Martin Willi
02b3ec0a10
implemented address change notification (for MOBIKE)
...
implemented up to date address list cache to list interfaces
2007-06-14 15:16:15 +00:00
Martin Willi
fede28be8b
fixed memleak when initiating to %any
2007-06-14 08:44:19 +00:00
Martin Willi
04f4e82d53
added missing files to the last commit
2007-06-14 08:17:23 +00:00
Martin Willi
26424f03c3
proper reauthentication:
...
IKE_SA is closed completely before the new is initiated,
resolves some issues when a dynamic IP is requested from a pool
2007-06-14 08:13:05 +00:00
Martin Willi
424e0c467e
ported interfaces to new threading functions (incomplete)
2007-06-11 14:24:32 +00:00
Martin Willi
432b298e40
documentation fixes and updates
2007-06-11 12:11:41 +00:00
Martin Willi
9fe1a1ca76
introduced callback_job:
...
simple asynchronous method invocation
use daemons thread pool for all threads
proper cancellation and cleanups
cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
2007-06-11 10:57:19 +00:00
Andreas Steffen
ad8c6c60dc
moved assignment of CERT_UNKNOWN
2007-05-25 14:04:39 +00:00
Andreas Steffen
3f9834a491
log trust pathlen
2007-05-25 11:41:06 +00:00
Andreas Steffen
89eeedc243
included a certificate label in the is_trusted() method
2007-05-25 11:10:35 +00:00
Andreas Steffen
f44dbc639b
DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor
2007-05-25 08:29:35 +00:00
Andreas Steffen
13b872ebd2
set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification
2007-05-25 08:21:27 +00:00
Martin Willi
1f2a0f8098
removed paranoid module checking
2007-05-25 05:45:41 +00:00
Martin Willi
1fa9bdc4fb
added compatibility names (pluto) for sha2 algorithms (sha2_256, ...)
2007-05-25 05:44:53 +00:00
Martin Willi
76042f8471
proper thread cancellation when using the charon->interfaces
2007-05-23 09:08:13 +00:00
Martin Willi
0f6b068259
fixed crash when using 0.0.0.0/0 subnets
2007-05-23 06:33:22 +00:00
Martin Willi
b1450b48a0
removed misleading warning when rekeying
2007-05-23 06:32:41 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Martin Willi
a06c068191
fixed memleak
2007-05-22 09:38:42 +00:00
Martin Willi
905438735a
using local address as gateway in installed routes
2007-05-22 07:47:16 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Andreas Steffen
3388e7674d
fixed nextUpdate and until behaviour in the non-strict case
2007-05-19 19:46:13 +00:00
Andreas Steffen
6e04f25313
support of CA-based ipsec policies
2007-05-18 12:25:37 +00:00
Andreas Steffen
889c2ded1c
output of eap_type_names requires %N format
2007-05-18 10:14:01 +00:00
Andreas Steffen
ec3c02a303
added set_other_ca() and get_other_ca()
2007-05-17 17:55:29 +00:00
Andreas Steffen
7d26a0ee03
added set_other_ca() and get_other_ca()
2007-05-17 17:55:02 +00:00
Martin Willi
bcd887781a
removed route_job, handled all in interface_manager
2007-05-16 08:49:10 +00:00
Martin Willi
ce27ac8012
routing/unrouting through interface
2007-05-16 08:32:15 +00:00
Andreas Steffen
9b6591e796
authentication failure is handled in ike_auth.c
2007-05-15 19:05:26 +00:00
Andreas Steffen
16c72c0c4f
cosmetics
2007-05-15 19:04:15 +00:00
Andreas Steffen
8a664830d0
cosmetics
2007-05-15 19:03:23 +00:00
Andreas Steffen
df9fbd2c64
adapted authentication failure text to those in the authenticators
2007-05-15 14:52:44 +00:00
Andreas Steffen
ca78602304
verification of locally loaded peer certificates
2007-05-15 14:51:04 +00:00
Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Andreas Steffen
b17e0db372
cosmetics
2007-05-15 12:45:19 +00:00
Martin Willi
1387e64af1
working dummy for NetworkManager DBUS interface
...
more a tech demo
2007-05-14 13:22:04 +00:00
Martin Willi
a6a039aa10
simplified capability dropping
2007-05-09 13:12:06 +00:00
Martin Willi
3cd3f48428
properly implemented interface_managers initiate, terminte_[ike|child]
...
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
2007-05-09 12:33:08 +00:00
Martin Willi
d08b27799a
properly ignoring signals rised by a thread which is in listening state
2007-05-08 12:58:33 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a4a3884c83
extended interface_manager (more work needed here)
2007-05-03 14:22:52 +00:00
Martin Willi
586b7474a2
allow to have listening state TRUE while sending singal ourself
2007-05-03 14:22:15 +00:00
Martin Willi
66560f4267
reducing capabilities of the threads to a minimum
...
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
2007-05-03 14:21:22 +00:00
Martin Willi
0ccb275a93
added more API documentation to backends/interfaces
2007-04-30 10:23:01 +00:00
Andreas Steffen
9c53c47bde
added interface.h
2007-04-27 21:29:31 +00:00
Andreas Steffen
42577f4062
fixed casting
2007-04-27 21:28:54 +00:00
Andreas Steffen
0f00a094b3
added writeable_backend.h
2007-04-27 20:58:45 +00:00
Andreas Steffen
bc1214096b
fixed typo
2007-04-27 18:13:57 +00:00
Martin Willi
a84fb01b96
restructuring of configuration backends
...
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi
594e830eb7
forcing proper autoload of af_key kernel module in charon
2007-04-27 07:43:42 +00:00
Martin Willi