aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter
Commit message (Collapse)AuthorAgeFilesLines
* fixed compiler warning (missing include)Martin Willi2008-05-131-0/+1
|
* forgot about alphabetical orderAndreas Steffen2008-05-121-4/+4
|
* added description of plutostderrlog parameter to ipsec.conf.5 man pageAndreas Steffen2008-05-121-0/+4
|
* plutostderrlog parameter now declares a stderr redirection fileAndreas Steffen2008-05-123-4/+17
|
* fixed typosAndreas Steffen2008-05-111-1/+1
|
* support of plutostderrlog keywordAndreas Steffen2008-05-116-4/+8
|
* IPComp for IKEv2Tobias Brunner2008-05-081-0/+1
|
* replaced --with-gid/uid by --with-group/user Martin Willi2008-05-084-68/+74
| | | | | using named users, groups fixed capability dropping in pluto
* end->srcip string must be removed if it contains %configAndreas Steffen2008-04-271-0/+2
|
* fixed starter_cmp_end()Andreas Steffen2008-04-271-2/+2
|
* fixed memory corruption problem in starterAndreas Steffen2008-04-274-77/+85
|
* supporting multiple comma seperated subnets in left/rightsubnet definitionMartin Willi2008-04-256-15/+54
| | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
* shipping a default strongswan.confMartin Willi2008-04-181-1/+0
|
* support for hash and URL encoded certificate payloads in charonTobias Brunner2008-04-186-13/+17
|
* fixed compiler warningMartin Willi2008-04-171-1/+1
|
* respecting ipsec.conf cachecrls= optionMartin Willi2008-04-175-37/+42
|
* set long-forgotten DPD defaultsAndreas Steffen2008-04-151-0/+2
|
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-143-1/+17
| | | | additionally supports a "keep" value to keep the old IKE_SA
* updated rightsourceip parameter in man pageMartin Willi2008-04-141-1/+4
|
* host_srcip was not properly initialized in starterwhack.cAndreas Steffen2008-04-131-2/+5
|
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-095-26/+77
| | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool
* changed force_encap to forceencapsMartin Willi2008-04-081-1/+1
|
* support of force_keepalive parameterAndreas Steffen2008-04-025-0/+8
|
* removed unused yynuput to fix compiler warningMartin Willi2008-03-281-1/+1
|
* changed external interface to the mediation extension.Tobias Brunner2008-03-273-14/+14
|
* mediation extension adapted to the naming convention of the current version ↵Tobias Brunner2008-03-265-16/+16
| | | | of the draft. note: the external interface (config, autotools) has not yet been changed
* suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko ↵Andreas Steffen2008-03-211-0/+8
| | | | Hund from Astaro.
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-138-18/+5
|
* creating sysconfdir if it does not existMartin Willi2008-02-221-2/+13
| | | | moved all directory creations into starters Makefile
* set nexthop default value to 0::0 in IPv6 connectionsAndreas Steffen2007-12-192-5/+10
|
* implemented Expanded EAP types to support vendor specific methodsMartin Willi2007-12-134-12/+39
|
* merged EAP-MD5 into trunkMartin Willi2007-12-121-0/+4
|
* ipsec and starter exit with LSB-compliant return codesAndreas Steffen2007-11-281-11/+23
|
* be less agressive, but more verbose in killing charonMartin Willi2007-11-151-1/+6
|
* added RCSIDAndreas Steffen2007-10-0830-33/+325
|
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-036-3/+57
|
* renamed force_encap to forceencaps (as it is named in openswan)Martin Willi2007-10-024-4/+4
|
* moved force_encap to ike_config, enables responder to enforce udp encapsulationMartin Willi2007-10-011-0/+1
| | | | fixed bugs in force_encap code
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-015-0/+11
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
* moved loglite.c from openac to scepclientAndreas Steffen2007-09-181-2/+2
|
* added mobike option to man pageAndreas Steffen2007-09-021-0/+11
|
* added mobike=yes|no connection optionMartin Willi2007-08-295-1/+9
| | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes
* handle dns lookup failuresAndreas Steffen2007-08-024-9/+37
|
* added to ipsec.conf installation pathAndreas Steffen2007-07-111-1/+1
|
* describe eap option in ipsec.conf.5 man pageAndreas Steffen2007-07-041-0/+9
|
* cosmeticsAndreas Steffen2007-07-041-1/+2
|
* removed the ipsec.conf version numberAndreas Steffen2007-07-041-6/+0
|
* support of PKCS#11 init arguments required by NSS softoken, patch ↵Andreas Steffen2007-07-031-0/+4
| | | | contributed by Robert Varga
* support of PKCS#11 init arguments required by NSS softoken, patch ↵Andreas Steffen2007-07-035-0/+9
| | | | contributed by Robert Varga
* fix of the bug fix, courtesy of Robert VargaAndreas Steffen2007-07-021-1/+4
|