| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | | ||||||
| * | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | | ||||||
| * | Added signature scheme options left/rightauth | Martin Willi | 2012-06-12 | 1 | -11/+99 | |
| | | ||||||
| * | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 1 | -1/+1 | |
| | | ||||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 2 | -7/+17 | |
| | | ||||||
| * | Show expiration time of rekeyed CHILD_SAs in statusall | Martin Willi | 2012-06-05 | 1 | -1/+6 | |
| | | ||||||
| * | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | | ||||||
| * | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -1/+3 | |
| | | ||||||
| * | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 2 | -2/+4 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | | ||||||
| * | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 2 | -2/+4 | |
| | | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
| * | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 5 | -93/+56 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 5 | -93/+56 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | | ||||||
| | | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | | ||||||
| | | * | Show IKE version in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | | ||||||
| | | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 2 | -7/+8 | |
| | | | | ||||||
| | | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -2/+2 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Be a little more verbose about XAuth configs in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -5/+16 | |
| | | | | ||||||
| | | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 2 | -0/+7 | |
| | | | | ||||||
| | | * | Log configured IKE version in stroke plugin. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Accept a xauth backend name appended to left/rightauth | Martin Willi | 2012-03-20 | 1 | -1/+8 | |
| | | | | ||||||
| | | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -6/+2 | |
| | | | | ||||||
| | | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+4 | |
| | | | | ||||||
| | | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+4 | |
| | | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| | | * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 2 | -26/+1 | |
| | | | | ||||||
| | | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 3 | -10/+10 | |
| | | | | | | | | | | | | | Replaced all those magic numbers. | |||||
| * | | | add AUTH_RULE_SUBJECT_CERT for raw public keys4.6.3 | Andreas Steffen | 2012-04-30 | 1 | -0/+4 | |
| | | | | ||||||
| * | | | output validity of raw public key if available | Andreas Steffen | 2012-04-30 | 1 | -2/+34 | |
| | | | | ||||||
| * | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 5 | -1/+100 | |
| | | | | ||||||
| * | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 1 | -5/+1 | |
| | | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
| * | | | Store password with remote ID to tie it stronger to a specific connection. | Tobias Brunner | 2012-04-18 | 1 | -12/+50 | |
| | | | | ||||||
| * | | | Added stroke user-creds command, to set username/password for a connection. | Tobias Brunner | 2012-04-17 | 3 | -1/+166 | |
| | | | | ||||||
| * | | | Added method to add additional shared secrets to stroke_cred_t. | Tobias Brunner | 2012-04-17 | 2 | -2/+20 | |
| | | | | ||||||
| * | | | Typo fixed. | Tobias Brunner | 2012-04-17 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | remove leading zero in ASN.1 encoded serial numbers | Andreas Steffen | 2012-04-05 | 1 | -2/+2 | |
| | | | | ||||||
| * | | | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -2/+3 | |
| |/ / | ||||||
| * | | Fixed crash and locking issues while unrouting connections via stroke | Martin Willi | 2012-03-13 | 1 | -7/+8 | |
| | | | ||||||
| * | | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 | |
| | | | | | | | | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | |||||
| * | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 1 | -5/+3 | |
| | | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
| * | | Simplified logging of list of loaded plugins. | Tobias Brunner | 2012-01-19 | 1 | -9/+4 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |