| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Added charon.initiator_only option which causes charon to ignore IKE ↵ | Andreas Steffen | 2013-04-14 | 1 | -0/+3 | |
| | | | | | initiation requests by peers | |||||
| * | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 1 | -1/+4 | |
| | | ||||||
| * | Updated strongswan.conf(5) man page | Tobias Brunner | 2013-04-01 | 1 | -10/+42 | |
| | | ||||||
| * | updated strongswan.conf man page for tn_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -12/+12 | |
| | | ||||||
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -0/+4 | |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | |||||
| | * | Add ipsec.conf.5 updates regarding multiple certificates in leftcert | Martin Willi | 2013-01-18 | 1 | -0/+4 | |
| | | | ||||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -0/+8 | |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | |||||
| | * | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 | |
| | | | | ||||||
| * | | | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 1 | -0/+6 | |
| | | | | | | | | | | | | | Also streamlined log messages in unbound plugin. | |||||
| * | | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 1 | -0/+3 | |
| | | | | ||||||
| * | | | Merge branch 'ike-dscp' | Martin Willi | 2013-02-14 | 1 | -0/+5 | |
| |\ \ \ | ||||||
| | * | | | Add ikedscp documentation to ipsec.conf.5 | Martin Willi | 2013-02-06 | 1 | -0/+5 | |
| | |/ / | ||||||
| * / / | Typo in strongswan.conf(5) man page fixed | Tobias Brunner | 2013-01-31 | 1 | -1/+1 | |
| |/ / | ||||||
| * / | Documented new options in strongswan.conf(5) man page | Tobias Brunner | 2013-01-25 | 1 | -3/+60 | |
| |/ | ||||||
| * | Added an option to configure the maximum size of a fragment | Tobias Brunner | 2013-01-12 | 1 | -0/+4 | |
| | | ||||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -4/+9 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 2 | -5/+10 | |
| | | ||||||
| * | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+5 | |
| | | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | |||||
| * | add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins | Andreas Steffen | 2012-12-09 | 1 | -0/+6 | |
| | | ||||||
| * | updated strongswan.conf man page | Andreas Steffen | 2012-11-12 | 1 | -2/+14 | |
| | | ||||||
| * | scanner imc/imv pair uses IETF VPN PA-TNC message subtype | Andreas Steffen | 2012-10-31 | 1 | -0/+6 | |
| | | ||||||
| * | FQDNs are actually not resolved when loading secrets | Tobias Brunner | 2012-10-29 | 1 | -7/+1 | |
| | | ||||||
| * | Added documentation for NTLM secrets | Tobias Brunner | 2012-10-25 | 1 | -0/+10 | |
| | | ||||||
| * | Remove obsolete pluto smartcard syntax in ipsec.secrets.5 | Martin Willi | 2012-10-24 | 1 | -8/+5 | |
| | | ||||||
| * | Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards | Martin Willi | 2012-10-24 | 1 | -5/+7 | |
| | | ||||||
| * | Add leftcert ipsec.conf.5 documentation about smartcard certificates | Martin Willi | 2012-10-24 | 1 | -0/+12 | |
| | | ||||||
| * | Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals | Martin Willi | 2012-10-24 | 1 | -7/+17 | |
| | | ||||||
| * | Added an option to reload certificates from PKCS#11 tokens on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -0/+3 | |
| | | ||||||
| * | Terminate unused resolver threads after a timeout | Tobias Brunner | 2012-10-18 | 1 | -0/+6 | |
| | | ||||||
| * | implemented os_info_t class | Andreas Steffen | 2012-10-10 | 1 | -6/+6 | |
| | | ||||||
| * | Added description for flush_auth_cfg and acct_port plus some minor editorial ↵ | Tobias Brunner | 2012-09-25 | 1 | -6/+16 | |
| | | | | | changes | |||||
| * | Documentation about some time values clarified | Tobias Brunner | 2012-09-24 | 1 | -2/+2 | |
| | | ||||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -0/+4 | |
| | | | | | installed | |||||
| * | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 1 | -1/+9 | |
| | | | | | interfaces | |||||
| * | Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity | Martin Willi | 2012-09-18 | 1 | -2/+3 | |
| | | ||||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+12 | |
| | | ||||||
| * | Option added to enforce a configured destination address for DHCP packets | Tobias Brunner | 2012-09-13 | 1 | -0/+8 | |
| | | ||||||
| * | Updates to strongswan.conf(5) man page (added several missing options) | Tobias Brunner | 2012-09-12 | 1 | -39/+82 | |
| | | ||||||
| * | Some updates to ipsec.conf(5) man page | Tobias Brunner | 2012-09-12 | 1 | -49/+70 | |
| | | ||||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -9/+16 | |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
| * | Add random plugin options to strongswan.conf.5 | Martin Willi | 2012-09-10 | 2 | -0/+8 | |
| | | ||||||
| * | added libimcv.assessment_result to strongswan.conf man page | Andreas Steffen | 2012-09-09 | 1 | -0/+3 | |
| | | ||||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 1 | -6/+16 | |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
| | * | Updated ipsec.conf.5 with multiple left/rightsourceip support | Martin Willi | 2012-08-30 | 1 | -6/+6 | |
| | | | ||||||
| | * | Add a description of the leftdns option to ipsec.conf.5 | Martin Willi | 2012-08-21 | 1 | -0/+10 | |
| | | | ||||||
| * | | Documentation for eap-dynamic added | Tobias Brunner | 2012-08-31 | 2 | -0/+11 | |
| |/ | ||||||
| * | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 2 | -2/+18 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| | * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -0/+3 | |
| | | | | | | | | | outbound packets | |||||
| | * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -0/+9 | |
| | | | | | | | | | Also added strongswan.conf options to change the ports. | |||||
| | * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 2 | -1/+5 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |