Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• a095243f60 add priority management for kernel policy let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups Martin Willi 2006-09-08 13:10:52 +00:00
• 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters Martin Willi 2006-09-08 06:12:02 +00:00
• a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes Martin Willi 2006-09-05 14:07:25 +00:00
• da8ab11e91 fixed a at-least-one-year-old bug which caused crashed in the scheduler Martin Willi 2006-08-31 06:48:10 +00:00
• c705698293 added raw socket filter for IPv6 Martin Willi 2006-08-31 06:18:15 +00:00
• 053842f4e7 implemented NAT detection for IPv6 Martin Willi 2006-08-31 06:17:41 +00:00
• 1f7fd2ced8 removed unneeded constructor Martin Willi 2006-08-31 06:16:52 +00:00
• 48d9883a3e initial support for IPv6 (more testing needed) socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support Martin Willi 2006-08-30 17:12:56 +00:00
• 51d4876814 added stddef.h include for compilers which do not support the offsetof() directive Martin Willi 2006-08-28 09:02:51 +00:00
• 4c23a8c9ec moved interface enumeration code to socket, where it belongs query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" Martin Willi 2006-08-28 08:45:22 +00:00
• 834b2ce2e2 version bump of UML kernel to 2.6.17.11 Andreas Steffen 2006-08-25 09:25:12 +00:00
• fa8d578d94 fixed crash bug when doing "ipsec down" with an unknown connection Martin Willi 2006-08-25 09:19:42 +00:00
• 9be547c0ed added name property in CHILD_SA, allows proper status output Martin Willi 2006-08-25 09:07:37 +00:00
• 7106403bd8 Martin Willi 2006-08-25 07:42:48 +00:00
• c3e7aeb102 fixed bug which prevented port float when nat is detected Martin Willi 2006-08-25 07:37:22 +00:00
• 8ae6a48f94 version bumps Andreas Steffen 2006-08-25 07:30:29 +00:00
• b425d99867 'sha' and 'sha1' are now treated as synonyms Andreas Steffen 2006-08-23 12:07:15 +00:00
• 3dc16958dd 'sha' and 'sha1' are now treated as synonyms Andreas Steffen 2006-08-23 12:07:07 +00:00
• a1310b6b92 updated Changelog and other docs Martin Willi 2006-08-23 11:48:33 +00:00
• d03ab568a6 fixed rekeying behavior when proposing an inacceptable DH group (INVALID_KE_PAYLOAD) Martin Willi 2006-08-23 09:25:41 +00:00
• 3183006de2 implement proper handling of most simultaneous IKE_SA rekeying cases Martin Willi 2006-08-23 07:30:43 +00:00
• c3f97102f1 version bump to 4.0.3 Andreas Steffen 2006-08-02 12:33:26 +00:00
• f698448ea3 implemented proper refcounting using atomic operations Martin Willi 2006-07-28 09:45:18 +00:00
• fe04e93a8b implemented IKE_SA rekeying uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! Martin Willi 2006-07-27 12:18:40 +00:00
• 45f76a7ddd added possibility to route CHILD_SAs, without to set them up support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires Martin Willi 2006-07-21 13:31:53 +00:00
• c0593835f4 reuse an existing IKE_SA to set up additional CHILD_SAs Martin Willi 2006-07-20 14:57:49 +00:00
• 8dfbe71b34 introduced refcounting on policy and connections aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors Martin Willi 2006-07-20 10:09:32 +00:00
• 92ee45a0ee cleanups in kernel interface code added proper traffic selector to string conversion some cleanups here & there Martin Willi 2006-07-18 12:53:54 +00:00
• 623d3dcf78 X.509 certificate trust path verification Andreas Steffen 2006-07-14 13:21:19 +00:00
• a9ae2c01ed added Andreas Steffen 2006-07-14 12:58:47 +00:00
