Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 1 | -1/+4 |
| | |||||
* | Updated strongswan.conf(5) man page | Tobias Brunner | 2013-04-01 | 1 | -10/+42 |
| | |||||
* | updated strongswan.conf man page for tn_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -12/+12 |
| | |||||
* | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 1 | -0/+6 |
| | | | | Also streamlined log messages in unbound plugin. | ||||
* | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 1 | -0/+3 |
| | |||||
* | Typo in strongswan.conf(5) man page fixed | Tobias Brunner | 2013-01-31 | 1 | -1/+1 |
| | |||||
* | Documented new options in strongswan.conf(5) man page | Tobias Brunner | 2013-01-25 | 1 | -3/+60 |
| | |||||
* | Added an option to configure the maximum size of a fragment | Tobias Brunner | 2013-01-12 | 1 | -0/+4 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -5/+0 |
| | |||||
* | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+5 |
| | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | ||||
* | add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins | Andreas Steffen | 2012-12-09 | 1 | -0/+6 |
| | |||||
* | updated strongswan.conf man page | Andreas Steffen | 2012-11-12 | 1 | -2/+14 |
| | |||||
* | scanner imc/imv pair uses IETF VPN PA-TNC message subtype | Andreas Steffen | 2012-10-31 | 1 | -0/+6 |
| | |||||
* | Added an option to reload certificates from PKCS#11 tokens on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -0/+3 |
| | |||||
* | Terminate unused resolver threads after a timeout | Tobias Brunner | 2012-10-18 | 1 | -0/+6 |
| | |||||
* | implemented os_info_t class | Andreas Steffen | 2012-10-10 | 1 | -6/+6 |
| | |||||
* | Added description for flush_auth_cfg and acct_port plus some minor editorial ↵ | Tobias Brunner | 2012-09-25 | 1 | -6/+16 |
| | | | | changes | ||||
* | Documentation about some time values clarified | Tobias Brunner | 2012-09-24 | 1 | -2/+2 |
| | |||||
* | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -0/+4 |
| | | | | installed | ||||
* | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 1 | -1/+9 |
| | | | | interfaces | ||||
* | Option added to enforce a configured destination address for DHCP packets | Tobias Brunner | 2012-09-13 | 1 | -0/+8 |
| | |||||
* | Updates to strongswan.conf(5) man page (added several missing options) | Tobias Brunner | 2012-09-12 | 1 | -39/+82 |
| | |||||
* | Add random plugin options to strongswan.conf.5 | Martin Willi | 2012-09-10 | 1 | -0/+6 |
| | |||||
* | added libimcv.assessment_result to strongswan.conf man page | Andreas Steffen | 2012-09-09 | 1 | -0/+3 |
| | |||||
* | Documentation for eap-dynamic added | Tobias Brunner | 2012-08-31 | 1 | -0/+10 |
| | |||||
* | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -1/+16 |
|\ | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | ||||
| * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -0/+3 |
| | | | | | | | | outbound packets | ||||
| * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -0/+9 |
| | | | | | | | | Also added strongswan.conf options to change the ports. | ||||
| * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 1 | -0/+3 |
| | | |||||
| * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | ||||
* | | Documentation fixes regarding xauth-pam/eap-gtc plugins | Tobias Brunner | 2012-08-11 | 1 | -3/+5 |
| | | |||||
* | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 1 | -2/+2 |
|/ | |||||
* | added PA-TNC max_msg_len option to man page | Andreas Steffen | 2012-07-13 | 1 | -0/+6 |
| | |||||
* | make maximum PB-TNC batch size configurable | Andreas Steffen | 2012-07-11 | 1 | -0/+3 |
| | |||||
* | added charon.plugins.eap-tnc.protocol option | Andreas Steffen | 2012-07-11 | 1 | -0/+3 |
| | |||||
* | EAP-TNC does not support fragmentation | Andreas Steffen | 2012-07-11 | 1 | -6/+0 |
| | |||||
* | configure size of ITA Dummy PA-TNC attribute | Andreas Steffen | 2012-07-11 | 1 | -0/+3 |
| | |||||
* | max_message_count = 0 disables limit | Andreas Steffen | 2012-07-11 | 1 | -4/+4 |
| | |||||
* | added charon.cisco_unity to strongswan.conf.5 man page | Andreas Steffen | 2012-06-25 | 1 | -0/+3 |
| | |||||
* | Retry IKE_SA initiation if DNS resolution failed. | Tobias Brunner | 2012-05-30 | 1 | -0/+4 |
| | | | | | This is disabled by default and can be enabled with the charon.retry_initiate_interval option in strongswan.conf. | ||||
* | Documented strongswan.conf options for radattr plugin. | Tobias Brunner | 2012-05-01 | 1 | -1/+8 |
| | |||||
* | Option added to set identifier for syslog(3) logging. | Tobias Brunner | 2012-04-20 | 1 | -0/+8 |
| | | | | This identifier is added to each log message by syslog. | ||||
* | Make resolvconf interface prefix configurable. | Tobias Brunner | 2012-03-27 | 1 | -0/+6 |
| | |||||
* | added the strongswan.conf options of the tnc-pdp plugin | Andreas Steffen | 2012-03-16 | 1 | -0/+12 |
| | |||||
* | completed imc/imv-attestation settings | Andreas Steffen | 2012-02-07 | 1 | -1/+20 |
| | |||||
* | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -0/+4 |
| | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | ||||
* | Added RADIUS accounting option to strongswan.conf manual | Martin Willi | 2012-02-01 | 1 | -0/+3 |
| | |||||
* | Make number of concurrently handled stroke messages configurable. | Tobias Brunner | 2011-12-29 | 1 | -0/+3 |
| | |||||
* | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509). | Tobias Brunner | 2011-12-16 | 1 | -0/+3 |
| | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels. | ||||
* | added libimcv.plugins.imc-attestation.aik_blob parameter | Andreas Steffen | 2011-12-11 | 1 | -0/+3 |
| |