aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* all x509 based ike scenarios require the revocation pluginAndreas Steffen2010-07-154-4/+4
|
* all x509 based openssl-ikev2 scenarios require the revocation pluginAndreas Steffen2010-07-1517-17/+17
|
* all x509 based gcrypt-ikev2 scenarios require the revocation pluginAndreas Steffen2010-07-155-5/+5
|
* all x509 based ikev2 scenarios require the revocation pluginAndreas Steffen2010-07-15203-205/+205
|
* ikev2/net2net-psk-dscp does not need certificate supportAndreas Steffen2010-07-152-2/+2
|
* add revocation plugin to ikev2/rw-cert scenarioAndreas Steffen2010-07-153-3/+3
|
* Warn about manual plugin load directives for pluto/charon with ↵Andreas Steffen2010-07-153-0/+22
| | | | --disable-load-warning compile option
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
| | | | This reverts commit 5c46726d0d91db5b1fc4ea53326e73443133f22d.
* activate --enable-addrblock configure option in UML scenariosAndreas Steffen2010-07-132-0/+6
|
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
|
* Remove plugin load directives from default strongswan.confMartin Willi2010-07-131-9/+6
|
* Added NEWS about --signcrl and PEM support in pki utilityMartin Willi2010-07-131-0/+5
|
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
|
* Added support for Certificate, CRL and PKCS10 encoding to PEM pluginMartin Willi2010-07-131-0/+19
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-1327-102/+239
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-1355-361/+360
| | | | encoding
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-1310-9/+9
|
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
|
* Added NEWS for revocation/addrblock pluginMartin Willi2010-07-131-0/+7
|
* Added addrblock plugin to RFC3779 test casesMartin Willi2010-07-137-7/+7
|
* Added revocation plugin to ikev2 crl/ocsp test casesMartin Willi2010-07-1330-30/+30
|
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-135-61/+216
|
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-134-5/+123
|
* Moved bus_t to METHOD/INIT macrosMartin Willi2010-07-131-108/+69
|
* Moved addrblock plugin to libcharonMartin Willi2010-07-138-14/+13
|
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-138-531/+763
|
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
|
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-1310-59/+309
|
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
|
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
|
* Moved credential manager to libstrongswanMartin Willi2010-07-1348-205/+191
|
* Move pathlen constraint checking to X509 specific checksMartin Willi2010-07-131-17/+18
|
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-133-5/+11
|
* Combined the OCSP/CRL options to a signle Online check optionMartin Willi2010-07-131-23/+14
|
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
|
* we need some orderingAndreas Steffen2010-07-121-1/+3
|
* changed ordering of statusattr outputAndreas Steffen2010-07-121-8/+6
|
* updated ikev2/ip-two-pools-db scenario to support pool and identity based ↵Andreas Steffen2010-07-127-4/+15
| | | | dns attributes
* fixed alignment of captionAndreas Steffen2010-07-121-2/+2
|
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-123-1/+30
|
* output identities correctlyAndreas Steffen2010-07-121-7/+11
|
* added second example scenarioAndreas Steffen2010-07-121-2/+2
|
* apidoc is actually a directory not a file.Tobias Brunner2010-07-121-1/+4
|
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
|
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
|
* Group membership constraint is fulfilled if subject is member in one of the ↵Martin Willi2010-07-092-8/+20
| | | | groups
* Added support for named attribute groupsHeiko Hund2010-07-0912-93/+375
| | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-092-1/+14
|
* added ikev2/net2net-psk-dscp2 DiffServ scenarioAndreas Steffen2010-07-0911-0/+165
|
* added ikev2/nat-two-rw-mark-in-out scenarioAndreas Steffen2010-07-0911-0/+187
|