| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -0/+4 |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | ||||
| | * | Add ipsec.conf.5 updates regarding multiple certificates in leftcert | Martin Willi | 2013-01-18 | 1 | -0/+4 |
| | | | |||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -0/+8 |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 |
| | | | | |||||
| * | | | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 1 | -0/+6 |
| | | | | | | | | | | | | | Also streamlined log messages in unbound plugin. | ||||
| * | | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 1 | -0/+3 |
| | | | | |||||
| * | | | Merge branch 'ike-dscp' | Martin Willi | 2013-02-14 | 1 | -0/+5 |
| |\ \ \ | |||||
| | * | | | Add ikedscp documentation to ipsec.conf.5 | Martin Willi | 2013-02-06 | 1 | -0/+5 |
| | |/ / | |||||
| * / / | Typo in strongswan.conf(5) man page fixed | Tobias Brunner | 2013-01-31 | 1 | -1/+1 |
| |/ / | |||||
| * / | Documented new options in strongswan.conf(5) man page | Tobias Brunner | 2013-01-25 | 1 | -3/+60 |
| |/ | |||||
| * | Added an option to configure the maximum size of a fragment | Tobias Brunner | 2013-01-12 | 1 | -0/+4 |
| | | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -4/+9 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 2 | -5/+10 |
| | | |||||
| * | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+5 |
| | | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | ||||
| * | add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins | Andreas Steffen | 2012-12-09 | 1 | -0/+6 |
| | | |||||
| * | updated strongswan.conf man page | Andreas Steffen | 2012-11-12 | 1 | -2/+14 |
| | | |||||
| * | scanner imc/imv pair uses IETF VPN PA-TNC message subtype | Andreas Steffen | 2012-10-31 | 1 | -0/+6 |
| | | |||||
| * | FQDNs are actually not resolved when loading secrets | Tobias Brunner | 2012-10-29 | 1 | -7/+1 |
| | | |||||
| * | Added documentation for NTLM secrets | Tobias Brunner | 2012-10-25 | 1 | -0/+10 |
| | | |||||
| * | Remove obsolete pluto smartcard syntax in ipsec.secrets.5 | Martin Willi | 2012-10-24 | 1 | -8/+5 |
| | | |||||
| * | Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards | Martin Willi | 2012-10-24 | 1 | -5/+7 |
| | | |||||
| * | Add leftcert ipsec.conf.5 documentation about smartcard certificates | Martin Willi | 2012-10-24 | 1 | -0/+12 |
| | | |||||
| * | Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals | Martin Willi | 2012-10-24 | 1 | -7/+17 |
| | | |||||
| * | Added an option to reload certificates from PKCS#11 tokens on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -0/+3 |
| | | |||||
| * | Terminate unused resolver threads after a timeout | Tobias Brunner | 2012-10-18 | 1 | -0/+6 |
| | | |||||
| * | implemented os_info_t class | Andreas Steffen | 2012-10-10 | 1 | -6/+6 |
| | | |||||
| * | Added description for flush_auth_cfg and acct_port plus some minor editorial ↵ | Tobias Brunner | 2012-09-25 | 1 | -6/+16 |
| | | | | | changes | ||||
| * | Documentation about some time values clarified | Tobias Brunner | 2012-09-24 | 1 | -2/+2 |
| | | |||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -0/+4 |
| | | | | | installed | ||||
| * | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 1 | -1/+9 |
| | | | | | interfaces | ||||
| * | Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity | Martin Willi | 2012-09-18 | 1 | -2/+3 |
| | | |||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+12 |
| | | |||||
| * | Option added to enforce a configured destination address for DHCP packets | Tobias Brunner | 2012-09-13 | 1 | -0/+8 |
| | | |||||
| * | Updates to strongswan.conf(5) man page (added several missing options) | Tobias Brunner | 2012-09-12 | 1 | -39/+82 |
| | | |||||
| * | Some updates to ipsec.conf(5) man page | Tobias Brunner | 2012-09-12 | 1 | -49/+70 |
| | | |||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -9/+16 |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | ||||
| * | Add random plugin options to strongswan.conf.5 | Martin Willi | 2012-09-10 | 2 | -0/+8 |
| | | |||||
| * | added libimcv.assessment_result to strongswan.conf man page | Andreas Steffen | 2012-09-09 | 1 | -0/+3 |
| | | |||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 1 | -6/+16 |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | ||||
| | * | Updated ipsec.conf.5 with multiple left/rightsourceip support | Martin Willi | 2012-08-30 | 1 | -6/+6 |
| | | | |||||
| | * | Add a description of the leftdns option to ipsec.conf.5 | Martin Willi | 2012-08-21 | 1 | -0/+10 |
| | | | |||||
| * | | Documentation for eap-dynamic added | Tobias Brunner | 2012-08-31 | 2 | -0/+11 |
| |/ | |||||
| * | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 2 | -2/+18 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | ||||
| | * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -0/+3 |
| | | | | | | | | | outbound packets | ||||
| | * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -0/+9 |
| | | | | | | | | | Also added strongswan.conf options to change the ports. | ||||
| | * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 2 | -1/+5 |
| | | | |||||
| | * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | ||||
| * | | Documentation fixes regarding xauth-pam/eap-gtc plugins | Tobias Brunner | 2012-08-11 | 1 | -3/+5 |
| | | | |||||
| * | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 1 | -2/+2 |
| |/ | |||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 1 | -0/+6 |
| | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |