tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	vici: Certification Authority support added.	Andreas Steffen	2015-07-21	1	-9/+23
\| \| \| \| \| \|	CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section.
*	vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets ↵	Andreas Steffen	2015-07-20	1	-6/+20
\| \| \| \|	are defined
*	vici: Default to certificate subject for identity	Timo Teräs	2015-05-04	1	-0/+37
\| \| \| \| \| \| \| \|	If id is not specified and certificate authentication is used, use the certificate subject name as identity. Simplifies configuration as in most cases this is the right thing to do. Signed-off-by: Timo Teräs <timo.teras@iki.fi>
*	vici: Don't use a default rand_time larger than half of rekey/reauth_time	Martin Willi	2015-03-03	1	-3/+11
\|
*	vici: If a IKE reauth_time is configured, disable the default rekey_time	Martin Willi	2015-03-03	1	-1/+16
\|
*	controller: Use the CHILD_SA unique_id to terminate CHILD_SAs	Martin Willi	2015-02-20	1	-10/+10
\|
*	vici: Support a replay_window CHILD_SA option	Martin Willi	2014-06-17	1	-0/+16
\|
*	vici: Add Windows support	Martin Willi	2014-06-04	1	-1/+0
\|
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-2/+10
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-10/+25
\|
*	vici: Support the close_action keyword, as we have it documented	Martin Willi	2014-05-14	1	-1/+6
\|
*	vici: Properly filter by CHILD_SA name while undoing start actions	Martin Willi	2014-05-07	1	-2/+5
\|
*	vici: Fallback to socket listening port if no explicit local port specified	Martin Willi	2014-05-07	1	-1/+4
\|
*	vici: Support a "mtu" value for the tfc_padding option	Martin Willi	2014-05-07	1	-2/+16
\|
*	vici: Handle the "trap" action as an alias for "route"	Martin Willi	2014-05-07	1	-0/+1
\|
*	vici: Have an explicit "relaxed" keyword for the default revocation policy	Martin Willi	2014-05-07	1	-1/+5
\|
*	vici: Use a default child rekey time of 1 hour	Martin Willi	2014-05-07	1	-0/+6
\|
*	vici: Use a default IKE rekey time of 4 hours	Martin Willi	2014-05-07	1	-0/+6
\|
*	vici: Support referencing external named pools for peer configs	Martin Willi	2014-05-07	1	-0/+14
\|
*	vici: Actually add configured virtual IPs to peer config	Martin Willi	2014-05-07	1	-0/+5
\|
*	vici: Use a default rand_time of the difference between hard and soft lifetimes	Martin Willi	2014-05-07	1	-0/+26
\|
*	vici: Use a default hard lifetime of 110% of the soft lifetime	Martin Willi	2014-05-07	1	-0/+37
\|
*	vici: Perform specified start_action on connection load, undo it on unload	Martin Willi	2014-05-07	1	-2/+185
\|
*	vici: Support pinning end entity and CA certificates to connections	Martin Willi	2014-05-07	1	-0/+37
\|
*	vici: Support missing groups option in auth config	Martin Willi	2014-05-07	1	-1/+24
\|
*	vici: Add unload-conn and get-conns commands to manage loaded connections	Martin Willi	2014-05-07	1	-0/+62
\|
*	vici: Add backend providing in-memory connections	Martin Willi	2014-05-07	1	-0/+1539