tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	change ikev1/xauth scenarios to modern notation	Andreas Steffen	2012-06-18	17	-24/+51
\|
*	testing: List IPv6 routing table in IPv6 test cases.	Tobias Brunner	2012-06-15	1	-2/+8
\|
*	NLM_F_DUMP includes NLM_F_ROOT.	Tobias Brunner	2012-06-15	1	-1/+1
\|
*	Don't create roam jobs based on cached/cloned routes.	Tobias Brunner	2012-06-15	1	-0/+4
\|
*	Don't compare ports when comparing cached routes.	Tobias Brunner	2012-06-15	3	-6/+6
\| \| \| \|	At least src_ip has a port set sometimes.
*	starter: Fixed parsing of %defaultroute.	Tobias Brunner	2012-06-15	1	-6/+12
\|
*	Adopt children as XAuth initiator (which is IKE responder)	Martin Willi	2012-06-14	1	-2/+2
\|
*	Added 5.0 NEWS about IKEv1 in charon	Martin Willi	2012-06-14	1	-0/+9
\|
*	Print the kind of *Swan during starter startup	Martin Willi	2012-06-14	1	-1/+4
\|
*	Show what kind of *Swan we run in "ipsec status"	Martin Willi	2012-06-14	1	-3/+16
\|
*	Require a scary option to respond to Aggressive Mode PSK requests	Martin Willi	2012-06-14	1	-0/+17
\| \| \| \| \| \| \| \|	While Aggressive Mode PSK is widely used, it is known to be subject to dictionary attacks by passive attackers. We don't complain as initiator to be compatible with existing (insecure) setups, but require a scary strongswan.conf option if someone wants to use it as responder.
*	thanks to narrowing treat right\|leftsubnetwithin as synonyms for ↵	Andreas Steffen	2012-06-14	1	-2/+2
\| \| \| \|	right\|leftsubnet
*	removed plutostart parameter	Andreas Steffen	2012-06-13	633	-633/+0
\|
*	scepclient: Fixed Makefile after removing enable-smartcard configure option.	Tobias Brunner	2012-06-13	1	-6/+0
\|
*	Use proper defines for IPV6_PKTINFO on Mac OS X Lion and newer.	Tobias Brunner	2012-06-13	1	-0/+2
\|
*	Some updates to the INSTALL document.	Tobias Brunner	2012-06-13	1	-85/+58
\|
*	Removed remaining pluto related configure options.	Tobias Brunner	2012-06-13	1	-21/+3
\|
*	starter: Print additional help texts for selected deprecated keywords.	Tobias Brunner	2012-06-12	4	-6/+25
\|
*	starter: Improved how deprecated keywords are handled.	Tobias Brunner	2012-06-12	4	-7/+99
\| \| \| \|	We only throw a warning now instead of rejecting the config.
*	Revert "starter: Don't treat unsupported keywords as fatal errors just ↵	Tobias Brunner	2012-06-12	1	-3/+3
\| \| \| \| \| \|	report them." This reverts commit e55876a657ae9d4bbf14320e5a14f86cc5c31c7f.
*	NEWS about specifying trustchain HASH algorithm requirements	Martin Willi	2012-06-12	1	-0/+7
\|
*	Add documentation for signature hash algorithm enforcing to man ipsec.conf	Martin Willi	2012-06-12	1	-4/+11
\|
*	Added signature scheme options left/rightauth	Martin Willi	2012-06-12	1	-11/+99
\|
*	Support multiple different public key strength types in constraints	Martin Willi	2012-06-12	1	-41/+38
\|
*	Add signature schemes to auth_cfg during trustchain validation	Martin Willi	2012-06-12	5	-19/+45
\|
*	certificate_t->issued_by takes an argument to receive signature scheme	Martin Willi	2012-06-12	16	-24/+68
\|
*	Define auth_cfg rules for signature schemes	Martin Willi	2012-06-12	2	-0/+53
\|
*	starter: Fixed parsing of left\|right=%any.	Tobias Brunner	2012-06-12	1	-1/+3
\|
*	deleted IKEv1 charon-pluto interoperability scenarios	Andreas Steffen	2012-06-12	730	-9777/+0
\|
*	starter: Fix comparison of connections.	Tobias Brunner	2012-06-11	1	-3/+4
\|
*	starter: Removed all unsupported keywords.	Tobias Brunner	2012-06-11	7	-203/+26
\|
*	starter: Don't treat unsupported keywords as fatal errors just report them.	Tobias Brunner	2012-06-11	1	-3/+3
\|
*	Bye bye Pluto!	Tobias Brunner	2012-06-11	180	-69881/+41
\| \| \| \| \|	Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack.
*	_copyright: Replicate copyright text here instead of calling libfreeswan.	Tobias Brunner	2012-06-11	2	-4/+34
\|
*	starter: Remove all ties to pluto/libfreeswan.	Tobias Brunner	2012-06-11	10	-46/+25
\| \| \| \|	Moved some types/constants in the process.
*	starter: Use custom type for SA specific options (flags).	Tobias Brunner	2012-06-11	4	-22/+36
\|
*	starter: Parse left\|rightprotoport directly in confread.c.	Tobias Brunner	2012-06-11	3	-6/+53
\|
*	starter: No special handling for left\|rightsubnet, just pass it on as string.	Tobias Brunner	2012-06-11	4	-39/+1
\|
*	starter: Use host_t to parse left\|rightsourceip.	Tobias Brunner	2012-06-11	1	-18/+17
\| \| \| \|	Also for the yet unused natip option.
*	starter: Remove left\|rightsubnetwithin option (charon narrows ↵	Tobias Brunner	2012-06-11	6	-25/+0
\| \| \| \|	left\|rightsubnet down accordingly).
*	starter: Don't resolve any addresses in starter.	Tobias Brunner	2012-06-11	6	-129/+10
\| \| \| \|	Also removed remains of some unknown iface option.
*	starter: Removed pfs and pfsgroup options (handled via esp option).	Tobias Brunner	2012-06-11	5	-28/+2
\|
*	starter: Store mode of the IPsec SA/policy in a separate member.	Tobias Brunner	2012-06-11	4	-51/+32
\|
*	starter: Use custom type to mark seen keywords.	Tobias Brunner	2012-06-11	3	-23/+27
\|
*	starter: Remove left\|rightnexthop option.	Tobias Brunner	2012-06-11	6	-26/+0
\| \| \| \|	Charon does this lookup dynamically.
*	Implement strdupnull() macro as static inline function.	Tobias Brunner	2012-06-11	1	-1/+4
\| \| \| \|	This avoids compiler warnings if the argument is a const char*.
*	starter: Replaced all usages of clone_str() with strdupnull().	Tobias Brunner	2012-06-11	3	-19/+19
\|
*	starter: Parse authby as string.	Tobias Brunner	2012-06-11	4	-61/+29
\|
*	starter: Remove main parts of pluto support (invoke, whack).	Tobias Brunner	2012-06-11	7	-966/+47
\|
*	starter: Drop support for %defaultroute.	Tobias Brunner	2012-06-11	10	-352/+16
\|