| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
of the draft. note: the external interface (config, autotools) has not yet been changed
|
|
|
|
|
|
| |
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
|
| |
|
| |
|
|
|
|
|
| |
changed %V printf handler to take a time delta, %#V now takes two arguments
|
| |
|
|
|
|
| |
fixed bugs in force_encap code
|
|
|
|
|
| |
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
|
| |
|
|
|
|
|
|
|
| |
yes: include mobike support notifies as initiator
no: only enable mobike as responder when initiator supports it
default: yes
|
|
|
|
|
|
|
| |
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
|
| |
|
|
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
|