aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* use username part of RFC822 IDs for PAM authentication Martin Willi2008-08-251-3/+9
|
* ported parts of two-sim branchMartin Willi2008-08-2229-247/+636
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* pool names are uniqueMartin Willi2008-08-221-5/+1
|
* do not return IPv6 src addresses for IPv4 destinationsMartin Willi2008-08-211-2/+4
|
* fixed EAP-GTC secret lookupMartin Willi2008-08-212-8/+22
| | | | | improved error logging PAM authentication needs CAP_AUDIT_WRITE capability
* a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAMMartin Willi2008-08-218-6/+484
|
* charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE ↵Andreas Steffen2008-08-211-3/+14
| | | | events. Useful for taking down hundreds of virtual IPs on the same host
* avoid too many alloca()s in netlink send, problematic on MIPSMartin Willi2008-08-211-2/+7
|
* some string fixesMartin Willi2008-08-202-2/+2
|
* added missing tooltipMartin Willi2008-08-201-40/+41
|
* handle DBUS permission problems gracefullyMartin Willi2008-08-202-13/+23
|
* fixed shared key lookup by IDMartin Willi2008-08-205-24/+134
| | | | proper auth method selection
* fixed auth-dialog password flushMartin Willi2008-08-201-1/+8
|
* fixed libstrongswan integrity testAndreas Steffen2008-08-191-14/+14
|
* certificate based gateway authenticationMartin Willi2008-08-1912-19/+477
| | | | prototype PSK user authentication with auth-dialog
* updated nm plugin to NetworkManager API changesMartin Willi2008-08-182-148/+48
|
* roam jobs for routing table changes not fired for virtual IP routesMartin Willi2008-08-181-36/+66
|
* do not fire a roam job when virtual IP is deletedAndreas Steffen2008-08-151-1/+1
|
* temporary workaround to prevent roam jobs due to virtual IP installationsAndreas Steffen2008-08-111-1/+2
|
* corrected typoAndreas Steffen2008-08-111-1/+1
|
* initiator sends contents of rightca= if present as a certificate request ↵Andreas Steffen2008-08-051-9/+15
| | | | without searching for further CA certificates
* corrected captionAndreas Steffen2008-08-011-1/+1
|
* configuration plugin for NetworkManagerMartin Willi2008-07-3113-0/+1406
|
* added options for virtual IP, UDP encapsulation, IPCompMartin Willi2008-07-312-11/+30
| | | | proper handling of libstrongswan/glib TRUE/FALSE conflict
* reimplemented dbus plugin for NetworkManager 0.7, renamed to nmMartin Willi2008-07-3113-792/+526
|
* recreating FIFO if it existsMartin Willi2008-07-311-2/+2
|
* fixed usage typoMartin Willi2008-07-311-1/+1
|
* increased stroke socket backlog to 10Martin Willi2008-07-301-1/+1
|
* using a entry cache for duplicate checks, avoids deadlocksMartin Willi2008-07-301-4/+37
|
* use condvar broadcasts to signal threads waiting for an IP, there might be ↵Martin Willi2008-07-301-2/+2
| | | | more than one
* using shared read locks in credential set enumerators to avoid deadlocksMartin Willi2008-07-305-70/+119
|
* added strongswan.conf option "charon.dos_protection" to disable ↵Martin Willi2008-07-301-1/+9
| | | | cookies/aggressiveness check
* demoted IKE state change output to debug level 2Andreas Steffen2008-07-281-1/+1
|
* ignore AUTH_LIFETIME value if reauthentication has already been scheduled ↵Andreas Steffen2008-07-281-8/+13
| | | | earlier
* use XFRM_MSG_UPDPOLICY for existing policies onlyMartin Willi2008-07-281-1/+1
|
* added tests.h to distributionMartin Willi2008-07-241-1/+1
|
* fixed UCI thread cancellation on ARMMartin Willi2008-07-241-22/+19
|
* added option charon.plugins.sql.lease_history to disable lease history loggingMartin Willi2008-07-241-4/+17
|
* fixed statistic calcuation for static leasesMartin Willi2008-07-241-11/+14
|
* completed IKE_SA logging at the AUDIT levelAndreas Steffen2008-07-233-8/+43
|
* fixed pool statisticsMartin Willi2008-07-231-2/+2
|
* IKE_SA rekeying inherits other_host from old IKE_SAAndreas Steffen2008-07-231-0/+3
|
* cosmeticsAndreas Steffen2008-07-231-1/+1
|
* some more changes to IKE_SA and CHILD_SA loggingAndreas Steffen2008-07-226-22/+46
|
* experimental and untested reimplementation of sql based IP poolMartin Willi2008-07-224-232/+300
| | | | | uses address preallocation and separate address/lease tables for linear lookup time
* cosmeticsAndreas Steffen2008-07-222-2/+2
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-225-7/+43
|
* own CPI was not deleted due to copy-and-paste errorAndreas Steffen2008-07-221-1/+1
|
* consistent logging of SPIs and CPIsAndreas Steffen2008-07-223-40/+58
|
* missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenarioAndreas Steffen2008-07-221-1/+1
|