| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Don't add ANY identity constraint to auth config, as XAuth rounds don't use one | Martin Willi | 2012-07-26 | 2 | -3/+15 | |
| | | ||||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 2 | -3/+6 | |
| | | ||||||
| * | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -3/+5 | |
| | | ||||||
| * | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | | ||||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 | |
| | | ||||||
| * | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | | ||||||
| * | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -19/+7 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | | ||||||
| * | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | | ||||||
| * | Added signature scheme options left/rightauth | Martin Willi | 2012-06-12 | 1 | -11/+99 | |
| | | ||||||
| * | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 1 | -1/+1 | |
| | | ||||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 2 | -7/+17 | |
| | | ||||||
| * | Show expiration time of rekeyed CHILD_SAs in statusall | Martin Willi | 2012-06-05 | 1 | -1/+6 | |
| | | ||||||
| * | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | | ||||||
| * | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -1/+3 | |
| | | ||||||
| * | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 2 | -2/+4 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | | ||||||
| * | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 2 | -2/+4 | |
| | | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
| * | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 5 | -93/+56 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 5 | -93/+56 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | | ||||||
| | | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | | ||||||
| | | * | Show IKE version in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | | ||||||
| | | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 2 | -7/+8 | |
| | | | | ||||||
| | | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -2/+2 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Be a little more verbose about XAuth configs in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -5/+16 | |
| | | | | ||||||
| | | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 2 | -0/+7 | |
| | | | | ||||||
| | | * | Log configured IKE version in stroke plugin. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Accept a xauth backend name appended to left/rightauth | Martin Willi | 2012-03-20 | 1 | -1/+8 | |
| | | | | ||||||
| | | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -6/+2 | |
| | | | | ||||||
| | | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+4 | |
| | | | | ||||||
| | | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+4 | |
| | | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| | | * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 2 | -26/+1 | |
| | | | | ||||||
| | | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 3 | -10/+10 | |
| | | | | | | | | | | | | | Replaced all those magic numbers. | |||||
| * | | | add AUTH_RULE_SUBJECT_CERT for raw public keys4.6.3 | Andreas Steffen | 2012-04-30 | 1 | -0/+4 | |
| | | | | ||||||
| * | | | output validity of raw public key if available | Andreas Steffen | 2012-04-30 | 1 | -2/+34 | |
| | | | | ||||||
| * | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 5 | -1/+100 | |
| | | | | ||||||
| * | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 1 | -5/+1 | |
| | | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
| * | | | Store password with remote ID to tie it stronger to a specific connection. | Tobias Brunner | 2012-04-18 | 1 | -12/+50 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |