Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 2 | -11/+13 | |
| | ||||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 1 | -0/+54 | |
| | ||||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 | |
| | ||||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 1 | -2/+2 | |
| | ||||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 1 | -5/+4 | |
| | ||||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 2 | -8/+63 | |
| | ||||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 1 | -0/+1 | |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | |||||
* | streamlined ipsec listalgs output | Andreas Steffen | 2008-08-29 | 1 | -2/+3 | |
| | ||||||
* | crypto_factory algorithm enumeration API | Martin Willi | 2008-08-28 | 1 | -0/+56 | |
| | | | | implementation of "ipsec listalgs" | |||||
* | ipsec statusall lists eap_type and eap_identity | Andreas Steffen | 2008-08-26 | 1 | -1/+19 | |
| | ||||||
* | completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes | Andreas Steffen | 2008-08-26 | 2 | -16/+62 | |
| | ||||||
* | list CA restrictions in ipsec statusall | Andreas Steffen | 2008-08-25 | 1 | -9/+43 | |
| | ||||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 4 | -22/+66 | |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | |||||
* | increased stroke socket backlog to 10 | Martin Willi | 2008-07-30 | 1 | -1/+1 | |
| | ||||||
* | using shared read locks in credential set enumerators to avoid deadlocks | Martin Willi | 2008-07-30 | 2 | -37/+40 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-07-22 | 1 | -1/+1 | |
| | ||||||
* | ipsec status lists IPCOMP CPIs | Andreas Steffen | 2008-07-22 | 1 | -1/+11 | |
| | ||||||
* | consistent logging of SPIs and CPIs | Andreas Steffen | 2008-07-22 | 1 | -2/+2 | |
| | ||||||
* | introduced an additional bus->signal parameter for signal specific data | Martin Willi | 2008-07-18 | 1 | -1/+1 | |
| | | | | added SIG_IKE/SIG_CHD macros for signal emitting | |||||
* | update_peerid() does not accept %any as a certificate's subjectAltName | Andreas Steffen | 2008-07-09 | 1 | -1/+1 | |
| | ||||||
* | ipsec statusall displays dpd options | Andreas Steffen | 2008-07-02 | 1 | -2/+18 | |
| | ||||||
* | added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵ | Martin Willi | 2008-07-01 | 3 | -0/+95 | |
| | | | | remote virtual ip | |||||
* | show authentication method in ipsec statusall | Andreas Steffen | 2008-06-30 | 1 | -1/+9 | |
| | ||||||
* | enumerating loaded plugins in "ipsec statusall" | Martin Willi | 2008-06-24 | 1 | -1/+10 | |
| | ||||||
* | changed ipsec.secrets keyword EC to ECDSA | Tobias Brunner | 2008-06-24 | 1 | -1/+1 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-06-23 | 1 | -5/+5 | |
| | ||||||
* | fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple ↵ | Martin Willi | 2008-06-23 | 1 | -15/+9 | |
| | | | | threads are active | |||||
* | display selected IKE proposal in ipsec statusall | Andreas Steffen | 2008-06-22 | 1 | -13/+26 | |
| | ||||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 1 | -11/+4 | |
| | ||||||
* | DNS resolving of ike_cfg hosts dynamically on demand | Martin Willi | 2008-06-06 | 2 | -62/+48 | |
| | ||||||
* | do not list empty certuribase strings4.2.3 | Andreas Steffen | 2008-05-24 | 1 | -1/+4 | |
| | ||||||
* | added display of holderIssuer, holderSerial, and authorityKeyIdentifier | Andreas Steffen | 2008-05-23 | 1 | -1/+27 | |
| | ||||||
* | implement basic listing of attribute certificates | Andreas Steffen | 2008-05-22 | 2 | -9/+82 | |
| | ||||||
* | suppress listing of integrity algorithm if it is undefined | Andreas Steffen | 2008-05-17 | 1 | -4/+10 | |
| | ||||||
* | plugin load configuration in strongswan.conf | Martin Willi | 2008-05-15 | 1 | -3/+3 | |
| | | | | | | some components accept a "component.load" option with a space separated list of plugins to load libcharon- plugins are now handled the same way as libstrongswan- plugins | |||||
* | handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication | Martin Willi | 2008-05-14 | 1 | -2/+10 | |
| | ||||||
* | fixed typos | Andreas Steffen | 2008-05-11 | 1 | -1/+1 | |
| | ||||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -1/+1 | |
| | ||||||
* | replaced --with-gid/uid by --with-group/user | Martin Willi | 2008-05-08 | 1 | -1/+1 | |
| | | | | | using named users, groups fixed capability dropping in pluto | |||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 2 | -30/+56 | |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | |||||
* | added _GNU_SOURCE and limits.h to build against glibc-2.8 | Martin Willi | 2008-04-24 | 1 | -0/+1 | |
| | ||||||
* | replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions | Martin Willi | 2008-04-24 | 2 | -24/+21 | |
| | ||||||
* | Hash and URL cosmetics | Andreas Steffen | 2008-04-18 | 1 | -8/+8 | |
| | ||||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 5 | -17/+127 | |
| | ||||||
* | changed logging of crl writing to old style | Andreas Steffen | 2008-04-17 | 1 | -4/+4 | |
| | ||||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 3 | -1/+37 | |
| | ||||||
* | caching of CRLs to /etc/ipsec.d/crls | Martin Willi | 2008-04-17 | 1 | -10/+41 | |
| | ||||||
* | added missing credential_set method to stroke_ca | Martin Willi | 2008-04-17 | 1 | -0/+1 | |
| | ||||||
* | extended credential_set_t interface by a cache_cert() method | Martin Willi | 2008-04-17 | 1 | -0/+9 | |
| | | | | allows persistent or in-memory caching of fetched certificates | |||||
* | adding rightsourceip=%poolname properly to peer config | Martin Willi | 2008-04-17 | 1 | -1/+2 | |
| |