aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
* Implemented support for multiple RADIUS serversMartin Willi2010-07-2110-423/+911
* Migrated eap-radius plugin to INIT/METHOD macrosMartin Willi2010-07-214-142/+105
* Added log statement if peer requests EAP, but current config does not allow itMartin Willi2010-07-211-0/+1
* documented the new PLUTO environment variables available in the updown scriptAndreas Steffen2010-07-172-4/+25
* in a ESP_IN_UDP situation make UDP port available in the updown scriptAndreas Steffen2010-07-171-1/+23
* make xfrm marks available in the updown scriptsAndreas Steffen2010-07-171-1/+44
* check for mark changes in ipsec updateAndreas Steffen2010-07-171-0/+4
* Warn about manual plugin load directives for pluto/charon with --disable-load...Andreas Steffen2010-07-152-0/+20
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
* Remove plugin load directives from default strongswan.confMartin Willi2010-07-131-9/+6
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
* Added support for Certificate, CRL and PKCS10 encoding to PEM pluginMartin Willi2010-07-131-0/+19
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-1327-102/+239
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential en...Martin Willi2010-07-1353-353/+352
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-1310-9/+9
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-135-61/+216
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-134-5/+123
* Moved bus_t to METHOD/INIT macrosMartin Willi2010-07-131-108/+69
* Moved addrblock plugin to libcharonMartin Willi2010-07-137-9/+11
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-137-531/+757
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-139-59/+303
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
* Moved credential manager to libstrongswanMartin Willi2010-07-1348-205/+191
* Move pathlen constraint checking to X509 specific checksMartin Willi2010-07-131-17/+18
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-133-5/+11
* Combined the OCSP/CRL options to a signle Online check optionMartin Willi2010-07-131-23/+14
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
* we need some orderingAndreas Steffen2010-07-121-1/+3
* changed ordering of statusattr outputAndreas Steffen2010-07-121-8/+6
* fixed alignment of captionAndreas Steffen2010-07-121-2/+2
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-122-1/+29
* output identities correctlyAndreas Steffen2010-07-121-7/+11
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
* Group membership constraint is fulfilled if subject is member in one of the g...Martin Willi2010-07-092-8/+20
* Added support for named attribute groupsHeiko Hund2010-07-0911-93/+360
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-092-1/+14
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-0917-55/+108
* The file logger supports a time prefix using a strftime() format specifierMartin Willi2010-07-083-9/+36
* Print identity to a lease address on the same line for simpler grepingMartin Willi2010-07-081-1/+1
* Implemented missing bypass_socket() method in load-testers faked kernel inter...Martin Willi2010-07-071-0/+7
* added req parameter to ipsec.conf man pageAndreas Steffen2010-07-061-0/+3
* Show mallinfo() data in statusall, if availableMartin Willi2010-07-061-1/+12