| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin | Andreas Steffen | 2013-08-26 | 1 | -0/+6 |
| | | |||||
| * | moved tnc_imv plugin to libtnccs thanks to recommendation callback function | Andreas Steffen | 2013-08-15 | 1 | -8/+8 |
| | | |||||
| * | Documented plugin move from libcharon to libtnccs in strongswan.conf | Andreas Steffen | 2013-08-15 | 1 | -15/+17 |
| | | |||||
| * | Add PT-TLS interface to strongSwan PDP | Andreas Steffen | 2013-08-15 | 1 | -3/+6 |
| | | |||||
| * | strongswan.conf: Add note about reserved threads | Tobias Brunner | 2013-08-07 | 1 | -1/+5 |
| | | |||||
| * | strongswan.conf: Moved some stuff around | Tobias Brunner | 2013-07-23 | 1 | -23/+24 |
| | | |||||
| * | strongswan.conf: Add missing options | Tobias Brunner | 2013-07-22 | 1 | -10/+47 |
| | | |||||
| * | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
| * | ipsec.conf.5: closeaction is now supported for IKEv1 | Tobias Brunner | 2013-07-17 | 1 | -2/+1 |
| | | |||||
| * | kernel-pfroute: Make time that is waited for VIPs to appear configurable | Tobias Brunner | 2013-07-17 | 1 | -0/+3 |
| | | | | | | One second might be too short for IPs to appear/disappear, especially on virtualized hosts. | ||||
| * | socket-default: Add options to disable address families | Tobias Brunner | 2013-07-05 | 1 | -0/+6 |
| | | |||||
| * | stroke: Changed how proto/port are specified in left|rightsubnet | Tobias Brunner | 2013-06-28 | 1 | -6/+7 |
| | | | | | Using a colon as separator conflicts with IPv6 addresses. | ||||
| * | capabilities: Make the user and group charon(-nm) changes to configurable | Tobias Brunner | 2013-06-25 | 1 | -0/+6 |
| | | |||||
| * | Removed obsoleted strongswan.conf options | Andreas Steffen | 2013-06-21 | 1 | -15/+0 |
| | | |||||
| * | charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages | Tobias Brunner | 2013-06-21 | 1 | -2/+9 |
| | | |||||
| * | man: update ipsec.conf.5, describing new proto/port definition within leftsubnet | Martin Willi | 2013-06-19 | 1 | -24/+34 |
| | | |||||
| * | stroke: Load credentials from PKCS#12 files (P12 token) | Tobias Brunner | 2013-05-08 | 1 | -4/+17 |
| | | |||||
| * | Load any type (RSA/ECDSA) of public key via left|rightsigkey | Tobias Brunner | 2013-05-07 | 1 | -4/+6 |
| | | |||||
| * | left|rightrsasigkey accepts SSH keys but the key format has to be specified ↵ | Tobias Brunner | 2013-05-07 | 1 | -3/+9 |
| | | | | | | | | explicitly The default is now PKCS#1. With the dns: and ssh: prefixes other formats can be selected. | ||||
| * | Use the GEN silent rule when generating files with sed | Martin Willi | 2013-05-06 | 1 | -1/+1 |
| | | |||||
| * | kernel-netlink: Add an option to disable roam events | Tobias Brunner | 2013-05-03 | 1 | -0/+3 |
| | | |||||
| * | added libstrongswan.plugins.openssl.fips_mode to man page | Andreas Steffen | 2013-04-16 | 1 | -0/+3 |
| | | |||||
| * | Added charon.initiator_only option which causes charon to ignore IKE ↵ | Andreas Steffen | 2013-04-14 | 1 | -0/+3 |
| | | | | | initiation requests by peers | ||||
| * | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 1 | -1/+4 |
| | | |||||
| * | Updated strongswan.conf(5) man page | Tobias Brunner | 2013-04-01 | 1 | -10/+42 |
| | | |||||
| * | updated strongswan.conf man page for tn_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -12/+12 |
| | | |||||
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -0/+4 |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | ||||
| | * | Add ipsec.conf.5 updates regarding multiple certificates in leftcert | Martin Willi | 2013-01-18 | 1 | -0/+4 |
| | | | |||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -0/+8 |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 |
| | | | | |||||
| * | | | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 1 | -0/+6 |
| | | | | | | | | | | | | | Also streamlined log messages in unbound plugin. | ||||
| * | | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 1 | -0/+3 |
| | | | | |||||
| * | | | Merge branch 'ike-dscp' | Martin Willi | 2013-02-14 | 1 | -0/+5 |
| |\ \ \ | |||||
| | * | | | Add ikedscp documentation to ipsec.conf.5 | Martin Willi | 2013-02-06 | 1 | -0/+5 |
| | |/ / | |||||
| * / / | Typo in strongswan.conf(5) man page fixed | Tobias Brunner | 2013-01-31 | 1 | -1/+1 |
| |/ / | |||||
| * / | Documented new options in strongswan.conf(5) man page | Tobias Brunner | 2013-01-25 | 1 | -3/+60 |
| |/ | |||||
| * | Added an option to configure the maximum size of a fragment | Tobias Brunner | 2013-01-12 | 1 | -0/+4 |
| | | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -4/+9 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 2 | -5/+10 |
| | | |||||
| * | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+5 |
| | | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | ||||
| * | add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins | Andreas Steffen | 2012-12-09 | 1 | -0/+6 |
| | | |||||
| * | updated strongswan.conf man page | Andreas Steffen | 2012-11-12 | 1 | -2/+14 |
| | | |||||
| * | scanner imc/imv pair uses IETF VPN PA-TNC message subtype | Andreas Steffen | 2012-10-31 | 1 | -0/+6 |
| | | |||||
| * | FQDNs are actually not resolved when loading secrets | Tobias Brunner | 2012-10-29 | 1 | -7/+1 |
| | | |||||
| * | Added documentation for NTLM secrets | Tobias Brunner | 2012-10-25 | 1 | -0/+10 |
| | | |||||
| * | Remove obsolete pluto smartcard syntax in ipsec.secrets.5 | Martin Willi | 2012-10-24 | 1 | -8/+5 |
| | | |||||
| * | Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards | Martin Willi | 2012-10-24 | 1 | -5/+7 |
| | | |||||
| * | Add leftcert ipsec.conf.5 documentation about smartcard certificates | Martin Willi | 2012-10-24 | 1 | -0/+12 |
| | | |||||
| * | Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals | Martin Willi | 2012-10-24 | 1 | -7/+17 |
| | | |||||
| * | Added an option to reload certificates from PKCS#11 tokens on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -0/+3 |
| | | |||||
