Andreas Steffen
|
7a915d627d
|
completed migration of MIPv6 connections
|
2008-11-16 21:19:58 +00:00 |
Andreas Steffen
|
ad60c249b6
|
show TRANSPORT_PROXY mode in ipsec status
|
2008-11-16 21:19:17 +00:00 |
Martin Willi
|
21bf86f740
|
using aligned buffers for netlink
|
2008-11-14 14:23:11 +00:00 |
Martin Willi
|
32ec3c1a8b
|
fallback to reauthentication if peer does not support CHILD_SA rekeying
|
2008-11-14 14:05:47 +00:00 |
Martin Willi
|
dad8eceea3
|
fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS
|
2008-11-14 13:58:16 +00:00 |
Martin Willi
|
8d50c19833
|
also use correct encap parameter in PF_KEY
|
2008-11-14 13:15:26 +00:00 |
Martin Willi
|
fd2ebf0cf9
|
fixed encap enabling in xfrm (using new encap state, not the old one)
|
2008-11-14 13:12:07 +00:00 |
Martin Willi
|
fb6c8591a3
|
do not use a route if outgoing interface is down
other cleanups
|
2008-11-14 13:04:22 +00:00 |
Martin Willi
|
a65e1c5c3a
|
rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!
|
2008-11-14 10:30:26 +00:00 |
Martin Willi
|
f5812086f8
|
do not use public interface for functions which are local anyway
|
2008-11-14 09:38:49 +00:00 |
Martin Willi
|
65c907cd71
|
reset IKE_SA on bus during child_sa destruction
|
2008-11-14 08:38:53 +00:00 |
Andreas Steffen
|
1ad0bacf5b
|
adapted evaltest.dat to changed debug output
|
2008-11-13 21:38:16 +00:00 |
Martin Willi
|
bbbe605fe3
|
updated API doc for socket.h
|
2008-11-13 07:48:27 +00:00 |
Martin Willi
|
8120943583
|
ported socket enumerator to raw-socket.c
some cleanups in socket.c
|
2008-11-13 07:15:45 +00:00 |
Andreas Steffen
|
84bec926a3
|
added type=transport_proxy and installpolicy=yes|no to man page
|
2008-11-13 06:29:53 +00:00 |
Andreas Steffen
|
509e07c5bc
|
added MIPv6 functionality to NEWS
|
2008-11-13 05:46:51 +00:00 |
Andreas Steffen
|
cd49134837
|
corrected unwanted deletion in comment
|
2008-11-12 22:57:46 +00:00 |
Martin Willi
|
ce42db0921
|
BEET mode might want forwarding policies
|
2008-11-12 16:47:19 +00:00 |
Martin Willi
|
e09481fb91
|
removed some obsolete includes
|
2008-11-12 16:10:34 +00:00 |
Martin Willi
|
faf9569fdb
|
moved ike_initiator flag to IKE_SAs condition bitfield
|
2008-11-12 16:07:17 +00:00 |
Martin Willi
|
b8cbb6451c
|
ported some hard-to-merge cherries back to trunk :-/
shame, svn, shame: this was ways to complicated
we should consider a switch to git...
|
2008-11-12 15:09:24 +00:00 |
Martin Willi
|
9fa5c75f48
|
fixing keylength bug at the right place:
we usually don't touch output parameters if operations fails
|
2008-11-12 08:27:48 +00:00 |
Andreas Steffen
|
137484895a
|
improved fix
|
2008-11-12 04:08:30 +00:00 |
Andreas Steffen
|
dbc277d908
|
fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material
|
2008-11-12 04:02:10 +00:00 |
Martin Willi
|
479f295049
|
fixed compiler warnings issued by:
gcc 4.3
curl.h gcc type-checking
glibc with enabled FORTIFY_SOURCE checking
|
2008-11-11 18:37:19 +00:00 |
Martin Willi
|
3d2dbebd70
|
#defing out compress algs to avoid compiler warning
|
2008-11-11 18:35:10 +00:00 |
Martin Willi
|
d94cadd69a
|
updated method signature of add_policy
|
2008-11-11 18:33:48 +00:00 |
Martin Willi
|
4a537c9011
|
fixed compilation of medcli plugin
|
2008-11-11 15:20:25 +00:00 |
Martin Willi
|
b252024c3e
|
added missing include for ULONG_MAX
|
2008-11-11 15:19:13 +00:00 |
Tobias Brunner
|
7bdc931e6c
|
announcing the kernel plugins
|
2008-11-11 13:35:51 +00:00 |
Tobias Brunner
|
f967db312d
|
fixing mediation extension
|
2008-11-11 13:12:05 +00:00 |
Tobias Brunner
|
476c61fdcd
|
some typos
|
2008-11-11 13:11:44 +00:00 |
Martin Willi
|
73937bd838
|
added some NEWS for 4.2.9
|
2008-11-11 12:52:55 +00:00 |
Martin Willi
|
4252938811
|
dynamic logging configuration through strongswan.conf
fallback to existing ipsec.conf/stroke loglevel configuration
|
2008-11-11 10:52:37 +00:00 |
Martin Willi
|
dbb24102d4
|
fixed compiler warning
|
2008-11-11 10:29:31 +00:00 |
Tobias Brunner
|
e7c27b4f3f
|
fixing a memory leak
|
2008-11-11 09:56:47 +00:00 |
Tobias Brunner
|
ea625fabf9
|
merging kernel_klips plugin back into trunk
|
2008-11-11 09:22:00 +00:00 |
Andreas Steffen
|
c117f24e61
|
renamed proxy to proxy_mode in stroke_msg.h
|
2008-11-11 07:28:52 +00:00 |
Andreas Steffen
|
e0316183f8
|
deleted obsolete parameter descriptions
|
2008-11-11 07:11:30 +00:00 |
Andreas Steffen
|
d487b4b727
|
preliminary support of Mobile IPv6
|
2008-11-11 06:37:37 +00:00 |
Andreas Steffen
|
91db979cdd
|
added the MIPv6 options use_proxy_mode and install_policy
|
2008-11-11 06:29:25 +00:00 |
Andreas Steffen
|
8ac4651ac3
|
cosmetics in debug output
|
2008-11-11 06:19:37 +00:00 |
Martin Willi
|
c198fc5548
|
whitelisting localtime_r
|
2008-11-10 16:44:27 +00:00 |
Martin Willi
|
a9f081e5ad
|
make load_tester more strict to use it along stroke
|
2008-11-10 16:43:15 +00:00 |
Martin Willi
|
f821bfb2b3
|
fixed leak in host_create_from_string("%any")
|
2008-11-10 16:42:05 +00:00 |
Martin Willi
|
ae42288a81
|
fixed some minor issues found when using -DFORTIFY_SOURCE=2
|
2008-11-10 15:45:19 +00:00 |
Martin Willi
|
e9a0d3a339
|
iterations = 0 for infinite iterations
|
2008-11-10 10:10:51 +00:00 |
Martin Willi
|
6c3f40f9a0
|
added PEM version of keys
|
2008-11-10 10:09:44 +00:00 |
Martin Willi
|
c9ef4cee46
|
settings section enumeration
printf style key lookup
|
2008-11-07 15:08:53 +00:00 |
Martin Willi
|
89d05ab5fb
|
fixed copy/paste error
|
2008-11-07 14:48:54 +00:00 |