aboutsummaryrefslogtreecommitdiffstats
path: root/conf/Makefile.am
Commit message (Collapse)AuthorAgeFilesLines
* The pacman tool got replaced by the sec-updater toolTobias Brunner2017-11-151-1/+0
|
* sec-updater: Import SWID tags of updated packagesAndreas Steffen2017-09-091-0/+1
| | | | | | | sec-updater downloads the deb package files from security updates from a given linux repository and uses the swid_generator command to derive a SWID tag. The SWID tag is then imported into strongTNC using the manage.py importswid command.
* curl: Enable following redirectsTobias Brunner2017-07-271-0/+1
| | | | | | | The maximum number of redirects can be limited. The functionality can also be disabled. Fixes #2366.
* sw-collector: Collects endpoint software eventsAndreas Steffen2017-07-081-1/+2
|
* imv-swima: Created SWIMA IMV pluginAndreas Steffen2017-07-081-0/+1
|
* imc-swima: Created SWIMA IMC pluginAndreas Steffen2017-07-081-0/+1
|
* eap-aka-3gpp: Add plugin that implements 3GPP MILENAGE algorithm in softwareTobias Brunner2017-07-051-1/+2
| | | | | | | | | | This is similar to the eap-aka-3gpp2 plugin. K (optionally concatenated with OPc) may be configured as binary EAP secret in ipsec.secrets or swanctl.conf. Based on a patch by Thomas Strangert. Fixes #2326.
* conf: Remove snippet for aikpub2Tobias Brunner2017-03-231-1/+0
|
* The tpm plugin offers random number generationAndreas Steffen2017-03-201-0/+1
| | | | | | The tpm plugin can be used to derive true random numbers from a TPM 2.0 device. The get_random method must be explicitly enabled in strongswan.conf with the plugin.tpm.use_rng = yes option.
* addrblock: Support an optional non-strict mode accepting certs without addrblockMartin Willi2017-03-021-0/+1
| | | | | | | This allows a gateway to enforce the addrblock policy on certificates that actually have the extension only. For (legacy) certificates not having the extension, traffic selectors are validated/narrowed by other means, most likely by the configuration.
* bypass-lan: Allow ignoring or only considering subnets of specific interfacesTobias Brunner2017-02-081-0/+1
| | | | The config can also be reloaded by sending a SIGHUP to charon.
* revocation: OCSP and/or CRL fetching can be disabledAndreas Steffen2016-12-301-0/+1
|
* nm: Make global CA directory configurableTobias Brunner2016-10-041-0/+1
|
* conf: aikpub2.opt added to Makefile.amAndreas Steffen2016-08-251-0/+1
|
* p-cscf: Make sending requests configurable and disable it by defaultTobias Brunner2016-03-101-0/+1
|
* conf: Add documentation for new osx-attr optionTobias Brunner2015-08-281-0/+1
|
* Added imc-hcd attributes to strongswan.confAndreas Steffen2015-08-181-0/+1
|
* imv_policy_manager: Added capability to execute an allow or block shell ↵Andreas Steffen2015-04-261-0/+1
| | | | command string
* kernel-pfkey: Add option to set receive buffer size of event socketTobias Brunner2015-03-061-0/+1
| | | | | | | | If many requests are sent to the kernel the events generated by these requests may fill the receive buffer before the daemon is able to read these messages. Fixes #783.
* Implemented improved BLISS-B signature algorithmAndreas Steffen2015-02-251-0/+1
|
* forecast: Document strongswan.conf optionsMartin Willi2015-02-201-0/+1
|
* ext-auth: Add an ext-auth plugin invoking an external authorization scriptMartin Willi2014-10-061-0/+1
| | | | Original patch courtesy of Vyronas Tsingaras.
* Don't fail to install if sysconfdir isn't writableShea Levy2014-09-261-3/+3
|
* systemd: Add a native systemd journal loggerMartin Willi2014-09-221-0/+1
|
* conf: Document swanctl optionsTobias Brunner2014-06-301-0/+1
|
* conf: Document aikgen optionsTobias Brunner2014-06-301-0/+1
|
* autoconf: Replace --disable-tools option with --disable-scepclientTobias Brunner2014-06-301-3/+3
| | | | | Since using a separate option for pki this was the only tool that was still enabled by that option.
* Remove kernel-klips pluginTobias Brunner2014-06-191-1/+0
|
* configure: Separate pki from --disable-toolsMartin Willi2014-06-041-0/+1
| | | | While pki builds and runs just fine on Windows, this is not true for scepclient.
* Updated IMC/IMV entries in strongswan.conf man pageAndreas Steffen2014-05-311-0/+1
|
* vici: Document strongswan.conf optionsMartin Willi2014-05-071-0/+1
|
* conf: Fix out-of-tree build from distributionTobias Brunner2014-02-271-6/+3
| | | | | | It worked from the repository, where strongswan.conf.5.main is generated in the build dir, but not from the distribution where it is located in the source dir, so explicitly create it in the source dir.
* conf: Fix installation on FreeBSDTobias Brunner2014-02-131-2/+2
| | | | Apparently, the -t option for install is not portable.
* conf: The use of $^ is not portableTobias Brunner2014-02-131-3/+6
| | | | | Generating strongswan.conf.5.main in a subshell gets the file properly written to the builddir in out-of-tree builds.
* conf: Install config files world-readable but warn about permissions for ↵Tobias Brunner2014-02-121-3/+3
| | | | certain options
* conf: Only install config snippets for enabled componentsTobias Brunner2014-02-121-2/+3
|
* conf: Document options of other programsTobias Brunner2014-02-121-1/+6
|
* conf: Document options of plugins in libptsTobias Brunner2014-02-121-0/+4
|
* conf: Document libimcv optionsTobias Brunner2014-02-121-0/+8
|
* conf: Document libtnccs optionsTobias Brunner2014-02-121-1/+6
|
* conf: Create automatically generated config snippets in build dirTobias Brunner2014-02-121-3/+8
|
* conf: Install config snippets in /usr/share/strongswan/templates/config tooTobias Brunner2014-02-121-0/+7
|
* conf: Only install config snippets if they don't exist yetTobias Brunner2014-02-121-7/+13
|
* conf: Options of all plugins documentedTobias Brunner2014-02-121-1/+47
| | | | Some options are still missing descriptions though.
* conf: Add logger example configTobias Brunner2014-02-121-1/+2
|
* conf: Split strongswan.conf(5) man page and use generated snippetTobias Brunner2014-02-121-0/+4
|
* conf: Generate groff snippet for configuration optionsTobias Brunner2014-02-121-2/+6
|
* conf: Generate strongswan.conf(5) man page in different directoryTobias Brunner2014-02-121-0/+4
|
* conf: Generate and install config sippets for option descriptionsTobias Brunner2014-02-121-5/+62
| | | | | The strongswan.d directory is also created relative to the configured location of strongswan.conf.
* conf: Create /etc/strongswan.d directory and include .conf filesTobias Brunner2014-02-121-0/+1
|