| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Revert "starter: Don't treat unsupported keywords as fatal errors just ↵ | Tobias Brunner | 2012-06-12 | 1 | -3/+3 | |
| | | | | | | | report them." This reverts commit e55876a657ae9d4bbf14320e5a14f86cc5c31c7f. | |||||
| * | starter: Fixed parsing of left|right=%any. | Tobias Brunner | 2012-06-12 | 1 | -1/+3 | |
| | | ||||||
| * | starter: Fix comparison of connections. | Tobias Brunner | 2012-06-11 | 1 | -3/+4 | |
| | | ||||||
| * | starter: Removed all unsupported keywords. | Tobias Brunner | 2012-06-11 | 7 | -203/+26 | |
| | | ||||||
| * | starter: Don't treat unsupported keywords as fatal errors just report them. | Tobias Brunner | 2012-06-11 | 1 | -3/+3 | |
| | | ||||||
| * | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 4 | -23/+1 | |
| | | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | |||||
| * | starter: Remove all ties to pluto/libfreeswan. | Tobias Brunner | 2012-06-11 | 10 | -46/+25 | |
| | | | | | Moved some types/constants in the process. | |||||
| * | starter: Use custom type for SA specific options (flags). | Tobias Brunner | 2012-06-11 | 4 | -22/+36 | |
| | | ||||||
| * | starter: Parse left|rightprotoport directly in confread.c. | Tobias Brunner | 2012-06-11 | 3 | -6/+53 | |
| | | ||||||
| * | starter: No special handling for left|rightsubnet, just pass it on as string. | Tobias Brunner | 2012-06-11 | 4 | -39/+1 | |
| | | ||||||
| * | starter: Use host_t to parse left|rightsourceip. | Tobias Brunner | 2012-06-11 | 1 | -18/+17 | |
| | | | | | Also for the yet unused natip option. | |||||
| * | starter: Remove left|rightsubnetwithin option (charon narrows ↵ | Tobias Brunner | 2012-06-11 | 6 | -25/+0 | |
| | | | | | left|rightsubnet down accordingly). | |||||
| * | starter: Don't resolve any addresses in starter. | Tobias Brunner | 2012-06-11 | 6 | -129/+10 | |
| | | | | | Also removed remains of some unknown iface option. | |||||
| * | starter: Removed pfs and pfsgroup options (handled via esp option). | Tobias Brunner | 2012-06-11 | 5 | -28/+2 | |
| | | ||||||
| * | starter: Store mode of the IPsec SA/policy in a separate member. | Tobias Brunner | 2012-06-11 | 4 | -51/+32 | |
| | | ||||||
| * | starter: Use custom type to mark seen keywords. | Tobias Brunner | 2012-06-11 | 3 | -23/+27 | |
| | | ||||||
| * | starter: Remove left|rightnexthop option. | Tobias Brunner | 2012-06-11 | 6 | -26/+0 | |
| | | | | | Charon does this lookup dynamically. | |||||
| * | starter: Replaced all usages of clone_str() with strdupnull(). | Tobias Brunner | 2012-06-11 | 3 | -19/+19 | |
| | | ||||||
| * | starter: Parse authby as string. | Tobias Brunner | 2012-06-11 | 4 | -61/+29 | |
| | | ||||||
| * | starter: Remove main parts of pluto support (invoke, whack). | Tobias Brunner | 2012-06-11 | 7 | -966/+47 | |
| | | ||||||
| * | starter: Drop support for %defaultroute. | Tobias Brunner | 2012-06-11 | 9 | -336/+14 | |
| | | ||||||
| * | starter: Migrated logging to libstrongswan. | Tobias Brunner | 2012-06-11 | 14 | -550/+285 | |
| | | ||||||
| * | starter: Remove unneeded starter_exec function. | Tobias Brunner | 2012-06-11 | 5 | -78/+4 | |
| | | ||||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -0/+1 | |
| | | ||||||
| * | starter: Go back to single threaded mode. | Tobias Brunner | 2012-06-08 | 2 | -22/+7 | |
| | | | | | | Mixing multiple threads and fork(2) wasn't a very good idea it seems. At least in some environments this caused strange side-effects. | |||||
| * | starter: Only handle SIGCHLD asynchronously and the rest in pselect(2). | Tobias Brunner | 2012-06-06 | 1 | -8/+17 | |
| | | ||||||
| * | starter: (De-)Initialize logging when forking. | Tobias Brunner | 2012-06-05 | 1 | -0/+2 | |
| | | ||||||
| * | starter: Close open file descriptors when forking daemons. | Tobias Brunner | 2012-06-04 | 2 | -0/+2 | |
| | | ||||||
| * | starter: Changed signal handling now that starter is multi-threaded. | Tobias Brunner | 2012-06-04 | 2 | -15/+57 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -1/+2 | |
| | | ||||||
| * | starter: Initialize thread pool so kernel events are consumed. | Tobias Brunner | 2012-05-15 | 1 | -0/+9 | |
| | | ||||||
| * | Explicitly cast from strict_t to crl_policy_t | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 7 | -75/+58 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 7 | -75/+58 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 5 | -38/+1 | |
| | | | | ||||||
| | | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -20/+39 | |
| | | | | ||||||
| | | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 5 | -0/+5 | |
| | | | | ||||||
| | | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -4/+5 | |
| | | | | ||||||
| | | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 2 | -13/+7 | |
| | | | | ||||||
| * | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -0/+1 | |
| |/ / | ||||||
| * | | Use correct time_t variables to store ARG_TIME options | Martin Willi | 2012-01-18 | 2 | -4/+4 | |
| | | | ||||||
| * | | Starter depends on whack/stroke on Android. | Tobias Brunner | 2012-01-12 | 1 | -0/+5 | |
| | | | | | | | | | | | With this change whack and stroke get installed automatically if starter is enabled. | |||||
| * | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | |||||
| * | | Fixed bug at checking error code from file stat | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+351 | |
| | | | ||||||
| * | | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
| * | | Added missing Android.mk files to distribution. | Tobias Brunner | 2011-11-22 | 1 | -1/+1 | |
| |/ | ||||||
| * | Fix DNS error handling for keyexchange=ike. | Mirko Parthey | 2011-10-25 | 1 | -1/+1 | |
| | | | | | | | starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2. | |||||
| * | starter: Android.mk updated to use kernel-netlink via libhydra. | Tobias Brunner | 2011-10-21 | 1 | -2/+3 | |
| | | ||||||
| * | starter: Use kernel interfaces to flush SAD and SPD. | Tobias Brunner | 2011-10-21 | 3 | -15/+8 | |
| | | | | | | This now supports platforms where neither 'ip xfrm' nor 'setkey' are available (like Android). | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |