aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* The va_list trick does not seem to be portable, revert dots-in-section fix4.4.1Martin Willi2010-07-301-58/+22
* Fix segfault on 'ipsec stroke up ]' commandThomas Egerer2010-07-291-0/+5
* Fixed settings lookup if the section/key contains dotsMartin Willi2010-07-291-22/+58
* Added NEWS for snprintf() fixesMartin Willi2010-07-281-0/+4
* Fix use of snprintf() in pluto subjectAltName enumerationMartin Willi2010-07-281-0/+4
* Fix use of snprintf() in IETF attributes to string conversionMartin Willi2010-07-281-2/+11
* Fix use of snprintf() in identification DN to ASCII conversionMartin Willi2010-07-281-0/+12
* More NEWS for HA functionalityMartin Willi2010-07-281-4/+5
* Implemented a HA enabled in-memory address poolMartin Willi2010-07-286-4/+468
* Added a function to segmentate a generic integerMartin Willi2010-07-282-18/+48
* added NETMAP rules for the reverse directionAndreas Steffen2010-07-273-4/+11
* fixed description of ikev2/net2net-same-nets scenarioAndreas Steffen2010-07-271-1/+1
* Reserving does not work, as our pools do not support acquiring arbitrary addr...Martin Willi2010-07-271-30/+0
* Mem pool does not support multiple leases for an identityMartin Willi2010-07-271-2/+11
* Flush any remaining cache state if an IKE_SA goes downMartin Willi2010-07-271-2/+2
* Added NEWS related to HA functionalityMartin Willi2010-07-261-0/+5
* Synchronize EAP-Identity of remote peerMartin Willi2010-07-264-0/+16
* Reserve virtual IP of passive IKE_SAs in the local poolMartin Willi2010-07-261-0/+30
* Added strongswan.conf options for HA heartbeatMartin Willi2010-07-261-4/+20
* Log CHILD_SA segment responsibilityMartin Willi2010-07-269-18/+95
* Pass initiator parameter to distinguish between original and exchange initiatorMartin Willi2010-07-264-1/+8
* Pass the CREATE_CHILD_SA initiator flag to the child_keys parameterMartin Willi2010-07-265-9/+12
* Use a sync message cache to resynchronize IKE_SAs without rekeyingMartin Willi2010-07-2616-169/+594
* Log received HA message typesMartin Willi2010-07-261-3/+9
* Add enum names for HA message typesMartin Willi2010-07-262-0/+19
* Delay resynchronization request until starter has loaded the configurationsMartin Willi2010-07-261-2/+4
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
* added net2net-same-netsAndreas Steffen2010-07-2510-0/+340
* Added NEWS for the eap-simaka-sql pluginMartin Willi2010-07-231-0/+3
* NEWS cosmeticsAndreas Steffen2010-07-211-4/+5
* Multiple RADIUS server NEWSMartin Willi2010-07-211-1/+5
* Implemented support for multiple RADIUS serversMartin Willi2010-07-2110-423/+911
* Migrated eap-radius plugin to INIT/METHOD macrosMartin Willi2010-07-214-142/+105
* Added log statement if peer requests EAP, but current config does not allow itMartin Willi2010-07-211-0/+1
* remove the private updown scripts after useAndreas Steffen2010-07-173-0/+3
* minor fixes in the ikev2/rw-mark-in-out scenariosAndreas Steffen2010-07-172-2/+2
* updated NEWSAndreas Steffen2010-07-171-2/+5
* some reformulationsAndreas Steffen2010-07-172-4/+4
* the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MA...Andreas Steffen2010-07-1721-58/+1262
* documented the new PLUTO environment variables available in the updown scriptAndreas Steffen2010-07-172-4/+25
* in a ESP_IN_UDP situation make UDP port available in the updown scriptAndreas Steffen2010-07-171-1/+23
* fix html error in scenario descriptionAndreas Steffen2010-07-171-1/+1
* make xfrm marks available in the updown scriptsAndreas Steffen2010-07-171-1/+44
* check for mark changes in ipsec updateAndreas Steffen2010-07-172-0/+4
* all x509 based sql scenarios require the revocation pluginAndreas Steffen2010-07-1531-31/+31
* all x509 based pfkey scenarios require the revocation pluginAndreas Steffen2010-07-1522-22/+22
* all x509 based p2pnat scenarios require the revocation pluginAndreas Steffen2010-07-156-6/+6
* all x509 based ipv6/*-ikev2 scenarios require the revocation pluginAndreas Steffen2010-07-1518-18/+18