aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/medcli/medcli_config.c
Commit message (Collapse)AuthorAgeFilesLines
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-25/+25
|
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-18/+20
|
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-211-1/+1
|
* ike: Add an additional but separate AEAD proposal to CHILD configMartin Willi2014-05-161-0/+2
| | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
* ike: Add an additional but separate AEAD proposal to IKE config, if supportedMartin Willi2014-05-161-0/+2
|
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-6/+4
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-3/+3
|
* Merge branch 'opaque-ports'Martin Willi2013-03-011-1/+1
|\ | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+1
| |
* | Add a DSCP configuration value to IKE configsMartin Willi2013-02-061-3/+2
|/
* Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-2/+3
|
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-2/+2
|
* Make use of new CIDR string ts constructor where appropriateMartin Willi2012-10-241-20/+4
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-3/+3
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-241-4/+6
|
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-3/+0
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-3/+3
|
* Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-2/+2
|
* Make the UDP ports charon listens for packets on (and uses as source ports) ↵Tobias Brunner2012-08-081-2/+2
| | | | configurable.
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-3/+5
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-3/+6
|
* Added an aggressive mode peer_cfg optionMartin Willi2012-03-201-3/+3
|
* Use enum to define IKE version on peer_cfg_t.Tobias Brunner2012-03-201-3/+3
| | | | Replaced all those magic numbers.
* Migrated medcli_config_t to INIT/METHOD macros.Tobias Brunner2011-10-041-47/+41
|
* bus->listen() and the controller wrappers accept a timeout to wait for callbacksMartin Willi2011-08-261-1/+1
|
* Fixed common misspellings.Tobias Brunner2011-07-201-1/+1
| | | | Mostly found by 'codespell'.
* Added a TFC padding option to child_cfgMartin Willi2010-12-201-2/+2
|
* start and route connections defined in an SQL database via start_action ↵Andreas Steffen2010-11-281-4/+4
| | | | field and ipsec up %startall command
* Refer to scheduler and processor via lib and not hydra.Tobias Brunner2010-09-021-2/+1
|
* Refer to processor via hydra and not charon.Tobias Brunner2010-09-021-15/+16
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-2/+4
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-3/+3
|
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-041-2/+2
|
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+407