Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -3/+3 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -2/+3 |
| | |||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -1/+2 |
| | |||||
* | added RCSID | Andreas Steffen | 2007-10-08 | 1 | -1/+1 |
| | |||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -1/+6 |
| | |||||
* | moved force_encap to ike_config, enables responder to enforce udp encapsulation | Martin Willi | 2007-10-01 | 1 | -0/+1 |
| | | | | fixed bugs in force_encap code | ||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 1 | -0/+1 |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | ||||
* | support for virtual IP definition on client side: | Martin Willi | 2007-05-22 | 1 | -1/+1 |
| | | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. | ||||
* | support of left|rightgroups parameter | Andreas Steffen | 2007-05-20 | 1 | -0/+1 |
| | |||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 1 | -0/+1 |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | ||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -0/+3 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -5/+6 |
| | |||||
* | using "left" as my host per default, swapping to "right" when needed | Martin Willi | 2007-02-15 | 1 | -2/+2 |
| | |||||
* | enabled adding and deleting ca information records | Andreas Steffen | 2007-02-14 | 1 | -0/+26 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -23/+21 |
| | | | | | includes a lot of other modifications | ||||
* | added config option for BEET mode | Martin Willi | 2007-01-03 | 1 | -1/+12 |
| | |||||
* | negated POLICY_REAUTH to POLICY_DONT_REAUTH | Andreas Steffen | 2006-12-21 | 1 | -1/+1 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -0/+1 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | implemented reauthentication using the new reauth=yes|no parameter | Martin Willi | 2006-12-19 | 1 | -0/+1 |
| | |||||
* | fixed stddef.h include | Martin Willi | 2006-12-14 | 1 | -1/+1 |
| | |||||
* | solved 64 bit issue in push/pop stroke interface | Andreas Steffen | 2006-10-31 | 1 | -1/+1 |
| | |||||
* | added verbosity level to stroke | Martin Willi | 2006-10-24 | 1 | -0/+3 |
| | |||||
* | added hostaccess support | Andreas Steffen | 2006-09-25 | 1 | -0/+1 |
| | |||||
* | added auth_method field | Andreas Steffen | 2006-09-18 | 1 | -0/+29 |
| | |||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -1/+1 |
| | |||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -0/+2 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -2/+36 |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | ||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -3/+3 |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
* | added support for leftprotoport and rightprotoport | Martin Willi | 2006-07-05 | 1 | -0/+2 |
| | |||||
* | added support of updown parameter | Andreas Steffen | 2006-07-03 | 1 | -0/+1 |
| | |||||
* | handling of "rekey=no" parameter added | Martin Willi | 2006-06-15 | 1 | -5/+18 |
| | |||||
* | support for stroke listcerts|listcacerts|listall and left|rightca= | Andreas Steffen | 2006-06-12 | 1 | -1/+1 |
| | |||||
* | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 1 | -0/+5 |
| | | | | | loading lifetime policies from ipsec.conf | ||||
* | added support for leftsendcert= and left|rightca= parameters | Andreas Steffen | 2006-06-09 | 1 | -11/+13 |
| | |||||
* | - policies contain a connections name now | Martin Willi | 2006-05-29 | 1 | -1/+6 |
| | | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload | ||||
* | stroke now uses constant size string buffer | Andreas Steffen | 2006-05-29 | 1 | -118/+95 |
| | |||||
* | - changed config load strategy: | Martin Willi | 2006-05-23 | 1 | -0/+1 |
| | | | | | | | starter loads both connections in charon & pluto, charon ignores anything with keyexchange!=ikev2. pluto needs the same behavior. | ||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 1 | -104/+109 |
| | | | | | should conform now to IKEv2 | ||||
* | - applied andreas's patch | Martin Willi | 2006-05-18 | 1 | -98/+99 |
| | | | | | | | - logger output improvements - testin gupdates - and a lot more | ||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 1 | -5/+5 |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | ||||
* | - fixed stroke error output to starter | Martin Willi | 2006-05-10 | 1 | -76/+87 |
| | |||||
* | (no commit message) | Martin Willi | 2006-04-28 | 1 | -0/+161 |