Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Implemented IPsec policies restricted to given network interface | Andreas Steffen | 2016-04-09 | 1 | -0/+3 |
| | |||||
* | Support manually-set IPsec policy priorities | Andreas Steffen | 2016-04-09 | 1 | -0/+7 |
| | |||||
* | swanctl: Fix documented directory name for remote pubkeys | Tobias Brunner | 2016-03-22 | 1 | -1/+1 |
| | |||||
* | vici: Order auth rounds by optional `round` parameter instead of by position ↵ | Tobias Brunner | 2016-03-08 | 1 | -0/+10 |
| | | | | in the request | ||||
* | swanctl: Document signature scheme constraints | Tobias Brunner | 2016-03-04 | 1 | -1/+30 |
| | |||||
* | swanctl: Fix minor typos in documentation | Chris Patterson | 2016-02-29 | 1 | -3/+3 |
| | | | | | | "UPD" should be "UDP". Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> | ||||
* | vici: Support of raw public keys | Andreas Steffen | 2016-01-09 | 1 | -10/+27 |
| | |||||
* | swanctl.conf: IKEv2 fragmentation supported | Andreas Steffen | 2016-01-09 | 1 | -8/+9 |
| | |||||
* | vici: Add option to disable policy installation for CHILD_SAs | Tobias Brunner | 2015-08-17 | 1 | -0/+6 |
| | |||||
* | vici: Certification Authority support added. | Andreas Steffen | 2015-07-21 | 1 | -0/+32 |
| | | | | | | CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section. | ||||
* | swanctl: Support loading PKCS#12 containers from a pkcs12 swanctl directory | Martin Willi | 2015-03-18 | 1 | -0/+9 |
| | |||||
* | vici: If a IKE reauth_time is configured, disable the default rekey_time | Martin Willi | 2015-03-03 | 1 | -1/+3 |
| | |||||
* | ipsec-types: Support the %unique mark value | Martin Willi | 2015-02-20 | 1 | -4/+6 |
| | |||||
* | vici: Add support for address range definitions of pools | Tobias Brunner | 2014-10-30 | 1 | -4/+4 |
| | |||||
* | swanctl: Document identity type prefixes | Martin Willi | 2014-10-30 | 1 | -3/+18 |
| | |||||
* | swanctl: Document how connections.*.unique affects initiators | Tobias Brunner | 2014-09-09 | 1 | -0/+5 |
| | |||||
* | swanctl: Fix documentation of options for send_cert setting | Tobias Brunner | 2014-07-28 | 1 | -4/+4 |
| | |||||
* | swanctl: Fix the swanctl.conf cacerts option name in the manpage and template | Martin Willi | 2014-07-14 | 1 | -1/+1 |
| | |||||
* | Fixed some typos | Tobias Brunner | 2014-06-30 | 1 | -1/+1 |
| | |||||
* | swanctl: Support private key decryption passhprases in swanctl.conf | Martin Willi | 2014-06-17 | 1 | -4/+37 |
| | | | | | | | While there is no real security benefit of storing private keys encrypted if the passphrase is stored along with it, there still seems to be demand for this functionality. We add it for compatibility with ipsec.secrets, even if it is not really recommended. | ||||
* | swanctl: Document replay_window option | Martin Willi | 2014-06-17 | 1 | -0/+7 |
| | |||||
* | swanctl: Document most swanctl.conf options in manpage | Martin Willi | 2014-05-07 | 1 | -126/+677 |
| | |||||
* | swanctl: Convert swanctl.conf to an options file and generate config | Tobias Brunner | 2014-05-07 | 1 | -0/+188 |