aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenariosAndreas Steffen2008-08-2636-0/+602
|
* completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributesAndreas Steffen2008-08-264-23/+87
|
* adapted sql/rw-eap-aka-rsa scenario to new EAP identity typeAndreas Steffen2008-08-252-6/+24
|
* list CA restrictions in ipsec statusallAndreas Steffen2008-08-251-9/+43
|
* added NM gnome plugin to distributionMartin Willi2008-08-251-0/+17
|
* removed generated Makefile.in.in from svnMartin Willi2008-08-251-218/+0
|
* enforce DN of configured gateway certificateMartin Willi2008-08-252-46/+52
|
* new EAP-Identity handling uses ID_EAP in pluginsMartin Willi2008-08-251-1/+3
|
* disabled PSK option until we have a way to enforce strong secretsMartin Willi2008-08-251-1/+3
|
* use username part of RFC822 IDs for PAM authentication Martin Willi2008-08-251-3/+9
|
* ported parts of two-sim branchMartin Willi2008-08-2240-253/+676
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* run guests with some nicenessMartin Willi2008-08-221-0/+1
|
* pool names are uniqueMartin Willi2008-08-221-5/+1
|
* do not return IPv6 src addresses for IPv4 destinationsMartin Willi2008-08-211-2/+4
|
* fixed EAP-GTC secret lookupMartin Willi2008-08-212-8/+22
| | | | | improved error logging PAM authentication needs CAP_AUDIT_WRITE capability
* a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAMMartin Willi2008-08-2112-6/+1009
|
* corrected captionAndreas Steffen2008-08-211-1/+1
|
* charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE ↵Andreas Steffen2008-08-211-3/+14
| | | | events. Useful for taking down hundreds of virtual IPs on the same host
* added sqlite busy handler: retries on locking conflictsMartin Willi2008-08-211-0/+14
|
* avoid too many alloca()s in netlink send, problematic on MIPSMartin Willi2008-08-211-2/+7
|
* some string fixesMartin Willi2008-08-202-2/+2
|
* added missing tooltipMartin Willi2008-08-201-40/+41
|
* handle DBUS permission problems gracefullyMartin Willi2008-08-202-13/+23
|
* fixed shared key lookup by IDMartin Willi2008-08-205-24/+134
| | | | proper auth method selection
* fixed auth-dialog password flushMartin Willi2008-08-201-1/+8
|
* set version back to 4.2.6Andreas Steffen2008-08-191-1/+1
|
* fixed libstrongswan integrity testAndreas Steffen2008-08-195-26/+43
|
* certificate based gateway authenticationMartin Willi2008-08-1912-19/+477
| | | | prototype PSK user authentication with auth-dialog
* updated nm plugin to NetworkManager API changesMartin Willi2008-08-182-148/+48
|
* roam jobs for routing table changes not fired for virtual IP routesMartin Willi2008-08-181-36/+66
|
* do not fire a roam job when virtual IP is deletedAndreas Steffen2008-08-151-1/+1
|
* temporary workaround to prevent roam jobs due to virtual IP installationsAndreas Steffen2008-08-111-1/+2
|
* corrected typoAndreas Steffen2008-08-111-1/+1
|
* * ruby extension extracted from irdummTobias Brunner2008-08-079-561/+619
| | | | * guests do not shutdown anymore on SIGINT in irb
* added ipv6/net2net-ip6-in-ip6-ikev2 scenarioAndreas Steffen2008-08-0622-1/+323
|
* add additional scenario diagramsAndreas Steffen2008-08-063-0/+0
|
* added missing cleanup on failureTobias Brunner2008-08-061-3/+4
|
* initiator sends contents of rightca= if present as a certificate request ↵Andreas Steffen2008-08-051-9/+15
| | | | without searching for further CA certificates
* fixed improper TAILQ fix which caused pluto to segfaultAndreas Steffen2008-08-031-1/+1
|
* corrected captionAndreas Steffen2008-08-011-1/+1
|
* Redhat/Fedora requires var/lock/subsys/ipsec for runlevel changesAndreas Steffen2008-08-011-0/+6
|
* ipsec starter gives the charon daemon 8s to terminate gracefully before ↵Andreas Steffen2008-08-011-14/+28
| | | | killing the process brutally
* fixed the close_peerlog() bug causing ipsec pluto --help to segfaultAndreas Steffen2008-08-011-2/+2
|
* configuration plugin for NetworkManagerMartin Willi2008-07-3113-0/+1406
|
* added options for virtual IP, UDP encapsulation, IPCompMartin Willi2008-07-313-13/+36
| | | | proper handling of libstrongswan/glib TRUE/FALSE conflict
* exec on a guest now returns the return value of the executed processTobias Brunner2008-07-313-67/+144
|
* reimplemented dbus plugin for NetworkManager 0.7, renamed to nmMartin Willi2008-07-3114-792/+542
|
* recreating FIFO if it existsMartin Willi2008-07-311-2/+2
|
* fixed usage typoMartin Willi2008-07-311-1/+1
|
* increased stroke socket backlog to 10Martin Willi2008-07-301-1/+1
|