aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* removed misleading warning when rekeyingMartin Willi2007-05-231-1/+0
|
* support for virtual IP definition on client side:Martin Willi2007-05-226-31/+59
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* fixed memleakMartin Willi2007-05-221-0/+1
|
* using local address as gateway in installed routesMartin Willi2007-05-221-2/+1
|
* support of left|rightgroups parameterAndreas Steffen2007-05-203-31/+30
|
* reduced crl validity of research and sales ca to 15 daysAndreas Steffen2007-05-191-3/+3
|
* fixed nextUpdate and until behaviour in the non-strict caseAndreas Steffen2007-05-191-10/+8
|
* set rightca= to root CAAndreas Steffen2007-05-181-1/+1
|
* added multi-level-ca-revoked scenarioAndreas Steffen2007-05-1811-0/+164
|
* added multi-level-ca-loop scenarioAndreas Steffen2007-05-1812-0/+190
|
* support of CA-based ipsec policiesAndreas Steffen2007-05-181-1/+4
|
* support of CA-based ipsec policiesAndreas Steffen2007-05-189-117/+222
|
* support of crlnumber in research and sales CAsAndreas Steffen2007-05-186-0/+6
|
* added multi-level-ca-ldap scenarioAndreas Steffen2007-05-1816-0/+396
|
* added multi-level-ca scenarioAndreas Steffen2007-05-1815-0/+297
|
* ca-based policy now requires rightca=%any in the two-certs scenarioAndreas Steffen2007-05-181-0/+1
|
* add is_ca() methodAndreas Steffen2007-05-182-2/+21
|
* added set_ca_info() and get_ca_info() methodsAndreas Steffen2007-05-182-2/+47
|
* output of eap_type_names requires %N formatAndreas Steffen2007-05-181-1/+1
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-44/+68
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-2/+19
|
* export MAX_CA_PATH_LENAndreas Steffen2007-05-171-1/+2
|
* check self-signedness of certificate at creation timeAndreas Steffen2007-05-171-2/+26
|
* removed route_job, handled all in interface_managerMartin Willi2007-05-165-195/+0
|
* routing/unrouting through interfaceMartin Willi2007-05-164-18/+187
|
* removed dead folderMartin Willi2007-05-160-0/+0
|
* hierarchical display of testsAndreas Steffen2007-05-151-30/+101
|
* multiple peer certificate supportAndreas Steffen2007-05-151-0/+7
|
* removed reference to radij.c codeAndreas Steffen2007-05-151-10/+3
|
* authentication failure is handled in ike_auth.cAndreas Steffen2007-05-151-3/+5
|
* cosmeticsAndreas Steffen2007-05-151-5/+5
|
* cosmeticsAndreas Steffen2007-05-152-3/+3
|
* added two-certs scenarioAndreas Steffen2007-05-1510-0/+162
|
* adapted authentication failure text to those in the authenticatorsAndreas Steffen2007-05-151-3/+3
|
* verification of locally loaded peer certificatesAndreas Steffen2007-05-151-87/+92
|
* support of multiple certificates with same peer idAndreas Steffen2007-05-153-63/+93
|
* cosmeticsAndreas Steffen2007-05-151-9/+7
|
* working dummy for NetworkManager DBUS interfaceMartin Willi2007-05-141-8/+68
| | | | | more a tech demo
* version bump to 4.1.3Andreas Steffen2007-05-101-1/+1
|
* simplified capability droppingMartin Willi2007-05-099-45/+26
|
* properly implemented interface_managers initiate, terminte_[ike|child]Martin Willi2007-05-098-303/+326
| | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues
* properly ignoring signals rised by a thread which is in listening stateMartin Willi2007-05-081-11/+8
|
* changing UID/GID after startup of pluto/charonMartin Willi2007-05-0716-57/+113
| | | | added --with-uid/--with-gid configure option
* extended interface_manager (more work needed here)Martin Willi2007-05-033-3/+243
|
* allow to have listening state TRUE while sending singal ourselfMartin Willi2007-05-031-0/+7
|
* reducing capabilities of the threads to a minimumMartin Willi2007-05-0311-40/+214
| | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route
* setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checkerMartin Willi2007-05-021-0/+2
|
* added more API documentation to backends/interfacesMartin Willi2007-04-307-20/+40
|
* added udp.h4.1.2Andreas Steffen2007-04-291-1/+2
|
* fixed includeAndreas Steffen2007-04-291-1/+1
|