Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | ||||||
| | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | ||||||
| | * | Show IKE version in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | ||||||
| | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 2 | -7/+8 | |
| | | | ||||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -2/+2 | |
| | | | ||||||
| | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | * | Be a little more verbose about XAuth configs in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -5/+16 | |
| | | | ||||||
| | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 2 | -0/+7 | |
| | | | ||||||
| | * | Log configured IKE version in stroke plugin. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Accept a xauth backend name appended to left/rightauth | Martin Willi | 2012-03-20 | 1 | -1/+8 | |
| | | | ||||||
| | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -6/+2 | |
| | | | ||||||
| | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+4 | |
| | | | ||||||
| | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+4 | |
| | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| | * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 2 | -26/+1 | |
| | | | ||||||
| | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 3 | -10/+10 | |
| | | | | | | | | | | | | Replaced all those magic numbers. | |||||
* | | | add AUTH_RULE_SUBJECT_CERT for raw public keys4.6.3 | Andreas Steffen | 2012-04-30 | 1 | -0/+4 | |
| | | | ||||||
* | | | output validity of raw public key if available | Andreas Steffen | 2012-04-30 | 1 | -2/+34 | |
| | | | ||||||
* | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 5 | -1/+100 | |
| | | | ||||||
* | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 1 | -5/+1 | |
| | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
* | | | Store password with remote ID to tie it stronger to a specific connection. | Tobias Brunner | 2012-04-18 | 1 | -12/+50 | |
| | | | ||||||
* | | | Added stroke user-creds command, to set username/password for a connection. | Tobias Brunner | 2012-04-17 | 3 | -1/+166 | |
| | | | ||||||
* | | | Added method to add additional shared secrets to stroke_cred_t. | Tobias Brunner | 2012-04-17 | 2 | -2/+20 | |
| | | | ||||||
* | | | Typo fixed. | Tobias Brunner | 2012-04-17 | 1 | -1/+1 | |
| | | | ||||||
* | | | remove leading zero in ASN.1 encoded serial numbers | Andreas Steffen | 2012-04-05 | 1 | -2/+2 | |
| | | | ||||||
* | | | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -2/+3 | |
|/ / | ||||||
* | | Fixed crash and locking issues while unrouting connections via stroke | Martin Willi | 2012-03-13 | 1 | -7/+8 | |
| | | ||||||
* | | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 | |
| | | | | | | | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | |||||
* | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 1 | -5/+3 | |
| | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
* | | Simplified logging of list of loaded plugins. | Tobias Brunner | 2012-01-19 | 1 | -9/+4 | |
| | | ||||||
* | | Make number of concurrently handled stroke messages configurable. | Tobias Brunner | 2011-12-29 | 1 | -2/+9 | |
| | | ||||||
* | | Limit the number of concurrently handled stroke messages. | Tobias Brunner | 2011-12-29 | 1 | -18/+104 | |
| | | | | | | | | This avoids clogging the thread pool with potentially blocking jobs. | |||||
* | | Fixed check for log groups when debug_t is unsigned. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
|/ | | | | The range and signedness of enum types is up to the compiler. | |||||
* | Cosmetics | Andreas Steffen | 2011-10-26 | 1 | -1/+2 | |
| | ||||||
* | Added a listplugins stroke command to show plugin features | Martin Willi | 2011-10-14 | 1 | -0/+55 | |
| | ||||||
* | Plugin enumerator enumerates over loaded features, too | Martin Willi | 2011-10-14 | 1 | -1/+1 | |
| | ||||||
* | Include library.h in plugin.h | Martin Willi | 2011-10-14 | 1 | -0/+1 | |
| | ||||||
* | Removed unneeded include. | Tobias Brunner | 2011-10-11 | 1 | -1/+0 | |
| | | | | This is not available on Android and redirects to <fcntl.h> on Ubuntu. | |||||
* | Added fallback to ipsec.secrets parser if glob(3) is not available. | Tobias Brunner | 2011-10-11 | 1 | -11/+22 | |
| | ||||||
* | Migrated stroke_cred_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -40/+32 | |
| | ||||||
* | Migrated stroke_socket_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -6/+8 | |
| | ||||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -8/+8 | |
| | ||||||
* | fixed esn type | Andreas Steffen | 2011-07-20 | 1 | -2/+2 | |
| | ||||||
* | added log and status output for ESN | Andreas Steffen | 2011-07-16 | 1 | -0/+7 | |
| | ||||||
* | Replaced more complex iterator usages. | Tobias Brunner | 2011-07-06 | 1 | -14/+9 | |
| | ||||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 2 | -13/+12 | |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | |||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 3 | -11/+75 | |
| | ||||||
* | Properly print time differences. | Tobias Brunner | 2011-06-07 | 1 | -2/+2 | |
| | | | | time_t is not necessarily of type int. |