Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 10 | -11/+28 | |
| | ||||||
* | Register load-tester faked kernel interface before other kernel interfaces | Martin Willi | 2012-05-14 | 1 | -8/+9 | |
| | ||||||
* | Load tester can enforce a local IP to use | Martin Willi | 2012-05-14 | 1 | -2/+9 | |
| | ||||||
* | Add plugin features support to load-tester plugin | Martin Willi | 2012-05-14 | 1 | -48/+76 | |
| | ||||||
* | Fixed #include in tnc-ifmap plugin. | Tobias Brunner | 2012-05-07 | 1 | -0/+1 | |
| | ||||||
* | missing references to daemon.h | Andreas Steffen | 2012-05-05 | 4 | -0/+6 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | ||||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 43 | -183/+236 | |
| | | | | Also fixes several whitespace errors. | |||||
* | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 9 | -1812/+0 | |
| | ||||||
* | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | ||||||
* | updated tnc-pdp plugin for 5.0.0 | Andreas Steffen | 2012-05-02 | 3 | -4/+4 | |
| | ||||||
* | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 5 | -32/+42 | |
| | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
* | Ensure that multi-line log messages are not torn apart. | Tobias Brunner | 2012-05-02 | 1 | -1/+10 | |
| | ||||||
* | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 6 | -22/+20 | |
| | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | |||||
* | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | ||||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 53 | -210/+1372 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Fixed Android null terminated password fixup in xauth-eap | Martin Willi | 2012-04-26 | 1 | -2/+2 | |
| | | ||||||
| * | Fix null-terminated XAuth passwords, as sent by Android 4 | Martin Willi | 2012-03-22 | 2 | -0/+8 | |
| | | ||||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 53 | -210/+1364 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 2 | -3/+6 | |
| | | | ||||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | ||||||
| | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | ||||||
| | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Synchronize IKEv1 DPD sequence numbers | Martin Willi | 2012-03-20 | 1 | -0/+30 | |
| | | | ||||||
| | * | Sync remote virtual IP for IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+13 | |
| | | | ||||||
| | * | Sync new IKE_SA condition/extension flags | Martin Willi | 2012-03-20 | 2 | -2/+10 | |
| | | | ||||||
| | * | Added support for Phase1 IV synchronization to HA plugin | Martin Willi | 2012-03-20 | 5 | -27/+129 | |
| | | | ||||||
| | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 4 | -7/+8 | |
| | | | | | | | | | | | | encrypted | |||||
| | * | Create IKEv1 keymat hasher explicitly on sync | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | | ||||||
| | * | Added support to sync IKEv1 SAs key material in HA plugin | Martin Willi | 2012-03-20 | 4 | -10/+95 | |
| | | | ||||||
| | * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Use a more complete implementation of a HA specific diffie_hellman_t | Martin Willi | 2012-03-20 | 1 | -11/+50 | |
| | | | ||||||
| | * | Show IKE version in ipsec statusall | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Apply proposal to a HA synced IKE_SA | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Updated HA plugin to new IKEv2 specific keymat functions | Martin Willi | 2012-03-20 | 2 | -12/+24 | |
| | | | ||||||
| | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 10 | -12/+13 | |
| | | | ||||||
| | * | Try all matching XAuth secrets we find, not only the first one | Martin Willi | 2012-03-20 | 1 | -11/+23 | |
| | | | ||||||
| | * | Do not query CHILD_SA during delete if they already expired | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Handle initiation of not supported IKE versions properly | Martin Willi | 2012-03-20 | 3 | -4/+25 | |
| | | | ||||||
| | * | Added description for the xauth-eap plugin | Martin Willi | 2012-03-20 | 1 | -2/+8 | |
| | | | ||||||
| | * | Added an XAuth plugin that forwards authentication to EAP methods | Martin Willi | 2012-03-20 | 5 | -0/+452 | |
| | | | ||||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 | |
| | | | ||||||
| | * | Moved eap/xauth classes out of protocol specific subdirectories | Martin Willi | 2012-03-20 | 18 | -18/+18 | |
| | | | ||||||
| | * | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 18 | -18/+18 | |
| | | | ||||||
| | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 4 | -9/+10 | |
| | | | ||||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -2/+2 | |
| | | | ||||||
| | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. |