Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | swanctl: Fix exit codes based on errno | Martin Willi | 2014-10-10 | 12 | -19/+43 |
| | | | | | As fprintf() most likely sets errno, we should save it before printing the error message. | ||||
* | swanctl: Complete --load-creds command summary | Martin Willi | 2014-09-22 | 1 | -1/+1 |
| | |||||
* | swanctl: Fix description of load-pools command summary | Martin Willi | 2014-09-22 | 1 | -1/+1 |
| | |||||
* | swanctl: Add a --load-all command, performing --load-{creds,pools,conns} | Martin Willi | 2014-09-22 | 7 | -93/+321 |
| | |||||
* | swanctl: Add a --reload-settings command | Martin Willi | 2014-09-22 | 1 | -0/+87 |
| | |||||
* | swanctl: Add a --stats command to print daemon infos and statistics | Martin Willi | 2014-06-17 | 1 | -0/+118 |
| | |||||
* | swanctl: Support private key decryption passhprases in swanctl.conf | Martin Willi | 2014-06-17 | 1 | -19/+108 |
| | | | | | | | While there is no real security benefit of storing private keys encrypted if the passphrase is stored along with it, there still seems to be demand for this functionality. We add it for compatibility with ipsec.secrets, even if it is not really recommended. | ||||
* | Split swanctl --raw mode into single-line and --pretty mode | Andreas Steffen | 2014-06-14 | 13 | -153/+229 |
| | |||||
* | Added missing units (s = seconds) | Andreas Steffen | 2014-06-10 | 1 | -1/+1 |
| | |||||
* | swanctl: Stop logging with Ctrl+C on Windows as well | Martin Willi | 2014-06-04 | 1 | -4/+5 |
| | |||||
* | swanctl: Concatenate relative certificate paths correctly on Windows | Martin Willi | 2014-06-04 | 1 | -3/+5 |
| | |||||
* | Make sure getpass() is available | Tobias Brunner | 2014-05-29 | 1 | -1/+3 |
| | | | | It's not on Android for example. | ||||
* | enum: Return boolean result for enum_from_name() lookup | Martin Willi | 2014-05-16 | 1 | -3/+3 |
| | | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned. | ||||
* | swanctl: Properly initialize return value of --install command | Martin Willi | 2014-05-16 | 1 | -1/+1 |
| | |||||
* | swanctl: By default print local swanctl version with --version | Martin Willi | 2014-05-07 | 1 | -2/+12 |
| | | | | But add a --daemon option to query the IKE daemon for its version. | ||||
* | swanctl: Change syntax of secrets to accept identities with special chars | Martin Willi | 2014-05-07 | 1 | -40/+46 |
| | | | | | | | | | | | Having identity strings in the settings key is problematic, as the parser can't handle arbitrary characters in it. Further, the space separation makes it impossible to define identities with spaces. The new format uses key prefixes, similar to those used in local/remote auth sections of connections. The secrets section takes subsections with type prefixes, and each subsection uses "id" prefixes to define an arbitrary number of identities. | ||||
* | swanctl: List local and remote addresses in list-conns | Martin Willi | 2014-05-07 | 1 | -1/+18 |
| | |||||
* | swanctl: Add a list-pools command to summarize pool status | Martin Willi | 2014-05-07 | 1 | -0/+96 |
| | |||||
* | swanctl: Add a load-pools command to (re-)load pool configurations from file | Martin Willi | 2014-05-07 | 1 | -0/+283 |
| | |||||
* | swanctl: Encode connection "pools" as list items | Martin Willi | 2014-05-07 | 1 | -0/+1 |
| | |||||
* | swanctl: Implement a --log command to trace debugging log | Martin Willi | 2014-05-07 | 1 | -0/+96 |
| | |||||
* | swanctl: Implement a --list-certs command to print or export daemon certificates | Martin Willi | 2014-05-07 | 1 | -0/+668 |
| | |||||
* | swanctl: Be more verbose while loading connections and credentials | Martin Willi | 2014-05-07 | 2 | -2/+26 |
| | |||||
* | swanctl: Add a list-conns command to query loaded connections | Martin Willi | 2014-05-07 | 1 | -0/+219 |
| | |||||
* | swanctl: Support groups, certs and cacerts keywords | Martin Willi | 2014-05-07 | 1 | -0/+70 |
| | |||||
* | swanctl: Load shared secrets from the swanctl.conf secrets section | Martin Willi | 2014-05-07 | 1 | -1/+96 |
| | |||||
* | swanctl: Load different private keys with load-creds | Martin Willi | 2014-05-07 | 1 | -1/+183 |
| | |||||
* | swanctl: Add a command to (re-)load credentials | Martin Willi | 2014-05-07 | 1 | -0/+170 |
| | |||||
* | swanctl: Use a ./configure-able swanctl base directory | Martin Willi | 2014-05-07 | 1 | -2/+3 |
| | |||||
* | swanctl: After loading connections, unload those that are not in config anymore | Martin Willi | 2014-05-07 | 1 | -7/+114 |
| | |||||
* | swanctl: Implement a load-conn command to load connections from a file | Martin Willi | 2014-05-07 | 1 | -0/+225 |
| | |||||
* | swanctl: Implement a list-pols command to query trap/shunt policies | Martin Willi | 2014-05-07 | 1 | -0/+204 |
| | |||||
* | swanctl: Implement install/uninstall commands to manage shunt/trap policies | Martin Willi | 2014-05-07 | 1 | -0/+120 |
| | |||||
* | swanctl: Add a version command to query daemon and OS info | Martin Willi | 2014-05-07 | 1 | -0/+81 |
| | |||||
* | swanctl: Add a terminate command | Martin Willi | 2014-05-07 | 1 | -0/+153 |
| | |||||
* | swanctl: Add a subcommand to initiate connections by name | Martin Willi | 2014-05-07 | 1 | -0/+128 |
| | |||||
* | swanctl: Add a list-sas command to query active IKE_SAs | Martin Willi | 2014-05-07 | 1 | -0/+359 |