aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter
Commit message (Collapse)AuthorAgeFilesLines
...
* Of course, mark is also supported by pluto.Tobias Brunner2010-09-061-1/+1
|
* mark_in and mark_out are also supported by pluto.Tobias Brunner2010-09-061-4/+4
|
* Fixed left-/rightnexthop ipsec.conf options.Tobias Brunner2010-09-031-1/+1
|
* pluto: Added support for statically configured reqids.Tobias Brunner2010-09-021-1/+1
|
* starter: Some whitespace cleanup.Tobias Brunner2010-09-022-4/+4
|
* pluto: Removed references to KLIPS from documentation, log messages and ↵Tobias Brunner2010-09-021-4/+1
| | | | comments.
* Moved ipsec_transform_t to kernel_ipsec.h in libhydra.Tobias Brunner2010-09-023-16/+1
| | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
* Added support for the ipsec.conf aaa_identity keywordMartin Willi2010-08-316-0/+10
|
* Moved EAP type/code definitions to a seprate header file in libstrongswanMartin Willi2010-08-311-2/+4
|
* moved eap_from_string() fomr libcharon to libstrongswan to make it available ↵Andreas Steffen2010-08-131-33/+2
| | | | in starter
* recognize eap-ttls methodAndreas Steffen2010-08-121-0/+4
|
* Added EAP-TLS plugin stubMartin Willi2010-08-032-0/+5
|
* substitute obsolete function calls(bzero/index)Waldemar Brodkorb2010-08-011-2/+2
|
* check for mark changes in ipsec updateAndreas Steffen2010-07-171-0/+4
|
* Warn about manual plugin load directives for pluto/charon with ↵Andreas Steffen2010-07-152-0/+20
| | | | --disable-load-warning compile option
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
| | | | This reverts commit 5c46726d0d91db5b1fc4ea53326e73443133f22d.
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
|
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
|
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-091-0/+5
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-096-32/+67
|
* added req parameter to ipsec.conf man pageAndreas Steffen2010-07-061-0/+3
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-026-1/+43
|
* Added generated manpages to .gitignoreMartin Willi2010-05-311-0/+1
|
* Adding the version number to the most relevant manual pages.Tobias Brunner2010-05-302-2/+8
|
* Updated and corrected the ipsec.conf(5) manual page.Tobias Brunner2010-05-301-126/+163
|
* introduced xauth_identity keywordAndreas Steffen2010-05-155-0/+6
|
* Include reqid in stroke add connection message.Reto Buerki2010-05-041-0/+1
|
* Add reqid keyword to config connection section.Reto Buerki2010-05-044-1/+5
|
* remove subnet from sourceipAndreas Steffen2010-05-021-0/+2
|
* final fix for cloning and deleting sourceip stringsAndreas Steffen2010-05-022-5/+3
|
* fixed end->sourceip memory leak in ipsec starterAndreas Steffen2010-05-021-34/+26
|
* fixed flex parser memory leaks in ipsec starterAndreas Steffen2010-05-022-10/+10
|
* free config before exiting since library_deinit() calls leak detectiveAndreas Steffen2010-05-021-4/+3
|
* Initialize libstrongswan in starter (fixes Vstr logging).Tobias Brunner2010-04-291-0/+4
|
* Added options to whack to query in-memory leases.Tobias Brunner2010-04-061-0/+2
|
* Fixed use of stack local variable outside of function scopeThomas Egerer2010-03-311-12/+14
|
* Fixed undefined behavior in use of stack variableThomas Egerer2010-03-311-2/+1
|
* parser.l includes y.tab.h, so it must be built firstTobias Brunner2010-03-051-1/+1
|
* Ignore the generated y.output.Tobias Brunner2010-03-052-351/+1
|
* Fixed starter left-/rightikeport keywordMartin Willi2010-02-262-1/+2
|
* Added left-/rightikeport ipsec.conf options to use custom IKE portsMartin Willi2010-02-268-0/+17
|
* Use destination address of ppp interfaces as nexthop in starters default ↵Martin Willi2010-02-051-6/+25
| | | | route lookup
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-277-26/+36
| | | | CHILD_SAs
* if end id is missing assign IP address to raw public keyAndreas Steffen2009-12-091-4/+10
|
* allow ECP DH groups in pfsgroup definitionAndreas Steffen2009-11-241-0/+5
|
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-145-121/+99
|
* Complain about missing %defaultroute support only if one is actually usedMartin Willi2009-09-163-3/+7
|
* Disable rtnetlink defaultroute lookup if pluto is disabledMartin Willi2009-09-151-7/+24
| | | | | As we do not support Pluto on BSD/Mac, exclude the Linux specific rtnetlink routing lookup; Charon doesn't require it anyway.
* Get starter default route via rtnetlinkHeiko Hund2009-09-151-88/+113
| | | | | | | | | | | | | This patch changes the way routes are fetched from the kernel by starter. The way it's currently done (via /proc) is limited to routes in the "main" routing table. Routes from the "default" table are never seen by starter. Starter may miss the default route even if it's set. Thus, default routes are now read from the "main" and the "default" table. The way this code behaves if more than one default route is found is slightly different to before. Instead of bailing out it just chooses the one with the best metric. I thought this was be a reasonable change.
* use sysconfdir, no need for an additional confdir variableMartin Willi2009-09-071-1/+1
|