Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -34/+2 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 1 | -33/+1 | |
| | | ||||||
| * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
* | | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
|/ | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
* | Fix DNS error handling for keyexchange=ike. | Mirko Parthey | 2011-10-25 | 1 | -1/+1 | |
| | | | | | | starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2. | |||||
* | starter: Use automake LEX/YACC automatisms. | Tobias Brunner | 2011-10-10 | 1 | -1/+0 | |
| | ||||||
* | Support resolution of "allow_any" DNS names in charon (%hostname) | Martin Willi | 2011-09-02 | 1 | -4/+1 | |
| | ||||||
* | starter passes unresolved DNS names to charon | Martin Willi | 2011-08-29 | 1 | -65/+71 | |
| | | | | Based on an initial patch by Mirko Parthey. | |||||
* | Verify that executables are available and set (pluto|charon)start accordingly. | Tobias Brunner | 2011-08-11 | 1 | -0/+30 | |
| | | | | | | | | Some distributions enable both daemons but then distribute the executables in two separate packages. If only one package is installed but both daemons are enabled in ipsec.conf, starter will try to start the non existing daemon over and over again, and will each time readd the configs to the other daemon. | |||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 1 | -2/+2 | |
| | ||||||
* | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 1 | -0/+17 | |
| | ||||||
* | starter: Some whitespace cleanup. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| | ||||||
* | Moved EAP type/code definitions to a seprate header file in libstrongswan | Martin Willi | 2010-08-31 | 1 | -2/+4 | |
| | ||||||
* | moved eap_from_string() fomr libcharon to libstrongswan to make it available ↵ | Andreas Steffen | 2010-08-13 | 1 | -33/+2 | |
| | | | | in starter | |||||
* | recognize eap-ttls method | Andreas Steffen | 2010-08-12 | 1 | -0/+4 | |
| | ||||||
* | Added EAP-TLS plugin stub | Martin Willi | 2010-08-03 | 1 | -0/+4 | |
| | ||||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -27/+47 | |
| | ||||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -0/+35 | |
| | ||||||
* | remove subnet from sourceip | Andreas Steffen | 2010-05-02 | 1 | -0/+2 | |
| | ||||||
* | final fix for cloning and deleting sourceip strings | Andreas Steffen | 2010-05-02 | 1 | -4/+2 | |
| | ||||||
* | fixed end->sourceip memory leak in ipsec starter | Andreas Steffen | 2010-05-02 | 1 | -34/+26 | |
| | ||||||
* | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 1 | -0/+2 | |
| | ||||||
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 1 | -2/+2 | |
| | | | | CHILD_SAs | |||||
* | pluto now supports SQL-based virtual IP pools | Andreas Steffen | 2009-10-14 | 1 | -18/+42 | |
| | ||||||
* | Complain about missing %defaultroute support only if one is actually used | Martin Willi | 2009-09-16 | 1 | -0/+4 | |
| | ||||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -16/+16 | |
| | ||||||
* | pluto supports ECDSA authentication | Andreas Steffen | 2009-06-12 | 1 | -9/+7 | |
| | ||||||
* | use bool instead of int | Tobias Brunner | 2009-05-07 | 1 | -1/+1 | |
| | ||||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 | |
| | ||||||
* | already had the correct formatting | Andreas Steffen | 2009-04-19 | 1 | -862/+862 | |
| | ||||||
* | conversion from 8 spaces to 4 spaces per tab | Andreas Steffen | 2009-04-19 | 1 | -862/+862 | |
| | ||||||
* | port the libstrongswan memory allocation methods to pluto | Andreas Steffen | 2009-04-17 | 1 | -21/+21 | |
| | ||||||
* | set the default of plutostart/charonstart according to ./configure options | Martin Willi | 2009-03-24 | 1 | -0/+5 | |
| | ||||||
* | reintegrated eap-radius branch into trunk | Martin Willi | 2009-03-24 | 1 | -0/+4 | |
| | ||||||
* | adding plugin for EAP-MS-CHAPv2 | Tobias Brunner | 2009-02-18 | 1 | -0/+4 | |
| | ||||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -0/+29 | |
| | ||||||
* | a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM | Martin Willi | 2008-08-21 | 1 | -0/+4 | |
| | ||||||
* | check if parsing of ipsec update was successful | Andreas Steffen | 2008-07-02 | 1 | -1/+2 | |
| | ||||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 1 | -1/+3 | |
| | ||||||
* | end->srcip string must be removed if it contains %config | Andreas Steffen | 2008-04-27 | 1 | -0/+2 | |
| | ||||||
* | fixed memory corruption problem in starter | Andreas Steffen | 2008-04-27 | 1 | -70/+73 | |
| | ||||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 1 | -4/+31 | |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | |||||
* | set long-forgotten DPD defaults | Andreas Steffen | 2008-04-15 | 1 | -0/+2 | |
| | ||||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -7/+21 | |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | |||||
* | set nexthop default value to 0::0 in IPv6 connections | Andreas Steffen | 2007-12-19 | 1 | -1/+1 | |
| | ||||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -6/+23 | |
| | ||||||
* | merged EAP-MD5 into trunk | Martin Willi | 2007-12-12 | 1 | -0/+4 | |
| | ||||||
* | added RCSID | Andreas Steffen | 2007-10-08 | 1 | -1/+1 | |
| | ||||||
* | renamed force_encap to forceencaps (as it is named in openswan) | Martin Willi | 2007-10-02 | 1 | -1/+1 | |
| | ||||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 1 | -0/+3 | |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls |