Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | output pool name string rather than pool pointer | Andreas Steffen | 2009-01-28 | 1 | -1/+1 | |
| | ||||||
* | fixed broken listing of connections in ipsec statusall | Andreas Steffen | 2009-01-14 | 1 | -3/+3 | |
| | ||||||
* | fixed two bugs introduced by the stroke ip pool refactoring4.2.10 | Andreas Steffen | 2009-01-08 | 1 | -2/+9 | |
| | ||||||
* | list assigned leases using "ipsec leases" | Martin Willi | 2008-12-10 | 5 | -4/+197 | |
| | ||||||
* | added IKE_SA established timer to "ipsec statusall" | Martin Willi | 2008-12-10 | 1 | -5/+17 | |
| | ||||||
* | list pools and usage in ipsec statusall | Martin Willi | 2008-12-09 | 3 | -5/+29 | |
| | ||||||
* | extended stroke in-memory pool to use hash-tables | Martin Willi | 2008-12-09 | 2 | -58/+172 | |
| | | | | | supports online/offline leases properly reassign addresses to identities | |||||
* | pass identity to release_address(), allows providers to do a lookup by id | Martin Willi | 2008-12-05 | 1 | -2/+2 | |
| | ||||||
* | add support for smartcards in charon by using the ENGINE API provided by ↵ | Tobias Brunner | 2008-12-03 | 1 | -7/+83 | |
| | | | | OpenSSL, based on patches by Michael Roßberg. | |||||
* | show TRANSPORT_PROXY mode in ipsec status | Andreas Steffen | 2008-11-16 | 1 | -3/+5 | |
| | ||||||
* | dynamic logging configuration through strongswan.conf | Martin Willi | 2008-11-11 | 1 | -3/+16 | |
| | | | | fallback to existing ipsec.conf/stroke loglevel configuration | |||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 | |
| | ||||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -1/+2 | |
| | ||||||
* | wrapped all pthread_rwlock_t in profilable rwlock_t | Martin Willi | 2008-11-05 | 2 | -35/+32 | |
| | ||||||
* | got rid of deprecated create_iterator_locked() | Martin Willi | 2008-11-05 | 2 | -0/+3 | |
| | ||||||
* | added hooks for IKE and CHILD keymat | Martin Willi | 2008-10-30 | 1 | -3/+1 | |
| | ||||||
* | moved CHILD_SA key derivation to keymat_t | Martin Willi | 2008-10-29 | 1 | -37/+27 | |
| | | | | passing key chunks to CHILD_SA, not the PRF | |||||
* | moved key derivation and management into keymat object | Martin Willi | 2008-10-28 | 1 | -6/+10 | |
| | | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now | |||||
* | store IKE proposal implicitly during derive_keys | Martin Willi | 2008-10-28 | 1 | -2/+5 | |
| | ||||||
* | fixed reauthentication time in statusall | Martin Willi | 2008-10-28 | 1 | -1/+1 | |
| | ||||||
* | use more generic stats getter, introducing new stats | Martin Willi | 2008-10-27 | 1 | -3/+8 | |
| | ||||||
* | fixed some compiler warnings | Martin Willi | 2008-10-27 | 1 | -0/+1 | |
| | ||||||
* | additional getters for ipcomp and UDP encap | Martin Willi | 2008-10-24 | 1 | -7/+5 | |
| | ||||||
* | more CHILD_SA refactorings | Martin Willi | 2008-10-24 | 1 | -8/+8 | |
| | ||||||
* | cache keys for in and outbound ESP SAs | Martin Willi | 2008-10-15 | 1 | -3/+3 | |
| | | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator() | |||||
* | store ESP keys in CHILD_SA | Martin Willi | 2008-10-15 | 1 | -19/+29 | |
| | ||||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 2 | -11/+13 | |
| | ||||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 1 | -0/+54 | |
| | ||||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 | |
| | ||||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 1 | -2/+2 | |
| | ||||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 1 | -5/+4 | |
| | ||||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 2 | -8/+63 | |
| | ||||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 1 | -0/+1 | |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | |||||
* | streamlined ipsec listalgs output | Andreas Steffen | 2008-08-29 | 1 | -2/+3 | |
| | ||||||
* | crypto_factory algorithm enumeration API | Martin Willi | 2008-08-28 | 1 | -0/+56 | |
| | | | | implementation of "ipsec listalgs" | |||||
* | ipsec statusall lists eap_type and eap_identity | Andreas Steffen | 2008-08-26 | 1 | -1/+19 | |
| | ||||||
* | completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes | Andreas Steffen | 2008-08-26 | 2 | -16/+62 | |
| | ||||||
* | list CA restrictions in ipsec statusall | Andreas Steffen | 2008-08-25 | 1 | -9/+43 | |
| | ||||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 4 | -22/+66 | |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | |||||
* | increased stroke socket backlog to 10 | Martin Willi | 2008-07-30 | 1 | -1/+1 | |
| | ||||||
* | using shared read locks in credential set enumerators to avoid deadlocks | Martin Willi | 2008-07-30 | 2 | -37/+40 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-07-22 | 1 | -1/+1 | |
| | ||||||
* | ipsec status lists IPCOMP CPIs | Andreas Steffen | 2008-07-22 | 1 | -1/+11 | |
| | ||||||
* | consistent logging of SPIs and CPIs | Andreas Steffen | 2008-07-22 | 1 | -2/+2 | |
| | ||||||
* | introduced an additional bus->signal parameter for signal specific data | Martin Willi | 2008-07-18 | 1 | -1/+1 | |
| | | | | added SIG_IKE/SIG_CHD macros for signal emitting | |||||
* | update_peerid() does not accept %any as a certificate's subjectAltName | Andreas Steffen | 2008-07-09 | 1 | -1/+1 | |
| | ||||||
* | ipsec statusall displays dpd options | Andreas Steffen | 2008-07-02 | 1 | -2/+18 | |
| | ||||||
* | added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵ | Martin Willi | 2008-07-01 | 3 | -0/+95 | |
| | | | | remote virtual ip | |||||
* | show authentication method in ipsec statusall | Andreas Steffen | 2008-06-30 | 1 | -1/+9 | |
| | ||||||
* | enumerating loaded plugins in "ipsec statusall" | Martin Willi | 2008-06-24 | 1 | -1/+10 | |
| |