tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	starter: Fix memory leaks and warn if conn/ca sections are ignored due to ↵	Tobias Brunner	2014-07-18	1	-2/+8
\| \| \| \|	parse errors
*	starter: Use new parser to read config file	Tobias Brunner	2014-06-19	1	-595/+404
\|
*	starter: Add a replay_window connection option	Martin Willi	2014-06-17	1	-0/+2
\|
*	ipsec_types: Add utility function to parse mark_t from strings	Tobias Brunner	2013-10-11	1	-44/+3
\|
*	starter: Remove obsolete 'auth' option	Martin Willi	2013-10-11	1	-3/+0
\|
*	starter: Properly refer to the ipsec script if it was renamed	Tobias Brunner	2013-07-22	1	-1/+1
\|
*	starter: Make daemon name configurable	Adrian-Ken Rueegsegger	2013-03-19	1	-1/+1
\| \| \| \| \| \| \| \|	A daemon can be specified using the '--daemon' command line parameter. This tells starter to invoke a daemon other than 'charon'. Additionally the ipsec script uses the environment variable DAEMON_NAME to tell the starter which daemon to use.
*	Optionally support port ranges in leftprotoport	Martin Willi	2013-02-21	1	-4/+20
\|
*	Support %opaque keyword in leftprotoport for "opaque" ports	Martin Willi	2013-02-21	1	-0/+5
\|
*	Pass complete port range over stroke interface for more flexibility	Martin Willi	2013-02-21	1	-3/+7
\|
*	Remove MODP groups from default ESP proposal	Tobias Brunner	2012-10-24	1	-1/+1
\| \| \| \| \|	This now actually makes pfs=no the default and it equals the default listed in ipsec.conf.5. efc69e9f preserved the default of pfs=yes.
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	starter: Allow %any also for protocol in left\|rightprotoport	Tobias Brunner	2012-09-12	1	-9/+15
\|
*	Support multiple addresses/pools in left/rightsourceip	Martin Willi	2012-08-30	1	-53/+0
\|
*	Remove unused ipsec.conf left/rightnatip keyword	Martin Willi	2012-08-21	1	-26/+0
\|
*	starter: Restore original config in case also= is used (which reads the same ↵	Tobias Brunner	2012-08-16	1	-20/+30
\| \| \| \|	values)
*	Mask the configured mark value to ensure it is in range	Tobias Brunner	2012-06-26	1	-0/+2
\|
*	starter: Fixed parsing of %defaultroute.	Tobias Brunner	2012-06-15	1	-6/+12
\|
*	starter: Print additional help texts for selected deprecated keywords.	Tobias Brunner	2012-06-12	1	-0/+15
\|
*	starter: Improved how deprecated keywords are handled.	Tobias Brunner	2012-06-12	1	-0/+50
\| \| \| \|	We only throw a warning now instead of rejecting the config.
*	Revert "starter: Don't treat unsupported keywords as fatal errors just ↵	Tobias Brunner	2012-06-12	1	-3/+3
\| \| \| \| \| \|	report them." This reverts commit e55876a657ae9d4bbf14320e5a14f86cc5c31c7f.
*	starter: Fixed parsing of left\|right=%any.	Tobias Brunner	2012-06-12	1	-1/+3
\|
*	starter: Removed all unsupported keywords.	Tobias Brunner	2012-06-11	1	-3/+0
\|
*	starter: Don't treat unsupported keywords as fatal errors just report them.	Tobias Brunner	2012-06-11	1	-3/+3
\|
*	Bye bye Pluto!	Tobias Brunner	2012-06-11	1	-11/+1
\| \| \| \| \|	Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack.
*	starter: Remove all ties to pluto/libfreeswan.	Tobias Brunner	2012-06-11	1	-5/+7
\| \| \| \|	Moved some types/constants in the process.
*	starter: Use custom type for SA specific options (flags).	Tobias Brunner	2012-06-11	1	-13/+13
\|
*	starter: Parse left\|rightprotoport directly in confread.c.	Tobias Brunner	2012-06-11	1	-4/+53
\|
*	starter: No special handling for left\|rightsubnet, just pass it on as string.	Tobias Brunner	2012-06-11	1	-32/+0
\|
*	starter: Use host_t to parse left\|rightsourceip.	Tobias Brunner	2012-06-11	1	-18/+17
\| \| \| \|	Also for the yet unused natip option.
*	starter: Remove left\|rightsubnetwithin option (charon narrows ↵	Tobias Brunner	2012-06-11	1	-17/+0
\| \| \| \|	left\|rightsubnet down accordingly).
*	starter: Don't resolve any addresses in starter.	Tobias Brunner	2012-06-11	1	-70/+6
\| \| \| \|	Also removed remains of some unknown iface option.
*	starter: Removed pfs and pfsgroup options (handled via esp option).	Tobias Brunner	2012-06-11	1	-5/+2
\|
*	starter: Store mode of the IPsec SA/policy in a separate member.	Tobias Brunner	2012-06-11	1	-16/+16
\|
*	starter: Use custom type to mark seen keywords.	Tobias Brunner	2012-06-11	1	-15/+15
\|
*	starter: Remove left\|rightnexthop option.	Tobias Brunner	2012-06-11	1	-18/+0
\| \| \| \|	Charon does this lookup dynamically.
*	starter: Replaced all usages of clone_str() with strdupnull().	Tobias Brunner	2012-06-11	1	-12/+12
\|
*	starter: Parse authby as string.	Tobias Brunner	2012-06-11	1	-50/+0
\|
*	starter: Drop support for %defaultroute.	Tobias Brunner	2012-06-11	1	-61/+11
\|
*	starter: Migrated logging to libstrongswan.	Tobias Brunner	2012-06-11	1	-69/+60
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+1
\|
*	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	1	-34/+2
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
\| *	Dropped support of deprecated authby=eap and eap= options	Martin Willi	2012-03-20	1	-33/+1
\| \|
\| *	Do not ignore configs for IKEv1 in charon anymore	Martin Willi	2012-03-20	1	-1/+1
\| \|
* \|	Fixed compiler warnings regarding enum comparison.	Tobias Brunner	2011-11-25	1	-1/+1
\|/ \| \| \| \| \| \| \| \|	Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
*	Fix DNS error handling for keyexchange=ike.	Mirko Parthey	2011-10-25	1	-1/+1
\| \| \| \| \| \|	starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2.
*	starter: Use automake LEX/YACC automatisms.	Tobias Brunner	2011-10-10	1	-1/+0
\|
*	Support resolution of "allow_any" DNS names in charon (%hostname)	Martin Willi	2011-09-02	1	-4/+1
\|
*	starter passes unresolved DNS names to charon	Martin Willi	2011-08-29	1	-65/+71
\| \| \| \|	Based on an initial patch by Mirko Parthey.
*	Verify that executables are available and set (pluto\|charon)start accordingly.	Tobias Brunner	2011-08-11	1	-0/+30
\| \| \| \| \| \| \| \|	Some distributions enable both daemons but then distribute the executables in two separate packages. If only one package is installed but both daemons are enabled in ipsec.conf, starter will try to start the non existing daemon over and over again, and will each time readd the configs to the other daemon.