aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter/confread.c
Commit message (Collapse)AuthorAgeFilesLines
...
* starter: Use automake LEX/YACC automatisms.Tobias Brunner2011-10-101-1/+0
|
* Support resolution of "allow_any" DNS names in charon (%hostname)Martin Willi2011-09-021-4/+1
|
* starter passes unresolved DNS names to charonMartin Willi2011-08-291-65/+71
| | | | Based on an initial patch by Mirko Parthey.
* Verify that executables are available and set (pluto|charon)start accordingly.Tobias Brunner2011-08-111-0/+30
| | | | | | | | Some distributions enable both daemons but then distribute the executables in two separate packages. If only one package is installed but both daemons are enabled in ipsec.conf, starter will try to start the non existing daemon over and over again, and will each time readd the configs to the other daemon.
* implemented PASS and DROP shunt policiesAndreas Steffen2011-06-281-2/+2
|
* Added a tfc ipsec.conf keyword to control Traffic Flow ConfidentialityMartin Willi2010-12-201-0/+17
|
* starter: Some whitespace cleanup.Tobias Brunner2010-09-021-2/+2
|
* Moved EAP type/code definitions to a seprate header file in libstrongswanMartin Willi2010-08-311-2/+4
|
* moved eap_from_string() fomr libcharon to libstrongswan to make it available ↵Andreas Steffen2010-08-131-33/+2
| | | | in starter
* recognize eap-ttls methodAndreas Steffen2010-08-121-0/+4
|
* Added EAP-TLS plugin stubMartin Willi2010-08-031-0/+4
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-27/+47
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-0/+35
|
* remove subnet from sourceipAndreas Steffen2010-05-021-0/+2
|
* final fix for cloning and deleting sourceip stringsAndreas Steffen2010-05-021-4/+2
|
* fixed end->sourceip memory leak in ipsec starterAndreas Steffen2010-05-021-34/+26
|
* Added left-/rightikeport ipsec.conf options to use custom IKE portsMartin Willi2010-02-261-0/+2
|
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-271-2/+2
| | | | CHILD_SAs
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-141-18/+42
|
* Complain about missing %defaultroute support only if one is actually usedMartin Willi2009-09-161-0/+4
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-16/+16
|
* pluto supports ECDSA authenticationAndreas Steffen2009-06-121-9/+7
|
* use bool instead of intTobias Brunner2009-05-071-1/+1
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* already had the correct formattingAndreas Steffen2009-04-191-862/+862
|
* conversion from 8 spaces to 4 spaces per tabAndreas Steffen2009-04-191-862/+862
|
* port the libstrongswan memory allocation methods to plutoAndreas Steffen2009-04-171-21/+21
|
* set the default of plutostart/charonstart according to ./configure optionsMartin Willi2009-03-241-0/+5
|
* reintegrated eap-radius branch into trunkMartin Willi2009-03-241-0/+4
|
* adding plugin for EAP-MS-CHAPv2Tobias Brunner2009-02-181-0/+4
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-0/+29
|
* a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAMMartin Willi2008-08-211-0/+4
|
* check if parsing of ipsec update was successfulAndreas Steffen2008-07-021-1/+2
|
* ECDSA with OpenSSLTobias Brunner2008-06-101-1/+3
|
* end->srcip string must be removed if it contains %configAndreas Steffen2008-04-271-0/+2
|
* fixed memory corruption problem in starterAndreas Steffen2008-04-271-70/+73
|
* supporting multiple comma seperated subnets in left/rightsubnet definitionMartin Willi2008-04-251-4/+31
| | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
* set long-forgotten DPD defaultsAndreas Steffen2008-04-151-0/+2
|
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-091-7/+21
| | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool
* set nexthop default value to 0::0 in IPv6 connectionsAndreas Steffen2007-12-191-1/+1
|
* implemented Expanded EAP types to support vendor specific methodsMartin Willi2007-12-131-6/+23
|
* merged EAP-MD5 into trunkMartin Willi2007-12-121-0/+4
|
* added RCSIDAndreas Steffen2007-10-081-1/+1
|
* renamed force_encap to forceencaps (as it is named in openswan)Martin Willi2007-10-021-1/+1
|
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-011-0/+3
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
* added mobike=yes|no connection optionMartin Willi2007-08-291-1/+5
| | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes
* handle dns lookup failuresAndreas Steffen2007-08-021-7/+27
|
* cosmeticsAndreas Steffen2007-07-041-1/+2
|
* recognize wildcards right=%group and keyingtries=%foreverAndreas Steffen2007-06-271-0/+27
|
* support of right=%<FQDN> wildcardAndreas Steffen2007-06-251-1/+19
|