tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	vici: Don't fall back to uninstalling traps if a matching shunt was found	Tobias Brunner	2017-03-23	1	-3/+7
\| \| \| \| \| \| \|	This is different if `ike` and `child` are provided and uninstall() fails as we call that without knowing whether a matching shunt exists. But if `ike` is not provided we explicitly search for a matching shunt and if found don't need to look for a trap policy.
*	vici: Add command to initiate SA rekeying	Tobias Brunner	2017-02-16	1	-2/+100
\|
*	vici: Explicitly use peer name when uninstalling trap and shunt policies	Tobias Brunner	2017-02-16	1	-5/+29
\| \| \| \|	Also adds an `ike` parameter to the `uninstall` command.
*	shunt-manager: Add an optional namespace for each shunt	Tobias Brunner	2017-02-16	1	-2/+2
\| \| \| \| \|	This will allow us to reuse the names of child configs e.g. when they are defined in different connections.
*	vici: Reload loggers after reloading strongswan.conf via reload-setting command	Tobias Brunner	2017-01-25	1	-0/+1
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-3/+3
\|
*	vici: Don't redirect all SAs if no selectors are given	Tobias Brunner	2016-03-04	1	-1/+1
\| \| \| \| \|	This avoid confusion and redirecting all SAs can now easily be done explicitly (e.g. peer_ip=0.0.0.0/0).
*	vici: Match subnets and ranges against peer IP in redirect command	Tobias Brunner	2016-03-04	1	-11/+40
\|
*	vici: Match identity with wildcards against remote ID in redirect command	Tobias Brunner	2016-03-04	1	-4/+7
\|
*	vici: Add redirect command	Tobias Brunner	2016-03-04	1	-0/+117
\| \| \| \| \|	This allows redirecting IKE_SAs by multiple different selectors, if none are given all SAs are redirected.
*	vici: Honor an optionally passed IKE configuration name in initiate/install	Martin Willi	2015-12-07	1	-5/+11
\| \| \| \| \| \| \|	If two IKE configurations have CHILD configurations with the same name, we have no control about the CHILD_SA that actually gets controlled. The new "ike" parameter specifies the peer config name to find the "child" config under.
*	vici: Support completely asynchronous initiating and termination	Martin Willi	2015-12-07	1	-5/+17
\| \| \| \| \| \|	In some situations the vici client is not interested in waiting for a timeout at all, so don't register a logging callback if the timeout argument is negative.
*	vici: Optionally check limits when initiating connections	Tobias Brunner	2015-08-21	1	-1/+6
\| \| \| \| \|	If the init-limits parameter is set (disabled by default) init limits will be checked and might prevent new SAs from getting initiated.
*	controller: Optionally adhere to init limits also when initiating IKE_SAs	Tobias Brunner	2015-08-21	1	-2/+2
\|
*	Initialize variables that some compilers seem to warn about	Tobias Brunner	2015-08-13	1	-1/+1
\|
*	controller: Use the CHILD_SA unique_id to terminate CHILD_SAs	Martin Willi	2015-02-20	1	-2/+2
\|
*	vici: Add a command to reload strongswan.conf	Martin Willi	2014-09-22	1	-0/+12
\|
*	vici: Return number of matching and closed SAs in terminate command	Martin Willi	2014-05-07	1	-9/+12
\|
*	vici: Be less verbose about client connections	Martin Willi	2014-05-07	1	-0/+26
\| \| \| \|	Instead, log the explicit commands at a higher level.
*	vici: Add install/uninstall commands to manage trap and shunt policies	Martin Willi	2014-05-07	1	-0/+112
\|
*	vici: Extract CHILD_SA config lookup method	Martin Willi	2014-05-07	1	-14/+26
\|
*	vici: Avoid recursive control log invocations	Martin Willi	2014-05-07	1	-18/+24
\|
*	vici: Implement a terminate command to close IKE or CHILD_SAs	Martin Willi	2014-05-07	1	-0/+118
\|
*	vici: Add a control backend, currently to initiate connections by name	Martin Willi	2014-05-07	1	-0/+219