Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | version bump to 4.1.2 | Andreas Steffen | 2007-04-10 | 1 | -1/+1 | |
| | ||||||
* | restructured file layout | Martin Willi | 2007-04-10 | 104 | -3457/+3453 | |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | |||||
* | adapt evaltest to changed debug output4.1.1 | Andreas Steffen | 2007-04-06 | 2 | -3/+3 | |
| | ||||||
* | cosmetics in debug output | Andreas Steffen | 2007-04-06 | 2 | -16/+27 | |
| | ||||||
* | crl-ldap scenario added | Andreas Steffen | 2007-04-06 | 11 | -0/+263 | |
| | ||||||
* | ldap-based crl fetching supported | Andreas Steffen | 2007-04-06 | 1 | -4/+4 | |
| | ||||||
* | changed LDAP_VER compile option to LIBLDAP | Andreas Steffen | 2007-04-06 | 1 | -2/+2 | |
| | ||||||
* | support of ldap-based crl fetching | Andreas Steffen | 2007-04-06 | 6 | -32/+206 | |
| | ||||||
* | removed list_crls() and list_ocsp() methods | Andreas Steffen | 2007-04-06 | 2 | -59/+42 | |
| | ||||||
* | removed list_crls() and list_ocsp() methods | Andreas Steffen | 2007-04-06 | 1 | -18/+0 | |
| | ||||||
* | enabled crl fetching using crlcheckinterval != 0 | Andreas Steffen | 2007-04-05 | 1 | -1/+0 | |
| | ||||||
* | cachecrls=yes supported by IKEv2 | Andreas Steffen | 2007-04-05 | 1 | -1/+6 | |
| | ||||||
* | enabled crl fetching using crlcheckinterval != 0 | Andreas Steffen | 2007-04-05 | 64 | -37/+50 | |
| | ||||||
* | added crl-to-cache | Andreas Steffen | 2007-04-05 | 7 | -0/+86 | |
| | ||||||
* | added crl-from-cache | Andreas Steffen | 2007-04-05 | 7 | -0/+93 | |
| | ||||||
* | block crl fetching | Andreas Steffen | 2007-04-05 | 1 | -0/+2 | |
| | ||||||
* | block crl fetching | Andreas Steffen | 2007-04-05 | 2 | -0/+4 | |
| | ||||||
* | support multiple ocsp servers | Andreas Steffen | 2007-04-05 | 2 | -1/+27 | |
| | ||||||
* | support cachecrls=yes | Andreas Steffen | 2007-04-05 | 9 | -25/+169 | |
| | ||||||
* | support of crlcheckinterval=0 to disable IKEv2 CRL fetching | Andreas Steffen | 2007-04-04 | 5 | -34/+84 | |
| | ||||||
* | improved log output for checkout_by_message() | Martin Willi | 2007-04-04 | 2 | -27/+28 | |
| | ||||||
* | reinsert SHAREDTREE | Andreas Steffen | 2007-04-04 | 1 | -0/+13 | |
| | ||||||
* | --enable-ldap without value 3 | Andreas Steffen | 2007-04-04 | 1 | -14/+1 | |
| | ||||||
* | recognize strongSwan 2.8.4 VID | Andreas Steffen | 2007-04-04 | 2 | -0/+2 | |
| | ||||||
* | support of dynamical http-based CRL fetching | Andreas Steffen | 2007-04-03 | 1 | -0/+2 | |
| | ||||||
* | iptables -L has now a link of its own | Andreas Steffen | 2007-04-03 | 69 | -156/+2 | |
| | ||||||
* | fixed crl fetching bug | Andreas Steffen | 2007-04-03 | 1 | -3/+6 | |
| | ||||||
* | added ip route list and iptables -L | Andreas Steffen | 2007-04-03 | 1 | -21/+51 | |
| | ||||||
* | implemented dynamic http-based CRL fetching | Andreas Steffen | 2007-04-03 | 1 | -8/+3 | |
| | ||||||
* | send VID_NATT_IETF_02_N for Windows 2003 server support | Andreas Steffen | 2007-04-03 | 1 | -1/+3 | |
| | ||||||
* | implemented dynamic http-based CRL fetching | Andreas Steffen | 2007-04-03 | 4 | -38/+84 | |
| | ||||||
* | implemented http get method | Andreas Steffen | 2007-04-03 | 2 | -4/+39 | |
| | ||||||
* | IKEv1 changes | Andreas Steffen | 2007-04-03 | 1 | -0/+11 | |
| | ||||||
* | added --enable-nat-transport and --disable-vendor-id configuration options | Andreas Steffen | 2007-04-03 | 1 | -2/+16 | |
| | ||||||
* | added --enable-nat-transport and --disable-vendor-id configuration options | Andreas Steffen | 2007-04-03 | 1 | -12/+44 | |
| | ||||||
* | bug fix: check existence of encryption key before sending encrypted notification | Andreas Steffen | 2007-04-02 | 1 | -17/+20 | |
| | ||||||
* | updated NEWS, TODO | Martin Willi | 2007-03-30 | 2 | -7/+14 | |
| | ||||||
* | removed unneded includes | Martin Willi | 2007-03-30 | 3 | -3/+0 | |
| | ||||||
* | using IFA_LOCAL for interface enumeration to support ppp links | Martin Willi | 2007-03-30 | 1 | -5/+20 | |
| | ||||||
* | added IKE_SA_INIT retransmission detection | Martin Willi | 2007-03-29 | 5 | -130/+204 | |
| | | | | fixed thread exhaustion when IKE_SA is blocked for a longer time | |||||
* | implemented DoS protection with cookies and IP filter | Martin Willi | 2007-03-29 | 2 | -106/+252 | |
| | ||||||
* | fixed task manager message id bug for cookies | Martin Willi | 2007-03-29 | 1 | -1/+1 | |
| | ||||||
* | added retry limit for IKE_SA_INIT (give up after 5 cookie failures) | Martin Willi | 2007-03-29 | 1 | -0/+15 | |
| | ||||||
* | added chunk_from_thing() macro | Martin Willi | 2007-03-29 | 1 | -0/+5 | |
| | ||||||
* | implemented ipsec purgeocsp | Andreas Steffen | 2007-03-28 | 1 | -1/+8 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2007-03-28 | 1 | -2/+2 | |
| | ||||||
* | implemented ipsec purgeocsp | Andreas Steffen | 2007-03-28 | 2 | -0/+22 | |
| | ||||||
* | removed send_queue, handled internally in sender_t know | Martin Willi | 2007-03-28 | 20 | -641/+407 | |
| | | | | | do header parsing in receiver, ready for cookie integration | |||||
* | implemented a simple IP blocking filter in receiver thread | Martin Willi | 2007-03-28 | 2 | -11/+119 | |
| | ||||||
* | merged changes from eap-aka trunk | Martin Willi | 2007-03-28 | 4 | -30/+82 | |
| |