tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin	Andreas Steffen	2013-08-26	1	-0/+6
\|
*	moved tnc_imv plugin to libtnccs thanks to recommendation callback function	Andreas Steffen	2013-08-15	1	-8/+8
\|
*	Documented plugin move from libcharon to libtnccs in strongswan.conf	Andreas Steffen	2013-08-15	1	-15/+17
\|
*	Add PT-TLS interface to strongSwan PDP	Andreas Steffen	2013-08-15	1	-3/+6
\|
*	strongswan.conf: Add note about reserved threads	Tobias Brunner	2013-08-07	1	-1/+5
\|
*	strongswan.conf: Moved some stuff around	Tobias Brunner	2013-07-23	1	-23/+24
\|
*	strongswan.conf: Add missing options	Tobias Brunner	2013-07-22	1	-10/+47
\|
*	Fix various API doc issues and typos	Tobias Brunner	2013-07-18	1	-1/+1
\| \| \| \|	Partially based on an old patch by Adrian-Ken Rueegsegger.
*	ipsec.conf.5: closeaction is now supported for IKEv1	Tobias Brunner	2013-07-17	1	-2/+1
\|
*	kernel-pfroute: Make time that is waited for VIPs to appear configurable	Tobias Brunner	2013-07-17	1	-0/+3
\| \| \| \| \|	One second might be too short for IPs to appear/disappear, especially on virtualized hosts.
*	socket-default: Add options to disable address families	Tobias Brunner	2013-07-05	1	-0/+6
\|
*	stroke: Changed how proto/port are specified in left\|rightsubnet	Tobias Brunner	2013-06-28	1	-6/+7
\| \| \| \|	Using a colon as separator conflicts with IPv6 addresses.
*	capabilities: Make the user and group charon(-nm) changes to configurable	Tobias Brunner	2013-06-25	1	-0/+6
\|
*	Removed obsoleted strongswan.conf options	Andreas Steffen	2013-06-21	1	-15/+0
\|
*	charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages	Tobias Brunner	2013-06-21	1	-2/+9
\|
*	man: update ipsec.conf.5, describing new proto/port definition within leftsubnet	Martin Willi	2013-06-19	1	-24/+34
\|
*	stroke: Load credentials from PKCS#12 files (P12 token)	Tobias Brunner	2013-05-08	1	-4/+17
\|
*	Load any type (RSA/ECDSA) of public key via left\|rightsigkey	Tobias Brunner	2013-05-07	1	-4/+6
\|
*	left\|rightrsasigkey accepts SSH keys but the key format has to be specified ↵	Tobias Brunner	2013-05-07	1	-3/+9
\| \| \| \| \| \| \|	explicitly The default is now PKCS#1. With the dns: and ssh: prefixes other formats can be selected.
*	Use the GEN silent rule when generating files with sed	Martin Willi	2013-05-06	1	-1/+1
\|
*	kernel-netlink: Add an option to disable roam events	Tobias Brunner	2013-05-03	1	-0/+3
\|
*	added libstrongswan.plugins.openssl.fips_mode to man page	Andreas Steffen	2013-04-16	1	-0/+3
\|
*	Added charon.initiator_only option which causes charon to ignore IKE ↵	Andreas Steffen	2013-04-14	1	-0/+3
\| \| \| \|	initiation requests by peers
*	implemented periodic IF-MAP RenewSession request	Andreas Steffen	2013-04-03	1	-1/+4
\|
*	Updated strongswan.conf(5) man page	Tobias Brunner	2013-04-01	1	-10/+42
\|
*	updated strongswan.conf man page for tn_ifmap plugin	Andreas Steffen	2013-03-31	1	-12/+12
\|
*	Merge branch 'multi-cert'	Martin Willi	2013-03-01	1	-0/+4
\|\ \| \| \| \| \| \| \| \|	Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests.
\| *	Add ipsec.conf.5 updates regarding multiple certificates in leftcert	Martin Willi	2013-01-18	1	-0/+4
\| \|
* \|	Merge branch 'opaque-ports'	Martin Willi	2013-03-01	1	-0/+8
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \|	Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
\| * \|	Document ipsec.conf leftprotoport extensions in manpage	Martin Willi	2013-02-21	1	-0/+8
\| \| \|
* \| \|	Moved configuration from resolver manager to unbound plugin	Andreas Steffen	2013-02-19	1	-0/+6
\| \| \| \| \| \| \| \| \| \| \| \|	Also streamlined log messages in unbound plugin.
* \| \|	ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf	Reto Guadagnini	2013-02-19	1	-0/+3
\| \| \|
* \| \|	Merge branch 'ike-dscp'	Martin Willi	2013-02-14	1	-0/+5
\|\ \ \
\| * \| \|	Add ikedscp documentation to ipsec.conf.5	Martin Willi	2013-02-06	1	-0/+5
\| \|/ /
* / /	Typo in strongswan.conf(5) man page fixed	Tobias Brunner	2013-01-31	1	-1/+1
\|/ /
* /	Documented new options in strongswan.conf(5) man page	Tobias Brunner	2013-01-25	1	-3/+60
\|/
*	Added an option to configure the maximum size of a fragment	Tobias Brunner	2013-01-12	1	-0/+4
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-4/+9
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	2	-5/+10
\|
*	Add an option to en-/disable IKE fragmentation	Tobias Brunner	2012-12-24	1	-0/+5
\| \| \| \| \|	Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled.
*	add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins	Andreas Steffen	2012-12-09	1	-0/+6
\|
*	updated strongswan.conf man page	Andreas Steffen	2012-11-12	1	-2/+14
\|
*	scanner imc/imv pair uses IETF VPN PA-TNC message subtype	Andreas Steffen	2012-10-31	1	-0/+6
\|
*	FQDNs are actually not resolved when loading secrets	Tobias Brunner	2012-10-29	1	-7/+1
\|
*	Added documentation for NTLM secrets	Tobias Brunner	2012-10-25	1	-0/+10
\|
*	Remove obsolete pluto smartcard syntax in ipsec.secrets.5	Martin Willi	2012-10-24	1	-8/+5
\|
*	Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards	Martin Willi	2012-10-24	1	-5/+7
\|
*	Add leftcert ipsec.conf.5 documentation about smartcard certificates	Martin Willi	2012-10-24	1	-0/+12
\|
*	Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals	Martin Willi	2012-10-24	1	-7/+17
\|
*	Added an option to reload certificates from PKCS#11 tokens on SIGHUP	Tobias Brunner	2012-10-18	1	-0/+3
\|