Martin Willi
3ac5a0db8c
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
2008-11-05 11:29:56 +00:00
Martin Willi
e13389a7f7
got rid of deprecated create_iterator_locked()
2008-11-05 08:32:38 +00:00
Andreas Steffen
bab075b166
added support for xfrm remote kmaddress
2008-11-03 23:29:34 +00:00
Andreas Steffen
9c33987471
migrate job creates a new IKE_SA
2008-11-03 07:08:59 +00:00
Andreas Steffen
ef6d339c09
migrate_job() finds a matching child_cfg
2008-11-03 02:05:41 +00:00
Andreas Steffen
e526d22818
parse xfrm and pf_key acquire messages and subscribe to migrate messages
2008-10-31 01:43:23 +00:00
Martin Willi
a985db3ff3
reintegrated bus-refactoring branch
2008-10-14 08:52:13 +00:00
Martin Willi
aa9a300677
userland support to process notifies for new NAT mappings detected in UDP encapsulation
2008-10-07 07:55:28 +00:00
Martin Willi
a4a3e0c7dc
introduced an additional bus->signal parameter for signal specific data
...
added SIG_IKE/SIG_CHD macros for signal emitting
2008-07-18 15:51:40 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
96926b006d
using dpd actions to enforce connection state
...
dpd actions a per child-, not peer ike-sa
2008-04-11 08:14:48 +00:00
Tobias Brunner
4a6474c2c3
enabling acquire for mediated connections
2008-04-10 12:51:04 +00:00
Tobias Brunner
471f923071
fixed two other memory leaks
2008-04-03 15:13:25 +00:00
Tobias Brunner
8e91a36314
thread locking for sender and processor optimized
2008-04-03 09:19:12 +00:00
Tobias Brunner
f049b29491
securing total_threads with the mutex while destroying the processor
2008-04-02 15:28:08 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Tobias Brunner
df3462ddbe
two small fixes
2008-03-13 15:03:06 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
3895125275
removed c++ style comments
...
fixed compiler warnings
2007-12-04 10:48:27 +00:00
Martin Willi
7b36b734a4
fixed callback_job cancellation for threads waiting in the bus
2007-11-19 12:32:28 +00:00
Martin Willi
e101f162ab
refactored bus and interface to resolve threading issues (WIP)
2007-11-15 18:35:54 +00:00
Martin Willi
93fc29c6cf
fixed daemon kill before threads are spawned
2007-11-14 10:12:34 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
939e93787e
made linked lists invoke() method consistent to clone_*() and destroy_*() methods
2007-08-09 12:43:11 +00:00
Tobias Brunner
c019260e01
backports from the p2p-nat-t branch:
...
* double assignment of function ''destroy'' in some jobs
* typos
2007-07-19 14:12:19 +00:00
Martin Willi
3bc62fe70e
improved MOBIKE:
...
prefer address family already used
do not change address implicit when mobike supported
handle multiple simultaneous roaming requests more properly
proper enabling/disabling of UDP encapsulation
2007-07-03 12:32:38 +00:00
Martin Willi
17d92e9732
further MOBIKE stuff:
...
kernel properly reports network reconfiguration and informs all IKE_SAs
MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
reestablishment of IKE_SAs on network reconfiguration kinda works
not stable yet!
2007-06-21 15:25:28 +00:00
Martin Willi
26424f03c3
proper reauthentication:
...
IKE_SA is closed completely before the new is initiated,
resolves some issues when a dynamic IP is requested from a pool
2007-06-14 08:13:05 +00:00
Martin Willi
432b298e40
documentation fixes and updates
2007-06-11 12:11:41 +00:00
Martin Willi
9fe1a1ca76
introduced callback_job:
...
simple asynchronous method invocation
use daemons thread pool for all threads
proper cancellation and cleanups
cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
2007-06-11 10:57:19 +00:00
Martin Willi
bcd887781a
removed route_job, handled all in interface_manager
2007-05-16 08:49:10 +00:00
Martin Willi
a6a039aa10
simplified capability dropping
2007-05-09 13:12:06 +00:00
Martin Willi
3cd3f48428
properly implemented interface_managers initiate, terminte_[ike|child]
...
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
2007-05-09 12:33:08 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
66560f4267
reducing capabilities of the threads to a minimum
...
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
2007-05-03 14:21:22 +00:00
Martin Willi
5f088665ad
removed IKE_SA_ID (%J) printf hook, two more to go
2007-04-11 13:01:08 +00:00
Martin Willi
3b138b8422
cleaned up apidoc
...
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00