aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* The va_list trick does not seem to be portable, revert dots-in-section fix4.4.1Martin Willi2010-07-301-58/+22
| | | | This reverts commit 8f50d06c354cd31fc295afc5598afff4096b5e77.
* Fix segfault on 'ipsec stroke up ]' commandThomas Egerer2010-07-291-0/+5
|
* Fixed settings lookup if the section/key contains dotsMartin Willi2010-07-291-22/+58
|
* Fix use of snprintf() in pluto subjectAltName enumerationMartin Willi2010-07-281-0/+4
|
* Fix use of snprintf() in IETF attributes to string conversionMartin Willi2010-07-281-2/+11
|
* Fix use of snprintf() in identification DN to ASCII conversionMartin Willi2010-07-281-0/+12
|
* Implemented a HA enabled in-memory address poolMartin Willi2010-07-286-4/+468
|
* Added a function to segmentate a generic integerMartin Willi2010-07-282-18/+48
|
* Reserving does not work, as our pools do not support acquiring arbitrary ↵Martin Willi2010-07-271-30/+0
| | | | | | addresses This reverts commit d1384080b3ba74f366eaf8b5f027babca3f5d607.
* Mem pool does not support multiple leases for an identityMartin Willi2010-07-271-2/+11
|
* Flush any remaining cache state if an IKE_SA goes downMartin Willi2010-07-271-2/+2
|
* Synchronize EAP-Identity of remote peerMartin Willi2010-07-264-0/+16
|
* Reserve virtual IP of passive IKE_SAs in the local poolMartin Willi2010-07-261-0/+30
|
* Added strongswan.conf options for HA heartbeatMartin Willi2010-07-261-4/+20
|
* Log CHILD_SA segment responsibilityMartin Willi2010-07-269-18/+95
|
* Pass initiator parameter to distinguish between original and exchange initiatorMartin Willi2010-07-264-1/+8
|
* Pass the CREATE_CHILD_SA initiator flag to the child_keys parameterMartin Willi2010-07-265-9/+12
|
* Use a sync message cache to resynchronize IKE_SAs without rekeyingMartin Willi2010-07-2616-169/+594
|
* Log received HA message typesMartin Willi2010-07-261-3/+9
|
* Add enum names for HA message typesMartin Willi2010-07-262-0/+19
|
* Delay resynchronization request until starter has loaded the configurationsMartin Willi2010-07-261-2/+4
|
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
|
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
|
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
|
* Implemented support for multiple RADIUS serversMartin Willi2010-07-2110-423/+911
|
* Migrated eap-radius plugin to INIT/METHOD macrosMartin Willi2010-07-214-142/+105
|
* Added log statement if peer requests EAP, but current config does not allow itMartin Willi2010-07-211-0/+1
|
* documented the new PLUTO environment variables available in the updown scriptAndreas Steffen2010-07-172-4/+25
|
* in a ESP_IN_UDP situation make UDP port available in the updown scriptAndreas Steffen2010-07-171-1/+23
|
* make xfrm marks available in the updown scriptsAndreas Steffen2010-07-171-1/+44
|
* check for mark changes in ipsec updateAndreas Steffen2010-07-171-0/+4
|
* Warn about manual plugin load directives for pluto/charon with ↵Andreas Steffen2010-07-152-0/+20
| | | | --disable-load-warning compile option
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
| | | | This reverts commit 5c46726d0d91db5b1fc4ea53326e73443133f22d.
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
|
* Remove plugin load directives from default strongswan.confMartin Willi2010-07-131-9/+6
|
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
|
* Added support for Certificate, CRL and PKCS10 encoding to PEM pluginMartin Willi2010-07-131-0/+19
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-1327-102/+239
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-1353-353/+352
| | | | encoding
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-1310-9/+9
|
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
|
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-135-61/+216
|
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-134-5/+123
|
* Moved bus_t to METHOD/INIT macrosMartin Willi2010-07-131-108/+69
|
* Moved addrblock plugin to libcharonMartin Willi2010-07-137-9/+11
|
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-137-531/+757
|
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
|
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-139-59/+303
|
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
|
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
|