aboutsummaryrefslogtreecommitdiffstats
path: root/src/ipsec
Commit message (Collapse)AuthorAgeFilesLines
* ipsec: Only allow specific commands to be executed via ipsec scriptTobias Brunner2017-01-181-12/+20
| | | | | The previous fallback allowed running any executable as root if executing ipsec via sudo was allowed, by using e.g. `sudo ipsec ../../../bin/sh`.
* ipsec: Fix stop command on systems where sleep(1) only supports integersTobias Brunner2015-12-101-2/+7
| | | | Fixes #1231.
* ipsec: Quit script quicker for ipsec stopTobias Brunner2015-11-091-2/+2
| | | | | | | It rarely takes 1 second or longer to terminate the daemon. This decreases the runtime of the post test step a lot where `ipsec stop` is called for multiple hosts in each test case (10-15 minutes over all test cases).
* ipsec: Update rereadcacerts/aacerts command description in manpageMartin Willi2015-03-031-6/+9
|
* ipsec: Remove unsupported listcards and rereadgroups commandsTobias Brunner2014-10-081-10/+0
|
* ipsec: Document missing commandsTobias Brunner2014-10-081-1/+11
|
* ipsec: Update usage outputTobias Brunner2014-10-081-18/+17
|
* ipsec: Remove duplicate check for internal commandsTobias Brunner2014-10-081-4/+0
|
* ipsec: Only set PATH if it is not already setTobias Brunner2014-10-081-1/+1
| | | | | | | | | | The comment indicated this but it was always set anyway. All internal commands are called via their absolute paths, so the script only uses PATH for the uname command, but if that is not located in one of the configured directories the script will fail. Also, since the internal commands are called via their absolute paths there is no need to add the directories to PATH.
* aikgen generates AIK private/public key pairsAndreas Steffen2014-05-031-1/+5
| | | | | | aikgen outputs a binary AIK private key blob and the AIK public key. Optionally the Identity Request encrypted with the public key of the Privacy CA can be output.
* openac: Remove obsolete openac utilityMartin Willi2014-03-311-1/+0
| | | | The same functionality is now provided by the pki --acert subcommand.
* ipsec: Updated ipsec(8)Tobias Brunner2013-10-292-97/+126
|
* ipsec: Remove unused distro.txtTobias Brunner2013-10-291-2/+0
|
* pki: Install pki(1) as utility directly in $prefix/binTobias Brunner2013-09-133-2/+9
| | | | ipsec pki is maintained as alias.
* ipsec: Add --piddir to retrieve the PID/socket directoryTobias Brunner2013-07-222-3/+11
|
* Use the GEN silent rule when generating files with sedMartin Willi2013-05-061-0/+2
|
* android: Fix Android.mk for ipsec scriptTobias Brunner2013-03-201-1/+2
|
* starter: Make daemon name configurableAdrian-Ken Rueegsegger2013-03-191-3/+6
| | | | | | | | A daemon can be specified using the '--daemon' command line parameter. This tells starter to invoke a daemon other than 'charon'. Additionally the ipsec script uses the environment variable DAEMON_NAME to tell the starter which daemon to use.
* Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-151-3/+4
|
* Add "listcounters" command to ipsec.8 manpageMartin Willi2012-10-241-0/+4
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-241-2/+2
|
* The use of $< in Makefiles is not portableTobias Brunner2012-07-273-5/+5
| | | | | | It requires GNU make which is not what most people use on e.g. FreeBSD. Fixes #205.
* Added an option to rename the ipsec script during installationTobias Brunner2012-06-254-38/+55
| | | | | | | Also rename the man page and adjust all references in the script, the man page and other files. Closes #194.
* Updated ipsec script man page after removing plutoTobias Brunner2012-06-251-85/+71
|
* Removed pluto-specifics from ipsec scriptTobias Brunner2012-06-251-75/+1
|
* Remove executable flag from source files.Tobias Brunner2012-05-181-0/+0
|
* Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.Tobias Brunner2012-01-121-0/+2
| | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically.
* Added missing Android.mk files to distribution.Tobias Brunner2011-11-221-1/+1
|
* add listplugins to ipsec shell commandAndreas Steffen2011-10-261-2/+2
|
* Build ipsec on Android.Tobias Brunner2011-10-111-0/+31
| | | | | Note: this does not fully work as [ (or even test) is not supported on Android by default.
* ipsec: Allow the shell in the shebang to be changed.Tobias Brunner2011-10-112-1/+2
|
* auto-detect OS nameRiaan Kruger2011-08-231-1/+2
|
* ipsec: Wait longer for starter to quit before killing it.Tobias Brunner2011-05-261-1/+1
| | | | | As starter waits up to 10 seconds for either daemon to quit, killing it already after 5 seconds is too early.
* Renamed purgex509/crl to purgecerts/crls to be consistent with list commandsMartin Willi2010-12-101-3/+3
|
* Added options to flush CRLs/X509 certs from the cert cacheMartin Willi2010-12-101-2/+2
|
* Added generated manpages to .gitignoreMartin Willi2010-05-311-0/+1
|
* IPSEC_CONFDIR in ipsec script fixed.Tobias Brunner2010-05-301-1/+1
|
* Adding the version number to the most relevant manual pages.Tobias Brunner2010-05-302-3/+8
|
* Updated and corrected the ipsec(8) manual page.Tobias Brunner2010-05-301-206/+167
|
* Added pluto/whack output to 'ipsec leases'.Tobias Brunner2010-04-061-11/+20
|
* recognize ipsec purgeike commandAndreas Steffen2009-05-221-1/+10
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-302-3/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-1/+1
| | | | | important change for developers: %Y replaces %D to print identities!
* added .gitignore files, ready for the switchMartin Willi2009-04-301-0/+1
|
* removed .cvsignore filesMartin Willi2009-04-271-1/+0
|
* fixed usage of "leases" commandMartin Willi2008-12-111-1/+1
|
* list assigned leases using "ipsec leases"Martin Willi2008-12-101-0/+16
|
* use busybox compatible killMartin Willi2008-10-101-4/+4
|
* implemented ipsec listalgs as a stroke commandAndreas Steffen2008-10-081-8/+8
|
* crypto_factory algorithm enumeration APIMartin Willi2008-08-281-8/+8
| | | | implementation of "ipsec listalgs"
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-26 07:27:35 +0000