| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | vici: Add a plugin stub for the "Versatile IKE Control Interface" plugin | Martin Willi | 2014-05-07 | 1 | -0/+7 |
| | | |||||
| * | dnscert: Add DNS CERT support for pubkey authentication | Ruslan N. Marchenko | 2013-10-11 | 1 | -0/+7 |
| | | | | | | | | | | | | Add DNSSEC protected CERT RR delivered certificate authentication. The new dnscert plugin is based on the ipseckey plugin and relies on the existing PEM decoder as well as x509 and PGP parsers. As such the plugin expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads. The plugin is targeted to improve interoperability with Racoon, which supports this type of authentication, ignoring in-stream certificates and using only DNS provided certificates for FQDN IDs. | ||||
| * | Build all shared libraries with -no-undefined and link them properly | Tobias Brunner | 2013-09-12 | 1 | -1/+7 |
| | | | | | | | | | | | The flag is required to convince libtool on Cygwin to build DLLs. But on Windows these shared libraries can not have undefined symbols, so we have to link them explicitly to the libraries they reference. For plugins this is currently not done, so only the monolithic build is supported. The plugin loader wouldn't be able to load DLLs anyway, as it tries to load files that don't exist on Cygwin. | ||||
| * | moved tnc_imv plugin to libtnccs thanks to recommendation callback function | Andreas Steffen | 2013-08-15 | 1 | -7/+0 |
| | | |||||
| * | Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon ↵ | Andreas Steffen | 2013-08-15 | 1 | -35/+0 |
| | | | | | plugins to libtnccs | ||||
| * | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -4/+2 |
| | | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
| * | osx-attr: add plugin installing config attributes using SystemConfiguration | Martin Willi | 2013-06-21 | 1 | -0/+7 |
| | | | | | | Currently installs DNS servers only, by prepending IP addresses to the DNS configuration of the primary networking service. | ||||
| * | kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec | Tobias Brunner | 2013-06-21 | 1 | -0/+7 |
| | | |||||
| * | renamed tnc_ifmap2 plugin to tnc_ifmap | Andreas Steffen | 2013-03-31 | 1 | -3/+3 |
| | | |||||
| * | removed obsoleted tnc_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -7/+0 |
| | | |||||
| * | set up a new IF-MAP session | Andreas Steffen | 2013-03-29 | 1 | -0/+7 |
| | | |||||
| * | Added xauth-noauth plugin | Tobias Brunner | 2013-03-19 | 1 | -0/+7 |
| | | | | | | | | | This XAuth backend does not do any authentication of client credentials but simply sends a successful XAuth status to the client, thereby concluding the XAuth exchange. This can be useful to fallback to basic RSA authentication with clients that can not be configured without XAuth authentication. | ||||
| * | Removed backend for old Android frontend patch | Tobias Brunner | 2013-03-02 | 1 | -3/+3 |
| | | | | | Moved the remaining DNS handler to a new plugin. | ||||
| * | Merge branch 'systime' | Martin Willi | 2013-03-01 | 1 | -0/+7 |
| |\ | | | | | | | | | | | Add a systime-fix plugin allowing an embedded system to validate certificates if the system time has not been synchronized after boot. Certificates of established tunnels can be re-validated after the system time gets valid. | ||||
| | * | Add a stub for systime-fix, a plugin handling certificate lifetimes gracefully | Martin Willi | 2013-02-19 | 1 | -0/+7 |
| | | | |||||
| * | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRs | Reto Guadagnini | 2013-02-19 | 1 | -0/+7 |
| | | | |||||
| * | | make TNC client authentication type available to IMVs | Andreas Steffen | 2013-02-12 | 1 | -1/+1 |
| |/ | |||||
| * | Payload added to handle IKE fragments | Tobias Brunner | 2012-12-24 | 1 | -0/+1 |
| | | |||||
| * | Add an error-notify plugin to send catched alerts to listening applications | Martin Willi | 2012-12-19 | 1 | -0/+7 |
| | | |||||
| * | Add a lookip plugin stub to lookup connections by virtual IP | Martin Willi | 2012-10-24 | 1 | -0/+7 |
| | | |||||
| * | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 1 | -0/+7 |
| | | |||||
| * | Removed the unneeded socket-raw plugin | Tobias Brunner | 2012-09-14 | 1 | -7/+0 |
| | | |||||
| * | Added eap-dynamic plugin which can proxy any other EAP method | Tobias Brunner | 2012-08-31 | 1 | -0/+7 |
| | | |||||
| * | Merge branch 'android-app' | Tobias Brunner | 2012-08-13 | 1 | -1/+1 |
| |\ | | | | | | | | | | | | | | | This branch introduces a userland IPsec implementation (libipsec) and an Android App which targets the VpnService API that is provided by Android 4+. The implementation is based on the bachelor thesis 'Userland IPsec for Android 4' by Giuliano Grassi and Ralf Sager. | ||||
| | * | Moved packet_t to libstrongswan | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | |||||
| * | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -0/+7 |
| |\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | ||||
| | * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 1 | -0/+7 |
| | | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | ||||
| * | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 1 | -0/+7 |
| |/ | |||||
| * | Fix linking of addrblock plugin when building monolithic | Martin Willi | 2012-08-03 | 1 | -1/+1 |
| | | | | | Fixes #212. | ||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -4/+0 |
| | | |||||
| * | Job added to re-initiate an IKE_SA. | Tobias Brunner | 2012-05-30 | 1 | -0/+1 |
| | | |||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 |
| | | |||||
| * | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 1 | -0/+1 |
| | | |||||
| * | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 1 | -7/+0 |
| | | |||||
| * | Provide plugin list from charon, not internally in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -2/+1 |
| | | |||||
| * | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 1 | -0/+1 |
| | | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | ||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -28/+75 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | * | Isakmp_dpd task added. | Clavister OpenSource | 2012-03-20 | 1 | -0/+1 |
| | | | |||||
| | * | Implemented aggressive mode using Phase 1 helper class | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | |||||
| | * | Implemented a common Phase 1 helper class to use by main and aggressive modes | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | |||||
| | * | Try to detect reauthentication as responder and adopt children to new SA | Martin Willi | 2012-03-20 | 1 | -1/+2 |
| | | | |||||
| | * | Added an XAuth plugin that forwards authentication to EAP methods | Martin Willi | 2012-03-20 | 1 | -0/+6 |
| | | | |||||
| | * | Don't include ikev1/ikev2 subfolders in build when using --disable-ikev1/ikev2 | Martin Willi | 2012-03-20 | 1 | -2/+10 |
| | | | |||||
| | * | Moved eap/xauth classes out of protocol specific subdirectories | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| | | | |||||
| | * | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -46/+48 |
| | | | |||||
| | * | Renamed ike_vendor_v1 to isakmp_vendor | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | | |||||
| | * | Renamed ike_natd_v1 to isakmp_natd | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | | |||||
| | * | Renamed ike_cert_pre_v1 to isakmp_cert_pre | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | | |||||
| | * | Renamed ike_cert_post_v1 to isakmp_cert_post | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | | |||||
| | * | Added a dedicated IKEv1 task to delete CHILD_SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |