Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -1/+2 |
| | |||||
* | fixed some compiler warnings | Martin Willi | 2008-10-27 | 1 | -0/+1 |
| | |||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 |
| | |||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 1 | -5/+36 |
| | |||||
* | completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes | Andreas Steffen | 2008-08-26 | 1 | -5/+30 |
| | |||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -3/+26 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | update_peerid() does not accept %any as a certificate's subjectAltName | Andreas Steffen | 2008-07-09 | 1 | -1/+1 |
| | |||||
* | DNS resolving of ike_cfg hosts dynamically on demand | Martin Willi | 2008-06-06 | 1 | -59/+45 |
| | |||||
* | fixed typos | Andreas Steffen | 2008-05-11 | 1 | -1/+1 |
| | |||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -1/+1 |
| | |||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 1 | -28/+54 |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | ||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -1/+8 |
| | |||||
* | adding rightsourceip=%poolname properly to peer config | Martin Willi | 2008-04-17 | 1 | -1/+2 |
| | |||||
* | disable DPD if dpddelay is set but dpdaction=none | Martin Willi | 2008-04-16 | 1 | -0/+5 |
| | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 1 | -1/+15 |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | ||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 1 | -1/+1 |
| | |||||
* | added close_action as a seperate config option to dpd_action | Martin Willi | 2008-04-14 | 1 | -5/+5 |
| | |||||
* | fixed rightsourceip=%config scenarios | Martin Willi | 2008-04-14 | 1 | -1/+1 |
| | |||||
* | using dpd actions to enforce connection state | Martin Willi | 2008-04-11 | 1 | -2/+15 |
| | | | | dpd actions a per child-, not peer ike-sa | ||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -8/+30 |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | ||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -11/+11 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | fixed compile error if --enable-p2p is set | Martin Willi | 2008-03-26 | 1 | -1/+1 |
| | |||||
* | splitted stroke plugin to several files: | Martin Willi | 2008-03-26 | 1 | -0/+770 |
socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread |