tteras/strongswan/src/libcharon/plugins/stroke, branch tteras-release tteras' strongSwan tree charon: add optional source and remote overrides for initiate 2017-11-20T08:45:02+00:00 Timo Teräs timo.teras@iki.fi 2015-09-21T10:41:58+00:00 ea546194df7e5d181cdfc1b236e21f973080be51 This introduces support for specifying optional IKE SA specific source and remote address for child sa initiation. This allows to initiate wildcard connection for known address via vici. In addition this allows impler implementation of trap-any patches and is a prerequisite for dmvpn support. Signed-off-by: Timo Teräs <timo.teras@iki.fi> 
This introduces support for specifying optional IKE SA specific
source and remote address for child sa initiation. This allows
to initiate wildcard connection for known address via vici.

In addition this allows impler implementation of trap-any patches
and is a prerequisite for dmvpn support.

Signed-off-by: Timo Teräs <timo.teras@iki.fi>
counters: Move IKE event counter collection from stroke to a separate plugin 2017-11-08T15:28:28+00:00 Tobias Brunner tobias@strongswan.org 2017-08-24T15:02:37+00:00 6f74b8748a2d9835deb0779868969d52081e10e1 






stroke: Don't load configs with invalid proposals
2017-07-05T08:08:36+00:00

Tobias Brunner
tobias@strongswan.org

2017-05-30T16:27:20+00:00

a3bcbb4c64a33d863025868b5b4f83d0792c9c16

References #2347.





References #2347.







linked-list: Change return value of find_first() and signature of its callback
2017-05-26T11:56:44+00:00

Tobias Brunner
tobias@strongswan.org

2017-05-16T10:11:24+00:00

2e4d110d1e94a3be9da06894832492ff469eec37

This avoids the unportable five pointer hack.





This avoids the unportable five pointer hack.







Change interface for enumerator_create_filter() callback
2017-05-26T11:56:44+00:00

Tobias Brunner
tobias@strongswan.org

2017-05-12T10:10:27+00:00

525cc46cabe3dbf17d9f63e76ea9aa974d3665fa

This avoids the unportable 5 pointer hack, but requires enumerating in
the callback.





This avoids the unportable 5 pointer hack, but requires enumerating in
the callback.







stroke: Make 96-bit truncation for SHA-256 configurable
2017-05-26T09:22:28+00:00

Tobias Brunner
tobias@strongswan.org

2017-05-10T17:32:53+00:00

4270c8fcb07f37100889695d19a3a3e876f2a1b8












child-cfg: Use flags for boolean options
2017-05-23T14:51:15+00:00

Tobias Brunner
tobias@strongswan.org

2017-05-10T17:04:25+00:00

749ac175fa9052a360c6393c93efbca8d5cc7621

Makes it potentially easier to add new flags.





Makes it potentially easier to add new flags.







peer-cfg: Store mediated_by as name and not peer-cfg reference
2017-02-16T18:24:09+00:00

Tobias Brunner
tobias@strongswan.org

2017-02-07T10:30:49+00:00

ed96fe72cf8c741427b833c6f284a8857d8371a7

This way updates to the mediation config are respected and the order in
which configs are configured/loaded does not matter.

The SQL plugin currently maintains the strong relationship between
mediated and mediation connection (we could theoretically change that to a
string too).





This way updates to the mediation config are respected and the order in
which configs are configured/loaded does not matter.

The SQL plugin currently maintains the strong relationship between
mediated and mediation connection (we could theoretically change that to a
string too).







stroke: Use peer name as namespace for shunt policies
2017-02-16T18:24:07+00:00

Tobias Brunner
tobias@strongswan.org

2017-02-08T15:13:32+00:00

02767e430975eb4c832b6c8e5733a8c304e71515

The same goes for the start-action-job.  When unrouting, we search for
the first policy with a matching child-cfg.





The same goes for the start-action-job.  When unrouting, we search for
the first policy with a matching child-cfg.







shunt-manager: Add an optional namespace for each shunt
2017-02-16T18:24:07+00:00

Tobias Brunner
tobias@strongswan.org

2016-11-16T16:59:22+00:00

7a0fdbab42669d75cec2c073062331b7a7aed443

This will allow us to reuse the names of child configs e.g. when they
are defined in different connections.





This will allow us to reuse the names of child configs e.g. when they
are defined in different connections.