aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter/starterstroke.c
Commit message (Collapse)AuthorAgeFilesLines
...
* pluto supports ECDSA authenticationAndreas Steffen2009-06-121-1/+1
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-6/+18
| | | | | important change for developers: %Y replaces %D to print identities!
* already had the correct formattingAndreas Steffen2009-04-191-255/+255
|
* conversion from 8 spaces to 4 spaces per tabAndreas Steffen2009-04-191-255/+255
|
* merged multi-auth branch back into trunkMartin Willi2009-04-141-0/+5
|
* support of dynamic/128 and %any6Andreas Steffen2009-02-051-16/+15
|
* renamed proxy to proxy_mode in stroke_msg.hAndreas Steffen2008-11-111-1/+1
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-4/+11
|
* support of %any address stringAndreas Steffen2008-11-051-4/+15
|
* ported parts of two-sim branchMartin Willi2008-08-221-0/+1
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* updated location of auth_class_tMartin Willi2008-06-241-1/+1
|
* make config_auth_method_t backward compatible to existing sql templatesAndreas Steffen2008-06-101-4/+4
|
* ECDSA with OpenSSLTobias Brunner2008-06-101-8/+7
|
* fixed typosAndreas Steffen2008-05-111-1/+1
|
* IPComp for IKEv2Tobias Brunner2008-05-081-0/+1
|
* supporting multiple comma seperated subnets in left/rightsubnet definitionMartin Willi2008-04-251-3/+1
| | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
* support for hash and URL encoded certificate payloads in charonTobias Brunner2008-04-181-7/+7
|
* respecting ipsec.conf cachecrls= optionMartin Willi2008-04-171-0/+13
|
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-141-0/+1
| | | | additionally supports a "keep" value to keep the old IKE_SA
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-091-12/+36
| | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool
* mediation extension adapted to the naming convention of the current version ↵Tobias Brunner2008-03-261-3/+3
| | | | of the draft. note: the external interface (config, autotools) has not yet been changed
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-2/+3
|
* implemented Expanded EAP types to support vendor specific methodsMartin Willi2007-12-131-1/+2
|
* added RCSIDAndreas Steffen2007-10-081-1/+1
|
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-031-1/+6
|
* moved force_encap to ike_config, enables responder to enforce udp encapsulationMartin Willi2007-10-011-0/+1
| | | | fixed bugs in force_encap code
* added mobike=yes|no connection optionMartin Willi2007-08-291-0/+1
| | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes
* support for virtual IP definition on client side:Martin Willi2007-05-221-1/+1
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* support of left|rightgroups parameterAndreas Steffen2007-05-201-0/+1
|
* added support for 0.0.0.0/0 traffic selectorsMartin Willi2007-03-011-0/+1
| | | | fixed routing to make correct 0.0.0.0/0 routes
* merged tasking branch into trunkMartin Willi2007-02-281-0/+3
|
* support of ca info recordsAndreas Steffen2007-02-231-5/+6
|
* using "left" as my host per default, swapping to "right" when neededMartin Willi2007-02-151-2/+2
|
* enabled adding and deleting ca information recordsAndreas Steffen2007-02-141-0/+26
|
* merged EAP framework from branch into trunkMartin Willi2007-02-121-23/+21
| | | | | includes a lot of other modifications
* added config option for BEET modeMartin Willi2007-01-031-1/+12
|
* negated POLICY_REAUTH to POLICY_DONT_REAUTHAndreas Steffen2006-12-211-1/+1
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-0/+1
| | | | | support for the type=transport/tunnel parameter in charon
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-0/+1
|
* fixed stddef.h includeMartin Willi2006-12-141-1/+1
|
* solved 64 bit issue in push/pop stroke interfaceAndreas Steffen2006-10-311-1/+1
|
* added verbosity level to strokeMartin Willi2006-10-241-0/+3
|
* added hostaccess supportAndreas Steffen2006-09-251-0/+1
|
* added auth_method fieldAndreas Steffen2006-09-181-0/+29
|
* implemented handling of dpdaction and dpddelay ipsec.conf parametersMartin Willi2006-09-081-1/+1
|
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-0/+2
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* initial support for IPv6 (more testing needed)Martin Willi2006-08-301-2/+36
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-3/+3
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* added support for leftprotoport and rightprotoportMartin Willi2006-07-051-0/+2
|