| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Added xauth-noauth plugin | Tobias Brunner | 2013-03-19 | 1 | -0/+7 | |
| | | | | | | | | | This XAuth backend does not do any authentication of client credentials but simply sends a successful XAuth status to the client, thereby concluding the XAuth exchange. This can be useful to fallback to basic RSA authentication with clients that can not be configured without XAuth authentication. | |||||
| * | Removed backend for old Android frontend patch | Tobias Brunner | 2013-03-02 | 1 | -3/+3 | |
| | | | | | Moved the remaining DNS handler to a new plugin. | |||||
| * | Merge branch 'systime' | Martin Willi | 2013-03-01 | 1 | -0/+7 | |
| |\ | | | | | | | | | | | Add a systime-fix plugin allowing an embedded system to validate certificates if the system time has not been synchronized after boot. Certificates of established tunnels can be re-validated after the system time gets valid. | |||||
| | * | Add a stub for systime-fix, a plugin handling certificate lifetimes gracefully | Martin Willi | 2013-02-19 | 1 | -0/+7 | |
| | | | ||||||
| * | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRs | Reto Guadagnini | 2013-02-19 | 1 | -0/+7 | |
| | | | ||||||
| * | | make TNC client authentication type available to IMVs | Andreas Steffen | 2013-02-12 | 1 | -1/+1 | |
| |/ | ||||||
| * | Payload added to handle IKE fragments | Tobias Brunner | 2012-12-24 | 1 | -0/+1 | |
| | | ||||||
| * | Add an error-notify plugin to send catched alerts to listening applications | Martin Willi | 2012-12-19 | 1 | -0/+7 | |
| | | ||||||
| * | Add a lookip plugin stub to lookup connections by virtual IP | Martin Willi | 2012-10-24 | 1 | -0/+7 | |
| | | ||||||
| * | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 1 | -0/+7 | |
| | | ||||||
| * | Removed the unneeded socket-raw plugin | Tobias Brunner | 2012-09-14 | 1 | -7/+0 | |
| | | ||||||
| * | Added eap-dynamic plugin which can proxy any other EAP method | Tobias Brunner | 2012-08-31 | 1 | -0/+7 | |
| | | ||||||
| * | Merge branch 'android-app' | Tobias Brunner | 2012-08-13 | 1 | -1/+1 | |
| |\ | | | | | | | | | | | | | | | This branch introduces a userland IPsec implementation (libipsec) and an Android App which targets the VpnService API that is provided by Android 4+. The implementation is based on the bachelor thesis 'Userland IPsec for Android 4' by Giuliano Grassi and Ralf Sager. | |||||
| | * | Moved packet_t to libstrongswan | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | ||||||
| * | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -0/+7 | |
| |\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| | * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 1 | -0/+7 | |
| | | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | |||||
| * | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 1 | -0/+7 | |
| |/ | ||||||
| * | Fix linking of addrblock plugin when building monolithic | Martin Willi | 2012-08-03 | 1 | -1/+1 | |
| | | | | | Fixes #212. | |||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -4/+0 | |
| | | ||||||
| * | Job added to re-initiate an IKE_SA. | Tobias Brunner | 2012-05-30 | 1 | -0/+1 | |
| | | ||||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 | |
| | | ||||||
| * | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 1 | -0/+1 | |
| | | ||||||
| * | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 1 | -7/+0 | |
| | | ||||||
| * | Provide plugin list from charon, not internally in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -2/+1 | |
| | | ||||||
| * | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 1 | -0/+1 | |
| | | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -28/+75 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Isakmp_dpd task added. | Clavister OpenSource | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Implemented aggressive mode using Phase 1 helper class | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Implemented a common Phase 1 helper class to use by main and aggressive modes | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Try to detect reauthentication as responder and adopt children to new SA | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Added an XAuth plugin that forwards authentication to EAP methods | Martin Willi | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Don't include ikev1/ikev2 subfolders in build when using --disable-ikev1/ikev2 | Martin Willi | 2012-03-20 | 1 | -2/+10 | |
| | | | ||||||
| | * | Moved eap/xauth classes out of protocol specific subdirectories | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | ||||||
| | * | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -46/+48 | |
| | | | ||||||
| | * | Renamed ike_vendor_v1 to isakmp_vendor | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Renamed ike_natd_v1 to isakmp_natd | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Renamed ike_cert_pre_v1 to isakmp_cert_pre | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Renamed ike_cert_post_v1 to isakmp_cert_post | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added a dedicated IKEv1 task to delete CHILD_SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added a dedicated delete task for IKEv1 IKE_SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added a IKEv1 hybrid authenticator based on Pubkey/PSK authenticators | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added a task stub to create and process IKEv1 informational exchanges | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added generic XAuth backend, using secrets provided by credential sets. | Tobias Brunner | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Removed xauth-null dummy plugin. | Tobias Brunner | 2012-03-20 | 1 | -6/+1 | |
| | | | ||||||
| | * | Added IKEv1 Mode Config task based on IKEv2 ike_config | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Remove xauth_authenticator, we handle it in the task | Martin Willi | 2012-03-20 | 1 | -1/+0 | |
| | | | ||||||
| | * | Replace xauth_request task with a new stub where we reimplement it | Martin Willi | 2012-03-20 | 1 | -2/+1 | |
| | | | ||||||
| | * | Implemented IKEv1 pubkey SIG payload processing in an authenticator | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Implemented IKEv1 PSK HASH payload processing in separated authenticator | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Implemented post-authentication certificate handling for IKEv1 | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |