aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
|
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
|
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
|
* Implemented support for multiple RADIUS serversMartin Willi2010-07-2110-423/+911
|
* Migrated eap-radius plugin to INIT/METHOD macrosMartin Willi2010-07-214-142/+105
|
* Added log statement if peer requests EAP, but current config does not allow itMartin Willi2010-07-211-0/+1
|
* documented the new PLUTO environment variables available in the updown scriptAndreas Steffen2010-07-172-4/+25
|
* in a ESP_IN_UDP situation make UDP port available in the updown scriptAndreas Steffen2010-07-171-1/+23
|
* make xfrm marks available in the updown scriptsAndreas Steffen2010-07-171-1/+44
|
* check for mark changes in ipsec updateAndreas Steffen2010-07-171-0/+4
|
* Warn about manual plugin load directives for pluto/charon with ↵Andreas Steffen2010-07-152-0/+20
| | | | --disable-load-warning compile option
* Revert "Warn about manual plugin load directives for pluto/charon"Martin Willi2010-07-141-11/+0
| | | | This reverts commit 5c46726d0d91db5b1fc4ea53326e73443133f22d.
* Warn about manual plugin load directives for pluto/charonMartin Willi2010-07-131-0/+11
|
* Remove plugin load directives from default strongswan.confMartin Willi2010-07-131-9/+6
|
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
|
* Added support for Certificate, CRL and PKCS10 encoding to PEM pluginMartin Willi2010-07-131-0/+19
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-1327-102/+239
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-1353-353/+352
| | | | encoding
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-1310-9/+9
|
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
|
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-135-61/+216
|
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-134-5/+123
|
* Moved bus_t to METHOD/INIT macrosMartin Willi2010-07-131-108/+69
|
* Moved addrblock plugin to libcharonMartin Willi2010-07-137-9/+11
|
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-137-531/+757
|
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
|
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-139-59/+303
|
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
|
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
|
* Moved credential manager to libstrongswanMartin Willi2010-07-1348-205/+191
|
* Move pathlen constraint checking to X509 specific checksMartin Willi2010-07-131-17/+18
|
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-133-5/+11
|
* Combined the OCSP/CRL options to a signle Online check optionMartin Willi2010-07-131-23/+14
|
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
|
* we need some orderingAndreas Steffen2010-07-121-1/+3
|
* changed ordering of statusattr outputAndreas Steffen2010-07-121-8/+6
|
* fixed alignment of captionAndreas Steffen2010-07-121-2/+2
|
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-122-1/+29
|
* output identities correctlyAndreas Steffen2010-07-121-7/+11
|
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
|
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
|
* Group membership constraint is fulfilled if subject is member in one of the ↵Martin Willi2010-07-092-8/+20
| | | | groups
* Added support for named attribute groupsHeiko Hund2010-07-0911-93/+360
| | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-092-1/+14
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-0917-55/+108
|
* The file logger supports a time prefix using a strftime() format specifierMartin Willi2010-07-083-9/+36
|
* Print identity to a lease address on the same line for simpler grepingMartin Willi2010-07-081-1/+1
|
* Implemented missing bypass_socket() method in load-testers faked kernel ↵Martin Willi2010-07-071-0/+7
| | | | interface
* added req parameter to ipsec.conf man pageAndreas Steffen2010-07-061-0/+3
|
* Show mallinfo() data in statusall, if availableMartin Willi2010-07-061-1/+12
|