Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Hash and URL cosmetics | Andreas Steffen | 2008-04-18 | 1 | -8/+8 | |
| | ||||||
* | sql pool prototype | Martin Willi | 2008-04-18 | 1 | -33/+87 | |
| | ||||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 5 | -17/+127 | |
| | ||||||
* | changed logging of crl writing to old style | Andreas Steffen | 2008-04-17 | 1 | -4/+4 | |
| | ||||||
* | fixed compiler warning | Martin Willi | 2008-04-17 | 6 | -2/+331 | |
| | ||||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 3 | -1/+37 | |
| | ||||||
* | caching of CRLs to /etc/ipsec.d/crls | Martin Willi | 2008-04-17 | 1 | -10/+41 | |
| | ||||||
* | added missing credential_set method to stroke_ca | Martin Willi | 2008-04-17 | 1 | -0/+1 | |
| | ||||||
* | extended credential_set_t interface by a cache_cert() method | Martin Willi | 2008-04-17 | 3 | -1/+19 | |
| | | | | allows persistent or in-memory caching of fetched certificates | |||||
* | adding rightsourceip=%poolname properly to peer config | Martin Willi | 2008-04-17 | 1 | -1/+2 | |
| | ||||||
* | disable DPD if dpddelay is set but dpdaction=none | Martin Willi | 2008-04-16 | 1 | -0/+5 | |
| | ||||||
* | updated sql plugin to respect config changes | Martin Willi | 2008-04-15 | 3 | -32/+50 | |
| | ||||||
* | disabled SQL logging by default, as tests scenarios do not have a logging table | Martin Willi | 2008-04-15 | 1 | -1/+1 | |
| | ||||||
* | fixed build of smp plugin | Martin Willi | 2008-04-15 | 1 | -5/+5 | |
| | ||||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 4 | -24/+20 | |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 2 | -6/+20 | |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | |||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 5 | -30/+41 | |
| | ||||||
* | added close_action as a seperate config option to dpd_action | Martin Willi | 2008-04-14 | 2 | -6/+7 | |
| | ||||||
* | fixed rightsourceip=%config scenarios | Martin Willi | 2008-04-14 | 2 | -40/+62 | |
| | ||||||
* | using dpd actions to enforce connection state | Martin Willi | 2008-04-11 | 2 | -4/+17 | |
| | | | | dpd actions a per child-, not peer ike-sa | |||||
* | implemented a simple attribute provider for stroke | Martin Willi | 2008-04-09 | 4 | -0/+398 | |
| | ||||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -8/+30 | |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | |||||
* | use cert->equals() to filter out equal certificates in seperate instances | Martin Willi | 2008-04-07 | 1 | -1/+1 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-04-07 | 1 | -2/+2 | |
| | ||||||
* | log shared secret with debug level 4 | Andreas Steffen | 2008-04-06 | 1 | -1/+1 | |
| | ||||||
* | default is hostaccess=no | Andreas Steffen | 2008-04-06 | 2 | -2/+2 | |
| | ||||||
* | updated test data to use correct encoding data | Martin Willi | 2008-04-03 | 1 | -3/+4 | |
| | ||||||
* | fixed med_db test | Martin Willi | 2008-04-02 | 1 | -1/+1 | |
| | ||||||
* | updated mediation database to public key authentication | Martin Willi | 2008-04-02 | 10 | -62/+409 | |
| | | | | | | added mysql table definition, test data testcase | |||||
* | fixed compile warnings | Martin Willi | 2008-04-02 | 1 | -1/+0 | |
| | ||||||
* | workaround for parsing IPv6 PSKs requires extract_last_token() | Andreas Steffen | 2008-04-01 | 1 | -1/+1 | |
| | ||||||
* | loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) | Martin Willi | 2008-04-01 | 2 | -2/+44 | |
| | | | | testcase | |||||
* | minimal stroke_list_ocsp() implementation | Andreas Steffen | 2008-04-01 | 1 | -2/+23 | |
| | ||||||
* | stroke_list groups certificates by issuer | Andreas Steffen | 2008-04-01 | 1 | -7/+18 | |
| | ||||||
* | put DN in double quotes | Andreas Steffen | 2008-03-31 | 1 | -1/+1 | |
| | ||||||
* | ipsec list suppresses duplicates | Andreas Steffen | 2008-03-31 | 1 | -19/+79 | |
| | ||||||
* | output uptime in status in local time | Andreas Steffen | 2008-03-29 | 1 | -1/+1 | |
| | ||||||
* | renamed xml plugin to smp to avoid confusion | Martin Willi | 2008-03-28 | 6 | -30/+30 | |
| | | | | | | added some dependency checks to configure configure checks ClearSilver and fastcgi cleanups in the build system here and there | |||||
* | changed external interface to the mediation extension. | Tobias Brunner | 2008-03-27 | 1 | -3/+3 | |
| | ||||||
* | reusing generic shared_key_t implementation in med_db | Martin Willi | 2008-03-27 | 1 | -55/+1 | |
| | ||||||
* | implemented cert cache flushing, ipsec purgeocsp | Martin Willi | 2008-03-27 | 1 | -4/+6 | |
| | ||||||
* | fixed plugin/stroke Makefile | Andreas Steffen | 2008-03-26 | 1 | -1/+2 | |
| | ||||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 2 | -16/+16 | |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | |||||
* | added uptime statistics to statusall | Martin Willi | 2008-03-26 | 1 | -0/+10 | |
| | ||||||
* | fixed compile error if --enable-p2p is set | Martin Willi | 2008-03-26 | 2 | -2/+2 | |
| | ||||||
* | splitted stroke plugin to several files: | Martin Willi | 2008-03-26 | 18 | -3285/+4155 | |
| | | | | | | | | | | | socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread | |||||
* | certificate factory can load certs from file | Andreas Steffen | 2008-03-25 | 1 | -52/+54 | |
| | ||||||
* | defined *_create_from_file() constructors in ↵ | Andreas Steffen | 2008-03-25 | 1 | -103/+60 | |
| | | | | libstrongswan/credentials/certificates | |||||
* | modified debug text | Andreas Steffen | 2008-03-20 | 1 | -1/+1 | |
| | ||||||
* | (no commit message) | Martin Willi | 2008-03-20 | 2 | -14/+86 | |
| |