summaryrefslogtreecommitdiff
path: root/sbin/iked/policy.c
AgeCommit message (Expand)Author
2011-05-02store the peer address as it was specified in the policy in theMike Belopuhov
2011-04-18Improve the iked acquire mode peer <-> policy matching. This changeReyk Floeter
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
2011-01-26get rid of acquire flows completely, as they tend to pass trafficMike Belopuhov
2011-01-21Reimplement the iked(8) policy evaluation for incoming connections toReyk Floeter
2011-01-18reyk noticed that my rb-tree-fu is not that great. fixup compare functionMike Belopuhov
2011-01-17Add initial acquire mode support and use it whenever Windows peers decideMike Belopuhov
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-07-03Better non-debug logging messages when a session is established/closed.Reyk Floeter
2010-06-27print the required bits as a stringReyk Floeter
2010-06-15only compare the SPIi in the SA treeReyk Floeter
2010-06-14Initiator mode with certificates; needs more work but works.Reyk Floeter
2010-06-14Initial support for initiator mode which allows to run iked as aReyk Floeter
2010-06-14remove policy lookup debug messageReyk Floeter
2010-06-14restructure code a bit to move closer to initiator mode:Reyk Floeter
2010-06-14More code for initiator mode (not finished yet)Reyk Floeter
2010-06-10Add another tree to lookup policy SAs by peer address.Reyk Floeter
2010-06-10only call RB_REMOVE once when removing an SA.Reyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter