| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | xauth-pam: Make trimming of email addresses optional5.1.1dr4 | Tobias Brunner | 2013-10-04 | 1 | -0/+4 |
| | | | | | Fixes #430. | ||||
| * | kernel-netlink: Allow to override xfrm_acq_expires value | Ansis Atteka | 2013-09-23 | 1 | -0/+5 |
| | | | | | | | | | | | | | | | | | When using auto=route, current xfrm_acq_expires default value implies that tunnel can be down for up to 165 seconds, if other peer rejected first IKE request with an AUTH_FAILED or NO_PROPOSAL_CHOSEN error message. These error messages are completely normal in setups where another application pushes configuration to both strongSwans without waiting for acknowledgment that they have updated their configurations. This patch allows strongswan to override xfrm_acq_expires default value by setting charon.plugins.kernel-netlink.xfrm_acq_expires in strongswan.conf. Signed-off-by: Ansis Atteka <aatteka@nicira.com> | ||||
| * | strongswan.conf: Use configured piddir for UNIX sockets | Tobias Brunner | 2013-09-13 | 1 | -6/+6 |
| | | |||||
| * | Build generated man pages via configure script | Tobias Brunner | 2013-09-13 | 5 | -23/+14 |
| | | |||||
| * | Make SWID directory where tags are stored configurable | Andreas Steffen | 2013-09-05 | 1 | -0/+3 |
| | | |||||
| * | man: add support for multiple addresses/ranges/subnets in ipsec.conf left= | Martin Willi | 2013-09-04 | 1 | -3/+10 |
| | | |||||
| * | man: update ipsec.conf modeconfig keyword | Martin Willi | 2013-09-04 | 1 | -2/+1 |
| | | |||||
| * | Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin | Andreas Steffen | 2013-08-26 | 1 | -0/+6 |
| | | |||||
| * | moved tnc_imv plugin to libtnccs thanks to recommendation callback function | Andreas Steffen | 2013-08-15 | 1 | -8/+8 |
| | | |||||
| * | Documented plugin move from libcharon to libtnccs in strongswan.conf | Andreas Steffen | 2013-08-15 | 1 | -15/+17 |
| | | |||||
| * | Add PT-TLS interface to strongSwan PDP | Andreas Steffen | 2013-08-15 | 1 | -3/+6 |
| | | |||||
| * | strongswan.conf: Add note about reserved threads | Tobias Brunner | 2013-08-07 | 1 | -1/+5 |
| | | |||||
| * | strongswan.conf: Moved some stuff around | Tobias Brunner | 2013-07-23 | 1 | -23/+24 |
| | | |||||
| * | strongswan.conf: Add missing options | Tobias Brunner | 2013-07-22 | 1 | -10/+47 |
| | | |||||
| * | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
| * | ipsec.conf.5: closeaction is now supported for IKEv1 | Tobias Brunner | 2013-07-17 | 1 | -2/+1 |
| | | |||||
| * | kernel-pfroute: Make time that is waited for VIPs to appear configurable | Tobias Brunner | 2013-07-17 | 1 | -0/+3 |
| | | | | | | One second might be too short for IPs to appear/disappear, especially on virtualized hosts. | ||||
| * | socket-default: Add options to disable address families | Tobias Brunner | 2013-07-05 | 1 | -0/+6 |
| | | |||||
| * | stroke: Changed how proto/port are specified in left|rightsubnet | Tobias Brunner | 2013-06-28 | 1 | -6/+7 |
| | | | | | Using a colon as separator conflicts with IPv6 addresses. | ||||
| * | capabilities: Make the user and group charon(-nm) changes to configurable | Tobias Brunner | 2013-06-25 | 1 | -0/+6 |
| | | |||||
| * | Removed obsoleted strongswan.conf options | Andreas Steffen | 2013-06-21 | 1 | -15/+0 |
| | | |||||
| * | charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages | Tobias Brunner | 2013-06-21 | 1 | -2/+9 |
| | | |||||
| * | man: update ipsec.conf.5, describing new proto/port definition within leftsubnet | Martin Willi | 2013-06-19 | 1 | -24/+34 |
| | | |||||
| * | stroke: Load credentials from PKCS#12 files (P12 token) | Tobias Brunner | 2013-05-08 | 1 | -4/+17 |
| | | |||||
| * | Load any type (RSA/ECDSA) of public key via left|rightsigkey | Tobias Brunner | 2013-05-07 | 1 | -4/+6 |
| | | |||||
| * | left|rightrsasigkey accepts SSH keys but the key format has to be specified ↵ | Tobias Brunner | 2013-05-07 | 1 | -3/+9 |
| | | | | | | | | explicitly The default is now PKCS#1. With the dns: and ssh: prefixes other formats can be selected. | ||||
| * | Use the GEN silent rule when generating files with sed | Martin Willi | 2013-05-06 | 1 | -1/+1 |
| | | |||||
| * | kernel-netlink: Add an option to disable roam events | Tobias Brunner | 2013-05-03 | 1 | -0/+3 |
| | | |||||
| * | added libstrongswan.plugins.openssl.fips_mode to man page | Andreas Steffen | 2013-04-16 | 1 | -0/+3 |
| | | |||||
| * | Added charon.initiator_only option which causes charon to ignore IKE ↵ | Andreas Steffen | 2013-04-14 | 1 | -0/+3 |
| | | | | | initiation requests by peers | ||||
| * | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 1 | -1/+4 |
| | | |||||
| * | Updated strongswan.conf(5) man page | Tobias Brunner | 2013-04-01 | 1 | -10/+42 |
| | | |||||
| * | updated strongswan.conf man page for tn_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -12/+12 |
| | | |||||
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -0/+4 |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | ||||
| | * | Add ipsec.conf.5 updates regarding multiple certificates in leftcert | Martin Willi | 2013-01-18 | 1 | -0/+4 |
| | | | |||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -0/+8 |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 |
| | | | | |||||
| * | | | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 1 | -0/+6 |
| | | | | | | | | | | | | | Also streamlined log messages in unbound plugin. | ||||
| * | | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 1 | -0/+3 |
| | | | | |||||
| * | | | Merge branch 'ike-dscp' | Martin Willi | 2013-02-14 | 1 | -0/+5 |
| |\ \ \ | |||||
| | * | | | Add ikedscp documentation to ipsec.conf.5 | Martin Willi | 2013-02-06 | 1 | -0/+5 |
| | |/ / | |||||
| * / / | Typo in strongswan.conf(5) man page fixed | Tobias Brunner | 2013-01-31 | 1 | -1/+1 |
| |/ / | |||||
| * / | Documented new options in strongswan.conf(5) man page | Tobias Brunner | 2013-01-25 | 1 | -3/+60 |
| |/ | |||||
| * | Added an option to configure the maximum size of a fragment | Tobias Brunner | 2013-01-12 | 1 | -0/+4 |
| | | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -4/+9 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 2 | -5/+10 |
| | | |||||
| * | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+5 |
| | | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | ||||
| * | add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins | Andreas Steffen | 2012-12-09 | 1 | -0/+6 |
| | | |||||
| * | updated strongswan.conf man page | Andreas Steffen | 2012-11-12 | 1 | -2/+14 |
| | | |||||
| * | scanner imc/imv pair uses IETF VPN PA-TNC message subtype | Andreas Steffen | 2012-10-31 | 1 | -0/+6 |
| | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |