Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 4 | -9/+13 |
| | |||||
* | starter: Add --attach-gdb option to usage text | Adrian-Ken Rueegsegger | 2013-01-22 | 1 | -1/+2 |
| | |||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 4 | -7/+18 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 6 | -0/+8 |
| | |||||
* | Remove MODP groups from default ESP proposal | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | | | | This now actually makes pfs=no the default and it equals the default listed in ipsec.conf.5. efc69e9f preserved the default of pfs=yes. | ||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 8 | -8/+8 |
| | |||||
* | Starter ignores non-fatal errors when reloading config | Tobias Brunner | 2012-10-18 | 1 | -1/+1 |
| | |||||
* | Starter unroutes removed or changed connections before loading and routing ↵ | Tobias Brunner | 2012-10-18 | 3 | -0/+19 |
| | | | | new ones | ||||
* | starter: Added --nolog option to suppress logging in starter itself | Tobias Brunner | 2012-09-12 | 1 | -2/+6 |
| | | | | Fixes #224. | ||||
* | starter: Allow %any also for protocol in left|rightprotoport | Tobias Brunner | 2012-09-12 | 1 | -9/+15 |
| | |||||
* | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -0/+1 |
| | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | ||||
* | starter: Load config again when restarting charon | Tobias Brunner | 2012-09-05 | 1 | -0/+16 |
| | | | | This got lost in 041e763b. | ||||
* | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 7 | -89/+8 |
|\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | ||||
| * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 3 | -55/+0 |
| | | |||||
| * | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 6 | -34/+0 |
| | | |||||
| * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 5 | -0/+8 |
| | | |||||
* | | Removed deprecated options from ipsec.conf template | Tobias Brunner | 2012-08-24 | 1 | -9/+1 |
|/ | |||||
* | starter: Restore original config in case also= is used (which reads the same ↵ | Tobias Brunner | 2012-08-16 | 1 | -20/+30 |
| | | | | values) | ||||
* | Only load kernel plugins in starter when flushing SAD/SPD entries | Tobias Brunner | 2012-08-16 | 2 | -9/+8 |
| | | | | | | | | This avoids keeping the kernel sockets open when they are not actually needed, which could lead to resource problems (in particular with PF_KEY where all open sockets receive all messages). Fixes #217. | ||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 5 | -0/+8 |
| | |||||
* | Mask the configured mark value to ensure it is in range | Tobias Brunner | 2012-06-26 | 1 | -0/+2 |
| | |||||
* | Removed -o argument when creating .../ipsec.d with install | Tobias Brunner | 2012-06-25 | 1 | -1/+1 |
| | | | | This should have been removed with 2b52d5cb41. | ||||
* | ldaphost and ldapbase ca section keywords are deprecated | Tobias Brunner | 2012-06-25 | 4 | -8/+2 |
| | |||||
* | starter: Fixed parsing of %defaultroute. | Tobias Brunner | 2012-06-15 | 1 | -6/+12 |
| | |||||
* | Print the kind of *Swan during starter startup | Martin Willi | 2012-06-14 | 1 | -1/+4 |
| | |||||
* | thanks to narrowing treat right|leftsubnetwithin as synonyms for ↵ | Andreas Steffen | 2012-06-14 | 1 | -2/+2 |
| | | | | right|leftsubnet | ||||
* | starter: Print additional help texts for selected deprecated keywords. | Tobias Brunner | 2012-06-12 | 4 | -6/+25 |
| | |||||
* | starter: Improved how deprecated keywords are handled. | Tobias Brunner | 2012-06-12 | 4 | -7/+99 |
| | | | | We only throw a warning now instead of rejecting the config. | ||||
* | Revert "starter: Don't treat unsupported keywords as fatal errors just ↵ | Tobias Brunner | 2012-06-12 | 1 | -3/+3 |
| | | | | | | report them." This reverts commit e55876a657ae9d4bbf14320e5a14f86cc5c31c7f. | ||||
* | starter: Fixed parsing of left|right=%any. | Tobias Brunner | 2012-06-12 | 1 | -1/+3 |
| | |||||
* | starter: Fix comparison of connections. | Tobias Brunner | 2012-06-11 | 1 | -3/+4 |
| | |||||
* | starter: Removed all unsupported keywords. | Tobias Brunner | 2012-06-11 | 7 | -203/+26 |
| | |||||
* | starter: Don't treat unsupported keywords as fatal errors just report them. | Tobias Brunner | 2012-06-11 | 1 | -3/+3 |
| | |||||
* | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 4 | -23/+1 |
| | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | ||||
* | starter: Remove all ties to pluto/libfreeswan. | Tobias Brunner | 2012-06-11 | 10 | -46/+25 |
| | | | | Moved some types/constants in the process. | ||||
* | starter: Use custom type for SA specific options (flags). | Tobias Brunner | 2012-06-11 | 4 | -22/+36 |
| | |||||
* | starter: Parse left|rightprotoport directly in confread.c. | Tobias Brunner | 2012-06-11 | 3 | -6/+53 |
| | |||||
* | starter: No special handling for left|rightsubnet, just pass it on as string. | Tobias Brunner | 2012-06-11 | 4 | -39/+1 |
| | |||||
* | starter: Use host_t to parse left|rightsourceip. | Tobias Brunner | 2012-06-11 | 1 | -18/+17 |
| | | | | Also for the yet unused natip option. | ||||
* | starter: Remove left|rightsubnetwithin option (charon narrows ↵ | Tobias Brunner | 2012-06-11 | 6 | -25/+0 |
| | | | | left|rightsubnet down accordingly). | ||||
* | starter: Don't resolve any addresses in starter. | Tobias Brunner | 2012-06-11 | 6 | -129/+10 |
| | | | | Also removed remains of some unknown iface option. | ||||
* | starter: Removed pfs and pfsgroup options (handled via esp option). | Tobias Brunner | 2012-06-11 | 5 | -28/+2 |
| | |||||
* | starter: Store mode of the IPsec SA/policy in a separate member. | Tobias Brunner | 2012-06-11 | 4 | -51/+32 |
| | |||||
* | starter: Use custom type to mark seen keywords. | Tobias Brunner | 2012-06-11 | 3 | -23/+27 |
| | |||||
* | starter: Remove left|rightnexthop option. | Tobias Brunner | 2012-06-11 | 6 | -26/+0 |
| | | | | Charon does this lookup dynamically. | ||||
* | starter: Replaced all usages of clone_str() with strdupnull(). | Tobias Brunner | 2012-06-11 | 3 | -19/+19 |
| | |||||
* | starter: Parse authby as string. | Tobias Brunner | 2012-06-11 | 4 | -61/+29 |
| | |||||
* | starter: Remove main parts of pluto support (invoke, whack). | Tobias Brunner | 2012-06-11 | 7 | -966/+47 |
| | |||||
* | starter: Drop support for %defaultroute. | Tobias Brunner | 2012-06-11 | 9 | -336/+14 |
| | |||||
* | starter: Migrated logging to libstrongswan. | Tobias Brunner | 2012-06-11 | 14 | -550/+285 |
| |