tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	ikev1: First do PSK lookups based on identities then fallback to IPs	Tobias Brunner	2017-03-20	1	-36/+34
\| \| \| \| \| \| \| \|	This provides a solution for configs where there is e.g. a catch-all %any PSK, while more specific PSKs would be found by the identities of configs that e.g. use FQDNs as local/remote addresses. Fixes #2223.
*	ikev1: Avoid modifying local auth config when detecting pubkey method	Tobias Brunner	2016-03-03	1	-1/+1
\| \| \| \| \| \| \| \| \|	If it was necessary to pass the local certificates we could probably clone the config (but we don't do that either when later looking for the key to actually authenticate). Passing auth adds the same subject cert to the config over and over again (I guess we could also try to prevent that by searching for duplicates).
*	ikev1: Pass current auth-cfg when looking for key to determine auth method	Tobias Brunner	2015-08-19	1	-1/+1
\| \| \| \| \| \| \| \| \|	If multiple certificates use the same subjects we might choose the wrong one otherwise. This way we use the one referenced with leftcert and stored in the auth-cfg and we actually do the same thing later in the pubkey authenticator. Fixes #1077.
*	diffie-hellman: Add a bool return value to set_other_public_value()	Martin Willi	2015-03-23	1	-1/+5
\|
*	encoding: Allow ke_payload_create_from_diffie_hellman() to fail	Martin Willi	2015-03-23	1	-1/+7
\|
*	ikev1: Be more verbose if a peer config would match, but is unusable for Mode	Martin Willi	2014-09-25	1	-0/+12
\|
*	payload: Use common prefixes for all payload type identifiers	Martin Willi	2014-06-04	1	-5/+5
\| \| \| \| \|	The old identifiers did not use a proper namespace and often clashed with other defines.
*	Fixed log message when no shared secret is found during IKEv1 Main Mode	Tobias Brunner	2012-10-29	1	-1/+1
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Merge branch 'multi-vip'	Martin Willi	2012-08-31	1	-0/+30
\|\ \| \| \| \| \| \| \| \| \| \| \| \|	Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers.
\| *	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-0/+15
\| \|
\| *	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-0/+15
\| \|
* \|	Fall back to local address as IKEv1 identity if nothing else is configured	Tobias Brunner	2012-08-24	1	-2/+14
\|/
*	Lookup IKEv1 PSK even if the peer identity is not known	Martin Willi	2012-07-31	1	-1/+1
\|
*	Nonce: Let get_nonce, allocate_nonce return boolean	Reto Buerki	2012-07-16	1	-1/+6
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	1	-6/+47
\|
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	1	-6/+6
\| \| \| \| \|	Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
*	Select public key auth method by checking what key we have	Martin Willi	2012-03-20	1	-4/+96
\|
*	Pass IKEv1 specific keymat to ike_keys hook	Martin Willi	2012-03-20	1	-2/+2
\|
*	Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper	Martin Willi	2012-03-20	1	-5/+6
\|
*	Select IKEv1 configurations by main/aggressive mode option	Martin Willi	2012-03-20	1	-2/+4
\|
*	Implemented a common Phase 1 helper class to use by main and aggressive modes	Martin Willi	2012-03-20	1	-0/+605