| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | stroke: Make 96-bit truncation for SHA-256 configurable | Tobias Brunner | 2017-05-26 | 1 | -0/+2 |
| | | |||||
| * | Add an option to announce support for IKE fragmentation but not sending ↵ | Tobias Brunner | 2017-05-23 | 1 | -0/+1 |
| | | | | | fragments | ||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -10/+10 |
| | | |||||
| * | starter: Ensure the daemon executable exists when starting up | Tobias Brunner | 2015-05-08 | 1 | -1/+0 |
| | | | | | | | | | | The only purpose of starter is to control the IKE daemon, so we terminate it if the daemon executable is not found (e.g. because DAEMON_NAME is incorrect). This removes the charonstart setting (it was not actually configurable anymore). | ||||
| * | starter: Use new parser to read config file | Tobias Brunner | 2014-06-19 | 1 | -38/+4 |
| | | |||||
| * | starter: Add a replay_window connection option | Martin Willi | 2014-06-17 | 1 | -0/+1 |
| | | |||||
| * | starter: Remove obsolete 'auth' option | Martin Willi | 2013-10-11 | 1 | -1/+0 |
| | | |||||
| * | starter: Add an 'ah' keyword for Authentication Header Security Associations | Martin Willi | 2013-10-11 | 1 | -0/+1 |
| | | |||||
| * | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -1/+2 |
| |\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 1 | -2/+2 |
| | | | |||||
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets | Martin Willi | 2013-02-06 | 1 | -1/+1 |
| |/ | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -2/+9 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+1 |
| | | |||||
| * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 1 | -1/+0 |
| | | |||||
| * | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 1 | -1/+0 |
| | | |||||
| * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 1 | -0/+1 |
| | | |||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 1 | -0/+1 |
| | | |||||
| * | ldaphost and ldapbase ca section keywords are deprecated | Tobias Brunner | 2012-06-25 | 1 | -2/+0 |
| | | |||||
| * | starter: Removed all unsupported keywords. | Tobias Brunner | 2012-06-11 | 1 | -27/+1 |
| | | |||||
| * | starter: Remove all ties to pluto/libfreeswan. | Tobias Brunner | 2012-06-11 | 1 | -2/+16 |
| | | | | | Moved some types/constants in the process. | ||||
| * | starter: Use custom type for SA specific options (flags). | Tobias Brunner | 2012-06-11 | 1 | -1/+15 |
| | | |||||
| * | starter: Parse left|rightprotoport directly in confread.c. | Tobias Brunner | 2012-06-11 | 1 | -1/+0 |
| | | |||||
| * | starter: No special handling for left|rightsubnet, just pass it on as string. | Tobias Brunner | 2012-06-11 | 1 | -3/+0 |
| | | |||||
| * | starter: Remove left|rightsubnetwithin option (charon narrows ↵ | Tobias Brunner | 2012-06-11 | 1 | -1/+0 |
| | | | | | left|rightsubnet down accordingly). | ||||
| * | starter: Don't resolve any addresses in starter. | Tobias Brunner | 2012-06-11 | 1 | -4/+0 |
| | | | | | Also removed remains of some unknown iface option. | ||||
| * | starter: Removed pfs and pfsgroup options (handled via esp option). | Tobias Brunner | 2012-06-11 | 1 | -1/+0 |
| | | |||||
| * | starter: Store mode of the IPsec SA/policy in a separate member. | Tobias Brunner | 2012-06-11 | 1 | -0/+3 |
| | | |||||
| * | starter: Use custom type to mark seen keywords. | Tobias Brunner | 2012-06-11 | 1 | -4/+9 |
| | | |||||
| * | starter: Remove left|rightnexthop option. | Tobias Brunner | 2012-06-11 | 1 | -1/+0 |
| | | | | | Charon does this lookup dynamically. | ||||
| * | starter: Parse authby as string. | Tobias Brunner | 2012-06-11 | 1 | -5/+6 |
| | | |||||
| * | starter: Drop support for %defaultroute. | Tobias Brunner | 2012-06-11 | 1 | -6/+1 |
| | | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -5/+5 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 1 | -2/+0 |
| | | | |||||
| | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | |||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 1 | -3/+4 |
| | | | |||||
| * | | Use correct time_t variables to store ARG_TIME options | Martin Willi | 2012-01-18 | 1 | -2/+2 |
| |/ | |||||
| * | starter: Use automake LEX/YACC automatisms. | Tobias Brunner | 2011-10-10 | 1 | -1/+1 |
| | | |||||
| * | starter passes unresolved DNS names to charon | Martin Willi | 2011-08-29 | 1 | -0/+1 |
| | | | | | Based on an initial patch by Mirko Parthey. | ||||
| * | Add a closeaction ipsec.conf keyword to configure close action | Martin Willi | 2011-06-07 | 1 | -0/+2 |
| | | |||||
| * | Added a left/rightcertpolicy keyword to specify certificatePolicy requirements | Martin Willi | 2011-01-07 | 1 | -0/+1 |
| | | |||||
| * | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 1 | -0/+1 |
| | | |||||
| * | starter: Some whitespace cleanup. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 |
| | | |||||
| * | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 1 | -7/+0 |
| | | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | ||||
| * | Added support for the ipsec.conf aaa_identity keyword | Martin Willi | 2010-08-31 | 1 | -0/+1 |
| | | |||||
| * | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -2/+9 |
| | | |||||
| * | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -0/+2 |
| | | |||||
| * | introduced xauth_identity keyword | Andreas Steffen | 2010-05-15 | 1 | -0/+1 |
| | | |||||
| * | Add reqid keyword to config connection section. | Reto Buerki | 2010-05-04 | 1 | -0/+1 |
| | | |||||
| * | Fixed starter left-/rightikeport keyword | Martin Willi | 2010-02-26 | 1 | -1/+1 |
| | | |||||
| * | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 1 | -0/+1 |
| | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |