aboutsummaryrefslogtreecommitdiffstats
path: root/src/ipsec/_ipsec.in
Commit message (Collapse)AuthorAgeFilesLines
* ipsec: Remove `starter` as valid command in --helpTobias Brunner2017-06-201-1/+1
| | | | | | `start` is basically the same thing. Fixes #2362.
* ipsec: Only allow specific commands to be executed via ipsec scriptTobias Brunner2017-01-181-12/+20
| | | | | The previous fallback allowed running any executable as root if executing ipsec via sudo was allowed, by using e.g. `sudo ipsec ../../../bin/sh`.
* ipsec: Fix stop command on systems where sleep(1) only supports integersTobias Brunner2015-12-101-2/+7
| | | | Fixes #1231.
* ipsec: Quit script quicker for ipsec stopTobias Brunner2015-11-091-2/+2
| | | | | | | It rarely takes 1 second or longer to terminate the daemon. This decreases the runtime of the post test step a lot where `ipsec stop` is called for multiple hosts in each test case (10-15 minutes over all test cases).
* ipsec: Remove unsupported listcards and rereadgroups commandsTobias Brunner2014-10-081-10/+0
|
* ipsec: Update usage outputTobias Brunner2014-10-081-18/+17
|
* ipsec: Remove duplicate check for internal commandsTobias Brunner2014-10-081-4/+0
|
* ipsec: Only set PATH if it is not already setTobias Brunner2014-10-081-1/+1
| | | | | | | | | | The comment indicated this but it was always set anyway. All internal commands are called via their absolute paths, so the script only uses PATH for the uname command, but if that is not located in one of the configured directories the script will fail. Also, since the internal commands are called via their absolute paths there is no need to add the directories to PATH.
* aikgen generates AIK private/public key pairsAndreas Steffen2014-05-031-1/+5
| | | | | | aikgen outputs a binary AIK private key blob and the AIK public key. Optionally the Identity Request encrypted with the public key of the Privacy CA can be output.
* openac: Remove obsolete openac utilityMartin Willi2014-03-311-1/+0
| | | | The same functionality is now provided by the pki --acert subcommand.
* pki: Install pki(1) as utility directly in $prefix/binTobias Brunner2013-09-131-2/+7
| | | | ipsec pki is maintained as alias.
* ipsec: Add --piddir to retrieve the PID/socket directoryTobias Brunner2013-07-221-1/+5
|
* starter: Make daemon name configurableAdrian-Ken Rueegsegger2013-03-191-3/+6
| | | | | | | | A daemon can be specified using the '--daemon' command line parameter. This tells starter to invoke a daemon other than 'charon'. Additionally the ipsec script uses the environment variable DAEMON_NAME to tell the starter which daemon to use.
* Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-151-3/+4
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-241-2/+2
|
* The use of $< in Makefiles is not portableTobias Brunner2012-07-271-0/+335
It requires GNU make which is not what most people use on e.g. FreeBSD. Fixes #205.