| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | man: Document replay_window ipsec.conf option | Tobias Brunner | 2014-06-30 | 1 | -0/+9 |
| | | |||||
| * | ike: Restart inactivity counter after doing a CHILD_SA rekey | Martin Willi | 2014-01-23 | 1 | -1/+3 |
| | | | | | | | | | | | | | When doing a rekey for a CHILD_SA, the use counters get reset. An inactivity job is queued for a time unrelated to the rekey time, so it might happen that the inactivity job gets executed just after rekeying. If this happens, inactivity is detected even if we had traffic on the rekeyed CHILD_SA just before rekeying. This change implies that inactivity checks can't handle inactivity timeouts for rekeyed CHILD_SAs, and therefore requires that inactivity timeout is shorter than the rekey time to have any effect. | ||||
| * | ipsec.conf.5: Note about ICMP[v6] message type/code added | Tobias Brunner | 2013-10-17 | 1 | -0/+8 |
| | | |||||
| * | ipsec.conf: Add a description for the new 'ah' keyword. | Martin Willi | 2013-10-11 | 1 | -0/+41 |
| | | |||||
| * | Build generated man pages via configure script | Tobias Brunner | 2013-09-13 | 1 | -1/+1 |
| | | |||||
| * | man: add support for multiple addresses/ranges/subnets in ipsec.conf left= | Martin Willi | 2013-09-04 | 1 | -3/+10 |
| | | |||||
| * | man: update ipsec.conf modeconfig keyword | Martin Willi | 2013-09-04 | 1 | -2/+1 |
| | | |||||
| * | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
| * | ipsec.conf.5: closeaction is now supported for IKEv1 | Tobias Brunner | 2013-07-17 | 1 | -2/+1 |
| | | |||||
| * | stroke: Changed how proto/port are specified in left|rightsubnet | Tobias Brunner | 2013-06-28 | 1 | -6/+7 |
| | | | | | Using a colon as separator conflicts with IPv6 addresses. | ||||
| * | man: update ipsec.conf.5, describing new proto/port definition within leftsubnet | Martin Willi | 2013-06-19 | 1 | -24/+34 |
| | | |||||
| * | Load any type (RSA/ECDSA) of public key via left|rightsigkey | Tobias Brunner | 2013-05-07 | 1 | -4/+6 |
| | | |||||
| * | left|rightrsasigkey accepts SSH keys but the key format has to be specified ↵ | Tobias Brunner | 2013-05-07 | 1 | -3/+9 |
| | | | | | | | | explicitly The default is now PKCS#1. With the dns: and ssh: prefixes other formats can be selected. | ||||
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -0/+4 |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | ||||
| | * | Add ipsec.conf.5 updates regarding multiple certificates in leftcert | Martin Willi | 2013-01-18 | 1 | -0/+4 |
| | | | |||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -0/+8 |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 |
| | |/ | |||||
| * / | Add ikedscp documentation to ipsec.conf.5 | Martin Willi | 2013-02-06 | 1 | -0/+5 |
| |/ | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -4/+9 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+10 |
| | | |||||
| * | Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards | Martin Willi | 2012-10-24 | 1 | -5/+7 |
| | | |||||
| * | Add leftcert ipsec.conf.5 documentation about smartcard certificates | Martin Willi | 2012-10-24 | 1 | -0/+12 |
| | | |||||
| * | Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals | Martin Willi | 2012-10-24 | 1 | -7/+17 |
| | | |||||
| * | Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity | Martin Willi | 2012-09-18 | 1 | -2/+3 |
| | | |||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+12 |
| | | |||||
| * | Some updates to ipsec.conf(5) man page | Tobias Brunner | 2012-09-12 | 1 | -49/+70 |
| | | |||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -9/+16 |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | ||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 1 | -6/+16 |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | ||||
| | * | Updated ipsec.conf.5 with multiple left/rightsourceip support | Martin Willi | 2012-08-30 | 1 | -6/+6 |
| | | | |||||
| | * | Add a description of the leftdns option to ipsec.conf.5 | Martin Willi | 2012-08-21 | 1 | -0/+10 |
| | | | |||||
| * | | Documentation for eap-dynamic added | Tobias Brunner | 2012-08-31 | 1 | -0/+1 |
| |/ | |||||
| * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 1 | -1/+2 |
| | | |||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 1 | -0/+6 |
| | | |||||
| * | Some updates in ipsec.conf(5) for 5.0.0 | Tobias Brunner | 2012-06-26 | 1 | -36/+50 |
| | | |||||
| * | added secret as valid authby argument | Andreas Steffen | 2012-06-18 | 1 | -1/+1 |
| | | |||||
| * | Add documentation for signature hash algorithm enforcing to man ipsec.conf | Martin Willi | 2012-06-12 | 1 | -4/+11 |
| | | |||||
| * | starter: Drop support for %defaultroute. | Tobias Brunner | 2012-06-11 | 1 | -16/+2 |
| | | |||||
| * | Updated ipsec.conf(5) to reflect changes to IPComp support. | Tobias Brunner | 2012-05-24 | 1 | -4/+2 |
| | | |||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -367/+79 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -360/+78 |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | | * | Updated ipsec.conf man page for the use of IKEv1 with pluto | Martin Willi | 2012-03-20 | 1 | -332/+73 |
| | | | | |||||
| | | * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 1 | -33/+4 |
| | | | | |||||
| * | | | updated supported EAP methods | Andreas Steffen | 2012-03-30 | 1 | -5/+14 |
| |/ / | |||||
| * | | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509). | Tobias Brunner | 2011-12-16 | 1 | -1/+1 |
| | | | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels. | ||||
| * | | Charon also supports type=passthrough|drop. | Tobias Brunner | 2011-12-14 | 1 | -6/+0 |
| | | | |||||
| * | | Documented xauth_identity in ipsec.conf(5) man page. | Tobias Brunner | 2011-12-14 | 1 | -3/+7 |
| |/ | |||||
| * | Documented the strict flag (!) for ike and esp options in ipsec.conf. | Tobias Brunner | 2011-09-26 | 1 | -8/+38 |
| | | |||||
| * | PTS log group documented in man pages. | Tobias Brunner | 2011-09-12 | 1 | -1/+1 |
| | | |||||
| * | Document charon's default log levels in ipsec.conf(5). | Tobias Brunner | 2011-09-12 | 1 | -4/+6 |
| | | |||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -2/+2 |
| | | | | | Mostly found by 'codespell'. | ||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |