| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | child_sa_t.get_usestats() can additionally return the number of processed ↵ | Martin Willi | 2013-03-14 | 1 | -3/+2 | |
| | | | | | | | | | packets | |||||
| * | | Merge branch 'stroke-counters' | Martin Willi | 2013-03-18 | 3 | -11/+185 | |
| |\ \ | | | | | | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters. | |||||
| | * | | Add a "resetcounters" command to ipsec, clearing global or connection counters | Martin Willi | 2013-03-15 | 3 | -1/+38 | |
| | | | | ||||||
| | * | | Add connection name specific stroke counters | Martin Willi | 2013-03-15 | 3 | -11/+148 | |
| | | | | ||||||
| * | | | Merge branch 'stroke-timeout' | Martin Willi | 2013-03-18 | 1 | -18/+82 | |
| |\ \ \ | |_|/ |/| | | | | | Add a strongswan.conf timeout option for stroke control commands. | |||||
| | * | | Add a stroke command timeout option, and report status of completed command | Martin Willi | 2013-03-07 | 1 | -18/+82 | |
| | |/ | ||||||
| * | | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -15/+32 | |
| |\ \ | | | | | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | |||||
| | * | | Load multiple comma seperarated certificates in the leftcert option | Martin Willi | 2013-01-18 | 1 | -15/+32 | |
| | | | | ||||||
| * | | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -4/+4 | |
| |\ \ \ | | | | | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | |||||
| | * | | | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 1 | -14/+4 | |
| | | | | | ||||||
| | * | | | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -5/+15 | |
| | | |/ | |/| | ||||||
| * | | | Merge branch 'ike-dscp' | Martin Willi | 2013-02-14 | 1 | -1/+2 | |
| |\ \ \ | ||||||
| | * | | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets | Martin Willi | 2013-02-06 | 1 | -1/+1 | |
| | | | | | ||||||
| | * | | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+2 | |
| | |/ / | ||||||
| * / / | Fix 'stroke loglevel any' | Tobias Brunner | 2013-02-13 | 1 | -4/+11 | |
| |/ / | | | | | | | | | | | | | Before b46a5cd4 this worked if debug_t was unsigned. In that case -1, as returned by enum_from_name(), would result in a large positive number. So any unknown debug group (including 'any') had the same effect that was only intended for 'any'. | |||||
| * / | Use proper buffer sizes for parse_smartcard() | Tobias Brunner | 2013-01-24 | 1 | -7/+10 | |
| |/ | ||||||
| * | Don't handle right=%any6 as "loose" identity, but as %any | Martin Willi | 2013-01-14 | 1 | -2/+1 | |
| | | ||||||
| * | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 | |
| |\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | |||||
| | * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+2 | |
| | | | ||||||
| * | | Fixed some typos in comments | Volker Rümelin | 2013-01-11 | 1 | -1/+1 | |
| |/ | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 7 | -7/+7 | |
| | | ||||||
| * | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -26/+11 | |
| | | ||||||
| * | Use explicit, larger buffer sizes for smartcard keyids and modules | Martin Willi | 2012-10-24 | 1 | -8/+8 | |
| | | ||||||
| * | Support loading cacert certificates in ipsec.conf ca sections from smartcard | Martin Willi | 2012-10-24 | 1 | -19/+37 | |
| | | ||||||
| * | Refactored stroke smartcard token parsing, support module and slot in ↵ | Martin Willi | 2012-10-24 | 1 | -62/+101 | |
| | | | | | leftcert option | |||||
| * | Load ipsec.conf %smartcard leftcerts with pkcs11 builder | Martin Willi | 2012-10-24 | 1 | -8/+20 | |
| | | ||||||
| * | Add a "ipsec listcounters" command to stroke | Martin Willi | 2012-10-24 | 2 | -0/+6 | |
| | | ||||||
| * | Add a print method for stroke counters | Martin Willi | 2012-10-24 | 2 | -0/+29 | |
| | | ||||||
| * | Add stroke message type counters | Martin Willi | 2012-10-24 | 1 | -0/+75 | |
| | | ||||||
| * | Add stroke counters for invalid IKE messages | Martin Willi | 2012-10-24 | 1 | -0/+27 | |
| | | ||||||
| * | Add stroke CHILD_SA rekeying counter | Martin Willi | 2012-10-24 | 1 | -0/+12 | |
| | | ||||||
| * | Add stroke IKE rekey counters | Martin Willi | 2012-10-24 | 1 | -0/+26 | |
| | | ||||||
| * | Define stroke counter types to implement | Martin Willi | 2012-10-24 | 2 | -0/+86 | |
| | | ||||||
| * | Add a stub for IKE event counters in stroke | Martin Willi | 2012-10-24 | 4 | -0/+112 | |
| | | ||||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -2/+1 | |
| | | ||||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+2 | |
| | | ||||||
| * | Reload logger configuration on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -18/+1 | |
| | | | | | | | Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t. | |||||
| * | Fix leak of PINs from ipsec.secrets | Martin Willi | 2012-10-09 | 1 | -1/+2 | |
| | | ||||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 1 | -1/+1 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 1 | -15/+7 | |
| | | | | | get_interface() method | |||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 1 | -1/+1 | |
| | | ||||||
| * | Make stroke user-creds work with XAuth configs | Tobias Brunner | 2012-09-18 | 1 | -9/+18 | |
| | | ||||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+10 | |
| | | ||||||
| * | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 1 | -7/+31 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -4/+16 | |
| | | ||||||
| * | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -4/+16 | |
| | | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | |||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -0/+3 | |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
| * | Print the name of mem pools instead of the confusing <base>/<size> | Tobias Brunner | 2012-09-10 | 1 | -2/+4 | |
| | | ||||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 9 | -115/+664 | |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |