Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Of course, mark is also supported by pluto. | Tobias Brunner | 2010-09-06 | 1 | -1/+1 | |
| | ||||||
* | mark_in and mark_out are also supported by pluto. | Tobias Brunner | 2010-09-06 | 1 | -4/+4 | |
| | ||||||
* | Fixed left-/rightnexthop ipsec.conf options. | Tobias Brunner | 2010-09-03 | 1 | -1/+1 | |
| | ||||||
* | pluto: Added support for statically configured reqids. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | starter: Some whitespace cleanup. | Tobias Brunner | 2010-09-02 | 2 | -4/+4 | |
| | ||||||
* | pluto: Removed references to KLIPS from documentation, log messages and ↵ | Tobias Brunner | 2010-09-02 | 1 | -4/+1 | |
| | | | | comments. | |||||
* | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 3 | -16/+1 | |
| | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | |||||
* | Added support for the ipsec.conf aaa_identity keyword | Martin Willi | 2010-08-31 | 6 | -0/+10 | |
| | ||||||
* | Moved EAP type/code definitions to a seprate header file in libstrongswan | Martin Willi | 2010-08-31 | 1 | -2/+4 | |
| | ||||||
* | moved eap_from_string() fomr libcharon to libstrongswan to make it available ↵ | Andreas Steffen | 2010-08-13 | 1 | -33/+2 | |
| | | | | in starter | |||||
* | recognize eap-ttls method | Andreas Steffen | 2010-08-12 | 1 | -0/+4 | |
| | ||||||
* | Added EAP-TLS plugin stub | Martin Willi | 2010-08-03 | 2 | -0/+5 | |
| | ||||||
* | substitute obsolete function calls(bzero/index) | Waldemar Brodkorb | 2010-08-01 | 1 | -2/+2 | |
| | ||||||
* | check for mark changes in ipsec update | Andreas Steffen | 2010-07-17 | 1 | -0/+4 | |
| | ||||||
* | Warn about manual plugin load directives for pluto/charon with ↵ | Andreas Steffen | 2010-07-15 | 2 | -0/+20 | |
| | | | | --disable-load-warning compile option | |||||
* | Revert "Warn about manual plugin load directives for pluto/charon" | Martin Willi | 2010-07-14 | 1 | -11/+0 | |
| | | | | This reverts commit 5c46726d0d91db5b1fc4ea53326e73443133f22d. | |||||
* | Warn about manual plugin load directives for pluto/charon | Martin Willi | 2010-07-13 | 1 | -0/+11 | |
| | ||||||
* | added mark, mark_in, and mark_out to the ipsec.conf.5 man page | Andreas Steffen | 2010-07-13 | 1 | -0/+19 | |
| | ||||||
* | transport reqid, mark_in and mark_out in whack message | Andreas Steffen | 2010-07-09 | 1 | -0/+5 | |
| | ||||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 6 | -32/+67 | |
| | ||||||
* | added req parameter to ipsec.conf man page | Andreas Steffen | 2010-07-06 | 1 | -0/+3 | |
| | ||||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 6 | -1/+43 | |
| | ||||||
* | Added generated manpages to .gitignore | Martin Willi | 2010-05-31 | 1 | -0/+1 | |
| | ||||||
* | Adding the version number to the most relevant manual pages. | Tobias Brunner | 2010-05-30 | 2 | -2/+8 | |
| | ||||||
* | Updated and corrected the ipsec.conf(5) manual page. | Tobias Brunner | 2010-05-30 | 1 | -126/+163 | |
| | ||||||
* | introduced xauth_identity keyword | Andreas Steffen | 2010-05-15 | 5 | -0/+6 | |
| | ||||||
* | Include reqid in stroke add connection message. | Reto Buerki | 2010-05-04 | 1 | -0/+1 | |
| | ||||||
* | Add reqid keyword to config connection section. | Reto Buerki | 2010-05-04 | 4 | -1/+5 | |
| | ||||||
* | remove subnet from sourceip | Andreas Steffen | 2010-05-02 | 1 | -0/+2 | |
| | ||||||
* | final fix for cloning and deleting sourceip strings | Andreas Steffen | 2010-05-02 | 2 | -5/+3 | |
| | ||||||
* | fixed end->sourceip memory leak in ipsec starter | Andreas Steffen | 2010-05-02 | 1 | -34/+26 | |
| | ||||||
* | fixed flex parser memory leaks in ipsec starter | Andreas Steffen | 2010-05-02 | 2 | -10/+10 | |
| | ||||||
* | free config before exiting since library_deinit() calls leak detective | Andreas Steffen | 2010-05-02 | 1 | -4/+3 | |
| | ||||||
* | Initialize libstrongswan in starter (fixes Vstr logging). | Tobias Brunner | 2010-04-29 | 1 | -0/+4 | |
| | ||||||
* | Added options to whack to query in-memory leases. | Tobias Brunner | 2010-04-06 | 1 | -0/+2 | |
| | ||||||
* | Fixed use of stack local variable outside of function scope | Thomas Egerer | 2010-03-31 | 1 | -12/+14 | |
| | ||||||
* | Fixed undefined behavior in use of stack variable | Thomas Egerer | 2010-03-31 | 1 | -2/+1 | |
| | ||||||
* | parser.l includes y.tab.h, so it must be built first | Tobias Brunner | 2010-03-05 | 1 | -1/+1 | |
| | ||||||
* | Ignore the generated y.output. | Tobias Brunner | 2010-03-05 | 2 | -351/+1 | |
| | ||||||
* | Fixed starter left-/rightikeport keyword | Martin Willi | 2010-02-26 | 2 | -1/+2 | |
| | ||||||
* | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 8 | -0/+17 | |
| | ||||||
* | Use destination address of ppp interfaces as nexthop in starters default ↵ | Martin Willi | 2010-02-05 | 1 | -6/+25 | |
| | | | | route lookup | |||||
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 7 | -26/+36 | |
| | | | | CHILD_SAs | |||||
* | if end id is missing assign IP address to raw public key | Andreas Steffen | 2009-12-09 | 1 | -4/+10 | |
| | ||||||
* | allow ECP DH groups in pfsgroup definition | Andreas Steffen | 2009-11-24 | 1 | -0/+5 | |
| | ||||||
* | pluto now supports SQL-based virtual IP pools | Andreas Steffen | 2009-10-14 | 5 | -121/+99 | |
| | ||||||
* | Complain about missing %defaultroute support only if one is actually used | Martin Willi | 2009-09-16 | 3 | -3/+7 | |
| | ||||||
* | Disable rtnetlink defaultroute lookup if pluto is disabled | Martin Willi | 2009-09-15 | 1 | -7/+24 | |
| | | | | | As we do not support Pluto on BSD/Mac, exclude the Linux specific rtnetlink routing lookup; Charon doesn't require it anyway. | |||||
* | Get starter default route via rtnetlink | Heiko Hund | 2009-09-15 | 1 | -88/+113 | |
| | | | | | | | | | | | | | This patch changes the way routes are fetched from the kernel by starter. The way it's currently done (via /proc) is limited to routes in the "main" routing table. Routes from the "default" table are never seen by starter. Starter may miss the default route even if it's set. Thus, default routes are now read from the "main" and the "default" table. The way this code behaves if more than one default route is found is slightly different to before. Instead of bailing out it just chooses the one with the best metric. I thought this was be a reasonable change. | |||||
* | use sysconfdir, no need for an additional confdir variable | Martin Willi | 2009-09-07 | 1 | -1/+1 | |
| |