aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* moved assignment of CERT_UNKNOWN4.1.3Andreas Steffen2007-05-251-2/+2
|
* log trust pathlenAndreas Steffen2007-05-251-4/+6
|
* included a certificate label in the is_trusted() methodAndreas Steffen2007-05-253-10/+9
|
* DBG1 level now shows stepping up through the certifiate hierarchy up to the ↵Andreas Steffen2007-05-251-2/+2
| | | | trust anchor
* set certinfo status to CERT_UNKNOWN before crl and|or ocsp verificationAndreas Steffen2007-05-251-3/+7
|
* x509_t* argument in get_issuer() method is not constant any more because a ↵Andreas Steffen2007-05-251-1/+1
| | | | short cut to the ca might be set
* added parsing of charging and group attributesAndreas Steffen2007-05-251-14/+63
|
* version bump to 4.1.3Andreas Steffen2007-05-252-1/+5
|
* fixed man pageMartin Willi2007-05-251-1/+1
|
* updated man-page for left/rightsourceipMartin Willi2007-05-251-1/+10
|
* removed paranoid module checkingMartin Willi2007-05-252-26/+0
|
* added compatibility names (pluto) for sha2 algorithms (sha2_256, ...)Martin Willi2007-05-251-4/+11
|
* added #define LDAP_DEPRECATED in order to use old ldap_init() functionAndreas Steffen2007-05-242-0/+6
|
* removed unneeded libdes files speed.c and des_opts.cAndreas Steffen2007-05-243-951/+2
|
* defined ietfAttr_t type and its destroy functionAndreas Steffen2007-05-231-2/+26
|
* removed old FreeS/WAN cvs revision entriesAndreas Steffen2007-05-2318-1587/+0
|
* added #include <linux/types.h> required by 2.6.21 linux headersAndreas Steffen2007-05-231-138/+1
|
* proper thread cancellation when using the charon->interfacesMartin Willi2007-05-238-5/+100
|
* fixed crash when using 0.0.0.0/0 subnetsMartin Willi2007-05-231-0/+1
|
* removed misleading warning when rekeyingMartin Willi2007-05-231-1/+0
|
* support for virtual IP definition on client side:Martin Willi2007-05-226-31/+59
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* fixed memleakMartin Willi2007-05-221-0/+1
|
* using local address as gateway in installed routesMartin Willi2007-05-221-2/+1
|
* support of left|rightgroups parameterAndreas Steffen2007-05-203-31/+30
|
* fixed nextUpdate and until behaviour in the non-strict caseAndreas Steffen2007-05-191-10/+8
|
* support of CA-based ipsec policiesAndreas Steffen2007-05-189-117/+222
|
* add is_ca() methodAndreas Steffen2007-05-182-2/+21
|
* added set_ca_info() and get_ca_info() methodsAndreas Steffen2007-05-182-2/+47
|
* output of eap_type_names requires %N formatAndreas Steffen2007-05-181-1/+1
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-44/+68
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-2/+19
|
* export MAX_CA_PATH_LENAndreas Steffen2007-05-171-1/+2
|
* check self-signedness of certificate at creation timeAndreas Steffen2007-05-171-2/+26
|
* removed route_job, handled all in interface_managerMartin Willi2007-05-165-195/+0
|
* routing/unrouting through interfaceMartin Willi2007-05-164-18/+187
|
* authentication failure is handled in ike_auth.cAndreas Steffen2007-05-151-3/+5
|
* cosmeticsAndreas Steffen2007-05-151-5/+5
|
* cosmeticsAndreas Steffen2007-05-152-3/+3
|
* adapted authentication failure text to those in the authenticatorsAndreas Steffen2007-05-151-3/+3
|
* verification of locally loaded peer certificatesAndreas Steffen2007-05-151-87/+92
|
* support of multiple certificates with same peer idAndreas Steffen2007-05-153-63/+93
|
* cosmeticsAndreas Steffen2007-05-151-9/+7
|
* working dummy for NetworkManager DBUS interfaceMartin Willi2007-05-141-8/+68
| | | | | more a tech demo
* simplified capability droppingMartin Willi2007-05-099-45/+26
|
* properly implemented interface_managers initiate, terminte_[ike|child]Martin Willi2007-05-098-303/+326
| | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues
* properly ignoring signals rised by a thread which is in listening stateMartin Willi2007-05-081-11/+8
|
* changing UID/GID after startup of pluto/charonMartin Willi2007-05-0715-57/+91
| | | | added --with-uid/--with-gid configure option
* extended interface_manager (more work needed here)Martin Willi2007-05-033-3/+243
|
* allow to have listening state TRUE while sending singal ourselfMartin Willi2007-05-031-0/+7
|
* reducing capabilities of the threads to a minimumMartin Willi2007-05-0311-40/+214
| | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route