Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -18/+16 | |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | |||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 1 | -1/+1 | |
| | | | | | Multiple additional search paths can be added with the add_path() method. | |||||
* | starter: Make ipsec.conf path configurable via command line | Tobias Brunner | 2013-06-21 | 1 | -3/+14 | |
| | ||||||
* | starter: ignore return value of sete[gu]id(), now having warn_unused_result | Martin Willi | 2013-06-18 | 1 | -5/+4 | |
| | ||||||
* | Load any type (RSA/ECDSA) of public key via left|rightsigkey | Tobias Brunner | 2013-05-07 | 2 | -5/+7 | |
| | ||||||
* | Use the GEN silent rule when generating gperf files | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | ||||||
* | android: Remove/filter header files from LOCAL_SRC_FILES | Tobias Brunner | 2013-03-20 | 1 | -1/+3 | |
| | | | | This avoids huge warnings when building the native code. | |||||
* | starter: Make daemon name configurable | Adrian-Ken Rueegsegger | 2013-03-19 | 4 | -35/+120 | |
| | | | | | | | | A daemon can be specified using the '--daemon' command line parameter. This tells starter to invoke a daemon other than 'charon'. Additionally the ipsec script uses the environment variable DAEMON_NAME to tell the starter which daemon to use. | |||||
* | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 4 | -10/+37 | |
|\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | |||||
| * | Optionally support port ranges in leftprotoport | Martin Willi | 2013-02-21 | 1 | -4/+20 | |
| | | ||||||
| * | Support %opaque keyword in leftprotoport for "opaque" ports | Martin Willi | 2013-02-21 | 1 | -0/+5 | |
| | | ||||||
| * | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 4 | -9/+13 | |
| | | ||||||
* | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets | Martin Willi | 2013-02-06 | 5 | -3/+21 | |
|/ | ||||||
* | starter: Add --attach-gdb option to usage text | Adrian-Ken Rueegsegger | 2013-01-22 | 1 | -1/+2 | |
| | ||||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 4 | -7/+18 | |
| | ||||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 6 | -0/+8 | |
| | ||||||
* | Remove MODP groups from default ESP proposal | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | | | | This now actually makes pfs=no the default and it equals the default listed in ipsec.conf.5. efc69e9f preserved the default of pfs=yes. | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 8 | -8/+8 | |
| | ||||||
* | Starter ignores non-fatal errors when reloading config | Tobias Brunner | 2012-10-18 | 1 | -1/+1 | |
| | ||||||
* | Starter unroutes removed or changed connections before loading and routing ↵ | Tobias Brunner | 2012-10-18 | 3 | -0/+19 | |
| | | | | new ones | |||||
* | starter: Added --nolog option to suppress logging in starter itself | Tobias Brunner | 2012-09-12 | 1 | -2/+6 | |
| | | | | Fixes #224. | |||||
* | starter: Allow %any also for protocol in left|rightprotoport | Tobias Brunner | 2012-09-12 | 1 | -9/+15 | |
| | ||||||
* | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -0/+1 | |
| | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
* | starter: Load config again when restarting charon | Tobias Brunner | 2012-09-05 | 1 | -0/+16 | |
| | | | | This got lost in 041e763b. | |||||
* | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 7 | -89/+8 | |
|\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
| * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 3 | -55/+0 | |
| | | ||||||
| * | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 6 | -34/+0 | |
| | | ||||||
| * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 5 | -0/+8 | |
| | | ||||||
* | | Removed deprecated options from ipsec.conf template | Tobias Brunner | 2012-08-24 | 1 | -9/+1 | |
|/ | ||||||
* | starter: Restore original config in case also= is used (which reads the same ↵ | Tobias Brunner | 2012-08-16 | 1 | -20/+30 | |
| | | | | values) | |||||
* | Only load kernel plugins in starter when flushing SAD/SPD entries | Tobias Brunner | 2012-08-16 | 2 | -9/+8 | |
| | | | | | | | | This avoids keeping the kernel sockets open when they are not actually needed, which could lead to resource problems (in particular with PF_KEY where all open sockets receive all messages). Fixes #217. | |||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 5 | -0/+8 | |
| | ||||||
* | Mask the configured mark value to ensure it is in range | Tobias Brunner | 2012-06-26 | 1 | -0/+2 | |
| | ||||||
* | Removed -o argument when creating .../ipsec.d with install | Tobias Brunner | 2012-06-25 | 1 | -1/+1 | |
| | | | | This should have been removed with 2b52d5cb41. | |||||
* | ldaphost and ldapbase ca section keywords are deprecated | Tobias Brunner | 2012-06-25 | 4 | -8/+2 | |
| | ||||||
* | starter: Fixed parsing of %defaultroute. | Tobias Brunner | 2012-06-15 | 1 | -6/+12 | |
| | ||||||
* | Print the kind of *Swan during starter startup | Martin Willi | 2012-06-14 | 1 | -1/+4 | |
| | ||||||
* | thanks to narrowing treat right|leftsubnetwithin as synonyms for ↵ | Andreas Steffen | 2012-06-14 | 1 | -2/+2 | |
| | | | | right|leftsubnet | |||||
* | starter: Print additional help texts for selected deprecated keywords. | Tobias Brunner | 2012-06-12 | 4 | -6/+25 | |
| | ||||||
* | starter: Improved how deprecated keywords are handled. | Tobias Brunner | 2012-06-12 | 4 | -7/+99 | |
| | | | | We only throw a warning now instead of rejecting the config. | |||||
* | Revert "starter: Don't treat unsupported keywords as fatal errors just ↵ | Tobias Brunner | 2012-06-12 | 1 | -3/+3 | |
| | | | | | | report them." This reverts commit e55876a657ae9d4bbf14320e5a14f86cc5c31c7f. | |||||
* | starter: Fixed parsing of left|right=%any. | Tobias Brunner | 2012-06-12 | 1 | -1/+3 | |
| | ||||||
* | starter: Fix comparison of connections. | Tobias Brunner | 2012-06-11 | 1 | -3/+4 | |
| | ||||||
* | starter: Removed all unsupported keywords. | Tobias Brunner | 2012-06-11 | 7 | -203/+26 | |
| | ||||||
* | starter: Don't treat unsupported keywords as fatal errors just report them. | Tobias Brunner | 2012-06-11 | 1 | -3/+3 | |
| | ||||||
* | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 4 | -23/+1 | |
| | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | |||||
* | starter: Remove all ties to pluto/libfreeswan. | Tobias Brunner | 2012-06-11 | 10 | -46/+25 | |
| | | | | Moved some types/constants in the process. | |||||
* | starter: Use custom type for SA specific options (flags). | Tobias Brunner | 2012-06-11 | 4 | -22/+36 | |
| | ||||||
* | starter: Parse left|rightprotoport directly in confread.c. | Tobias Brunner | 2012-06-11 | 3 | -6/+53 | |
| | ||||||
* | starter: No special handling for left|rightsubnet, just pass it on as string. | Tobias Brunner | 2012-06-11 | 4 | -39/+1 | |
| |