Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge branch 'stroke-counters' | Martin Willi | 2013-03-18 | 1 | -3/+10 |
|\ | | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters. | ||||
| * | Add a "resetcounters" command to ipsec, clearing global or connection counters | Martin Willi | 2013-03-15 | 1 | -1/+3 |
| | | |||||
| * | Add connection name specific stroke counters | Martin Willi | 2013-03-15 | 1 | -3/+8 |
| | | |||||
* | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -1/+2 |
|\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| * | | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 1 | -1/+2 |
| |/ | |||||
* / | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets | Martin Willi | 2013-02-06 | 1 | -0/+1 |
|/ | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+1 |
| | |||||
* | Add a "ipsec listcounters" command to stroke | Martin Willi | 2012-10-24 | 1 | -1/+3 |
| | |||||
* | Support multiple addresses/pools in left/rightsourceip | Martin Willi | 2012-08-30 | 1 | -1/+0 |
| | |||||
* | Add a left/rightdns keyword to configure connection specific DNS attributes | Martin Willi | 2012-08-21 | 1 | -0/+1 |
| | |||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 1 | -0/+1 |
| | |||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -0/+1 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -0/+1 |
| | |||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -5/+3 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 1 | -4/+0 |
| | | |||||
| * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | |||||
| * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | |||||
* | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -0/+1 |
| | | |||||
* | | Added stroke user-creds command, to set username/password for a connection. | Tobias Brunner | 2012-04-17 | 1 | -0/+9 |
|/ | |||||
* | Added a listplugins stroke command to show plugin features | Martin Willi | 2011-10-14 | 1 | -1/+3 |
| | |||||
* | Add a closeaction ipsec.conf keyword to configure close action | Martin Willi | 2011-06-07 | 1 | -0/+1 |
| | |||||
* | Added a statusallnb stroke command to show status non-blocking | Martin Willi | 2011-05-16 | 1 | -0/+2 |
| | |||||
* | Added a stroke memusage command to show memory usage | Martin Willi | 2011-05-16 | 1 | -0/+2 |
| | |||||
* | Fix order of PURGE_* flags to be compatible with STROKE_PURGE_* keywords | Martin Willi | 2011-03-23 | 1 | -4/+4 |
| | |||||
* | Added a left/rightcertpolicy keyword to specify certificatePolicy requirements | Martin Willi | 2011-01-07 | 1 | -0/+1 |
| | |||||
* | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 1 | -0/+1 |
| | |||||
* | Renamed purgex509/crl to purgecerts/crls to be consistent with list commands | Martin Willi | 2010-12-10 | 1 | -2/+2 |
| | |||||
* | Added options to flush CRLs/X509 certs from the cert cache | Martin Willi | 2010-12-10 | 1 | -0/+4 |
| | |||||
* | Added a stroke rekey command to trigger IKE/CHILD_SA rekeying manually | Martin Willi | 2010-11-03 | 1 | -1/+3 |
| | |||||
* | Added support for the ipsec.conf aaa_identity keyword | Martin Willi | 2010-08-31 | 1 | -0/+1 |
| | |||||
* | Added a stroke command to export cached x509 certificates to the console | Martin Willi | 2010-08-10 | 1 | -0/+18 |
| | |||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -1/+1 |
| | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -0/+4 |
| | |||||
* | Include reqid in stroke add connection message. | Reto Buerki | 2010-05-04 | 1 | -0/+1 |
| | |||||
* | Added left-/rightikeport ipsec.conf options to use custom IKE ports | Martin Willi | 2010-02-26 | 1 | -0/+1 |
| | |||||
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 1 | -0/+1 |
| | | | | CHILD_SAs | ||||
* | pluto now supports SQL-based virtual IP pools | Andreas Steffen | 2009-10-14 | 1 | -1/+1 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -3/+3 |
| | |||||
* | Handling of new lifetime limits added to stroke. | Tobias Brunner | 2009-09-01 | 1 | -0/+4 |
| | |||||
* | Defined some missing fixed-width int types on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+2 |
| | |||||
* | added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA | Martin Willi | 2009-05-15 | 1 | -0/+2 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -0/+7 |
| | |||||
* | list assigned leases using "ipsec leases" | Martin Willi | 2008-12-10 | 1 | -1/+9 |
| | |||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -0/+3 |
| | |||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 1 | -11/+13 |
| | |||||
* | crypto_factory algorithm enumeration API | Martin Willi | 2008-08-28 | 1 | -1/+3 |
| | | | | implementation of "ipsec listalgs" | ||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -0/+1 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones |