| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 25 | -55/+151 | |
| | | | | ||||||
| | * | | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 34 | -264/+447 | |
| | | | | ||||||
| | * | | Add a getter for the mem_pool_t base address | Martin Willi | 2012-08-24 | 2 | -0/+14 | |
| | | | | ||||||
| | * | | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 6 | -34/+0 | |
| | | | | ||||||
| | * | | Add description about DNS server variables to _updown | Martin Willi | 2012-08-21 | 1 | -0/+6 | |
| | | | | ||||||
| | * | | Add a DNS attribute handler to updown, passing servers to updown script | Martin Willi | 2012-08-21 | 6 | -4/+377 | |
| | | | | ||||||
| | * | | Add a description of the leftdns option to ipsec.conf.5 | Martin Willi | 2012-08-21 | 1 | -0/+10 | |
| | | | | ||||||
| | * | | Add a stroke attribute_handler requesting DNS servers given with leftdns | Martin Willi | 2012-08-21 | 4 | -0/+307 | |
| | | | | ||||||
| | * | | Serve ipsec.conf rightdns servers through stroke attribute provider | Martin Willi | 2012-08-21 | 1 | -10/+143 | |
| | | | | ||||||
| | * | | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 7 | -0/+11 | |
| | | | | ||||||
| * | | | Merge branch 'eap-client-select' | Tobias Brunner | 2012-08-31 | 20 | -83/+983 | |
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | This brings support for EAP-Nak payloads on the client (to select a specific or supported method), and the server (via the eap-dynamic plugin which selects a method supported/requested by the client). | |||||
| | * | | | NEWS about eap-dynamic plugin added | Tobias Brunner | 2012-08-31 | 1 | -0/+9 | |
| | | | | | ||||||
| | * | | | Documentation for eap-dynamic added | Tobias Brunner | 2012-08-31 | 2 | -0/+11 | |
| | | | | | ||||||
| | * | | | Log the proper type for virtual EAP methods | Tobias Brunner | 2012-08-31 | 1 | -1/+5 | |
| | | | | | ||||||
| | * | | | Added an option to prefer types sent by peer in eap-dynamic plugin | Tobias Brunner | 2012-08-31 | 1 | -14/+42 | |
| | | | | | ||||||
| | * | | | eap-dynamic plugin handles EAP-Nak messages and selects a method supported ↵ | Tobias Brunner | 2012-08-31 | 1 | -1/+72 | |
| | | | | | | | | | | | | | | | | | by the peer | |||||
| | * | | | Preferred EAP methods for eap-dynamic can be configured | Tobias Brunner | 2012-08-31 | 1 | -1/+59 | |
| | | | | | ||||||
| | * | | | The eap-dynamic plugin uses the first supported method as default | Tobias Brunner | 2012-08-31 | 1 | -1/+91 | |
| | | | | | ||||||
| | * | | | Added eap-dynamic plugin which can proxy any other EAP method | Tobias Brunner | 2012-08-31 | 9 | -1/+332 | |
| | | | | | ||||||
| | * | | | Use eap_vendor_type_from_string() in stroke | Tobias Brunner | 2012-08-31 | 1 | -38/+7 | |
| | | | | | ||||||
| | * | | | Function added that parses EAP method strings ([eap-]type[-vendor]) | Tobias Brunner | 2012-08-31 | 2 | -0/+86 | |
| | | | | | ||||||
| | * | | | Added method to enumerate EAP types contained in an EAP-Nak | Tobias Brunner | 2012-08-31 | 2 | -11/+79 | |
| | | | | | ||||||
| | * | | | Encode EAP-Naks in expanded format if we got an expanded type request | Tobias Brunner | 2012-08-31 | 5 | -6/+19 | |
| | | | | | | | | | | | | | | | | | | | | | Since methods defined by the IETF (vendor ID 0) could also be encoded in expanded type format the previous check was insufficient. | |||||
| | * | | | Allow clients to request a configured EAP method via EAP-Nak | Tobias Brunner | 2012-08-31 | 5 | -8/+37 | |
| | | | | | ||||||
| | * | | | Virtual EAP methods handle EAP-Naks themselves | Tobias Brunner | 2012-08-31 | 1 | -5/+17 | |
| | | | | | ||||||
| | * | | | Send EAP-Nak with supported types if requested type is unsupported | Tobias Brunner | 2012-08-31 | 5 | -12/+81 | |
| | | | | | ||||||
| | * | | | Filter invalid EAP authentication types when enumerating them | Tobias Brunner | 2012-08-31 | 2 | -1/+10 | |
| | | | | | | | | | | | | | | | | | Valid authentication types defined by the IETF are 4-253 and 255. | |||||
| | * | | | Move our pseudo EAP types out of the range of valid EAP methods | Tobias Brunner | 2012-08-31 | 2 | -14/+14 | |
| | | | | | ||||||
| | * | | | Added a method to enumerate registered EAP methods | Tobias Brunner | 2012-08-21 | 2 | -0/+43 | |
| | |/ / | ||||||
| * | | | version bump to 5.0.1dr4 | Andreas Steffen | 2012-08-31 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | Ported tun_device de-/initialization to FreeBSD | Tobias Brunner | 2012-08-29 | 1 | -5/+47 | |
| | | | | ||||||
| * | | | struct iphdr is Linux specific use struct ip instead | Tobias Brunner | 2012-08-29 | 1 | -6/+6 | |
| | | | | ||||||
| * | | | Include stdint.h for UINT32_MAX on FreeBSD | Tobias Brunner | 2012-08-29 | 1 | -0/+1 | |
| | | | | ||||||
| * | | | Ported tun_device initialization to OS X utun | Martin Willi | 2012-08-28 | 1 | -19/+85 | |
| | |/ |/| | ||||||
| * | | Ewa did the new Polish translation | Andreas Steffen | 2012-08-24 | 1 | -0/+95 | |
| | | | ||||||
| * | | Log configured IKE_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
| | | | ||||||
| * | | Log configured CHILD_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
| | | | ||||||
| * | | Fall back to local address as IKEv1 identity if nothing else is configured | Tobias Brunner | 2012-08-24 | 1 | -2/+14 | |
| | | | ||||||
| * | | Removed deprecated options from ipsec.conf template | Tobias Brunner | 2012-08-24 | 1 | -9/+1 | |
| | | | ||||||
| * | | Apply send delay before adding non-ESP marker | Tobias Brunner | 2012-08-24 | 1 | -16/+16 | |
| | | | | | | | | | | | Otherwise the packet header could not be parsed correctly when NAT-T is used. | |||||
| * | | use pen_type_t for PA Message Subtype | Andreas Steffen | 2012-08-23 | 3 | -32/+29 | |
| |/ | ||||||
| * | Remove unused src/dst variables in send_no_marker() | Martin Willi | 2012-08-21 | 1 | -5/+0 | |
| | | ||||||
| * | use pen_type_t for attribute request entries | Andreas Steffen | 2012-08-21 | 1 | -25/+4 | |
| | | ||||||
| * | define pen_type_t as a vendor-specific type | Andreas Steffen | 2012-08-20 | 35 | -624/+301 | |
| | | ||||||
| * | Don't use POSIX semaphores if a MONOTONIC clock is available | Martin Willi | 2012-08-20 | 1 | -0/+8 | |
| | | | | | | | POSIX semaphores use CLOCK_REALTIME, but our semaphore_t abstraction expects CLOCK_MONOTONIC based times. Use the mutex/condvar based fallback if time_monotonic() actuall returns monotonic times. | |||||
| * | Remove the unused second IKE_SA entry match function argument | Martin Willi | 2012-08-20 | 1 | -4/+4 | |
| | | | | | LLVMs clang complains about this parameter, so remove it. | |||||
| * | Add a mutex/condvar based semaphore implementation if sem_timedwait is ↵ | Martin Willi | 2012-08-20 | 2 | -2/+69 | |
| | | | | | | | unavailable Fixes #214. | |||||
| * | added IBM and OpenPTS Private Enterprise Numbers | Andreas Steffen | 2012-08-20 | 2 | -2/+8 | |
| | | ||||||
| * | Add keymat_t constructor registration function | Adrian-Ken Rueegsegger | 2012-08-20 | 2 | -3/+45 | |
| | | | | | | | Using the register_constructor function enables custom keymat_t implementations per IKE version. If no constructor is registered the default behavior is preserved. | |||||
| * | fixed caption | Andreas Steffen | 2012-08-20 | 1 | -1/+1 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |