aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins/stroke
Commit message (Collapse)AuthorAgeFilesLines
...
* output pool name string rather than pool pointerAndreas Steffen2009-01-281-1/+1
|
* fixed broken listing of connections in ipsec statusallAndreas Steffen2009-01-141-3/+3
|
* fixed two bugs introduced by the stroke ip pool refactoring4.2.10Andreas Steffen2009-01-081-2/+9
|
* list assigned leases using "ipsec leases"Martin Willi2008-12-105-4/+197
|
* added IKE_SA established timer to "ipsec statusall"Martin Willi2008-12-101-5/+17
|
* list pools and usage in ipsec statusallMartin Willi2008-12-093-5/+29
|
* extended stroke in-memory pool to use hash-tablesMartin Willi2008-12-092-58/+172
| | | | | supports online/offline leases properly reassign addresses to identities
* pass identity to release_address(), allows providers to do a lookup by idMartin Willi2008-12-051-2/+2
|
* add support for smartcards in charon by using the ENGINE API provided by ↵Tobias Brunner2008-12-031-7/+83
| | | | OpenSSL, based on patches by Michael Roßberg.
* show TRANSPORT_PROXY mode in ipsec statusAndreas Steffen2008-11-161-3/+5
|
* dynamic logging configuration through strongswan.confMartin Willi2008-11-111-3/+16
| | | | fallback to existing ipsec.conf/stroke loglevel configuration
* renamed proxy to proxy_mode in stroke_msg.hAndreas Steffen2008-11-111-1/+1
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-1/+2
|
* wrapped all pthread_rwlock_t in profilable rwlock_tMartin Willi2008-11-052-35/+32
|
* got rid of deprecated create_iterator_locked()Martin Willi2008-11-052-0/+3
|
* added hooks for IKE and CHILD keymatMartin Willi2008-10-301-3/+1
|
* moved CHILD_SA key derivation to keymat_tMartin Willi2008-10-291-37/+27
| | | | passing key chunks to CHILD_SA, not the PRF
* moved key derivation and management into keymat objectMartin Willi2008-10-281-6/+10
| | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now
* store IKE proposal implicitly during derive_keysMartin Willi2008-10-281-2/+5
|
* fixed reauthentication time in statusallMartin Willi2008-10-281-1/+1
|
* use more generic stats getter, introducing new statsMartin Willi2008-10-271-3/+8
|
* fixed some compiler warningsMartin Willi2008-10-271-0/+1
|
* additional getters for ipcomp and UDP encapMartin Willi2008-10-241-7/+5
|
* more CHILD_SA refactoringsMartin Willi2008-10-241-8/+8
|
* cache keys for in and outbound ESP SAsMartin Willi2008-10-151-3/+3
| | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator()
* store ESP keys in CHILD_SAMartin Willi2008-10-151-19/+29
|
* reintegrated bus-refactoring branchMartin Willi2008-10-142-11/+13
|
* implemented ipsec listalgs as a stroke commandAndreas Steffen2008-10-081-0/+54
|
* use dpd_action also for remotely closed tunnelsMartin Willi2008-10-021-1/+1
|
* merging renaming of mode_t to ipsec_mode_t back to trunkTobias Brunner2008-09-251-2/+2
|
* merging modularized kernel interface back to trunkTobias Brunner2008-09-251-5/+4
|
* stroke parses and lists AC groupsAndreas Steffen2008-09-172-8/+63
|
* refactored credential builderMartin Willi2008-09-021-0/+1
| | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts
* streamlined ipsec listalgs outputAndreas Steffen2008-08-291-2/+3
|
* crypto_factory algorithm enumeration APIMartin Willi2008-08-281-0/+56
| | | | implementation of "ipsec listalgs"
* ipsec statusall lists eap_type and eap_identityAndreas Steffen2008-08-261-1/+19
|
* completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributesAndreas Steffen2008-08-262-16/+62
|
* list CA restrictions in ipsec statusallAndreas Steffen2008-08-251-9/+43
|
* ported parts of two-sim branchMartin Willi2008-08-224-22/+66
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* increased stroke socket backlog to 10Martin Willi2008-07-301-1/+1
|
* using shared read locks in credential set enumerators to avoid deadlocksMartin Willi2008-07-302-37/+40
|
* cosmeticsAndreas Steffen2008-07-221-1/+1
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-221-1/+11
|
* consistent logging of SPIs and CPIsAndreas Steffen2008-07-221-2/+2
|
* introduced an additional bus->signal parameter for signal specific dataMartin Willi2008-07-181-1/+1
| | | | added SIG_IKE/SIG_CHD macros for signal emitting
* update_peerid() does not accept %any as a certificate's subjectAltNameAndreas Steffen2008-07-091-1/+1
|
* ipsec statusall displays dpd optionsAndreas Steffen2008-07-021-2/+18
|
* added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵Martin Willi2008-07-013-0/+95
| | | | remote virtual ip
* show authentication method in ipsec statusallAndreas Steffen2008-06-301-1/+9
|
* enumerating loaded plugins in "ipsec statusall"Martin Willi2008-06-241-1/+10
|