| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | starter: Add a replay_window connection option | Martin Willi | 2014-06-17 | 6 | -0/+7 | |
| | | ||||||
| * | starter: Fix build on Android | Tobias Brunner | 2014-05-28 | 1 | -0/+1 | |
| | | | | | | While the (default) ipsec script does not work on Android starter still passes the script's name to charon if leftfirewall is configured. | |||||
| * | libhydra: Remove unused hydra->daemon | Tobias Brunner | 2014-02-12 | 1 | -1/+1 | |
| | | ||||||
| * | lib: Add global config namespace | Tobias Brunner | 2014-02-12 | 1 | -1/+1 | |
| | | ||||||
| * | android: Remove dependency on libvstr | Tobias Brunner | 2013-11-13 | 1 | -1/+0 | |
| | | ||||||
| * | ipsec_types: Add utility function to parse mark_t from strings | Tobias Brunner | 2013-10-11 | 1 | -44/+3 | |
| | | ||||||
| * | starter: Reject connections having both 'ah' and 'esp' keywords set | Martin Willi | 2013-10-11 | 1 | -0/+9 | |
| | | | | | | We currently don't support mixed proposals or bundles, so don't create the illusion we would. | |||||
| * | starter: Remove obsolete 'auth' option | Martin Willi | 2013-10-11 | 5 | -7/+0 | |
| | | ||||||
| * | starter: Add an 'ah' keyword for Authentication Header Security Associations | Martin Willi | 2013-10-11 | 5 | -0/+5 | |
| | | ||||||
| * | starter: Don't ignore keyingtries with rekey=no | Tobias Brunner | 2013-09-26 | 1 | -1/+2 | |
| | | | | | | | | Since keyingtries also affects the number of retries initially or when reestablishing an SA it should not be affected by the rekey option. Fixes #418. | |||||
| * | stroke: re-enable modeconfig keyword | Martin Willi | 2013-09-04 | 1 | -0/+1 | |
| | | ||||||
| * | starter: Properly refer to the ipsec script if it was renamed | Tobias Brunner | 2013-07-22 | 3 | -2/+3 | |
| | | ||||||
| * | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -18/+16 | |
| | | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | |||||
| * | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 1 | -1/+1 | |
| | | | | | | Multiple additional search paths can be added with the add_path() method. | |||||
| * | starter: Make ipsec.conf path configurable via command line | Tobias Brunner | 2013-06-21 | 1 | -3/+14 | |
| | | ||||||
| * | starter: ignore return value of sete[gu]id(), now having warn_unused_result | Martin Willi | 2013-06-18 | 1 | -5/+4 | |
| | | ||||||
| * | Load any type (RSA/ECDSA) of public key via left|rightsigkey | Tobias Brunner | 2013-05-07 | 2 | -5/+7 | |
| | | ||||||
| * | Use the GEN silent rule when generating gperf files | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | | ||||||
| * | android: Remove/filter header files from LOCAL_SRC_FILES | Tobias Brunner | 2013-03-20 | 1 | -1/+3 | |
| | | | | | This avoids huge warnings when building the native code. | |||||
| * | starter: Make daemon name configurable | Adrian-Ken Rueegsegger | 2013-03-19 | 4 | -35/+120 | |
| | | | | | | | | | A daemon can be specified using the '--daemon' command line parameter. This tells starter to invoke a daemon other than 'charon'. Additionally the ipsec script uses the environment variable DAEMON_NAME to tell the starter which daemon to use. | |||||
| * | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 4 | -10/+37 | |
| |\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | |||||
| | * | Optionally support port ranges in leftprotoport | Martin Willi | 2013-02-21 | 1 | -4/+20 | |
| | | | ||||||
| | * | Support %opaque keyword in leftprotoport for "opaque" ports | Martin Willi | 2013-02-21 | 1 | -0/+5 | |
| | | | ||||||
| | * | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 4 | -9/+13 | |
| | | | ||||||
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets | Martin Willi | 2013-02-06 | 5 | -3/+21 | |
| |/ | ||||||
| * | starter: Add --attach-gdb option to usage text | Adrian-Ken Rueegsegger | 2013-01-22 | 1 | -1/+2 | |
| | | ||||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 4 | -7/+18 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 6 | -0/+8 | |
| | | ||||||
| * | Remove MODP groups from default ESP proposal | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | | | | | This now actually makes pfs=no the default and it equals the default listed in ipsec.conf.5. efc69e9f preserved the default of pfs=yes. | |||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 8 | -8/+8 | |
| | | ||||||
| * | Starter ignores non-fatal errors when reloading config | Tobias Brunner | 2012-10-18 | 1 | -1/+1 | |
| | | ||||||
| * | Starter unroutes removed or changed connections before loading and routing ↵ | Tobias Brunner | 2012-10-18 | 3 | -0/+19 | |
| | | | | | new ones | |||||
| * | starter: Added --nolog option to suppress logging in starter itself | Tobias Brunner | 2012-09-12 | 1 | -2/+6 | |
| | | | | | Fixes #224. | |||||
| * | starter: Allow %any also for protocol in left|rightprotoport | Tobias Brunner | 2012-09-12 | 1 | -9/+15 | |
| | | ||||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -0/+1 | |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
| * | starter: Load config again when restarting charon | Tobias Brunner | 2012-09-05 | 1 | -0/+16 | |
| | | | | | This got lost in 041e763b. | |||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 7 | -89/+8 | |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
| | * | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 3 | -55/+0 | |
| | | | ||||||
| | * | Remove unused ipsec.conf left/rightnatip keyword | Martin Willi | 2012-08-21 | 6 | -34/+0 | |
| | | | ||||||
| | * | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 5 | -0/+8 | |
| | | | ||||||
| * | | Removed deprecated options from ipsec.conf template | Tobias Brunner | 2012-08-24 | 1 | -9/+1 | |
| |/ | ||||||
| * | starter: Restore original config in case also= is used (which reads the same ↵ | Tobias Brunner | 2012-08-16 | 1 | -20/+30 | |
| | | | | | values) | |||||
| * | Only load kernel plugins in starter when flushing SAD/SPD entries | Tobias Brunner | 2012-08-16 | 2 | -9/+8 | |
| | | | | | | | | | This avoids keeping the kernel sockets open when they are not actually needed, which could lead to resource problems (in particular with PF_KEY where all open sockets receive all messages). Fixes #217. | |||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 5 | -0/+8 | |
| | | ||||||
| * | Mask the configured mark value to ensure it is in range | Tobias Brunner | 2012-06-26 | 1 | -0/+2 | |
| | | ||||||
| * | Removed -o argument when creating .../ipsec.d with install | Tobias Brunner | 2012-06-25 | 1 | -1/+1 | |
| | | | | | This should have been removed with 2b52d5cb41. | |||||
| * | ldaphost and ldapbase ca section keywords are deprecated | Tobias Brunner | 2012-06-25 | 4 | -8/+2 | |
| | | ||||||
| * | starter: Fixed parsing of %defaultroute. | Tobias Brunner | 2012-06-15 | 1 | -6/+12 | |
| | | ||||||
| * | Print the kind of *Swan during starter startup | Martin Willi | 2012-06-14 | 1 | -1/+4 | |
| | | ||||||
| * | thanks to narrowing treat right|leftsubnetwithin as synonyms for ↵ | Andreas Steffen | 2012-06-14 | 1 | -2/+2 | |
| | | | | | right|leftsubnet | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |