-09-22 14:32:52 +02:00
• c573b11c55 Passing 0 to segments->(de-)activate enables/disables all segments Martin Willi 2009-09-15 16:19:39 +02:00
• 7ceaf50b05 separated auto-tunnel functionality from socket Martin Willi 2009-09-15 14:52:56 +02:00
• f5632db953 create external fifo socket only if "fifo_interface" option is set Martin Willi 2009-09-15 13:53:06 +02:00
• 47d365deef updated linuxdir include variable Martin Willi 2009-09-10 14:51:12 +02:00
• 724736ff1c updated HA sync plugin to new lifetime config Martin Willi 2009-09-10 14:42:17 +02:00
• f825238594 print "none" if not serving any segments Martin Willi 2009-06-25 11:24:18 +02:00
• a33eb8631c automatically establish a PSK authenticated SA between cluster nodes Martin Willi 2009-06-03 17:06:33 +02:00
• 80624c79d5 fixed memleak when installing synced virtual IPs Martin Willi 2009-05-29 11:02:47 +02:00
• b1d495f469 do not sync CHILD_SAs without an IKE_SA Martin Willi 2009-05-26 20:36:39 +02:00
• 5b7c0f4409 removed $Id$ from ha plugin Martin Willi 2009-04-30 17:00:08 +02:00
• 26d08a241a fixed ike_sa condition/extension parsing Martin Willi 2009-04-17 07:43:43 +00:00
• 1f32f61c87 added a copy of the linux jenkins hash to dist Martin Willi 2008-12-02 15:35:11 +00:00
• 1e977438af fixed sync of CHILD_SA delete Martin Willi 2008-12-02 15:33:01 +00:00
• 9ffcbea6f1 added HA resync option to (re-)integrate nodes to a cluster Martin Willi 2008-12-01 18:38:40 +00:00
• c81f4fa29d apply peer config during rekeying Martin Willi 2008-11-28 16:40:16 +00:00
• 34d240a6e3 manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE state Martin Willi 2008-11-28 15:45:17 +00:00
• d4113a42e9 support for IKE_SA rekeying sync Martin Willi 2008-11-28 10:32:09 +00:00
• aa98188af5 IKE_SA activation/deactivation magic using a fifo socket Martin Willi 2008-11-27 09:57:31 +00:00
• c94fe198e9 syncing of complete IKE/CHILD_SAs works Martin Willi 2008-11-20 08:51:54 +00:00
• 7999be5b0e pushing basic CHILD_SA sync data to backup node Martin Willi 2008-11-18 15:21:10 +00:00
• 765935c8f6 basic syncing of IKE_SAs recreating SAs with keymat derivation Martin Willi 2008-11-17 15:58:39 +00:00
• 190edaf527 added a dispatcher class to receive HA sync messages simple attribute parser enumerator (probably needs a cleaner implementation) Martin Willi 2008-11-13 16:01:06 +00:00
• 12ec91ba3a generating basic IKE_SA sync messages pushing to statically configured failover node Martin Willi 2008-11-13 12:46:01 +00:00
• e5e91eec29 set up basic infrastructure ha_sync plugin Martin Willi 2008-11-12 13:28:18 +00:00
• e16d76f9a4 added child_sa serialization to ha_sync plugin Martin Willi 2008-10-24 12:42:06 +00:00
• e67f5136c0 HA sync plugin stub Martin Willi 2008-10-24 08:06:22 +00:00
• e6e8eb09dd fixed ikev1/protoport-route timing Andreas Steffen 2010-04-07 13:24:58 +02:00
• c3379af391 removed whitespace Andreas Steffen 2010-04-07 13:07:11 +02:00
• ef4aa67bf7 generated new research and sales CA certs for carol and dave, respectively Andreas Steffen 2010-04-07 13:04:56 +02:00
• 0a4dc78755 Some whitespace fixes. Tobias Brunner 2010-04-06 12:56:06 +02:00
• e41932320c Explicitly unload plugins before deinitializing libhydra and libstrongswan in pluto. Tobias Brunner 2010-04-06 12:44:15 +02:00
• 894936ce9e Replaced some DBG_LIB with more specific groups. Tobias Brunner 2010-03-31 17:39:02 +02:00
• 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. Tobias Brunner 2010-03-31 17:28:46 +02:00
