Andreas Steffen
|
fb34475b5c
|
consistent logging of IKE and CHILD SAs
|
2008-07-21 12:47:59 +00:00 |
Martin Willi
|
0a625fde3e
|
pool performance testing
|
2008-07-21 11:17:20 +00:00 |
Martin Willi
|
6b64fe2684
|
loading unit-tester plugin as the last one
|
2008-07-21 11:16:07 +00:00 |
Martin Willi
|
c7314e68ab
|
reverted bus to non-recursive mutex due instability
|
2008-07-21 11:15:16 +00:00 |
Martin Willi
|
fc861b0b7e
|
added a driver type getter for database implementations
|
2008-07-21 11:13:06 +00:00 |
Martin Willi
|
a4a3e0c7dc
|
introduced an additional bus->signal parameter for signal specific data
added SIG_IKE/SIG_CHD macros for signal emitting
|
2008-07-18 15:51:40 +00:00 |
Martin Willi
|
2f725443e5
|
removed testing app, this is scriptable with irdumm now
|
2008-07-18 12:14:43 +00:00 |
Martin Willi
|
a98793adfe
|
allow but filter recursive listener invocation
|
2008-07-18 11:05:01 +00:00 |
Martin Willi
|
1082b06121
|
fixed compiler warning
|
2008-07-18 10:54:49 +00:00 |
Martin Willi
|
12b1c1a1bc
|
extended UCI plugin by a simple control interface using a fifo
|
2008-07-18 10:34:44 +00:00 |
Andreas Steffen
|
bb7b613b83
|
eliminated bashisms in _updown scripts
|
2008-07-18 10:04:40 +00:00 |
Martin Willi
|
bd07b59079
|
avoid heap allocation in bus->signal for performance reasons
|
2008-07-17 11:45:58 +00:00 |
Martin Willi
|
5353f22ed7
|
fixed potential segfault in resolve_hosts
|
2008-07-17 11:06:31 +00:00 |
Martin Willi
|
d61d1913e1
|
ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression
|
2008-07-17 08:25:34 +00:00 |
Martin Willi
|
7ca49551c8
|
do not distinguish different policy protocols in userland cache
|
2008-07-16 12:33:19 +00:00 |
Martin Willi
|
7b9e1ff0fd
|
do not complain about existing routes
|
2008-07-16 12:30:47 +00:00 |
Andreas Steffen
|
08ab369b8c
|
included Thomas in copyright statement
|
2008-07-16 12:28:29 +00:00 |
Martin Willi
|
8384cfa338
|
build dumm with leak ./configure
|
2008-07-16 11:54:44 +00:00 |
Martin Willi
|
7beea2e99f
|
fixed acquire-delay bug by:
installing policies before states
updating policies if protocol has changed
|
2008-07-16 11:51:37 +00:00 |
Andreas Steffen
|
519e87b078
|
updated copyright statement
|
2008-07-16 10:17:04 +00:00 |
Andreas Steffen
|
872aa6ea51
|
fixed bashism in ipsec.in
|
2008-07-16 06:59:08 +00:00 |
Andreas Steffen
|
326bfd0450
|
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
|
2008-07-15 21:35:55 +00:00 |
Andreas Steffen
|
de5f70e74d
|
typo
|
2008-07-15 15:31:34 +00:00 |
Andreas Steffen
|
eb0cc33886
|
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
|
2008-07-15 15:28:00 +00:00 |
Martin Willi
|
66d4745f8e
|
ported patch to final 2.6.26 release, including UML Makefile fixes
|
2008-07-15 14:41:12 +00:00 |
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
Martin Willi
|
ef3f717bfe
|
reverted [4125],[4166], reimplemented the proper way
|
2008-07-11 08:54:56 +00:00 |
Martin Willi
|
6b5d95919c
|
setting ike_sa on bus in checkout_new
|
2008-07-11 08:47:18 +00:00 |
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
Martin Willi
|
e7991a2eef
|
do a route lookup to allow routing of left=%any connections
|
2008-07-09 14:16:19 +00:00 |
Martin Willi
|
6c652e6b55
|
added /usr/local/[s]bin to uml exec path
|
2008-07-09 12:39:11 +00:00 |
Martin Willi
|
ddf944be3e
|
loading ruby scripts specified at command line
|
2008-07-09 12:18:06 +00:00 |
Martin Willi
|
a9c46ace99
|
ruby bindings/fixes for template loading
|
2008-07-09 11:43:48 +00:00 |
Martin Willi
|
ee70c94835
|
passing a block to guest.exec() processes output lines
|
2008-07-09 10:51:10 +00:00 |
Martin Willi
|
bf44108019
|
uml "exec" writes stdout/stderr back to mconsole
guest->exec() accepts a callback for output
sligtly refactored mconsole.c
|
2008-07-08 14:58:20 +00:00 |
Martin Willi
|
02a6083633
|
guest interface/address management using hackish mconsole exec patch, ruby bindings
|
2008-07-07 14:56:04 +00:00 |
Martin Willi
|
36beca7cef
|
disconnecting interfaces properly on bridge destruction
|
2008-07-05 09:32:55 +00:00 |
Martin Willi
|
c4d72bdb01
|
throwing proper exeptions on errors, correct return values
mixin enumerable in classes/objects with .each
|
2008-07-04 16:42:54 +00:00 |
Martin Willi
|
ca275ae2ca
|
prototype of irdumm - interactive ruby shell for dumm
|
2008-07-04 14:21:41 +00:00 |
Martin Willi
|
4302d4f012
|
some stability improvements
|
2008-07-04 06:58:04 +00:00 |
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
Martin Willi
|
4a231f1a2e
|
changed medcli settings keys
|
2008-07-02 09:02:38 +00:00 |
Martin Willi
|
d932435e18
|
sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2
|
2008-07-02 08:31:48 +00:00 |
Martin Willi
|
11e855179e
|
using token enumerator to parser plugin list
|
2008-07-02 08:19:43 +00:00 |