aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins/stroke/stroke_config.c
Commit message (Collapse)AuthorAgeFilesLines
* Moving charon to libcharon.Tobias Brunner2010-03-191-949/+0
|
* Added left-/rightikeport ipsec.conf options to use custom IKE portsMartin Willi2010-02-261-3/+3
|
* Store custom IKE src/dst ports on ike_cfgMartin Willi2010-02-261-4/+4
|
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-271-1/+2
| | | | CHILD_SAs
* Made inactivity_timeout a per CHILD_SA config optionMartin Willi2010-01-271-1/+1
|
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-231-1/+1
|
* Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵Tobias Brunner2009-12-231-1/+1
| | | | primitives (and utils/mutex.h is now threading.h).
* adapted log messageAndreas Steffen2009-11-101-2/+2
|
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-141-2/+2
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-44/+44
|
* Fixed some typos; whitespace cleanup.Tobias Brunner2009-09-021-11/+10
|
* Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵Tobias Brunner2009-09-011-15/+18
| | | | Initialization is now static.
* Handling of new lifetime limits added to stroke.Tobias Brunner2009-09-011-0/+8
|
* Adapted the config backends to the new lifetime configuration.Tobias Brunner2009-09-011-3/+8
|
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-141-1/+1
| | | | enums mutex/condvar/rwlock_type_t.
* fixed removal of child configsMartin Willi2009-05-061-9/+25
| | | | purge empty peer configs
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-2/+2
| | | | | important change for developers: %Y replaces %D to print identities!
* merged multi-auth branch back into trunkMartin Willi2009-04-141-354/+342
|
* force unique connections for mediation connectionsTobias Brunner2009-02-181-0/+6
|
* changed [4856] to dynamically choose traffic selector familyMartin Willi2009-02-111-3/+0
|
* support of dynamic/128 and %any6Andreas Steffen2009-02-051-0/+3
|
* renamed proxy to proxy_mode in stroke_msg.hAndreas Steffen2008-11-111-1/+1
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-1/+2
|
* fixed some compiler warningsMartin Willi2008-10-271-0/+1
|
* use dpd_action also for remotely closed tunnelsMartin Willi2008-10-021-1/+1
|
* stroke parses and lists AC groupsAndreas Steffen2008-09-171-5/+36
|
* completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributesAndreas Steffen2008-08-261-5/+30
|
* ported parts of two-sim branchMartin Willi2008-08-221-3/+26
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* update_peerid() does not accept %any as a certificate's subjectAltNameAndreas Steffen2008-07-091-1/+1
|
* DNS resolving of ike_cfg hosts dynamically on demandMartin Willi2008-06-061-59/+45
|
* fixed typosAndreas Steffen2008-05-111-1/+1
|
* IPComp for IKEv2Tobias Brunner2008-05-081-1/+1
|
* supporting multiple comma seperated subnets in left/rightsubnet definitionMartin Willi2008-04-251-28/+54
| | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
* support for hash and URL encoded certificate payloads in charonTobias Brunner2008-04-181-1/+8
|
* adding rightsourceip=%poolname properly to peer configMartin Willi2008-04-171-1/+2
|
* disable DPD if dpddelay is set but dpdaction=noneMartin Willi2008-04-161-0/+5
|
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-141-1/+15
| | | | additionally supports a "keep" value to keep the old IKE_SA
* ike_sa_manager enumerable, not iterableMartin Willi2008-04-141-1/+1
|
* added close_action as a seperate config option to dpd_actionMartin Willi2008-04-141-5/+5
|
* fixed rightsourceip=%config scenariosMartin Willi2008-04-141-1/+1
|
* using dpd actions to enforce connection stateMartin Willi2008-04-111-2/+15
| | | | dpd actions a per child-, not peer ike-sa
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-091-8/+30
| | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool
* mediation extension adapted to the naming convention of the current version ↵Tobias Brunner2008-03-261-11/+11
| | | | of the draft. note: the external interface (config, autotools) has not yet been changed
* fixed compile error if --enable-p2p is setMartin Willi2008-03-261-1/+1
|
* splitted stroke plugin to several files:Martin Willi2008-03-261-0/+770
socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread