aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* all x509 based ikev2 scenarios require the revocation pluginAndreas Steffen2010-07-15203-205/+205
* ikev2/net2net-psk-dscp does not need certificate supportAndreas Steffen2010-07-152-2/+2
* add revocation plugin to ikev2/rw-cert scenarioAndreas Steffen2010-07-153-3/+3
* Warn about manual plugin load directives for pluto/charon with --disable-load...Andreas Steffen2010-07-153-0/+22
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
* activate --enable-addrblock configure option in UML scenariosAndreas Steffen2010-07-132-0/+6
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
* Remove plugin load directives from default strongswan.confMartin Willi2010-07-131-9/+6
* Added NEWS about --signcrl and PEM support in pki utilityMartin Willi2010-07-131-0/+5
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
* Added support for Certificate, CRL and PKCS10 encoding to PEM pluginMartin Willi2010-07-131-0/+19
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-1327-102/+239
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential en...Martin Willi2010-07-1355-361/+360
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-1310-9/+9
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
* Added NEWS for revocation/addrblock pluginMartin Willi2010-07-131-0/+7
* Added addrblock plugin to RFC3779 test casesMartin Willi2010-07-137-7/+7
* Added revocation plugin to ikev2 crl/ocsp test casesMartin Willi2010-07-1330-30/+30
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-135-61/+216
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-134-5/+123
* Moved bus_t to METHOD/INIT macrosMartin Willi2010-07-131-108/+69
* Moved addrblock plugin to libcharonMartin Willi2010-07-138-14/+13
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-138-531/+763
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-1310-59/+309
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
* Moved credential manager to libstrongswanMartin Willi2010-07-1348-205/+191
* Move pathlen constraint checking to X509 specific checksMartin Willi2010-07-131-17/+18
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-133-5/+11
* Combined the OCSP/CRL options to a signle Online check optionMartin Willi2010-07-131-23/+14
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
* we need some orderingAndreas Steffen2010-07-121-1/+3
* changed ordering of statusattr outputAndreas Steffen2010-07-121-8/+6
* updated ikev2/ip-two-pools-db scenario to support pool and identity based dns...Andreas Steffen2010-07-127-4/+15
* fixed alignment of captionAndreas Steffen2010-07-121-2/+2
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-123-1/+30
* output identities correctlyAndreas Steffen2010-07-121-7/+11
* added second example scenarioAndreas Steffen2010-07-121-2/+2
* apidoc is actually a directory not a file.Tobias Brunner2010-07-121-1/+4
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
* Group membership constraint is fulfilled if subject is member in one of the g...Martin Willi2010-07-092-8/+20
* Added support for named attribute groupsHeiko Hund2010-07-0912-93/+375
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-092-1/+14
* added ikev2/net2net-psk-dscp2 DiffServ scenarioAndreas Steffen2010-07-0911-0/+165
* added ikev2/nat-two-rw-mark-in-out scenarioAndreas Steffen2010-07-0911-0/+187
* some changes to the ikev2/nat-two-rw-mark scenarioAndreas Steffen2010-07-092-4/+4
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-0917-55/+108
* The file logger supports a time prefix using a strftime() format specifierMartin Willi2010-07-083-9/+36