tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	vici: Match subnets and ranges against peer IP in redirect command	Tobias Brunner	2016-03-04	1	-1/+2
\|
*	vici: Match identity with wildcards against remote ID in redirect command	Tobias Brunner	2016-03-04	1	-1/+2
\|
*	vici: Add redirect command	Tobias Brunner	2016-03-04	1	-0/+15
\| \| \| \| \|	This allows redirecting IKE_SAs by multiple different selectors, if none are given all SAs are redirected.
*	vici: Provide ports of local and remote IKE endpoints	Tobias Brunner	2016-03-03	1	-0/+2
\|
*	vici: Correctly document 'up' key for updown events	Tobias Brunner	2016-03-01	1	-4/+4
\| \| \| \|	Instead of sending 'no' it is omitted when an SA goes down.
*	vici: list-cert sends subject, not-before and not-after attributes for pubkeys	Andreas Steffen	2016-01-09	1	-0/+3
\|
*	Refactored certificate management for the vici and stroke interfaces5.4.0dr1	Andreas Steffen	2015-12-12	1	-3/+7
\|
*	vici: Fix documentation about the initiate/terminate timeout	Martin Willi	2015-12-07	1	-2/+2
\|
*	vici: Honor an optionally passed IKE configuration name in initiate/install	Martin Willi	2015-12-07	1	-0/+2
\| \| \| \| \| \| \|	If two IKE configurations have CHILD configurations with the same name, we have no control about the CHILD_SA that actually gets controlled. The new "ike" parameter specifies the peer config name to find the "child" config under.
*	vici: Support completely asynchronous initiating and termination	Martin Willi	2015-12-07	1	-0/+6
\| \| \| \| \| \|	In some situations the vici client is not interested in waiting for a timeout at all, so don't register a logging callback if the timeout argument is negative.
*	Built the CPAN file structure for the Vici::Session perl module	Andreas Steffen	2015-12-01	1	-0/+40
\|
*	vici: Add get-algorithms command to query loaded algorithms and implementations	Tobias Brunner	2015-11-30	1	-0/+10
\|
*	vici: Add option to query leases of pools	Tobias Brunner	2015-11-10	1	-1/+10
\| \| \| \| \|	We could later perhaps add filter parameters similar to those of the `ipsec leases` command (pool name/virtual IP).
*	vici: Return local and remote virtual IPs when listing SAs	Tobias Brunner	2015-11-10	1	-0/+6
\|
*	vici: Add NAT information when listing IKE_SAs	Tobias Brunner	2015-11-09	1	-0/+4
\| \| \| \| \| \| \| \| \| \|	The `nat-local` and `nat-remote` keys contain information on the NAT status of the local and remote IKE endpoints, respectively. If a responder did not detect a NAT but is configured to fake a NAT situation this is indicated by `nat-fake` (if an initiator fakes a NAT situation `nat-local` is set). If any NAT is detected or faked `nat-any` is set. Closes strongswan/strongswan#16.
*	vici: Optionally check limits when initiating connections	Tobias Brunner	2015-08-21	1	-0/+1
\| \| \| \| \|	If the init-limits parameter is set (disabled by default) init limits will be checked and might prevent new SAs from getting initiated.
*	vici: Add ike/child-rekey events	Tobias Brunner	2015-08-17	1	-0/+36
\|
*	vici: Document the ike/child-updown events	Tobias Brunner	2015-08-17	1	-0/+23
\|
*	vici: Certification Authority support added.	Andreas Steffen	2015-07-21	1	-0/+64
\| \| \| \| \| \|	CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section.
*	vici: Catch Python GeneratorExit to properly cancel streamed event iteration	Martin Willi	2015-03-18	1	-0/+5
\|
*	vici: Return a Python generator instead of a list for streamed responses	Martin Willi	2015-03-18	1	-4/+4
\| \| \| \| \| \| \|	In addition that it may reduce memory usage and improve performance for large responses, it returns immediate results. This is important for longer lasting commands, such as initiate/terminate, where immediate log feedback is preferable when interactively calling such commands.
*	vici: Add initial Python egg documentation to README	Martin Willi	2015-03-18	1	-0/+65
\|
*	vici: Use default Unix vici socket if none passed to ruby constructor	Martin Willi	2015-03-18	1	-3/+3
\| \| \| \| \|	While we currently have a static path instead of one generated with Autotools, this at least is congruent to what we have in the Python library.
*	vici: Include the CHILD_SA unique ID in list-sa event	Martin Willi	2015-02-20	1	-0/+1
\|
*	vici: Fix README example encoding element type values, off by one	Martin Willi	2015-01-21	1	-10/+10
\| \| \| \| \| \| \|	While we fixed the wrong values in the description with d39e04b5, the example values are still off by one. Fixes #828.
*	vici: Document the ruby gem and add some simple examples	Martin Willi	2014-10-10	1	-0/+58
\|
*	vici: Add some simple libvici examples to the README	Martin Willi	2014-10-10	1	-2/+116
\|
*	vici: Document the available vici command and event messages	Martin Willi	2014-10-10	1	-1/+509
\|
*	vici: Fix message encoding type values in documentation	Martin Willi	2014-10-10	1	-6/+6
\|
*	Fixed some typos	Tobias Brunner	2014-06-30	1	-1/+1
\|
*	vici: Increase vici message length header from 16 to 32 bits	Martin Willi	2014-05-07	1	-4/+4
\| \| \| \| \| \| \| \| \|	While we currently have no need for messages larger than 65KB, we should design the protocol to be future-proof, as we plan to keep at least to lowest protocol layer stable. To avoid any allocation issues, we currently keep the message size limit at 512KB.
*	vici: Add low-level IPC protocol description	Martin Willi	2014-05-07	1	-0/+176