aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter/starterstroke.c
Commit message (Collapse)AuthorAgeFilesLines
* Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-1/+1
|
* Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-1/+1
|
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-0/+1
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
|
* Starter unroutes removed or changed connections before loading and routing ↵Tobias Brunner2012-10-181-0/+10
| | | | new ones
* Support multiple addresses/pools in left/rightsourceipMartin Willi2012-08-301-1/+0
|
* Add a left/rightdns keyword to configure connection specific DNS attributesMartin Willi2012-08-211-0/+1
|
* Add an ipsec.conf leftgroups2 parameter for the second authentication roundMartin Willi2012-07-261-0/+1
|
* starter: Remove all ties to pluto/libfreeswan.Tobias Brunner2012-06-111-3/+0
| | | | Moved some types/constants in the process.
* starter: Use custom type for SA specific options (flags).Tobias Brunner2012-06-111-7/+7
|
* starter: No special handling for left|rightsubnet, just pass it on as string.Tobias Brunner2012-06-111-1/+1
|
* starter: Don't resolve any addresses in starter.Tobias Brunner2012-06-111-41/+1
| | | | Also removed remains of some unknown iface option.
* starter: Store mode of the IPsec SA/policy in a separate member.Tobias Brunner2012-06-111-26/+3
|
* starter: Parse authby as string.Tobias Brunner2012-06-111-5/+8
|
* starter: Migrated logging to libstrongswan.Tobias Brunner2012-06-111-7/+7
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-0/+1
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-0/+1
|
* Explicitly cast from strict_t to crl_policy_tMartin Willi2012-05-141-1/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-021-21/+42
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Added support for authby/xauth_server legacy optionsMartin Willi2012-03-201-20/+39
| |
| * Added a "aggressive" ipsec.conf connection optionMartin Willi2012-03-201-0/+1
| |
| * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-201-1/+1
| |
| * Pass ipsec.conf xauth_identity option via stroke to charon configurationsMartin Willi2012-03-201-0/+1
| |
* | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-0/+1
|/
* starter passes unresolved DNS names to charonMartin Willi2011-08-291-2/+9
| | | | Based on an initial patch by Mirko Parthey.
* implemented PASS and DROP shunt policiesAndreas Steffen2011-06-281-12/+17
|
* Add a closeaction ipsec.conf keyword to configure close actionMartin Willi2011-06-071-0/+1
|
* starter_conn_t.id is an unsigned long.Tobias Brunner2011-04-141-1/+1
|
* Added a left/rightcertpolicy keyword to specify certificatePolicy requirementsMartin Willi2011-01-071-0/+1
|
* Added a tfc ipsec.conf keyword to control Traffic Flow ConfidentialityMartin Willi2010-12-201-0/+1
|
* *** HISTORICAL MOMENT: IKEv2 becomes the default! ***Andreas Steffen2010-10-091-1/+1
|
* Moved ipsec_transform_t to kernel_ipsec.h in libhydra.Tobias Brunner2010-09-021-9/+0
| | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
* Added support for the ipsec.conf aaa_identity keywordMartin Willi2010-08-311-0/+1
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-2/+4
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-0/+2
|
* Include reqid in stroke add connection message.Reto Buerki2010-05-041-0/+1
|
* Added left-/rightikeport ipsec.conf options to use custom IKE portsMartin Willi2010-02-261-0/+1
|
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-271-0/+1
| | | | CHILD_SAs
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-141-34/+2
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-6/+6
|
* Handling of new lifetime limits added to stroke.Tobias Brunner2009-09-011-0/+4
|
* make boolean expression less enigmaticAndreas Steffen2009-08-251-3/+3
|
* set stroke connection flags to a clear TRUE/FALSEMartin Willi2009-08-251-3/+3
|
* pluto supports ECDSA authenticationAndreas Steffen2009-06-121-1/+1
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-6/+18
| | | | | important change for developers: %Y replaces %D to print identities!
* already had the correct formattingAndreas Steffen2009-04-191-255/+255
|
* conversion from 8 spaces to 4 spaces per tabAndreas Steffen2009-04-191-255/+255
|
* merged multi-auth branch back into trunkMartin Willi2009-04-141-0/+5
|
* support of dynamic/128 and %any6Andreas Steffen2009-02-051-16/+15
|