e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
73390cce24
removed unneded includes
2007-03-30 12:24:31 +00:00
373b8a607f
fixed netlink socket receiver code
...
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
2007-03-03 14:56:24 +00:00
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
2c6584c0d2
respecting source address when sending packets
2007-02-15 11:35:10 +00:00
61dd20f9e3
added address listing without getifaddrs for uclibc (only IPv4 yet)
2007-02-02 09:58:59 +00:00
d3032a9a82
renamed all static clone() functions to avoid naming conflicts with uclibc
2007-02-01 15:24:10 +00:00
4986554f1a
fixed more uClibc issues
...
should compile against a uClibc > 0.9.28 (untested)
2006-12-15 14:22:56 +00:00
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
c701e73dc1
fixed auxillary message data parsing for IPV6 socket
...
using SOL_* constants for socket level
2006-10-09 12:28:43 +00:00
a3a1b565da
fixed IPV6_PKTINFO setsockopt() to work with most kernel headers
...
replaced strerror(errno) with %m printf specifier
2006-10-09 12:14:56 +00:00
47f5027807
introduced printf() specifiers for:
...
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00
a7371600b0
proper error handling for socket creation
2006-09-18 06:44:38 +00:00
d7934d0cfc
implemented updown script to handle firewalling
2006-09-12 13:50:14 +00:00
c705698293
added raw socket filter for IPv6
2006-08-31 06:18:15 +00:00
48d9883a3e
initial support for IPv6 (more testing needed)
...
socket works (without v6 filter)
traffic selector handle IPv4/v4 cleanly
improvements in traffic selector code
kernel interface accepts v6 traffic selectors and hosts
host_t class has full IPv6 support
2006-08-30 17:12:56 +00:00
4c23a8c9ec
moved interface enumeration code to socket, where it belongs
...
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
2006-08-28 08:45:22 +00:00
92ee45a0ee
cleanups in kernel interface code
...
added proper traffic selector to string conversion
some cleanups here & there
2006-07-18 12:53:54 +00:00
e6cfe0eecc
fixed UDP decapsulation by adding inbound bypass policy for send socket
2006-07-14 12:53:06 +00:00
e3109c02ac
added IPsec bypass policy to receiving socket, allows incoming IKE traffic on host2host tunnels when using NAT
2006-07-14 08:08:55 +00:00
abba7ecb9d
further work done for simultaneous rekeying/delete
...
still some cases which cause trouble
2006-07-10 14:24:04 +00:00
c71d53ba4e
updated copyright information
2006-07-07 08:49:06 +00:00
3dd3c5f39e
redesigned IKE_SA using a transaction mechanism:
...
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
2006-07-05 10:53:20 +00:00
2f89902d07
applied new changes from NATT team
...
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
2006-06-23 14:02:30 +00:00
4b24dd2d7d
cleaner error handling on UDP encapsultion sockopt failure
2006-06-22 13:05:15 +00:00
6f51c9f184
added mysterious UDP encapsulation socket option to get encapsulation working
2006-06-22 12:57:49 +00:00
1396815afb
first merge of NATT code
2006-06-22 06:36:28 +00:00
fa32cd3c47
debug and logging improvements
2006-06-13 10:01:04 +00:00
fc0afb6810
created IPv6 environment
2006-06-06 05:41:21 +00:00
6f2aba1322
- fixed some memleaks/freebugs
...
- leak detective works almost usable now (?!)
2006-05-31 14:13:26 +00:00
b5e1560659
- applied andreas's patch
...
- logger output improvements
- testin gupdates
- and a lot more
2006-05-18 06:02:28 +00:00
f2c2d395ff
- introduced autotools
...
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
2006-05-16 14:24:03 +00:00
b8577029d1
2006-05-10 08:02:49 +00:00
Martin Willi