Commit Graph

3158 Commits

Author SHA1 Message Date
Andreas Steffen 7a915d627d completed migration of MIPv6 connections 2008-11-16 21:19:58 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Martin Willi 21bf86f740 using aligned buffers for netlink 2008-11-14 14:23:11 +00:00
Martin Willi 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying 2008-11-14 14:05:47 +00:00
Martin Willi dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS 2008-11-14 13:58:16 +00:00
Martin Willi 8d50c19833 also use correct encap parameter in PF_KEY 2008-11-14 13:15:26 +00:00
Martin Willi fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) 2008-11-14 13:12:07 +00:00
Martin Willi fb6c8591a3 do not use a route if outgoing interface is down
other cleanups
2008-11-14 13:04:22 +00:00
Martin Willi a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! 2008-11-14 10:30:26 +00:00
Martin Willi f5812086f8 do not use public interface for functions which are local anyway 2008-11-14 09:38:49 +00:00
Martin Willi 65c907cd71 reset IKE_SA on bus during child_sa destruction 2008-11-14 08:38:53 +00:00
Andreas Steffen 1ad0bacf5b adapted evaltest.dat to changed debug output 2008-11-13 21:38:16 +00:00
Martin Willi bbbe605fe3 updated API doc for socket.h 2008-11-13 07:48:27 +00:00
Martin Willi 8120943583 ported socket enumerator to raw-socket.c
some cleanups in socket.c
2008-11-13 07:15:45 +00:00
Andreas Steffen 84bec926a3 added type=transport_proxy and installpolicy=yes|no to man page 2008-11-13 06:29:53 +00:00
Andreas Steffen 509e07c5bc added MIPv6 functionality to NEWS 2008-11-13 05:46:51 +00:00
Andreas Steffen cd49134837 corrected unwanted deletion in comment 2008-11-12 22:57:46 +00:00
Martin Willi ce42db0921 BEET mode might want forwarding policies 2008-11-12 16:47:19 +00:00
Martin Willi e09481fb91 removed some obsolete includes 2008-11-12 16:10:34 +00:00
Martin Willi faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield 2008-11-12 16:07:17 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
2008-11-12 15:09:24 +00:00
Martin Willi 9fa5c75f48 fixing keylength bug at the right place:
we usually don't touch output parameters if operations fails
2008-11-12 08:27:48 +00:00
Andreas Steffen 137484895a improved fix 2008-11-12 04:08:30 +00:00
Andreas Steffen dbc277d908 fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material 2008-11-12 04:02:10 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by:
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
2008-11-11 18:37:19 +00:00
Martin Willi 3d2dbebd70 #defing out compress algs to avoid compiler warning 2008-11-11 18:35:10 +00:00
Martin Willi d94cadd69a updated method signature of add_policy 2008-11-11 18:33:48 +00:00
Martin Willi 4a537c9011 fixed compilation of medcli plugin 2008-11-11 15:20:25 +00:00
Martin Willi b252024c3e added missing include for ULONG_MAX 2008-11-11 15:19:13 +00:00
Tobias Brunner 7bdc931e6c announcing the kernel plugins 2008-11-11 13:35:51 +00:00
Tobias Brunner f967db312d fixing mediation extension 2008-11-11 13:12:05 +00:00
Tobias Brunner 476c61fdcd some typos 2008-11-11 13:11:44 +00:00
Martin Willi 73937bd838 added some NEWS for 4.2.9 2008-11-11 12:52:55 +00:00
Martin Willi 4252938811 dynamic logging configuration through strongswan.conf
fallback to existing ipsec.conf/stroke loglevel configuration
2008-11-11 10:52:37 +00:00
Martin Willi dbb24102d4 fixed compiler warning 2008-11-11 10:29:31 +00:00
Tobias Brunner e7c27b4f3f fixing a memory leak 2008-11-11 09:56:47 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen e0316183f8 deleted obsolete parameter descriptions 2008-11-11 07:11:30 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Andreas Steffen 91db979cdd added the MIPv6 options use_proxy_mode and install_policy 2008-11-11 06:29:25 +00:00
Andreas Steffen 8ac4651ac3 cosmetics in debug output 2008-11-11 06:19:37 +00:00
Martin Willi c198fc5548 whitelisting localtime_r 2008-11-10 16:44:27 +00:00
Martin Willi a9f081e5ad make load_tester more strict to use it along stroke 2008-11-10 16:43:15 +00:00
Martin Willi f821bfb2b3 fixed leak in host_create_from_string("%any") 2008-11-10 16:42:05 +00:00
Martin Willi ae42288a81 fixed some minor issues found when using -DFORTIFY_SOURCE=2 2008-11-10 15:45:19 +00:00
Martin Willi e9a0d3a339 iterations = 0 for infinite iterations 2008-11-10 10:10:51 +00:00
Martin Willi 6c3f40f9a0 added PEM version of keys 2008-11-10 10:09:44 +00:00
Martin Willi c9ef4cee46 settings section enumeration
printf style key lookup
2008-11-07 15:08:53 +00:00
Martin Willi 89d05ab5fb fixed copy/paste error 2008-11-07 14:48:54 +00:00