| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
- take the multiple CA fixes from upstream git branch
- add more child_sa states that can be monitored
(cherry picked from commit ae3ab41b772ff36a0091d472f81c503ffbe93294)
|
|
|
|
|
|
|
|
| |
- python is needed to prepare config file templates, ref #4484
- three cherry-picks from upstream git master and merge pending branches
- add patch to fix connection authentication when multiple CAs are allowed
(cherry picked from commit d634801b2da421730ff3c224c3af3f67193f5f0a)
|
|
|
|
| |
(cherry picked from commit 15f7703cfe4b0900545a8b2799889c23d5fd0dda)
|
|
|
|
|
|
| |
also fixes a minor memory leak in patch 1001 (the offending hunk is
now just deleted, as other upstream commits fixed the issue it tried
to address)
|
|
|
|
| |
(cherry picked from commit b058a6d0c9137d23fbba5a6e1c195b9dcd682f55)
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
and rename the patches so that we have groups for upstream
cherry-picks, patches we want to upstream, and locally carried patches.
(cherry picked from commit e048450980dfeb8d73df4ba109e14d90d47d2c30)
|
|
|
|
|
|
|
| |
interoperability fix to work with Alpine patched ipsec-tools
(will probably be removed after a migration period)
(cherry picked from commit 2a4023dfee4f68916ac96d02fc41874d7286d625)
|
| |
|
|
|
|
| |
and apply the quagga-nhrp required patches
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Make charon use 'ipsec' user and group, and enable the libcap
support as few capabilities need to be retained for configuring
IPsec SAs in to kernel.
This also introduces charon.initd which starts charon daemon only
and uses swanctl for configuration. It is a little bit more light
weight than running the 'starter' which seems to be deprecated.
Also the config format is completely different, but more flexible
and extensive.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
fixes CVE-2014-2338 along with multiple bug fixes
|
|
|
|
|
|
|
|
| |
We need define _GNU_SOURCE for strndup and others. It has been fixed
upstream. see http://wiki.strongswan.org/issues/516
But rather than apply the patches we simply add _GNU_SOURCE to CFLAGS
for now.
|
|
|
|
| |
http://wiki.strongswan.org/issues/452
|
|
|