• e6cfe0eecc fixed UDP decapsulation by adding inbound bypass policy for send socket Martin Willi 2006-07-14 12:53:06 +00:00
• 106e9fc6f8 updated mixed tests to new charon output Martin Willi 2006-07-14 12:29:26 +00:00
• bf4df11f44 corrected DPD entry Andreas Steffen 2006-07-14 11:51:45 +00:00
• ead36455a9 reenabled module tests for charon Martin Willi 2006-07-14 11:16:49 +00:00
• b34be51cef fixed bug which erroneously detected KE payload when rekeying Martin Willi 2006-07-14 08:18:48 +00:00
• e3109c02ac added IPsec bypass policy to receiving socket, allows incoming IKE traffic on host2host tunnels when using NAT Martin Willi 2006-07-14 08:08:55 +00:00
• 325e497798 improved logging on verify errors for some payloads enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload Martin Willi 2006-07-13 12:49:35 +00:00
• 7af345e11e added test cases from NAT team updated all IKEv2 tests to work with new status output Martin Willi 2006-07-13 12:45:18 +00:00
• 1279eda042 added tcpdumpcount function from NATT guys added possibility to mount the strongswan tree into all UMLs added script for installing from shared tree in all UMLs added script to shut down all UMLs properly Martin Willi 2006-07-13 12:43:52 +00:00
• be247b817b removed in favour of tests from NAT team Martin Willi 2006-07-13 12:00:36 +00:00
• 4c04f30a51 fixed CREATE_CHILD_SA transaction dispatching Martin Willi 2006-07-13 08:51:24 +00:00
• bcb95ced3d added CHILD_SA states, which allows us to detect further simultaneous transactions reimplemented the buggy message id handling Martin Willi 2006-07-13 08:26:54 +00:00
• cb5c41cde9 updated some inline docs Martin Willi 2006-07-12 14:08:52 +00:00
• 0d379627de fixed crypter/signer in/out to conform with standard Martin Willi 2006-07-12 14:08:13 +00:00
• b68afb7bd8 fixed payload order Martin Willi 2006-07-12 14:07:30 +00:00
• a846ffdb48 added message id logging Martin Willi 2006-07-12 14:06:25 +00:00
• e7356568b2 added all currently known notify payload types Martin Willi 2006-07-12 14:05:57 +00:00
• aeeb4f4f97 added policy cache to kernel interface allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying Martin Willi 2006-07-12 11:42:36 +00:00
• 269f7f448b leak detective blanks memory on free & alloc, allows further membug detection Martin Willi 2006-07-12 11:15:31 +00:00
• 4c19900ce8 code cleanups Martin Willi 2006-07-12 11:13:48 +00:00
• c361cc8c51 identification_t.matches() supports multiple wildcard counts Andreas Steffen 2006-07-11 06:12:45 +00:00
• 40f29769fa identification_t.matches() supports multiple wildcard counts Andreas Steffen 2006-07-11 06:11:59 +00:00
• abba7ecb9d further work done for simultaneous rekeying/delete still some cases which cause trouble Martin Willi 2006-07-10 14:24:04 +00:00
• c5d2d7c023 fixed compiler warnings in parser when using -O2 Martin Willi 2006-07-07 12:48:27 +00:00
• af2faa1f1d reenabled check_expiry Martin Willi 2006-07-07 12:25:25 +00:00
• c71d53ba4e updated copyright information Martin Willi 2006-07-07 08:49:06 +00:00
• 698d774918 reimplemented CHILD_SA rekeying & delete no simultanous transaction with CHILD_SAs yet! Martin Willi 2006-07-07 07:04:07 +00:00
• 54da7eb962 removed NAT_TRAVERSAL and VIRTUAL_IP compile options Andreas Steffen 2006-07-07 05:51:54 +00:00
• 34ee2a46f4 removed NAT_TRAVERSAL compile option Andreas Steffen 2006-07-07 05:51:20 +00:00
• dc33fee770 removed NAT_TRAVERSAL and VIRTUAL_IP compile options Andreas Steffen 2006-07-07 05:50:02 +00:00
• ad3dab0520 added Andreas Steffen 2006-07-07 05:44:45 +00:00
• efa40c11e4 updated NEWS Martin Willi 2006-07-05 14:13:45 +00:00
• d109b48968 added support for leftprotoport and rightprotoport Martin Willi 2006-07-05 13:13:07 +00:00
• 5f0eb96fc4 improved CHILD_SA output for "ipsec statusall" Martin Willi 2006-07-05 13:11:55 +00:00
• b190424716 updated whitelist (getprotobynumber) Martin Willi 2006-07-05 13:10:47 +00:00
• 3dd3c5f39e redesigned IKE_SA using a transaction mechanism: removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet Martin Willi 2006-07-05 10:53:20 +00:00
• b12af2ead6 fixed compiler warnings Martin Willi 2006-07-05 10:09:42 +00:00
• 57d02978cf made thread ids unsigned again, to avoid negative thread ids on some systems Martin Willi 2006-07-04 13:30:49 +00:00
• 1135f79898 fixed memleak when initiating a connection already up Martin Willi 2006-07-04 13:29:16 +00:00
• 318dc7b6c4 updated leak detective whitelist Martin Willi 2006-07-04 13:26:20 +00:00
• f141214e64 applied latest NATT patch with some fixes and cleanups Martin Willi 2006-07-04 13:25:00 +00:00
• 343ae15214 test currently without firewall Andreas Steffen 2006-07-04 06:54:53 +00:00
• ef9e55def4 added Andreas Steffen 2006-07-04 06:51:58 +00:00
• 5061a2af1a added Andreas Steffen 2006-07-04 06:13:54 +00:00
• 5fc1577728 added Andreas Steffen 2006-07-04 06:13:33 +00:00
• 20f29a359e removed Andreas Steffen 2006-07-04 06:13:07 +00:00
• 1a8a163630 removed version information from ipsec.conf Andreas Steffen 2006-07-04 06:12:10 +00:00
• a642cbe3ae log entries start with lowcercase character Andreas Steffen 2006-07-04 06:11:35 +00:00
• fe98a03ff1 restored lost IKEv2 packet suppression Andreas Steffen 2006-07-03 14:39:57 +00:00
• 6981aca04f added USE_LEAK_DETECTIVE option Andreas Steffen 2006-07-03 08:36:47 +00:00
• 427088f004 fixed natd_hash memory leak Andreas Steffen 2006-07-03 08:34:34 +00:00
• 6db2ac30c7 tests with subdirectory structure Andreas Steffen 2006-07-03 07:11:30 +00:00
• 92069df82f removed tests Andreas Steffen 2006-07-03 07:10:25 +00:00
• d9a883c337 introduced subdirectory structure Andreas Steffen 2006-07-03 07:10:17 +00:00
• 971218c3ae support of cert payloads Andreas Steffen 2006-07-03 06:27:45 +00:00
• 1d390631d7 lowercase log entries Andreas Steffen 2006-07-03 06:26:06 +00:00
• 830cc85298 distributed by ITA Andreas Steffen 2006-07-03 06:24:54 +00:00
• e5382ce736 added support of updown parameter Andreas Steffen 2006-07-03 06:22:43 +00:00
• 5c149670df generation of default key Andreas Steffen 2006-07-03 06:21:56 +00:00
• 0e3cb317e2 cosmetics Andreas Steffen 2006-07-03 06:21:40 +00:00
• b17e4d2bfd added support of updown parameter Andreas Steffen 2006-07-03 06:21:14 +00:00
• 7fa242410a version bump to 4.0.2 Andreas Steffen 2006-06-28 11:09:14 +00:00
• 6f74bfd6ac added X.509 trust chain verification Andreas Steffen 2006-06-27 08:48:28 +00:00
• c01d911201 version bump to 4.0.2 Andreas Steffen 2006-06-27 08:47:03 +00:00
• dd50707e4f ESP packet size changed Andreas Steffen 2006-06-27 07:08:37 +00:00
• cfd8b27f78 fixed bad_proposal_syntax bug Andreas Steffen 2006-06-27 07:07:44 +00:00
• 2f89902d07 applied new changes from NATT team DPD only done when no IPsec and IKE traffic processed minor changes here and there Martin Willi 2006-06-23 14:02:30 +00:00
• 2891590b05 some message code cleanups Martin Willi 2006-06-23 14:00:15 +00:00
• eecb2da87d fixed identification_t clone to apply function pointers Martin Willi 2006-06-23 13:20:17 +00:00
• 4b24dd2d7d cleaner error handling on UDP encapsultion sockopt failure Martin Willi 2006-06-22 13:05:15 +00:00