Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 1 | -2/+2 | |
| | | ||||||
| * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 2 | -2/+3 | |
| | | ||||||
| * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 5 | -100/+189 | |
| | | ||||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -2/+8 | |
| | | ||||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 2 | -22/+33 | |
| | | ||||||
| * | Add a stroke attribute_handler requesting DNS servers given with leftdns | Martin Willi | 2012-08-21 | 4 | -0/+307 | |
| | | ||||||
| * | Serve ipsec.conf rightdns servers through stroke attribute provider | Martin Willi | 2012-08-21 | 1 | -10/+143 | |
| | | ||||||
| * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 1 | -0/+2 | |
| | | ||||||
* | | Use eap_vendor_type_from_string() in stroke | Tobias Brunner | 2012-08-31 | 1 | -38/+7 | |
|/ | ||||||
* | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | ||||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+4 | |
| | | | | configurable. | |||||
* | Don't add ANY identity constraint to auth config, as XAuth rounds don't use one | Martin Willi | 2012-07-26 | 2 | -3/+15 | |
| | ||||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 2 | -3/+6 | |
| | ||||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -3/+5 | |
| | ||||||
* | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | ||||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 | |
| | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | ||||||
* | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | ||||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -19/+7 | |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
* | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | ||||||
* | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | ||||||
* | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | ||||||
* | Added signature scheme options left/rightauth | Martin Willi | 2012-06-12 | 1 | -11/+99 | |
| | ||||||
* | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 1 | -1/+1 | |
| | ||||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 2 | -7/+17 | |
| | ||||||
* | Show expiration time of rekeyed CHILD_SAs in statusall | Martin Willi | 2012-06-05 | 1 | -1/+6 | |
| | ||||||
* | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | ||||||
* | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | ||||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -1/+3 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | ||||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 2 | -2/+4 | |
| | | | | Also fixes several whitespace errors. | |||||
* | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | ||||||
* | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 2 | -2/+4 | |
| | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
* | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | ||||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 5 | -93/+56 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 5 | -93/+56 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | ||||||
| | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | ||||||
| | * | Show IKE version in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | ||||||
| | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 2 | -7/+8 | |
| | | | ||||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -2/+2 | |
| | | | ||||||
| | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | * | Be a little more verbose about XAuth configs in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -5/+16 | |
| | | | ||||||
| | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 2 | -0/+7 | |
| | | | ||||||
| | * | Log configured IKE version in stroke plugin. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | |