aboutsummaryrefslogtreecommitdiffstats
path: root/src/stroke/stroke_msg.h
Commit message (Collapse)AuthorAgeFilesLines
* stroke: Make 96-bit truncation for SHA-256 configurableTobias Brunner2017-05-261-0/+1
|
* Use standard unsigned integer typesAndreas Steffen2016-03-241-16/+16
|
* stroke: Dynamically resize stroke messagesTobias Brunner2015-05-221-9/+9
| | | | | | | The maximum size of a stroke message is currently 64k due to the 2 byte length field. Fixes #943.
* stroke: Double the stroke message string buffer sizeMartin Willi2015-02-061-1/+1
|
* starter: Add a replay_window connection optionMartin Willi2014-06-171-0/+1
|
* starter: Add an 'ah' keyword for Authentication Header Security AssociationsMartin Willi2013-10-111-0/+1
|
* stroke: re-enable modeconfig keywordMartin Willi2013-09-041-0/+1
|
* stroke: add exportconn{cert,chain} commands in addition to exportx509Martin Willi2013-06-191-0/+4
| | | | | The new commands either export a single end entity certificate or the full trust chain for a specific connection name.
* Merge branch 'stroke-counters'Martin Willi2013-03-181-3/+10
|\ | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters.
| * Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-151-1/+3
| |
| * Add connection name specific stroke countersMartin Willi2013-03-151-3/+8
| |
* | Merge branch 'opaque-ports'Martin Willi2013-03-011-1/+2
|\ \ | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * | Pass complete port range over stroke interface for more flexibilityMartin Willi2013-02-211-1/+2
| |/
* / Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-0/+1
|/
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-0/+1
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-241-1/+3
|
* Support multiple addresses/pools in left/rightsourceipMartin Willi2012-08-301-1/+0
|
* Add a left/rightdns keyword to configure connection specific DNS attributesMartin Willi2012-08-211-0/+1
|
* Add an ipsec.conf leftgroups2 parameter for the second authentication roundMartin Willi2012-07-261-0/+1
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-0/+1
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-0/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-021-5/+3
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Dropped support of deprecated authby=eap and eap= optionsMartin Willi2012-03-201-4/+0
| |
| * Added a "aggressive" ipsec.conf connection optionMartin Willi2012-03-201-0/+1
| |
| * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-201-1/+1
| |
| * Pass ipsec.conf xauth_identity option via stroke to charon configurationsMartin Willi2012-03-201-0/+1
| |
* | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-0/+1
| |
* | Added stroke user-creds command, to set username/password for a connection.Tobias Brunner2012-04-171-0/+9
|/
* Added a listplugins stroke command to show plugin featuresMartin Willi2011-10-141-1/+3
|
* Add a closeaction ipsec.conf keyword to configure close actionMartin Willi2011-06-071-0/+1
|
* Added a statusallnb stroke command to show status non-blockingMartin Willi2011-05-161-0/+2
|
* Added a stroke memusage command to show memory usageMartin Willi2011-05-161-0/+2
|
* Fix order of PURGE_* flags to be compatible with STROKE_PURGE_* keywordsMartin Willi2011-03-231-4/+4
|
* Added a left/rightcertpolicy keyword to specify certificatePolicy requirementsMartin Willi2011-01-071-0/+1
|
* Added a tfc ipsec.conf keyword to control Traffic Flow ConfidentialityMartin Willi2010-12-201-0/+1
|
* Renamed purgex509/crl to purgecerts/crls to be consistent with list commandsMartin Willi2010-12-101-2/+2
|
* Added options to flush CRLs/X509 certs from the cert cacheMartin Willi2010-12-101-0/+4
|
* Added a stroke rekey command to trigger IKE/CHILD_SA rekeying manuallyMartin Willi2010-11-031-1/+3
|
* Added support for the ipsec.conf aaa_identity keywordMartin Willi2010-08-311-0/+1
|
* Added a stroke command to export cached x509 certificates to the consoleMartin Willi2010-08-101-0/+18
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-1/+1
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-0/+4
|
* Include reqid in stroke add connection message.Reto Buerki2010-05-041-0/+1
|
* Added left-/rightikeport ipsec.conf options to use custom IKE portsMartin Willi2010-02-261-0/+1
|
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-271-0/+1
| | | | CHILD_SAs
* pluto now supports SQL-based virtual IP poolsAndreas Steffen2009-10-141-1/+1
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-3/+3
|
* Handling of new lifetime limits added to stroke.Tobias Brunner2009-09-011-0/+4
|
* Defined some missing fixed-width int types on OpenSolaris.Tobias Brunner2009-08-141-0/+2
|
* added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SAMartin Willi2009-05-151-0/+2
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-09 19:52:24 +0000