aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins
Commit message (Collapse)AuthorAgeFilesLines
...
* added eap_ttls plugin configurationAndreas Steffen2010-08-075-0/+615
|
* Some Doxygen fixes.Tobias Brunner2010-08-052-1/+2
|
* Fixed loading of secrets with IDs.Tobias Brunner2010-08-041-1/+1
| | | | | Since the ID string is manually terminated by a null character, write permission is required for the mmapped ipsec.secrets.
* Fixed loading of private keys without password.Tobias Brunner2010-08-041-1/+1
| | | | | The chunk storing the password was not correctly initialized, resulting in a segmentation fault when no password was specified in ipsec.secrets.
* Pass type of requested key in the callback credential setMartin Willi2010-08-041-1/+12
|
* Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵Martin Willi2010-08-044-66/+141
| | | | credential sets
* Use credential sets to load smartcard keysMartin Willi2010-08-041-29/+82
|
* Implemented a callback based credential set, currently for shared keys onlyMartin Willi2010-08-041-61/+39
|
* mmap() ipsec.secrets instead malloc(), proper error checkingMartin Willi2010-08-041-18/+30
|
* Splitted up the load_secrets() functionMartin Willi2010-08-041-263/+301
|
* %prompt support for smartcard PIN via "ipsec secrets"Martin Willi2010-08-041-28/+95
|
* Pass the PKCS11 keyid as chunk, not as stringMartin Willi2010-08-041-3/+6
|
* Reuse generic passphrase build part, not a dedicated PIN partMartin Willi2010-08-041-7/+4
|
* Support module names in %smartcard specifier, streamlined smartcard buildingMartin Willi2010-08-041-12/+51
|
* test_cert adapted to extended signature of get_encoding().Tobias Brunner2010-08-031-2/+2
|
* Fixed compiler warnings.Tobias Brunner2010-08-031-1/+3
|
* Moved TLS stack to its own libraryMartin Willi2010-08-0323-4536/+6
|
* Moved eap-tls plugin to libcharon, updated to 4.4.1 APIsMartin Willi2010-08-0326-0/+5145
|
* Fix segfault on 'ipsec stroke up ]' commandThomas Egerer2010-07-291-0/+5
|
* Implemented a HA enabled in-memory address poolMartin Willi2010-07-286-4/+468
|
* Added a function to segmentate a generic integerMartin Willi2010-07-282-18/+48
|
* Reserving does not work, as our pools do not support acquiring arbitrary ↵Martin Willi2010-07-271-30/+0
| | | | | | addresses This reverts commit d1384080b3ba74f366eaf8b5f027babca3f5d607.
* Flush any remaining cache state if an IKE_SA goes downMartin Willi2010-07-271-2/+2
|
* Synchronize EAP-Identity of remote peerMartin Willi2010-07-264-0/+16
|
* Reserve virtual IP of passive IKE_SAs in the local poolMartin Willi2010-07-261-0/+30
|
* Added strongswan.conf options for HA heartbeatMartin Willi2010-07-261-4/+20
|
* Log CHILD_SA segment responsibilityMartin Willi2010-07-269-18/+95
|
* Pass initiator parameter to distinguish between original and exchange initiatorMartin Willi2010-07-264-1/+8
|
* Pass the CREATE_CHILD_SA initiator flag to the child_keys parameterMartin Willi2010-07-261-1/+1
|
* Use a sync message cache to resynchronize IKE_SAs without rekeyingMartin Willi2010-07-2616-169/+594
|
* Log received HA message typesMartin Willi2010-07-261-3/+9
|
* Add enum names for HA message typesMartin Willi2010-07-262-0/+19
|
* Delay resynchronization request until starter has loaded the configurationsMartin Willi2010-07-261-2/+4
|
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
|
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
|
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
|
* Implemented support for multiple RADIUS serversMartin Willi2010-07-2110-423/+911
|
* Migrated eap-radius plugin to INIT/METHOD macrosMartin Willi2010-07-214-142/+105
|
* in a ESP_IN_UDP situation make UDP port available in the updown scriptAndreas Steffen2010-07-171-1/+23
|
* make xfrm marks available in the updown scriptsAndreas Steffen2010-07-171-1/+44
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-132-9/+15
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-133-6/+6
| | | | encoding
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-134-1/+216
|
* Moved addrblock plugin to libcharonMartin Willi2010-07-135-0/+293
|
* Moved credential manager to libstrongswanMartin Willi2010-07-1318-42/+36
|
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-122-1/+29
|
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
|
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-098-13/+25
|
* Implemented missing bypass_socket() method in load-testers faked kernel ↵Martin Willi2010-07-071-0/+7
| | | | interface