| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Use explicit, larger buffer sizes for smartcard keyids and modules | Martin Willi | 2012-10-24 | 1 | -8/+8 | |
| | | ||||||
| * | Support loading cacert certificates in ipsec.conf ca sections from smartcard | Martin Willi | 2012-10-24 | 1 | -19/+37 | |
| | | ||||||
| * | Refactored stroke smartcard token parsing, support module and slot in ↵ | Martin Willi | 2012-10-24 | 1 | -62/+101 | |
| | | | | | leftcert option | |||||
| * | Load ipsec.conf %smartcard leftcerts with pkcs11 builder | Martin Willi | 2012-10-24 | 1 | -8/+20 | |
| | | ||||||
| * | Add a "ipsec listcounters" command to stroke | Martin Willi | 2012-10-24 | 2 | -0/+6 | |
| | | ||||||
| * | Add a print method for stroke counters | Martin Willi | 2012-10-24 | 2 | -0/+29 | |
| | | ||||||
| * | Add stroke message type counters | Martin Willi | 2012-10-24 | 1 | -0/+75 | |
| | | ||||||
| * | Add stroke counters for invalid IKE messages | Martin Willi | 2012-10-24 | 1 | -0/+27 | |
| | | ||||||
| * | Add stroke CHILD_SA rekeying counter | Martin Willi | 2012-10-24 | 1 | -0/+12 | |
| | | ||||||
| * | Add stroke IKE rekey counters | Martin Willi | 2012-10-24 | 1 | -0/+26 | |
| | | ||||||
| * | Define stroke counter types to implement | Martin Willi | 2012-10-24 | 2 | -0/+86 | |
| | | ||||||
| * | Add a stub for IKE event counters in stroke | Martin Willi | 2012-10-24 | 4 | -0/+112 | |
| | | ||||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -2/+1 | |
| | | ||||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+2 | |
| | | ||||||
| * | Reload logger configuration on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -18/+1 | |
| | | | | | | | Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t. | |||||
| * | Fix leak of PINs from ipsec.secrets | Martin Willi | 2012-10-09 | 1 | -1/+2 | |
| | | ||||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 1 | -1/+1 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 1 | -15/+7 | |
| | | | | | get_interface() method | |||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 1 | -1/+1 | |
| | | ||||||
| * | Make stroke user-creds work with XAuth configs | Tobias Brunner | 2012-09-18 | 1 | -9/+18 | |
| | | ||||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+10 | |
| | | ||||||
| * | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 1 | -7/+31 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -4/+16 | |
| | | ||||||
| * | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -4/+16 | |
| | | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | |||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -0/+3 | |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
| * | Print the name of mem pools instead of the confusing <base>/<size> | Tobias Brunner | 2012-09-10 | 1 | -2/+4 | |
| | | ||||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 9 | -115/+664 | |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
| | * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 1 | -2/+2 | |
| | | | ||||||
| | * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 2 | -2/+3 | |
| | | | ||||||
| | * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 5 | -100/+189 | |
| | | | ||||||
| | * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -2/+8 | |
| | | | ||||||
| | * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 2 | -22/+33 | |
| | | | ||||||
| | * | Add a stroke attribute_handler requesting DNS servers given with leftdns | Martin Willi | 2012-08-21 | 4 | -0/+307 | |
| | | | ||||||
| | * | Serve ipsec.conf rightdns servers through stroke attribute provider | Martin Willi | 2012-08-21 | 1 | -10/+143 | |
| | | | ||||||
| | * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 1 | -0/+2 | |
| | | | ||||||
| * | | Use eap_vendor_type_from_string() in stroke | Tobias Brunner | 2012-08-31 | 1 | -38/+7 | |
| |/ | ||||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | ||||||
| * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+4 | |
| | | | | | configurable. | |||||
| * | Don't add ANY identity constraint to auth config, as XAuth rounds don't use one | Martin Willi | 2012-07-26 | 2 | -3/+15 | |
| | | ||||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 2 | -3/+6 | |
| | | ||||||
| * | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -3/+5 | |
| | | ||||||
| * | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | | ||||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 | |
| | | ||||||
| * | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | | ||||||
| * | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -19/+7 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | | ||||||
| * | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |