Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+1 |
| | |||||
* | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 1 | -3/+0 |
| | |||||
* | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 1 | -0/+3 |
| | |||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 1 | -0/+3 |
| | |||||
* | ldaphost and ldapbase ca section keywords are deprecated | Tobias Brunner | 2012-06-25 | 1 | -2/+0 |
| | |||||
* | starter: Print additional help texts for selected deprecated keywords. | Tobias Brunner | 2012-06-12 | 1 | -0/+2 |
| | |||||
* | starter: Improved how deprecated keywords are handled. | Tobias Brunner | 2012-06-12 | 1 | -7/+13 |
| | | | | We only throw a warning now instead of rejecting the config. | ||||
* | starter: Removed all unsupported keywords. | Tobias Brunner | 2012-06-11 | 1 | -41/+8 |
| | |||||
* | starter: Remove left|rightsubnetwithin option (charon narrows ↵ | Tobias Brunner | 2012-06-11 | 1 | -3/+0 |
| | | | | left|rightsubnet down accordingly). | ||||
* | starter: Don't resolve any addresses in starter. | Tobias Brunner | 2012-06-11 | 1 | -2/+1 |
| | | | | Also removed remains of some unknown iface option. | ||||
* | starter: Removed pfs and pfsgroup options (handled via esp option). | Tobias Brunner | 2012-06-11 | 1 | -2/+0 |
| | |||||
* | starter: Remove left|rightnexthop option. | Tobias Brunner | 2012-06-11 | 1 | -3/+0 |
| | | | | Charon does this lookup dynamically. | ||||
* | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 1 | -1/+0 |
| | |||||
* | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | |||||
* | Add a closeaction ipsec.conf keyword to configure close action | Martin Willi | 2011-06-07 | 1 | -0/+1 |
| | |||||
* | Added a left/rightcertpolicy keyword to specify certificatePolicy requirements | Martin Willi | 2011-01-07 | 1 | -0/+3 |
| | |||||
* | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 1 | -1/+2 |
| | |||||
* | Fixed left-/rightnexthop ipsec.conf options. | Tobias Brunner | 2010-09-03 | 1 | -1/+1 |
| | |||||
* | Added support for the ipsec.conf aaa_identity keyword | Martin Willi | 2010-08-31 | 1 | -0/+1 |
| | |||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -1/+3 |
| | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -1/+2 |
| | |||||
* | introduced xauth_identity keyword | Andreas Steffen | 2010-05-15 | 1 | -0/+1 |
| | |||||
* | Add reqid keyword to config connection section. | Reto Buerki | 2010-05-04 | 1 | -1/+2 |
| | |||||
* | Fixed starter left-/rightikeport keyword | Martin Willi | 2010-02-26 | 1 | -0/+1 |
| | |||||
* | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 1 | -0/+2 |
| | |||||
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 1 | -0/+1 |
| | | | | CHILD_SAs | ||||
* | Added keywords for the new lifetime limits to starter. | Tobias Brunner | 2009-09-01 | 1 | -1/+5 |
| | |||||
* | fixe KW_END_FIRST..KW_END_LAST keyword range | Andreas Steffen | 2009-07-28 | 1 | -0/+5 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | conversion from 8 spaces to 4 spaces per tab | Andreas Steffen | 2009-04-19 | 1 | -165/+165 |
| | |||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -0/+10 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -0/+1 |
| | |||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -0/+1 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | support of plutostderrlog keyword | Andreas Steffen | 2008-05-11 | 1 | -0/+1 |
| | |||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -2/+2 |
| | |||||
* | support of force_keepalive parameter | Andreas Steffen | 2008-04-02 | 1 | -0/+1 |
| | |||||
* | changed external interface to the mediation extension. | Tobias Brunner | 2008-03-27 | 1 | -2/+2 |
| | |||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -4/+4 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -1/+0 |
| | |||||
* | added RCSID | Andreas Steffen | 2007-10-08 | 1 | -1/+1 |
| | |||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -1/+5 |
| | |||||
* | renamed force_encap to forceencaps (as it is named in openswan) | Martin Willi | 2007-10-02 | 1 | -1/+1 |
| | |||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 1 | -0/+1 |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls | ||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 1 | -0/+1 |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | ||||
* | support of PKCS#11 init arguments required by NSS softoken, patch ↵ | Andreas Steffen | 2007-07-03 | 1 | -0/+1 |
| | | | | contributed by Robert Varga | ||||
* | cosmetics | Andreas Steffen | 2007-06-27 | 1 | -2/+2 |
| | |||||
* | support of right|leftallowany flag | Andreas Steffen | 2007-06-18 | 1 | -0/+3 |
| | |||||
* | last CA keyword is KW_OCSPURI2 | Andreas Steffen | 2007-02-24 | 1 | -1/+1 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -0/+1 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -0/+2 |
| | | | | | includes a lot of other modifications |