Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 8 | -3632/+0 |
| | |||||
* | split connections with different virtual IPs in different peer_cfgs | Martin Willi | 2008-02-05 | 1 | -1/+20 |
| | | | | respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA | ||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -3/+5 |
| | |||||
* | implemented RFC4478 (repeated authentication) | Martin Willi | 2007-11-20 | 1 | -14/+28 |
| | | | | | changed %V printf handler to take a time delta, %#V now takes two arguments | ||||
* | fixed two leaks in stroke_interface | Martin Willi | 2007-11-19 | 1 | -6/+4 |
| | |||||
* | handle right=%any case in strongSwan manager | Andreas Steffen | 2007-11-17 | 1 | -3/+3 |
| | |||||
* | refactored bus and interface to resolve threading issues (WIP) | Martin Willi | 2007-11-15 | 1 | -1/+0 |
| | |||||
* | filtering out IKEv1 configurations for manager | Martin Willi | 2007-11-15 | 1 | -0/+5 |
| | |||||
* | implemented configuration query and IKE_SA initiation in XML interface | Martin Willi | 2007-11-13 | 2 | -46/+324 |
| | |||||
* | implemented IKE/CHILD_SA termination through XML interface | Martin Willi | 2007-11-12 | 2 | -1/+101 |
| | |||||
* | fixed bad cast which resulted in a crash on "ipsec update" | Martin Willi | 2007-10-05 | 1 | -1/+2 |
| | |||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -4/+59 |
| | |||||
* | reverted changeset [3215], as we need NULL callback to do asynchronous calls | Martin Willi | 2007-10-03 | 1 | -2/+3 |
| | | | | added interface_manager_cb_empty function, which calls synchronous but doesn't do anything | ||||
* | fixed "ipsec statusall" SPI formatting | Martin Willi | 2007-10-02 | 1 | -2/+2 |
| | |||||
* | dummy callback added to interface manager | Tobias Brunner | 2007-10-02 | 1 | -11/+1 |
| | |||||
* | remove control sockets on startup, as we don't have privileges on shutdown | Martin Willi | 2007-10-02 | 2 | -9/+5 |
| | |||||
* | moved force_encap to ike_config, enables responder to enforce udp encapsulation | Martin Willi | 2007-10-01 | 1 | -3/+3 |
| | | | | fixed bugs in force_encap code | ||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 1 | -2/+3 |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls | ||||
* | fixed CHILD_SA SPI byte order in XML interface | Martin Willi | 2007-09-28 | 1 | -1/+1 |
| | |||||
* | reduced debbugging level | Martin Willi | 2007-09-27 | 1 | -1/+1 |
| | |||||
* | refactored strongswan manager | Martin Willi | 2007-09-26 | 3 | -30/+90 |
| | | | | | | | | removed buggy request parsing code, use ClearSilvers CGI kit instead fixed CHILD_SA listing in manager (needs better design) using secure XML communication through unix sockets removed images with questionable (non-GPL) license | ||||
* | prototype implemementation of an sqlite configuration backend | Martin Willi | 2007-09-18 | 2 | -83/+5 |
| | |||||
* | adapted format of IKE SPIs to strongSwan Manager's style | Andreas Steffen | 2007-09-15 | 1 | -2/+2 |
| | |||||
* | added subnets of CHILD_SAs to xml interface | Martin Willi | 2007-09-14 | 1 | -1/+36 |
| | | | | a first design of Managers IKE_SA list page | ||||
* | peer_cfg now knows about group memberships | Andreas Steffen | 2007-09-13 | 1 | -1/+21 |
| | |||||
* | fixed 64bit issue with file descriptor | Martin Willi | 2007-09-13 | 1 | -1/+9 |
| | |||||
* | manager can query and list IKE_SA status (no layout yet) | Martin Willi | 2007-09-13 | 1 | -2/+3 |
| | |||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 1 | -2/+2 |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | ||||
* | ipsec stroke rereadaacerts|rereadacerts supported | Andreas Steffen | 2007-08-10 | 1 | -0/+8 |
| | |||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 1 | -0/+4 |
| | |||||
* | implemented listing of attribute certificates | Andreas Steffen | 2007-08-07 | 1 | -0/+18 |
| | |||||
* | fixed segfault when sourceip in stroke message is NULL | Martin Willi | 2007-08-06 | 1 | -2/+2 |
| | |||||
* | allow starter to initiate connections simultaneously (on auto=start) | Martin Willi | 2007-08-06 | 1 | -4/+12 |
| | |||||
* | updated XML interface to new schema | Martin Willi | 2007-07-19 | 1 | -79/+267 |
| | |||||
* | added first draft of SMP relax-ng schema | Martin Willi | 2007-07-06 | 1 | -0/+225 |
| | |||||
* | support for left=%any change our address dynamically | Martin Willi | 2007-06-18 | 1 | -4/+6 |
| | |||||
* | implemented more flexible iterator hook API | Martin Willi | 2007-06-15 | 1 | -2/+1 |
| | | | | kernel interface handles interface changes and updates address list | ||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 1 | -7/+6 |
| | | | | | implemented up to date address list cache to list interfaces | ||||
* | ported interfaces to new threading functions (incomplete) | Martin Willi | 2007-06-11 | 2 | -143/+129 |
| | |||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 2 | -103/+290 |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | ||||
* | proper thread cancellation when using the charon->interfaces | Martin Willi | 2007-05-23 | 2 | -4/+4 |
| | |||||
* | support for virtual IP definition on client side: | Martin Willi | 2007-05-22 | 1 | -1/+4 |
| | | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. | ||||
* | support of left|rightgroups parameter | Andreas Steffen | 2007-05-20 | 1 | -31/+28 |
| | |||||
* | support of CA-based ipsec policies | Andreas Steffen | 2007-05-18 | 1 | -24/+78 |
| | |||||
* | removed route_job, handled all in interface_manager | Martin Willi | 2007-05-16 | 1 | -1/+0 |
| | |||||
* | routing/unrouting through interface | Martin Willi | 2007-05-16 | 1 | -11/+57 |
| | |||||
* | working dummy for NetworkManager DBUS interface | Martin Willi | 2007-05-14 | 1 | -8/+68 |
| | | | | | more a tech demo | ||||
* | simplified capability dropping | Martin Willi | 2007-05-09 | 2 | -4/+2 |
| | |||||
* | properly implemented interface_managers initiate, terminte_[ike|child] | Martin Willi | 2007-05-09 | 1 | -46/+53 |
| | | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues | ||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 2 | -2/+2 |
| | | | | added --with-uid/--with-gid configure option |