Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | pluto supports ECDSA authentication | Andreas Steffen | 2009-06-12 | 1 | -1/+1 | |
| | ||||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 | |
| | ||||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 1 | -6/+18 | |
| | | | | | important change for developers: %Y replaces %D to print identities! | |||||
* | already had the correct formatting | Andreas Steffen | 2009-04-19 | 1 | -255/+255 | |
| | ||||||
* | conversion from 8 spaces to 4 spaces per tab | Andreas Steffen | 2009-04-19 | 1 | -255/+255 | |
| | ||||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -0/+5 | |
| | ||||||
* | support of dynamic/128 and %any6 | Andreas Steffen | 2009-02-05 | 1 | -16/+15 | |
| | ||||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 | |
| | ||||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -4/+11 | |
| | ||||||
* | support of %any address string | Andreas Steffen | 2008-11-05 | 1 | -4/+15 | |
| | ||||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -0/+1 | |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | |||||
* | updated location of auth_class_t | Martin Willi | 2008-06-24 | 1 | -1/+1 | |
| | ||||||
* | make config_auth_method_t backward compatible to existing sql templates | Andreas Steffen | 2008-06-10 | 1 | -4/+4 | |
| | ||||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 1 | -8/+7 | |
| | ||||||
* | fixed typos | Andreas Steffen | 2008-05-11 | 1 | -1/+1 | |
| | ||||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -0/+1 | |
| | ||||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 1 | -3/+1 | |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | |||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -7/+7 | |
| | ||||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 1 | -0/+13 | |
| | ||||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 1 | -0/+1 | |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | |||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -12/+36 | |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | |||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -3/+3 | |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | |||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -2/+3 | |
| | ||||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -1/+2 | |
| | ||||||
* | added RCSID | Andreas Steffen | 2007-10-08 | 1 | -1/+1 | |
| | ||||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -1/+6 | |
| | ||||||
* | moved force_encap to ike_config, enables responder to enforce udp encapsulation | Martin Willi | 2007-10-01 | 1 | -0/+1 | |
| | | | | fixed bugs in force_encap code | |||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 1 | -0/+1 | |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | |||||
* | support for virtual IP definition on client side: | Martin Willi | 2007-05-22 | 1 | -1/+1 | |
| | | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. | |||||
* | support of left|rightgroups parameter | Andreas Steffen | 2007-05-20 | 1 | -0/+1 | |
| | ||||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 1 | -0/+1 | |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | |||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -0/+3 | |
| | ||||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -5/+6 | |
| | ||||||
* | using "left" as my host per default, swapping to "right" when needed | Martin Willi | 2007-02-15 | 1 | -2/+2 | |
| | ||||||
* | enabled adding and deleting ca information records | Andreas Steffen | 2007-02-14 | 1 | -0/+26 | |
| | ||||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -23/+21 | |
| | | | | | includes a lot of other modifications | |||||
* | added config option for BEET mode | Martin Willi | 2007-01-03 | 1 | -1/+12 | |
| | ||||||
* | negated POLICY_REAUTH to POLICY_DONT_REAUTH | Andreas Steffen | 2006-12-21 | 1 | -1/+1 | |
| | ||||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -0/+1 | |
| | | | | | support for the type=transport/tunnel parameter in charon | |||||
* | implemented reauthentication using the new reauth=yes|no parameter | Martin Willi | 2006-12-19 | 1 | -0/+1 | |
| | ||||||
* | fixed stddef.h include | Martin Willi | 2006-12-14 | 1 | -1/+1 | |
| | ||||||
* | solved 64 bit issue in push/pop stroke interface | Andreas Steffen | 2006-10-31 | 1 | -1/+1 | |
| | ||||||
* | added verbosity level to stroke | Martin Willi | 2006-10-24 | 1 | -0/+3 | |
| | ||||||
* | added hostaccess support | Andreas Steffen | 2006-09-25 | 1 | -0/+1 | |
| | ||||||
* | added auth_method field | Andreas Steffen | 2006-09-18 | 1 | -0/+29 | |
| | ||||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -1/+1 | |
| | ||||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -0/+2 | |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | |||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -2/+36 | |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | |||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -3/+3 | |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | |||||
* | added support for leftprotoport and rightprotoport | Martin Willi | 2006-07-05 | 1 | -0/+2 | |
| |