summaryrefslogtreecommitdiffstats
path: root/main/ipsec-tools
Commit message (Collapse)AuthorAgeFilesLines
* main/[various]: update config.sub (and remove charset.alias)Timo Teräs2013-09-291-0/+1
| | | | | | for musl build. the changes are automatically done based on previous build log errors, so this does not guarantee successful build, but is a required.
* [all autotools packages]: normalize ./configureTimo Teräs2013-07-301-2/+6
|
* main/ipsec-tools: cherry-pick fixes from upstreamTimo Teräs2013-02-054-3/+55
|
* main/ipsec-tools: apply a security fix from upstream commitTimo Teräs2013-01-242-1/+15
|
* main/ipsec-tools: upgrade to 0.8.1Timo Teräs2013-01-086-244/+3
| | | | remove patches present upstream
* main/ipsec-tools: cherry-pick fixes from upstream CVSTimo Teräs2012-08-236-1/+242
|
* main/ipsec-tools: add patch to execute phase1 dead hook on initial-contactTimo Teräs2011-12-132-2/+15
|
* main/ipsec-tools: remove *.la filesWilliam Pitcock2011-06-291-2/+3
|
* main/ipsec-tools: one more fix for grekey supportTimo Teräs2011-03-302-25/+85
| | | | sainfo matching needs to allow wildcard matching.
* main/ipsec-tools: refresh gre-support patchTimo Teräs2011-03-302-60/+178
| | | | | It was missing some ulport swaps that caused isakmp quick mode as responder to fail under certain cases.
* main/ipsec-tools: update to 0.8.0Timo Teräs2011-03-192-428/+4
| | | | Remove one patch merged upstream.
* main/ipsec-tools: update to 0.8.0 RC, and include additional patchesTimo Teräs2011-03-044-44/+1067
| | | | | | * improve handling of setups where single node participates to multiple dmvpn networks. enable using of grekey in setkey, SPD and sainfo; also match remoteconfs using sainfo ph1id
* Set all packages with arch="x86 x86_64" to arch="all".William Pitcock2011-01-131-1/+1
|
* main/*: add archNatanael Copa2010-12-131-0/+1
|
* main/ipsec-tools: upgrade to snapshot 2010-12-08Timo Teräs2010-12-085-388/+5
| | | | * remove patches merged upstream
* main/ipsec-tools: fix for improving delete notify handlingTimo Teräs2010-11-152-2/+114
| | | | | the old one could crash under some rare circumstances (deleting responder mode ph1 in very early state).
* main/ipsec-tools: add a patch to improve delete notify handlingTimo Teräs2010-11-042-2/+61
| | | | | | | if phase1 rekeying is enabled, remote side deleting the last phase1 will result in deletion of all the ipsec-sa's and will execute the phase1_dead script hook too (so every one knows the traffic between the two nodes has ceased).
* main/ipsec-tools: two new fixesTimo Teräs2010-10-294-36/+307
| | | | | | | | * update adminport to work with huge replies * defer handling of DH calculations for isakmp identity reponse (this helps to handle things in right order if we are getting multiple simultaneous connection requests; this also makes the previous receive buffer size change mostly irrelevant)
* main/ipsec-tools: update to 2010-10-22 snapshotTimo Teräs2010-10-276-790/+91
| | | | | remove patches committed upstream. and add a patch for dpd related minor fix.
* main/ipsec-tools: racoonctl socket buffer size patchTimo Teräs2010-10-142-1/+36
| | | | | will fix certain racoonctl errors if there are multiple simultaneous connections and the system socket buffer size is set low.
* main/ipsec-tools: add a patch to modify receive buffer sizeTimo Teräs2010-08-202-1/+36
| | | | | this fixing behaviour on long backbuffer of packets to start dropping packets instead of processing them late.
* main/ipsec-tools: use openssl in oneshot modeTimo Teräs2010-06-042-2/+214
| | | | | | Use the highlevel EVP and HMAC functions to calculate oneshot digest and HMAC. This enable the use of crypto accelerators for these operations.
* main/[various]: rebuild against openssl-1.0Natanael Copa2010-05-141-1/+1
|
* main/[various]: bump pkgrel to force rebuild against nptlNatanael Copa2010-05-041-1/+1
|
* main/ipsec-tools: add patch for fd prioritiesTimo Teras2010-03-092-2/+289
| | | | it improves admin port responsiveness under high load.
* main/ipsec-tools: start after ntp-clientNatanael Copa2010-02-082-5/+13
| | | | fixes #261
* main/ipsec-tools: fix a memleak in the initial-contact patchNatanael Copa2009-12-102-6/+8
| | | | | the patch should fix reconnection on unstable lines but contained a memory leak. This is an update of the same patch.
* main/ipsec-tools: initial contact fixNatanael Copa2009-12-092-2/+75
| | | | | | | Reset remote node contacted state if all related security associates are purged. Fixes issues with unstable internet connections.
* main/ipsec-tools: provide ipsecNatanael Copa2009-09-252-2/+3
| | | | so opennhrp start after racoon.
* main/ipsec-tools: start service after firewallNatanael Copa2009-09-152-2/+3
|
* main/ipsec-tools: update to 20090903 snapshotTimo Teras2009-09-032-1232/+3
| | | | remove the patch merged upstream.
* main/ipsec-tools: bump up to 20080820 snapshotTimo Teras2009-08-207-1855/+1236
| | | | | | remove patches merged upstream, minor fix to reverse-connect patch and add new "phase1 hints when rekeying" patch to help rekeying in some nat scenarios.
* main/ipsec-tools: update checksum and bump pkgrelNatanael Copa2009-08-051-4/+4
|
* Adding SETKEY_OPTS parameter to init.d and conf.d files This helps users to ↵Mika Havela2009-08-052-1/+2
| | | | append e.g. '-k' option to the setkey command by modifying their /etc/conf.d/racoon file
* moved extra/* to main/Natanael Copa2009-07-249-0/+2394
and fixed misc build issues