• 9ed6341d3f Adding support for debug groups in libstrongswan's logger. Tobias Brunner 2010-03-31 17:26:39 +02:00
• 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. Tobias Brunner 2010-03-31 17:17:02 +02:00
• 9f3df622e4 Manually loading the pluto.(n)dns* settings is not needed anymore. Tobias Brunner 2010-03-31 14:10:53 +02:00
• 7ac6060e8d Use daemon-specific config for the attr plugin. Tobias Brunner 2010-03-31 14:10:19 +02:00
• a5ec302547 Moved attr plugin from libcharon to libhydra. Tobias Brunner 2010-03-31 13:55:12 +02:00
• facf887253 Store the name of the daemon that initialized libhydra to load daemon-specific settings. Tobias Brunner 2010-03-31 13:45:05 +02:00
• e82b5755be Added pluto/whack output to 'ipsec leases'. Tobias Brunner 2010-03-31 13:20:22 +02:00
• 6bfa8e907c Added options to whack to query in-memory leases. Tobias Brunner 2010-03-31 13:10:11 +02:00
• 4db0af9080 Added function to list the leases of the in-memory pools. Tobias Brunner 2010-03-31 13:09:07 +02:00
• 4e06abe0fa Delete the in-memory IP address pools if a connection gets deleted. Tobias Brunner 2010-03-31 10:17:51 +02:00
• bd22823358 Use whack_attribute in pluto to provide in-memory IP address pools. Tobias Brunner 2010-03-30 19:10:05 +02:00
• 89715bd790 Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute. Tobias Brunner 2010-03-30 19:13:45 +02:00
• c9235353f8 Use a read-write lock in stroke_attribute to increase concurrency. Tobias Brunner 2010-03-26 17:08:14 +01:00
• fb111e5507 Make in-memory pool thread-safe. Tobias Brunner 2010-03-26 16:59:33 +01:00
• 8c9f5bad8b Migrated stroke_attribute_t to METHOD/INIT macros. Tobias Brunner 2010-03-26 16:02:24 +01:00
• ac5fb545c5 Extracted in-memory IP address pool from stroke plugin to libhydra. Tobias Brunner 2010-03-26 15:49:34 +01:00
• 84aa96e5f5 Invoke updown hook if IKE_SA delete is enforced in deleting state Martin Willi 2010-04-06 09:58:29 +00:00
• 586c137016 prolonged Research and Sales CA certs Andreas Steffen 2010-04-06 12:05:39 +02:00
• 7d00ebfb54 wait one second before running evaluations Andreas Steffen 2010-04-06 10:55:59 +02:00
• efd16e405a increase UML root file system to 700 MB Andreas Steffen 2010-04-05 20:23:20 +02:00
• d6457833ec added support of PEM output by ipsec pki --gen|pub commands to NEWS Andreas Steffen 2010-04-05 14:08:06 +02:00
• 5ee07585aa added ikev2/nat-virtual-ip scenario Andreas Steffen 2010-04-05 14:03:38 +02:00
• a287bdd46c farp scenario requires logging of arp packets Andreas Steffen 2010-04-05 14:01:29 +02:00
• eb11d1c58c added ikev2/farp scenario Andreas Steffen 2010-04-05 12:50:32 +02:00
• b49cbd68a6 added dave2 and carol2 entries to /etc/hosts Andreas Steffen 2010-04-05 12:50:07 +02:00
• 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys Andreas Steffen 2010-04-04 23:59:24 +02:00
• cea2857263 PEM encoding for GMP RSA public and private keys Andreas Steffen 2010-04-04 19:11:18 +02:00
• e3943f5559 fixed short option name Andreas Steffen 2010-04-04 10:30:08 +02:00
• b2be771ad8 fixed typo Andreas Steffen 2010-04-04 10:29:36 +02:00
• efcd3c7a63 fixed doxygen group Andreas Steffen 2010-04-03 21:55:30 +02:00
• 0dee20d958 change #define to PEM_BUILDER_H_ Andreas Steffen 2010-04-03 21:43:27 +02:00
• 980f0eccd0 Fixed use of stack local variable outside of function scope Thomas Egerer 2010-03-31 14:38:09 +02:00
• a47576bff7 Fixed undefined behavior in use of stack variable Thomas Egerer 2010-03-31 10:04:00 +02:00