aboutsummaryrefslogtreecommitdiffstats
path: root/src/stroke
Commit message (Collapse)AuthorAgeFilesLines
* lib: Add global config namespaceTobias Brunner2014-02-121-1/+1
|
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
|
* starter: Add an 'ah' keyword for Authentication Header Security AssociationsMartin Willi2013-10-111-0/+1
|
* stroke: re-enable modeconfig keywordMartin Willi2013-09-041-0/+1
|
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-2/+3
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* stroke: Add statusall-nb as alias for statusallnbTobias Brunner2013-06-212-1/+2
|
* stroke: Add non-blocking versions of up and downTobias Brunner2013-06-213-5/+23
| | | | | | stroke up-nb and stroke down-nb do not block until the command has finished. Instead, they return right after initiating the respective operation.
* stroke: add exportconn{cert,chain} commands in addition to exportx509Martin Willi2013-06-194-1/+15
| | | | | The new commands either export a single end entity certificate or the full trust chain for a specific connection name.
* Use the GEN silent rule when generating gperf filesMartin Willi2013-05-061-0/+1
|
* android: Remove/filter header files from LOCAL_SRC_FILESTobias Brunner2013-03-201-1/+3
| | | | This avoids huge warnings when building the native code.
* Merge branch 'stroke-counters'Martin Willi2013-03-184-9/+34
|\ | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters.
| * Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-154-10/+11
| |
| * Add connection name specific stroke countersMartin Willi2013-03-154-9/+33
| |
* | Merge branch 'opaque-ports'Martin Willi2013-03-012-1/+4
|\ \ | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * | Pass complete port range over stroke interface for more flexibilityMartin Willi2013-02-212-1/+4
| |/
* / Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-0/+1
|/
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-0/+1
|
* stroke: Drop unneeded [MY|OTHER]_NETBITSReto Buerki2012-12-191-2/+2
|
* stroke: Enable install_policy in add_connection()Reto Buerki2012-12-191-0/+1
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-244-3/+8
|
* Support multiple addresses/pools in left/rightsourceipMartin Willi2012-08-301-1/+0
|
* Add a left/rightdns keyword to configure connection specific DNS attributesMartin Willi2012-08-211-0/+1
|
* Added ESP log group for libipsec log messages.Tobias Brunner2012-08-081-1/+1
|
* Add an ipsec.conf leftgroups2 parameter for the second authentication roundMartin Willi2012-07-261-0/+1
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-0/+1
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-0/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-022-7/+4
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-202-7/+4
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Dropped support of deprecated authby=eap and eap= optionsMartin Willi2012-03-202-5/+0
| | |
| | * Added a "aggressive" ipsec.conf connection optionMartin Willi2012-03-201-0/+1
| | |
| | * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-202-2/+2
| | |
| | * Pass ipsec.conf xauth_identity option via stroke to charon configurationsMartin Willi2012-03-201-0/+1
| | |
* | | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-0/+1
| | |
* | | Added stroke user-creds command, to set username/password for a connection.Tobias Brunner2012-04-174-1/+38
| | |
* | | Additional prompt keyword added to stroke.Tobias Brunner2012-04-171-1/+3
|/ /
* | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.Tobias Brunner2012-01-121-0/+2
| | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically.
* | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509).Tobias Brunner2011-12-161-1/+1
| | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels.
* | Added missing Android.mk files to distribution.Tobias Brunner2011-11-221-1/+1
|/
* Added a listplugins stroke command to show plugin featuresMartin Willi2011-10-144-1/+7
|
* Build stroke on Android.Tobias Brunner2011-10-112-1/+28
|
* getpass(3) is not supported on Android.Tobias Brunner2011-10-111-0/+4
| | | | No replacement yet.
* Removed unneeded include.Tobias Brunner2011-10-111-1/+0
| | | | This is not available on Android and redirects to <fcntl.h> on Ubuntu.
* added PTS debug classAndreas Steffen2011-09-111-1/+1
|
* Add a closeaction ipsec.conf keyword to configure close actionMartin Willi2011-06-071-0/+1
|
* stroke: Usage output updated.Tobias Brunner2011-05-161-0/+6
|
* Added a statusallnb stroke command to show status non-blockingMartin Willi2011-05-164-1/+17
|
* Added a stroke memusage command to show memory usageMartin Willi2011-05-164-0/+16
|
* Fix order of PURGE_* flags to be compatible with STROKE_PURGE_* keywordsMartin Willi2011-03-232-5/+5
|
* Added a left/rightcertpolicy keyword to specify certificatePolicy requirementsMartin Willi2011-01-071-0/+1
|
* Added a tfc ipsec.conf keyword to control Traffic Flow ConfidentialityMartin Willi2010-12-201-0/+1
|