Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Indicate and dected support for EAP-only authentication | Martin Willi | 2010-01-07 | 1 | -0/+5 |
| | |||||
* | Add an option to send a vendor ID, allows us to properly support private ↵ | Martin Willi | 2010-01-07 | 1 | -0/+5 |
| | | | | extensions | ||||
* | Store completed authentication rounds permanently on IKE_SA, with flush option | Martin Willi | 2009-12-01 | 1 | -0/+16 |
| | |||||
* | Removed obsolete and unused [gs]et_eap_identity() methods | Martin Willi | 2009-11-30 | 1 | -16/+0 |
| | |||||
* | Give plugins more control of which configuration attributes to request, and ↵ | Martin Willi | 2009-11-17 | 1 | -0/+1 |
| | | | | pass received attributes back to the requesting handler | ||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -80/+80 |
| | |||||
* | Fixed some typos; whitespace cleanup. | Tobias Brunner | 2009-09-02 | 1 | -76/+78 |
| | |||||
* | defer MOBIKE update if we have no route to the peer | Martin Willi | 2009-07-02 | 1 | -0/+5 |
| | |||||
* | include TSi/TSr of triggering packet in acquire | Martin Willi | 2009-05-20 | 1 | -2/+7 |
| | |||||
* | initiate trapped CHILD_SAs with same reqid | Martin Willi | 2009-05-08 | 1 | -1/+3 |
| | |||||
* | removed obsolete route/unroute code from ike_sa/controller | Martin Willi | 2009-05-08 | 1 | -37/+0 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | attribute_manager supports attribute_handler's to handle configuration ↵ | Martin Willi | 2009-04-24 | 1 | -6/+11 |
| | | | | | | | | attributes via plugins moved resolv.conf editing to a separate plugin (resolv_conf) extended attribute_provider interface to hand out arbitrary attributes moved strongswan.conf based dns/nbns configuration to a plugin (attr) | ||||
* | schedule_job uses seconds to support time values larger than 49 days | Martin Willi | 2009-04-21 | 1 | -2/+2 |
| | | | | added schedule_job_ms for ms resolution events | ||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -13/+12 |
| | |||||
* | updated Doxyfile | Martin Willi | 2009-03-24 | 1 | -1/+1 |
| | | | | | | properly close all doxygen groups fixed remaining doxygen warnings | ||||
* | improved IKE_SA uniqueness check | Tobias Brunner | 2008-12-16 | 1 | -2/+2 |
| | |||||
* | added a PASSIVE IKE_SA state to manage it externally | Martin Willi | 2008-11-28 | 1 | -0/+5 |
| | |||||
* | set message IDs on IKE_SAs | Martin Willi | 2008-11-24 | 1 | -0/+11 |
| | |||||
* | moved ike_initiator flag to IKE_SAs condition bitfield | Martin Willi | 2008-11-12 | 1 | -9/+7 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -0/+11 |
| | |||||
* | added hooks for IKE and CHILD keymat | Martin Willi | 2008-10-30 | 1 | -0/+14 |
| | |||||
* | moved key derivation and management into keymat object | Martin Willi | 2008-10-28 | 1 | -56/+5 |
| | | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now | ||||
* | store IKE proposal implicitly during derive_keys | Martin Willi | 2008-10-28 | 1 | -11/+3 |
| | |||||
* | use more generic stats getter, introducing new stats | Martin Willi | 2008-10-27 | 1 | -11/+15 |
| | |||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 1 | -0/+5 |
| | |||||
* | use MOBIKE enabled DPD if we are NATed | Martin Willi | 2008-10-06 | 1 | -0/+8 |
| | | | | update SAs if we detect changes in NAT mappings | ||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -0/+16 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | display selected IKE proposal in ipsec statusall | Andreas Steffen | 2008-06-22 | 1 | -0/+15 |
| | |||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -0/+5 |
| | |||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 1 | -1/+0 |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | ||||
* | using dpd actions to enforce connection state | Martin Willi | 2008-04-11 | 1 | -2/+11 |
| | | | | dpd actions a per child-, not peer ike-sa | ||||
* | enabling acquire for mediated connections | Tobias Brunner | 2008-04-10 | 1 | -2/+1 |
| | |||||
* | fixing a problem if the mediation server initiates the rekeying | Tobias Brunner | 2008-04-10 | 1 | -0/+7 |
| | |||||
* | mediation connections should now properly rekey | Tobias Brunner | 2008-04-09 | 1 | -0/+5 |
| | |||||
* | stopping connectivity checks on the responders side after receiving an ↵ | Tobias Brunner | 2008-04-01 | 1 | -2/+10 |
| | | | | IKE_SA_INIT request with the proper ME_CONNECTID | ||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -11/+11 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -191/+112 |
| | |||||
* | implemented RFC4478 (repeated authentication) | Martin Willi | 2007-11-20 | 1 | -9/+36 |
| | | | | | changed %V printf handler to take a time delta, %#V now takes two arguments | ||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -1/+92 |
| | |||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 1 | -2/+7 |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls | ||||
* | improved MOBIKE: | Martin Willi | 2007-07-03 | 1 | -3/+20 |
| | | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation | ||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 1 | -0/+11 |
| | |||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 1 | -29/+86 |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | ||||
* | added extensions management to IKE_SA | Martin Willi | 2007-06-18 | 1 | -1/+37 |
| | | | | fixed NATD payload (port) when using route lookup | ||||
* | proper reauthentication: | Martin Willi | 2007-06-14 | 1 | -2/+3 |
| | | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool | ||||
* | added set_other_ca() and get_other_ca() | Andreas Steffen | 2007-05-17 | 1 | -2/+19 |
| | |||||
* | routing/unrouting through interface | Martin Willi | 2007-05-16 | 1 | -2/+3 |
| | |||||
* | added support for EAP methods not establishing an MSK | Martin Willi | 2007-04-19 | 1 | -5/+5 |
| | |||||
* | removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go | Martin Willi | 2007-04-11 | 1 | -0/+7 |
| |