tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	returning reference pointer on get_ref()	Martin Willi	2008-05-06	1	-4/+4
\|
*	fixed peer config equality check	Martin Willi	2008-04-18	1	-1/+2
\|
*	implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater	Martin Willi	2008-04-14	1	-1/+17
\| \| \| \|	additionally supports a "keep" value to keep the old IKE_SA
*	using dpd actions to enforce connection state	Martin Willi	2008-04-11	1	-33/+9
\| \| \| \|	dpd actions a per child-, not peer ike-sa
*	implementation of an CFG attribute framework, currently supporting virtual IPs	Martin Willi	2008-04-09	1	-39/+21
\| \| \| \| \| \|	updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool
*	fixed two other memory leaks	Tobias Brunner	2008-04-03	1	-5/+1
\|
*	mediation extension adapted to the naming convention of the current version ↵	Tobias Brunner	2008-03-26	1	-26/+26
\| \| \| \|	of the draft. note: the external interface (config, autotools) has not yet been changed
*	added equals() method to peer_cfg, ike_cfg, proposals, auth_info	Martin Willi	2008-03-26	1	-0/+48
\| \| \| \| \| \|	allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator
*	merged the modularization branch (credentials) back to trunk	Martin Willi	2008-03-13	1	-67/+46
\|
*	implemented Expanded EAP types to support vendor specific methods	Martin Willi	2007-12-13	1	-2/+10
\|
*	implemented RFC4478 (repeated authentication)	Martin Willi	2007-11-20	1	-34/+58
\| \| \| \| \|	changed %V printf handler to take a time delta, %#V now takes two arguments
*	experimental P2P-NAT-T for IKEv2 merged back from branch	Tobias Brunner	2007-10-03	1	-1/+66
\|
*	moved force_encap to ike_config, enables responder to enforce udp encapsulation	Martin Willi	2007-10-01	1	-16/+1
\| \| \| \|	fixed bugs in force_encap code
*	implemented IKEv2 force_encap connection parameter	Martin Willi	2007-10-01	1	-1/+16
\| \| \| \| \|	enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
*	peer_cfg now knows about group memberships	Andreas Steffen	2007-09-13	1	-6/+26
\|
*	added mobike=yes\|no connection option	Martin Willi	2007-08-29	1	-2/+17
\| \| \| \| \| \| \|	yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes
*	support for virtual IP definition on client side:	Martin Willi	2007-05-22	1	-11/+20
\| \| \| \| \| \| \|	if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
*	fixed DPD delay in peer_cfg	Martin Willi	2007-04-12	1	-1/+1
\|
*	restructured file layout	Martin Willi	2007-04-10	1	-0/+470
	new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads