Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | version bump to 5.0.1 | Andreas Steffen | 2012-10-02 | 1 | -1/+1 |
| | |||||
* | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 1 | -0/+4 |
| | |||||
* | Removed the unneeded socket-raw plugin | Tobias Brunner | 2012-09-14 | 1 | -4/+0 |
| | |||||
* | version bump to 5.0.1rc1 | Andreas Steffen | 2012-09-12 | 1 | -1/+1 |
| | |||||
* | Merge branch 'eap-client-select' | Tobias Brunner | 2012-08-31 | 1 | -0/+4 |
|\ | | | | | | | | | | | This brings support for EAP-Nak payloads on the client (to select a specific or supported method), and the server (via the eap-dynamic plugin which selects a method supported/requested by the client). | ||||
| * | Added eap-dynamic plugin which can proxy any other EAP method | Tobias Brunner | 2012-08-31 | 1 | -0/+4 |
| | | |||||
* | | version bump to 5.0.1dr4 | Andreas Steffen | 2012-08-31 | 1 | -1/+1 |
|/ | |||||
* | Add a mutex/condvar based semaphore implementation if sem_timedwait is ↵ | Martin Willi | 2012-08-20 | 1 | -0/+2 |
| | | | | | | unavailable Fixes #214. | ||||
* | version bump to 5.0.1dr3 | Andreas Steffen | 2012-08-20 | 1 | -1/+1 |
| | |||||
* | version bump to 5.0.1dr2 | Andreas Steffen | 2012-08-14 | 1 | -1/+1 |
| | |||||
* | Merge branch 'android-app' | Tobias Brunner | 2012-08-13 | 1 | -0/+1 |
|\ | | | | | | | | | | | | | | | This branch introduces a userland IPsec implementation (libipsec) and an Android App which targets the VpnService API that is provided by Android 4+. The implementation is based on the bachelor thesis 'Userland IPsec for Android 4' by Giuliano Grassi and Ralf Sager. | ||||
| * | Fixed ip_packet_t if IPv6 is not available | Tobias Brunner | 2012-08-08 | 1 | -0/+1 |
| | | |||||
* | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -0/+30 |
|\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | ||||
| * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -3/+3 |
| | | | | | | | | Also added strongswan.conf options to change the ports. | ||||
| * | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 1 | -0/+3 |
| | | |||||
| * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 1 | -0/+4 |
| | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | ||||
| * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -0/+23 |
| | | | | | | | | configurable. | ||||
* | | Documentation fixes regarding xauth-pam/eap-gtc plugins | Tobias Brunner | 2012-08-11 | 1 | -1/+1 |
| | | |||||
* | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 1 | -1/+5 |
|/ | |||||
* | With --enable-bfd-backtraces, use binutils libbfd to resolve backtraces | Martin Willi | 2012-07-13 | 1 | -0/+9 |
| | | | | | | | | The invocation of addr2line to resolve backtrace source locations is slow and cumbersome. When using libbfd directly, we can eliminate the overhead of the process invocation. Even better, we can cache library symbol names, bringing wicked fast lookups. As a neat bonus, we can resolve static function names. | ||||
* | Set a sane default if --with-dev-headers is given without path | Martin Willi | 2012-07-12 | 1 | -0/+3 |
| | |||||
* | version bump to 5.0.1dr1 | Andreas Steffen | 2012-07-11 | 1 | -1/+1 |
| | |||||
* | Install dev headers only if --with-dev-headers= option is set | Martin Willi | 2012-07-11 | 1 | -0/+4 |
| | |||||
* | Check if config.h passed correctly via gcc -include | Martin Willi | 2012-07-11 | 1 | -0/+1 |
| | |||||
* | Use and install a config.h AC_CONFIG_HEADER that contains all AC_DEFINE results | Martin Willi | 2012-07-11 | 1 | -0/+3 |
| | |||||
* | Added a description to all AC_DEFINE macros, as required by autoheader | Martin Willi | 2012-07-11 | 1 | -28/+46 |
| | |||||
* | getpwnam_r and getgrnam_r are not supported by the Android NDK | Tobias Brunner | 2012-07-09 | 1 | -1/+1 |
| | |||||
* | Fixed help text for --disable-xauth-generic plugin | Tobias Brunner | 2012-07-05 | 1 | -1/+1 |
| | |||||
* | Thread-safe wrapper around strerror(3)/strerror_r(3) added | Tobias Brunner | 2012-06-28 | 1 | -0/+1 |
| | |||||
* | Added an option to rename the ipsec script during installation | Tobias Brunner | 2012-06-25 | 1 | -0/+4 |
| | | | | | | | Also rename the man page and adjust all references in the script, the man page and other files. Closes #194. | ||||
* | Enable xauth-generic by default but don't build it if IKEv1 is disabled | Tobias Brunner | 2012-06-25 | 1 | -1/+5 |
| | |||||
* | version bump to 5.0.0 | Andreas Steffen | 2012-06-23 | 1 | -1/+1 |
| | |||||
* | Removed remaining pluto related configure options. | Tobias Brunner | 2012-06-13 | 1 | -21/+3 |
| | |||||
* | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 1 | -62/+36 |
| | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | ||||
* | version bump to 5.0.0rc1 | Andreas Steffen | 2012-06-09 | 1 | -1/+1 |
| | |||||
* | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 |
| | |||||
* | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 1 | -0/+4 |
| | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | ||||
* | It seems charon-nm has to be linked against libnm-util. | Tobias Brunner | 2012-05-03 | 1 | -2/+2 |
| | | | | That's at least the case for NetworkManager 0.9.4 in Ubuntu 12.04. | ||||
* | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 1 | -4/+1 |
| | |||||
* | Added a small libcharon wrapper intended to directly host the nm plugin. | Tobias Brunner | 2012-05-03 | 1 | -46/+50 |
| | | | | For this reason it reclaims the --enable-nm configure option. | ||||
* | Provide plugin list from charon, not internally in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -98/+98 |
| | |||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -4/+21 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -4/+21 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | * | Added an XAuth plugin that forwards authentication to EAP methods | Martin Willi | 2012-03-20 | 1 | -0/+4 |
| | | | |||||
| | * | Added a --disable-ikev2 option to disable IKEv2 support in charon | Martin Willi | 2012-03-20 | 1 | -1/+6 |
| | | | |||||
| | * | Added generic XAuth backend, using secrets provided by credential sets. | Tobias Brunner | 2012-03-20 | 1 | -0/+4 |
| | | | |||||
| | * | Removed xauth-null dummy plugin. | Tobias Brunner | 2012-03-20 | 1 | -4/+0 |
| | | | |||||
| | * | version bump to 5.0.0dr1 | Andreas Steffen | 2012-03-20 | 1 | -1/+1 |
| | | | |||||
| | * | IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+4 |
| | | | | | | | | | | | | and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin. | ||||
| | * | Added configure option for the IKEv1 implementation in charon. | Tobias Brunner | 2012-03-20 | 1 | -2/+6 |
| | | |