denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,311 Commits 1 Branch 0 Tags
391abda0828ea4d7bd1b9e9f81ff7b3108e65c4d
Commit Graph
33 Commits
Author SHA1 Message Date
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets 
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
 2007-11-26 11:20:00 +00:00
Martin Willi 594e830eb7 forcing proper autoload of af_key kernel module in charon 2007-04-27 07:43:42 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi 73390cce24 removed unneded includes 2007-03-30 12:24:31 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00
Martin Willi 2c6584c0d2 respecting source address when sending packets 2007-02-15 11:35:10 +00:00
Martin Willi 61dd20f9e3 added address listing without getifaddrs for uclibc (only IPv4 yet) 2007-02-02 09:58:59 +00:00
Martin Willi 4986554f1a fixed more uClibc issues 
should compile against a uClibc > 0.9.28 (untested)
 2006-12-15 14:22:56 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi c701e73dc1 fixed auxillary message data parsing for IPV6 socket 
using SOL_* constants for socket level
 2006-10-09 12:28:43 +00:00
Martin Willi a3a1b565da fixed IPV6_PKTINFO setsockopt() to work with most kernel headers 
replaced strerror(errno) with %m printf specifier
 2006-10-09 12:14:56 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Martin Willi a7371600b0 proper error handling for socket creation 2006-09-18 06:44:38 +00:00
Martin Willi d7934d0cfc implemented updown script to handle firewalling 2006-09-12 13:50:14 +00:00
Martin Willi c705698293 added raw socket filter for IPv6 2006-08-31 06:18:15 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 4c23a8c9ec moved interface enumeration code to socket, where it belongs 
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
 2006-08-28 08:45:22 +00:00
Martin Willi 92ee45a0ee cleanups in kernel interface code 
added proper traffic selector to string conversion
some cleanups here & there
 2006-07-18 12:53:54 +00:00
Martin Willi e6cfe0eecc fixed UDP decapsulation by adding inbound bypass policy for send socket 2006-07-14 12:53:06 +00:00
Martin Willi e3109c02ac added IPsec bypass policy to receiving socket, allows incoming IKE traffic on host2host tunnels when using NAT 2006-07-14 08:08:55 +00:00
Martin Willi c71d53ba4e updated copyright information 2006-07-07 08:49:06 +00:00
Martin Willi 3dd3c5f39e redesigned IKE_SA using a transaction mechanism: 
removed old state machine
  reimplemented IKE_SA setup and delete
  implemented dead peer detection
  implemented keep-alives
  a lot of fixes
  no rekeying yet
 2006-07-05 10:53:20 +00:00
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi 4b24dd2d7d cleaner error handling on UDP encapsultion sockopt failure 2006-06-22 13:05:15 +00:00
Martin Willi 6f51c9f184 added mysterious UDP encapsulation socket option to get encapsulation working 2006-06-22 12:57:49 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi b5e1560659 - applied andreas's patch 
- logger output improvements
  - testin gupdates
  - and a lot more
 2006-05-18 06:02:28 +00:00
Martin Willi b8577029d1 2006-05-10 08:02:49 +00:00