Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | ported mconsole-exec patch to 2.6.27-rc7 | Martin Willi | 2008-10-07 | 1 | -0/+335 | |
| | ||||||
* | userland support to process notifies for new NAT mappings detected in UDP ↵ | Martin Willi | 2008-10-07 | 6 | -12/+237 | |
| | | | | encapsulation | |||||
* | use MOBIKE enabled DPD if we are NATed | Martin Willi | 2008-10-06 | 6 | -4/+113 | |
| | | | | update SAs if we detect changes in NAT mappings | |||||
* | fixed builder_cancel macro to return NULL on failed build | Martin Willi | 2008-10-06 | 2 | -1/+15 | |
| | ||||||
* | do not run CHILD_SA delete action if rekeying | Martin Willi | 2008-10-03 | 1 | -1/+13 | |
| | ||||||
* | added --disable-kernel-netlink configure option | Andreas Steffen | 2008-10-03 | 1 | -2/+2 | |
| | ||||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 | |
| | ||||||
* | also respect the mobike=no setting as responder | Martin Willi | 2008-09-30 | 2 | -4/+15 | |
| | ||||||
* | using signed return value for read() | Martin Willi | 2008-09-30 | 1 | -1/+2 | |
| | ||||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 15 | -67/+87 | |
| | ||||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 20 | -2994/+4293 | |
| | ||||||
* | version bump to 4.2.8 | Andreas Steffen | 2008-09-18 | 2 | -1/+3 | |
| | ||||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 | |
| | ||||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 4 | -8/+32 | |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | |||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 4 | -12/+74 | |
| | ||||||
* | ported NM plugin to upstream NetworkManager changes | Martin Willi | 2008-09-12 | 3 | -22/+55 | |
| | | | | | splitted secrets (4031) using uuid in auth-dialog (4053) | |||||
* | allow multiple DELETE payloads in an informational message | Martin Willi | 2008-09-11 | 1 | -2/+7 | |
| | ||||||
* | NM plugin supports (encrypted) private key files | Martin Willi | 2008-09-05 | 4 | -89/+210 | |
| | ||||||
* | time values in strongswan.conf can be optionally specified in days (d), ↵ | Andreas Steffen | 2008-09-04 | 7 | -13/+57 | |
| | | | | hours (h), minutes (m), or seconds (s) | |||||
* | fixed some translations/encoding | Martin Willi | 2008-09-04 | 1 | -51/+52 | |
| | ||||||
* | an initial German translation for NM plugin | Martin Willi | 2008-09-04 | 3 | -2/+117 | |
| | ||||||
* | reduced nm verbosity | Martin Willi | 2008-09-04 | 1 | -1/+1 | |
| | ||||||
* | implemented NetworkManager certificate/private key authentication using ↵ | Martin Willi | 2008-09-04 | 8 | -161/+447 | |
| | | | | ssh-agent | |||||
* | added a configure option to select charon binary | Martin Willi | 2008-09-04 | 3 | -2/+10 | |
| | ||||||
* | agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵ | Martin Willi | 2008-09-04 | 1 | -18/+68 | |
| | | | | private key from the agent | |||||
* | charon.keep_alive = 0 disables the sending of NAT keep alives | Andreas Steffen | 2008-09-03 | 1 | -1/+1 | |
| | ||||||
* | configure NAT keep alive interval using the charon.keep_alive key | Andreas Steffen | 2008-09-03 | 1 | -2/+9 | |
| | ||||||
* | typos | Tobias Brunner | 2008-09-03 | 1 | -6/+5 | |
| | ||||||
* | handle INFORMATIONAL exchanges with NATD payloads in mobike task | Martin Willi | 2008-09-02 | 1 | -0/+2 | |
| | ||||||
* | libstrongswan agent plugin to use ssh-agent for RSA signatures | Martin Willi | 2008-09-02 | 6 | -0/+710 | |
| | ||||||
* | ported openac to credential factory changes | Martin Willi | 2008-09-02 | 1 | -3/+5 | |
| | ||||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 29 | -367/+428 | |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | |||||
* | OIDs used by strongSwan | Andreas Steffen | 2008-09-01 | 1 | -1/+1 | |
| | ||||||
* | use libcap for capability dropping | Martin Willi | 2008-08-29 | 5 | -50/+53 | |
| | | | | | optional, must be enabled --with-capabilities=libcap will be extended to support --with-capabilities=libcap2 | |||||
* | streamlined ipsec listalgs output | Andreas Steffen | 2008-08-29 | 1 | -2/+3 | |
| | ||||||
* | capability API to allow plugin-controlled capability set | Martin Willi | 2008-08-28 | 6 | -35/+51 | |
| | ||||||
* | cosmetics | Martin Willi | 2008-08-28 | 1 | -3/+3 | |
| | ||||||
* | creating default IKE proposals dynamically using algorithm enumeration API | Martin Willi | 2008-08-28 | 5 | -53/+138 | |
| | ||||||
* | separated sha1_prf implementation from sha1_hasher | Martin Willi | 2008-08-28 | 6 | -133/+208 | |
| | ||||||
* | crypto_factory algorithm enumeration API | Martin Willi | 2008-08-28 | 8 | -102/+294 | |
| | | | | implementation of "ipsec listalgs" | |||||
* | * allow to load templates from arbitrary places | Tobias Brunner | 2008-08-28 | 4 | -48/+19 | |
| | | | | * changed implementation of guest?/iface? | |||||
* | mkdir_p: utility function to create a directory and all required parent ↵ | Tobias Brunner | 2008-08-28 | 2 | -0/+61 | |
| | | | | directories | |||||
* | check user account validity after PAM authentication | Martin Willi | 2008-08-27 | 1 | -1/+10 | |
| | ||||||
* | version bump to 4.2.7 | Andreas Steffen | 2008-08-27 | 2 | -1/+3 | |
| | ||||||
* | * guest#running? | Tobias Brunner | 2008-08-27 | 5 | -12/+139 | |
| | | | | | | * guest?, iface? (also Guest.include? resp. guest.include?) * easy accessors for guests and ifaces (Guest.sun instead of Guest["sun"] and guest.eth0 instead of guest["eth0"]) * if a block is given for iface#add or iface#del then the change is only temporary while executing the block and gets reverted afterwards | |||||
* | cosmetics | Andreas Steffen | 2008-08-26 | 1 | -1/+1 | |
| | ||||||
* | ipsec statusall lists eap_type and eap_identity | Andreas Steffen | 2008-08-26 | 1 | -1/+19 | |
| | ||||||
* | using strongSwan, not NetworkManager version number | Martin Willi | 2008-08-26 | 2 | -1/+1 | |
| | ||||||
* | fixing charon path for now for ubuntu package | Martin Willi | 2008-08-26 | 1 | -1/+1 | |
| | ||||||
* | completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes | Andreas Steffen | 2008-08-26 | 4 | -23/+87 | |
| |