aboutsummaryrefslogtreecommitdiffstats
path: root/src/pluto
Commit message (Collapse)AuthorAgeFilesLines
...
* Use whack_attribute in pluto to provide in-memory IP address pools.Tobias Brunner2010-04-063-7/+23
| | | | | The pools are configured by setting rightsourceip in ipsec.conf to a network in CIDR notation.
* Adding a whack_attribute class which manages in-memory pools in pluto and is ↵Tobias Brunner2010-04-063-0/+347
| | | | very similar to stroke_attribute.
* fixed pluto crash caused by expired leftcert and rightca=%sameAndreas Steffen2010-03-291-2/+2
|
* Changed all usages of lib->attributes to hydra->attributes.Tobias Brunner2010-03-242-17/+19
|
* Init/deinit libhydra in charon and pluto.Tobias Brunner2010-03-242-2/+12
|
* Link pluto and charon to libhydra, fixes monolithic build.Tobias Brunner2010-03-241-0/+2
|
* Fixing a compiler warning when building with -Wextra.Tobias Brunner2010-03-161-1/+1
|
* Fixed a bug in pluto's x509 handling.Tobias Brunner2010-03-121-2/+2
| | | | | This bug would have lead to a segmentation fault, if no public key could have been extracted from a certificate.
* deleted old strongSwan VIDsAndreas Steffen2010-03-122-86/+15
|
* recognize strongSwan VIDAndreas Steffen2010-03-071-47/+53
|
* Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski.Martin Willi2010-03-041-1/+1
|
* Detect windows hosts to add specific workarounds.Tobias Brunner2010-02-122-0/+7
|
* Adding support for AES GMAC (RFC4543).Tobias Brunner2010-02-128-9/+22
|
* Increased the buffer for netlink responses.Tobias Brunner2010-02-051-0/+1
| | | | | | | | If an error occurs while manipulating policies in the kernel, the original netlink request gets attached to the response. Prior to Linux 2.6.32 the size in the netlink header of the response was wrong.
* init_fetch() changed to fetch_initialize()Andreas Steffen2010-02-051-1/+1
|
* renamed init_fetch() to fetch_initialize()Andreas Steffen2010-02-022-2/+2
|
* Join pluto's fetching thread instead of detaching it in order to avoid that ↵Tobias Brunner2010-02-023-6/+26
| | | | the leak-detective reports a memleak.
* warn if loaded local certificate is invalidAndreas Steffen2010-02-011-3/+5
|
* pluto and charon are using the same strongSwan Vendor IDAndreas Steffen2010-01-111-1/+1
|
* Pluto's fetcher thread is now created via libstrongswan.Tobias Brunner2009-12-261-4/+11
|
* Check if libpthread is required or not.Tobias Brunner2009-12-231-1/+1
|
* IKEv1 daemon supports DNS and NBNS server assignment from databaseAndreas Steffen2009-12-161-18/+85
|
* add IKEv1 support for the Camellia cipherAndreas Steffen2009-12-151-0/+21
|
* fixed IKEv1 support of HMAC_SHA2_256_96Andreas Steffen2009-12-093-23/+22
|
* IKEv1 support of ESP SHA2_HMAC with correct truncationAndreas Steffen2009-12-099-111/+158
|
* changed error messages in the case of faulty esp and ike stringsAndreas Steffen2009-11-241-8/+6
|
* do not send all available kernel algorithms if esp string is faultyAndreas Steffen2009-11-241-28/+0
|
* check if alg_info_esp existsElmar Vonlanthen2009-11-241-1/+1
|
* added some parenthesesAndreas Steffen2009-11-241-0/+16
|
* issue error message for expired certificates in OCSP trust chain checkingAndreas Steffen2009-11-241-1/+5
|
* Fixed compiler warning about missing return valueMartin Willi2009-11-121-1/+2
|
* fixed 4.3.6 ocsp regressionAndreas Steffen2009-11-114-24/+24
|
* merged pluto's PGP certificate parsing with charon'sAndreas Steffen2009-11-102-57/+0
|
* merged pluto's PGP certificate parsing with charon'sAndreas Steffen2009-11-1024-1088/+471
|
* pluto ignores proprietary Juniper SRX notification 40001Andreas Steffen2009-11-052-2/+13
|
* implemented path length constraint checkinf for IKEv2Andreas Steffen2009-11-045-23/+33
|
* check if acerts linked_list has been initialized before destroying itAndreas Steffen2009-11-041-1/+4
|
* implemented path length constraint checking for IKEv1Andreas Steffen2009-11-041-5/+16
|
* removed redundant and buggy debug statementAndreas Steffen2009-11-041-1/+0
|
* output optional pathLenConstraint in ipsec listcacertsAndreas Steffen2009-11-041-1/+9
|
* version bump to 4.3.6Andreas Steffen2009-11-022-1/+3
|
* fixed a memory leak in OCSP fetching4.3.5Andreas Steffen2009-10-291-3/+14
|
* setting the IP family enables mixed tunnelsHeiko Hund2009-10-161-1/+1
|
* use directory enumerator to load authcertsAndreas Steffen2009-10-154-39/+30
|
* cleaned out some bugs in refactoring of ac.cAndreas Steffen2009-10-151-10/+7
|
* moved .gitignore for poolAndreas Steffen2009-10-157-236/+146
|
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-144-86/+154
|
* use definitions from libstrongswan/attributes/attributes.hAndreas Steffen2009-10-133-18/+3
|
* prepended all ISAKMP notification message types with ISAKMP_Andreas Steffen2009-10-127-159/+159
|
* fixed output of offered CAAndreas Steffen2009-10-111-1/+1
|