Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -949/+0 |
| | |||||
* | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 1 | -3/+3 |
| | |||||
* | Store custom IKE src/dst ports on ike_cfg | Martin Willi | 2010-02-26 | 1 | -4/+4 |
| | |||||
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 1 | -1/+2 |
| | | | | CHILD_SAs | ||||
* | Made inactivity_timeout a per CHILD_SA config option | Martin Willi | 2010-01-27 | 1 | -1/+1 |
| | |||||
* | Separated the public interfaces of the threading primitives. | Tobias Brunner | 2009-12-23 | 1 | -1/+1 |
| | |||||
* | Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵ | Tobias Brunner | 2009-12-23 | 1 | -1/+1 |
| | | | | primitives (and utils/mutex.h is now threading.h). | ||||
* | adapted log message | Andreas Steffen | 2009-11-10 | 1 | -2/+2 |
| | |||||
* | pluto now supports SQL-based virtual IP pools | Andreas Steffen | 2009-10-14 | 1 | -2/+2 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -44/+44 |
| | |||||
* | Fixed some typos; whitespace cleanup. | Tobias Brunner | 2009-09-02 | 1 | -11/+10 |
| | |||||
* | Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵ | Tobias Brunner | 2009-09-01 | 1 | -15/+18 |
| | | | | Initialization is now static. | ||||
* | Handling of new lifetime limits added to stroke. | Tobias Brunner | 2009-09-01 | 1 | -0/+8 |
| | |||||
* | Adapted the config backends to the new lifetime configuration. | Tobias Brunner | 2009-09-01 | 1 | -3/+8 |
| | |||||
* | OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵ | Tobias Brunner | 2009-08-14 | 1 | -1/+1 |
| | | | | enums mutex/condvar/rwlock_type_t. | ||||
* | fixed removal of child configs | Martin Willi | 2009-05-06 | 1 | -9/+25 |
| | | | | purge empty peer configs | ||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 1 | -2/+2 |
| | | | | | important change for developers: %Y replaces %D to print identities! | ||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -354/+342 |
| | |||||
* | force unique connections for mediation connections | Tobias Brunner | 2009-02-18 | 1 | -0/+6 |
| | |||||
* | changed [4856] to dynamically choose traffic selector family | Martin Willi | 2009-02-11 | 1 | -3/+0 |
| | |||||
* | support of dynamic/128 and %any6 | Andreas Steffen | 2009-02-05 | 1 | -0/+3 |
| | |||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -1/+2 |
| | |||||
* | fixed some compiler warnings | Martin Willi | 2008-10-27 | 1 | -0/+1 |
| | |||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 |
| | |||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 1 | -5/+36 |
| | |||||
* | completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes | Andreas Steffen | 2008-08-26 | 1 | -5/+30 |
| | |||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -3/+26 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | update_peerid() does not accept %any as a certificate's subjectAltName | Andreas Steffen | 2008-07-09 | 1 | -1/+1 |
| | |||||
* | DNS resolving of ike_cfg hosts dynamically on demand | Martin Willi | 2008-06-06 | 1 | -59/+45 |
| | |||||
* | fixed typos | Andreas Steffen | 2008-05-11 | 1 | -1/+1 |
| | |||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -1/+1 |
| | |||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 1 | -28/+54 |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | ||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -1/+8 |
| | |||||
* | adding rightsourceip=%poolname properly to peer config | Martin Willi | 2008-04-17 | 1 | -1/+2 |
| | |||||
* | disable DPD if dpddelay is set but dpdaction=none | Martin Willi | 2008-04-16 | 1 | -0/+5 |
| | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 1 | -1/+15 |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | ||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 1 | -1/+1 |
| | |||||
* | added close_action as a seperate config option to dpd_action | Martin Willi | 2008-04-14 | 1 | -5/+5 |
| | |||||
* | fixed rightsourceip=%config scenarios | Martin Willi | 2008-04-14 | 1 | -1/+1 |
| | |||||
* | using dpd actions to enforce connection state | Martin Willi | 2008-04-11 | 1 | -2/+15 |
| | | | | dpd actions a per child-, not peer ike-sa | ||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -8/+30 |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | ||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -11/+11 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | fixed compile error if --enable-p2p is set | Martin Willi | 2008-03-26 | 1 | -1/+1 |
| | |||||
* | splitted stroke plugin to several files: | Martin Willi | 2008-03-26 | 1 | -0/+770 |
socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread |