Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵ | Martin Willi | 2010-01-27 | 1 | -0/+1 |
| | | | | CHILD_SAs | ||||
* | pluto now supports SQL-based virtual IP pools | Andreas Steffen | 2009-10-14 | 1 | -1/+1 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 2 | -31/+31 |
| | |||||
* | Handling of new lifetime limits added to stroke. | Tobias Brunner | 2009-09-01 | 1 | -0/+4 |
| | |||||
* | added support for %prompt-ing private key passhprases in strokes "ipsec secrets" | Martin Willi | 2009-08-26 | 1 | -1/+11 |
| | |||||
* | OpenSolaris needs libsocket and libnsl for socket(). | Tobias Brunner | 2009-08-14 | 1 | -0/+1 |
| | |||||
* | Defined some missing fixed-width int types on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+2 |
| | |||||
* | Revert "gperf under FreeBSD does not know the -m option." | Tobias Brunner | 2009-07-16 | 1 | -1/+1 |
| | | | | This reverts commit 0ead254919c66a1b6a9e39b175f0b92f2a076c12. | ||||
* | gperf under FreeBSD does not know the -m option. | Tobias Brunner | 2009-07-14 | 1 | -1/+1 |
| | | | | We could use AC_PATH_PROGS_FEATURE_CHECK (added in Autoconf 2.62) to check for this option. | ||||
* | optimized gperf | Andreas Steffen | 2009-05-15 | 1 | -1/+1 |
| | |||||
* | added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA | Martin Willi | 2009-05-15 | 4 | -1/+9 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 4 | -8/+0 |
| | |||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 2 | -3/+8 |
| | | | | | important change for developers: %Y replaces %D to print identities! | ||||
* | added .gitignore files, ready for the switch | Martin Willi | 2009-04-30 | 1 | -0/+1 |
| | |||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 1 | -0/+7 |
| | |||||
* | list assigned leases using "ipsec leases" | Martin Willi | 2008-12-10 | 4 | -4/+32 |
| | |||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -0/+3 |
| | |||||
* | merging kernel_pfkey plugin back from kernel-interface branch | Tobias Brunner | 2008-10-14 | 1 | -1/+1 |
| | |||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 4 | -12/+18 |
| | |||||
* | crypto_factory algorithm enumeration API | Martin Willi | 2008-08-28 | 4 | -1/+9 |
| | | | | implementation of "ipsec listalgs" | ||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -0/+1 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP | Andreas Steffen | 2008-07-01 | 3 | -4/+4 |
| | |||||
* | added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵ | Martin Willi | 2008-07-01 | 4 | -0/+31 |
| | | | | remote virtual ip | ||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -0/+1 |
| | |||||
* | supporting multiple comma seperated subnets in left/rightsubnet definition | Martin Willi | 2008-04-25 | 2 | -12/+6 |
| | | | | | e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16 | ||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -0/+1 |
| | |||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 1 | -0/+7 |
| | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 1 | -0/+1 |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | ||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 2 | -35/+2 |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | ||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 2 | -4/+4 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 3 | -7/+19 |
| | |||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -1/+2 |
| | |||||
* | added RCSID | Andreas Steffen | 2007-10-08 | 4 | -2/+6 |
| | |||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 2 | -1/+12 |
| | |||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 2 | -0/+2 |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls | ||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 2 | -0/+2 |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | ||||
* | added ↵ | Andreas Steffen | 2007-08-10 | 1 | -0/+6 |
| | | | | listaacerts,listacerts,rereadsecerts,rereadocspcerts,rereadaacerts,rereadacerts to stroke | ||||
* | fixed typo stroke keyword list | Andreas Steffen | 2007-08-10 | 1 | -1/+1 |
| | |||||
* | set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS | Andreas Steffen | 2007-08-10 | 1 | -4/+9 |
| | |||||
* | set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS | Andreas Steffen | 2007-08-10 | 1 | -1/+1 |
| | |||||
* | added rereadsecrets keyword to stroke | Andreas Steffen | 2007-08-10 | 2 | -0/+2 |
| | |||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 1 | -6/+8 |
| | |||||
* | support of left|rightgroups parameter | Andreas Steffen | 2007-05-20 | 1 | -0/+1 |
| | |||||
* | added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts ↵ | Andreas Steffen | 2007-04-14 | 4 | -6/+31 |
| | | | | keywords | ||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 2 | -0/+3 |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | ||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 2 | -0/+6 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -0/+1 |
| | |||||
* | added support of ca information records and ocsp keywords | Andreas Steffen | 2007-02-14 | 4 | -30/+107 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 2 | -0/+3 |
| | | | | | includes a lot of other modifications |