aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* support in-memory pools in swapped connection definitionsAndreas Steffen2010-04-112-19/+19
|
* Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for ↵Tobias Brunner2010-04-101-1/+1
| | | | settings in libstrongswan.
* pluto now requires attr plugin for dns and nbns server loading from ↵Andreas Steffen2010-04-092-2/+2
| | | | strongswan.conf
* Store DH generator in a chunk, hide non-public data in a private structMartin Willi2010-04-085-313/+305
|
* recovered private keys of no CDP certificatesAndreas Steffen2010-04-072-50/+50
|
* recovered lost Duck CA certificatesAndreas Steffen2010-04-074-96/+94
|
* Migrated scepclient/openac logging hooks to new signatureMartin Willi2010-04-072-2/+2
|
* Remove to_referer() method, as it fails if no referer was givenMartin Willi2010-04-072-29/+10
|
* Renamed clone function to avoid name clash with uclibcMartin Willi2010-04-071-2/+2
|
* NEWS about HA pluginMartin Willi2010-04-071-0/+7
|
* Updated HA plugin to new APIsMartin Willi2010-04-079-54/+42
|
* Updated location of traffic selector headerMartin Willi2010-04-071-1/+1
|
* Moved ha plugin to libcharonMartin Willi2010-04-0722-2/+15
|
* Make resync/monitoring functionality optionalMartin Willi2010-04-073-27/+35
|
* Listen to ike_updown/rekey hook instead of ike_state_changeMartin Willi2010-04-071-56/+59
|
* Request a complete resync after daemon startupMartin Willi2010-04-073-4/+54
|
* Do not automatically take over segments, as we need to resync firstMartin Willi2010-04-073-80/+57
|
* Drop overlapping segments only if we have no active SAs on itMartin Willi2010-04-071-14/+32
|
* Do not install iptables rules, they should stay active after shutdownMartin Willi2010-04-073-100/+92
|
* Take over all segments if heartbeat becomes silentMartin Willi2010-04-071-11/+57
|
* Renamed ha-sync plugin to haMartin Willi2010-04-0723-721/+710
|
* Try to send HA sync messages synchronouslyMartin Willi2010-04-071-17/+27
|
* Do not sync a delete for a child in a destroying IKE_SAMartin Willi2010-04-071-1/+4
|
* Include ICMP traffic in sync tunnelMartin Willi2010-04-071-2/+6
|
* Refactored segment enabling/disablingMartin Willi2010-04-071-71/+74
|
* Use a connected UDP socketMartin Willi2010-04-071-8/+18
|
* Removed obsolete socket subclassesMartin Willi2010-04-072-46/+0
|
* Automatically segment cluster using periodically sent status messagesMartin Willi2010-04-079-70/+177
|
* Do not enable/disable our own sync tunnelMartin Willi2010-04-073-10/+24
|
* Enable/disable inactive/active segments onlyMartin Willi2010-04-071-4/+10
|
* Deactivate all active segments before shutting downMartin Willi2010-04-073-0/+30
|
* HA kernel interface can mangle netfilter rules, currently with iptables ↵Martin Willi2010-04-074-29/+183
| | | | invocation
* Added support for kernel segment manipulationMartin Willi2010-04-076-38/+197
|
* Moved segment configuration parsing to ha_sync_pluginMartin Willi2010-04-073-36/+54
|
* Propagate segment manipulation to cluster nodeMartin Willi2010-04-078-23/+109
|
* Segment manipulation in HA sync is thread saveMartin Willi2010-04-071-16/+31
|
* Passing 0 to segments->(de-)activate enables/disables all segmentsMartin Willi2010-04-072-36/+54
|
* separated auto-tunnel functionality from socketMartin Willi2010-04-0711-316/+461
|
* create external fifo socket only if "fifo_interface" option is setMartin Willi2010-04-071-2/+10
|
* updated linuxdir include variableMartin Willi2010-04-071-1/+1
|
* updated HA sync plugin to new lifetime configMartin Willi2010-04-071-1/+6
|
* print "none" if not serving any segmentsMartin Willi2010-04-071-1/+1
|
* automatically establish a PSK authenticated SA between cluster nodesMartin Willi2010-04-074-31/+366
|
* fixed memleak when installing synced virtual IPsMartin Willi2010-04-071-2/+3
|
* do not sync CHILD_SAs without an IKE_SAMartin Willi2010-04-071-1/+1
|
* removed $Id$ from ha pluginMartin Willi2010-04-0716-32/+0
|
* fixed ike_sa condition/extension parsingMartin Willi2010-04-071-12/+12
|
* added a copy of the linux jenkins hash to distMartin Willi2010-04-072-1/+144
|
* fixed sync of CHILD_SA deleteMartin Willi2010-04-071-5/+2
|
* added HA resync option to (re-)integrate nodes to a clusterMartin Willi2010-04-073-8/+104
|