Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | swanctl: Load pubkeys with load-creds | Andreas Steffen | 2016-01-09 | 1 | -0/+1 |
| | |||||
* | vici: list-cert sends subject, not-before and not-after attributes for pubkeys | Andreas Steffen | 2016-01-09 | 1 | -5/+36 |
| | |||||
* | vici: Support of raw public keys | Andreas Steffen | 2016-01-09 | 2 | -11/+35 |
| | |||||
* | swanctl.conf: IKEv2 fragmentation supported | Andreas Steffen | 2016-01-09 | 1 | -8/+9 |
| | |||||
* | swanctl: Slightly change usage summary for --list-certs | Tobias Brunner | 2015-12-16 | 1 | -4/+3 |
| | |||||
* | swanctl: Never print more than MAX_LINES of usage summary | Tobias Brunner | 2015-12-16 | 1 | -1/+10 |
| | | | | Print a warning if a registered command exceeds that limit. | ||||
* | swanctl --stats lists loaded plugins | Andreas Steffen | 2015-12-13 | 1 | -0/+12 |
| | |||||
* | Refactored certificate management for the vici and stroke interfaces5.4.0dr1 | Andreas Steffen | 2015-12-12 | 3 | -59/+61 |
| | |||||
* | Removed VICI protocol versioning | Andreas Steffen | 2015-12-11 | 1 | -14/+7 |
| | |||||
* | Use of certificate_printer by swanctl --list-certs command | Andreas Steffen | 2015-12-11 | 2 | -496/+25 |
| | |||||
* | Share vici_cert_info.c with vici_cred.c | Andreas Steffen | 2015-12-11 | 3 | -6/+38 |
| | |||||
* | Use VICI 2.0 protocol version for certificate queries | Andreas Steffen | 2015-12-11 | 2 | -80/+124 |
| | |||||
* | swanctl: Explicitly link against -lpthread and -ldl if required | Martin Willi | 2015-12-04 | 1 | -1/+2 |
| | | | | | We already do this for charon, as some toolchains require an explicit link even if libstrongswan already depends on it. | ||||
* | swanctl: Add --list-algs command to query loaded algorithms | Tobias Brunner | 2015-11-30 | 4 | -2/+110 |
| | |||||
* | swanctl: Add option to query leases with --get-pools | Tobias Brunner | 2015-11-10 | 1 | -3/+29 |
| | |||||
* | swanctl: List virtual IPs in --list-sas | Tobias Brunner | 2015-11-10 | 1 | -1/+11 |
| | |||||
* | swanctl: Correctly build man page in out-of-tree builds from the repository | Tobias Brunner | 2015-08-27 | 1 | -1/+1 |
| | |||||
* | vici: Add option to disable policy installation for CHILD_SAs | Tobias Brunner | 2015-08-17 | 1 | -0/+6 |
| | |||||
* | Improved legibility of swanctl CRL listings5.3.3dr1 | Andreas Steffen | 2015-07-22 | 1 | -1/+4 |
| | |||||
* | vici: Certification Authority support added. | Andreas Steffen | 2015-07-21 | 9 | -4/+610 |
| | | | | | | CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section. | ||||
* | swanctl: Fix --uri option | Martin Willi | 2015-05-05 | 1 | -9/+36 |
| | | | | | | | As we now pass the vici connection to the command dispatcher callback, we can't parse the --uri option to create the connection from the same callback. Instead pre-process the common command options in a separate loop, and ignore the same options while processing the actual command. | ||||
* | swanctl: Implement monitoring of IKE_SA and CHILD_SA changes | Timo Teräs | 2015-05-04 | 2 | -2/+84 |
| | | | | Signed-off-by: Timo Teräs <timo.teras@iki.fi> | ||||
* | swanctl: Add missing unit in install-time log | Romain Francoise | 2015-05-04 | 1 | -1/+1 |
| | |||||
* | swanctl: Append /ESN to proposal for a CHILD_SA using Extended Sequence Numbers | Martin Willi | 2015-03-23 | 1 | -1/+1 |
| | | | | | | | We previously printed just the value for the "esn" keyword, which is "1", and not helpful as such. Fixes #904. | ||||
* | vici: Return authentication rounds with unique names | Martin Willi | 2015-03-18 | 1 | -2/+3 |
| | | | | | | To simplify handling of authentication rounds in dictionaries/hashtables on the client side, we assign unique names to each authentication round when listing connection. | ||||
* | swanctl: Cache entered PKCS#12 decryption secret | Martin Willi | 2015-03-18 | 1 | -6/+23 |
| | | | | | It is usually used more than once, but most likely the same for decryption and MAC verification. | ||||
* | swanctl: Support loading PKCS#12 containers from a pkcs12 swanctl directory | Martin Willi | 2015-03-18 | 4 | -0/+128 |
| | |||||
* | swanctl: Generalize private key decryption to support other credential types | Martin Willi | 2015-03-18 | 1 | -55/+97 |
| | |||||
* | vici: If a IKE reauth_time is configured, disable the default rekey_time | Martin Willi | 2015-03-03 | 1 | -1/+3 |
| | |||||
* | ipsec-types: Support the %unique mark value | Martin Willi | 2015-02-20 | 1 | -4/+6 |
| | |||||
* | swanctl: List CHILD_SA unique ID as the primary identifier, but print reqid, too | Martin Willi | 2015-02-20 | 1 | -2/+2 |
| | |||||
* | swanctl: Fail loading a connection if loading a cacert constraint fails | Martin Willi | 2014-12-12 | 1 | -10/+37 |
| | |||||
* | vici: Add support for address range definitions of pools | Tobias Brunner | 2014-10-30 | 1 | -4/+4 |
| | |||||
* | swanctl: Document identity type prefixes | Martin Willi | 2014-10-30 | 1 | -3/+18 |
| | |||||
* | swanctl: Fix man page build on FreeBSD | Tobias Brunner | 2014-10-14 | 1 | -1/+1 |
| | | | | | BSD make seems to only evaluate $< for certain rules (like the suffix rule used to generate the config template). | ||||
* | swanctl: Fix exit codes based on errno | Martin Willi | 2014-10-10 | 13 | -20/+45 |
| | | | | | As fprintf() most likely sets errno, we should save it before printing the error message. | ||||
* | Don't fail to install if sysconfdir isn't writable | Shea Levy | 2014-09-26 | 1 | -1/+1 |
| | |||||
* | swanctl: Complete --load-creds command summary | Martin Willi | 2014-09-22 | 1 | -1/+1 |
| | |||||
* | swanctl: Fix description of load-pools command summary | Martin Willi | 2014-09-22 | 1 | -1/+1 |
| | |||||
* | swanctl: Add a --load-all command, performing --load-{creds,pools,conns} | Martin Willi | 2014-09-22 | 10 | -97/+329 |
| | |||||
* | swanctl: Add a --reload-settings command | Martin Willi | 2014-09-22 | 5 | -2/+93 |
| | |||||
* | swanctl: Document --stats command | Tobias Brunner | 2014-09-19 | 1 | -0/+3 |
| | |||||
* | swanctl: Document how connections.*.unique affects initiators | Tobias Brunner | 2014-09-09 | 1 | -0/+5 |
| | |||||
* | swanctl: Fix documentation of options for send_cert setting | Tobias Brunner | 2014-07-28 | 1 | -4/+4 |
| | |||||
* | swanctl: Fix the swanctl.conf cacerts option name in the manpage and template | Martin Willi | 2014-07-14 | 1 | -1/+1 |
| | |||||
* | swanctl: Fix Doxygen group assignment | Tobias Brunner | 2014-06-30 | 1 | -1/+1 |
| | |||||
* | Fixed some typos | Tobias Brunner | 2014-06-30 | 1 | -1/+1 |
| | |||||
* | swanctl: Add a --stats command to print daemon infos and statistics | Martin Willi | 2014-06-17 | 3 | -1/+120 |
| | |||||
* | swanctl: Support private key decryption passhprases in swanctl.conf | Martin Willi | 2014-06-17 | 2 | -23/+145 |
| | | | | | | | While there is no real security benefit of storing private keys encrypted if the passphrase is stored along with it, there still seems to be demand for this functionality. We add it for compatibility with ipsec.secrets, even if it is not really recommended. | ||||
* | swanctl: Document replay_window option | Martin Willi | 2014-06-17 | 1 | -0/+7 |
| |