| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
|
|
|
|
| |
This allows the server to use a different IKE identity as long as the
configured hostname is contained in the certificate.
|
| |
|
|
|
|
| |
This avoids all the deprecated warnings when using OpenSSL functins.
|
|
|
|
| |
This seems to be not required anymore with the LLVM 5 toolchain.
|
| |
|
| |
|
|
|
|
| |
We now have our own printf backend and use it instead of Vstr.
|
| |
|
|
|
|
|
|
|
| |
Replace the allowany semantic by a more powerful subnet and IP range matching.
Multiple addresses, DNS names, subnets and ranges can be specified in a comma
separated list. Initiators ignore the ranges/subnets, responders match
configurations against all addresses, ranges and subnets.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Partially based on an old patch by Adrian-Ken Rueegsegger.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|