aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* fixed crash when using 0.0.0.0/0 subnetsMartin Willi2007-05-231-0/+1
|
* removed misleading warning when rekeyingMartin Willi2007-05-231-1/+0
|
* support for virtual IP definition on client side:Martin Willi2007-05-225-30/+58
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* fixed memleakMartin Willi2007-05-221-0/+1
|
* using local address as gateway in installed routesMartin Willi2007-05-221-2/+1
|
* support of left|rightgroups parameterAndreas Steffen2007-05-201-31/+28
|
* fixed nextUpdate and until behaviour in the non-strict caseAndreas Steffen2007-05-191-10/+8
|
* support of CA-based ipsec policiesAndreas Steffen2007-05-188-116/+220
|
* output of eap_type_names requires %N formatAndreas Steffen2007-05-181-1/+1
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-44/+68
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-2/+19
|
* removed route_job, handled all in interface_managerMartin Willi2007-05-165-195/+0
|
* routing/unrouting through interfaceMartin Willi2007-05-164-18/+187
|
* authentication failure is handled in ike_auth.cAndreas Steffen2007-05-151-3/+5
|
* cosmeticsAndreas Steffen2007-05-151-5/+5
|
* cosmeticsAndreas Steffen2007-05-152-3/+3
|
* adapted authentication failure text to those in the authenticatorsAndreas Steffen2007-05-151-3/+3
|
* verification of locally loaded peer certificatesAndreas Steffen2007-05-151-87/+92
|
* support of multiple certificates with same peer idAndreas Steffen2007-05-152-54/+81
|
* cosmeticsAndreas Steffen2007-05-151-9/+7
|
* working dummy for NetworkManager DBUS interfaceMartin Willi2007-05-141-8/+68
| | | | | more a tech demo
* simplified capability droppingMartin Willi2007-05-099-45/+26
|
* properly implemented interface_managers initiate, terminte_[ike|child]Martin Willi2007-05-098-303/+326
| | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues
* properly ignoring signals rised by a thread which is in listening stateMartin Willi2007-05-081-11/+8
|
* changing UID/GID after startup of pluto/charonMartin Willi2007-05-0711-57/+51
| | | | added --with-uid/--with-gid configure option
* extended interface_manager (more work needed here)Martin Willi2007-05-033-3/+243
|
* allow to have listening state TRUE while sending singal ourselfMartin Willi2007-05-031-0/+7
|
* reducing capabilities of the threads to a minimumMartin Willi2007-05-0311-40/+214
| | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route
* added more API documentation to backends/interfacesMartin Willi2007-04-307-20/+40
|
* added interface.hAndreas Steffen2007-04-271-0/+1
|
* fixed castingAndreas Steffen2007-04-271-2/+2
|
* added writeable_backend.hAndreas Steffen2007-04-271-1/+1
|
* fixed typoAndreas Steffen2007-04-271-1/+1
|
* restructuring of configuration backendsMartin Willi2007-04-2722-523/+1354
| | | | | | | | | added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP
* forcing proper autoload of af_key kernel module in charonMartin Willi2007-04-271-0/+10
|
* properly checking received IDr as initiatorMartin Willi2007-04-252-4/+12
|
* added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc ↵Martin Willi2007-04-232-1/+11
| | | | (>=linux-2.6.20)
* fixed CHILD_SA proposal selection when not using DH exchangeMartin Willi2007-04-231-8/+3
|
* fixed keyingtriesMartin Willi2007-04-231-0/+1
|
* implementation of strictcrlpolicy=ifuriAndreas Steffen2007-04-203-55/+64
|
* added support for EAP methods not establishing an MSKMartin Willi2007-04-195-66/+82
|
* added most problematic linux headers to distributionMartin Willi2007-04-191-1/+2
| | | | | other/real linux header may be selected using --with-linux-headers=dir
* added PDF support for CHILD_SAsMartin Willi2007-04-1911-190/+361
| | | | support for INVALID_KE_PAYLOAD negotiation for rekeying
* fixed memleak in IKE_SA managerMartin Willi2007-04-191-0/+1
|
* moved initiate() code to the generic controller_t classMartin Willi2007-04-165-67/+223
|
* added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts ↵Andreas Steffen2007-04-141-4/+8
| | | | keywords
* started support of X.509 attribute certificatesAndreas Steffen2007-04-122-21/+95
|
* added AA and AATR cert pathsAndreas Steffen2007-04-121-1/+15
|
* fixed output of list_auth_certificates()Andreas Steffen2007-04-121-0/+1
|
* removed %Q, %Y, %W, %U printf handlersMartin Willi2007-04-121-3/+3
|