aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Trigger ike_updown event caused by retransmits only after reestablish() has ↵Tobias Brunner2012-09-063-10/+5
| | | | | | | | been called This allows listeners to migrate to the new IKE_SA with the ike_reestablish event without having to worry about an ike_updown event for the old IKE_SA.
* android: Properly handle reauthentication initiated by the clientTobias Brunner2012-09-061-7/+42
|
* android: Create a new VpnService.Builder after VPN has been establishedTobias Brunner2012-09-061-9/+20
|
* Add ike_reestablish() event that is triggered when an IKE_SA is reestablishedTobias Brunner2012-09-064-0/+49
| | | | | This is particularly useful during reauthentication to get the new IKE_SA.
* Add a new condition to mark IKE_SAs that are currently being reauthenticatedTobias Brunner2012-09-062-9/+9
|
* starter: Load config again when restarting charonTobias Brunner2012-09-051-0/+16
| | | | This got lost in 041e763b.
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-055-1/+43
| | | | | Otherwise we'll end up with duplicate or invalid VIPs stored on the IKE_SA.
* In mode_config, destroy temporary pool list instead of the virtual IP list twiceMartin Willi2012-09-051-1/+1
|
* Merge branch 'android-client-cert'Tobias Brunner2012-09-0425-181/+929
|\ | | | | | | Introduces IKEv2 client certificate authentication for the Android App.
| * android: Native parts handle ikev2-cert VPN typeTobias Brunner2012-08-313-16/+71
| |
| * android: android_creds_t can provide a user's private key and certificateTobias Brunner2012-08-312-3/+89
| |
| * android: Added JNI method to retrieve user certificate and private keyTobias Brunner2012-08-313-13/+109
| | | | | | | | | | To simplify things the private key, the user certificate and the CA certificates are all put into the same list.
| * android: Don't show the password dialog if not requiredTobias Brunner2012-08-311-1/+2
| |
| * android: Enable pkcs8 pluginTobias Brunner2012-08-312-1/+3
| |
| * android: Pass the type of VPN to the native partsTobias Brunner2012-08-312-6/+10
| |
| * android: Make sure NULL jstrings are converted properlyTobias Brunner2012-08-311-5/+8
| |
| * android: Display the selected certificate alias in the profile listTobias Brunner2012-08-312-1/+29
| |
| * android: Allow configuration of a user certificateTobias Brunner2012-08-318-9/+198
| |
| * android: Remove NOT NULL constraint from username columnTobias Brunner2012-08-311-3/+27
| |
| * android: Separate view added to select certificatesTobias Brunner2012-08-313-38/+48
| |
| * android: Don't try to load the profile with ID 0Tobias Brunner2012-08-311-1/+1
| |
| * android: Spinner added to select the VPN typeTobias Brunner2012-08-319-24/+158
| |
| * android: Field added to store the type of a VPN profileTobias Brunner2012-08-272-1/+22
| |
| * android: Enum added for VPN typesTobias Brunner2012-08-271-0/+87
| |
| * android: Simplified handling of error dialog that is displayed if VpnService ↵Tobias Brunner2012-08-271-44/+24
| | | | | | | | API is not supported
| * android: LoginDialog refactored so it also works when the device is rotatedTobias Brunner2012-08-271-20/+29
| |
| * android: Added a field to store selected user certificateTobias Brunner2012-08-272-9/+27
| |
* | Merge branch 'multi-vip'Martin Willi2012-08-3169-727/+1947
|\ \ | | | | | | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers.
| * | Added a note to _updown for the new PLUTO_MY_SOURCEIP* variablesMartin Willi2012-08-301-2/+6
| | |
| * | Be less verbose if IP allocation for a single pool failsMartin Willi2012-08-301-4/+0
| | |
| * | DHCP plugin returns virtual IPs for IPv4 requests onlyMartin Willi2012-08-301-2/+2
| | |
| * | Check address family in HA virtual IP backendMartin Willi2012-08-301-0/+6
| | |
| * | Strictly enforce address family match while acquiring mem_pool IPsMartin Willi2012-08-301-3/+1
| | |
| * | Don't parse comma separated pool names in attr-sqlMartin Willi2012-08-301-77/+26
| | | | | | | | | | | | | | | We now handle multiple pools at a deeper level, making that special handling obsolete. Comma separated pools are parsed in stroke.
| * | Handle comma separated pools as multiple pool names in SQL pluginMartin Willi2012-08-301-1/+9
| | |
| * | Request and acquire multiple virtual IPs in IKEv1 Mode ConfigMartin Willi2012-08-301-47/+61
| | |
| * | Request and acquire multiple virtual IPs in IKEv2 configuration payloadMartin Willi2012-08-301-49/+67
| | |
| * | Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-309-26/+42
| | |
| * | Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-3015-100/+189
| | |
| * | Support multiple addresses/pools in left/rightsourceipMartin Willi2012-08-309-156/+189
| | |
| * | Support multiple address pools configured on a peer_cfgMartin Willi2012-08-3025-55/+151
| | |
| * | Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-3034-264/+447
| | |
| * | Add a getter for the mem_pool_t base addressMartin Willi2012-08-242-0/+14
| | |
| * | Remove unused ipsec.conf left/rightnatip keywordMartin Willi2012-08-216-34/+0
| | |
| * | Add description about DNS server variables to _updownMartin Willi2012-08-211-0/+6
| | |
| * | Add a DNS attribute handler to updown, passing servers to updown scriptMartin Willi2012-08-216-4/+377
| | |
| * | Add a stroke attribute_handler requesting DNS servers given with leftdnsMartin Willi2012-08-214-0/+307
| | |
| * | Serve ipsec.conf rightdns servers through stroke attribute providerMartin Willi2012-08-211-10/+143
| | |
| * | Add a left/rightdns keyword to configure connection specific DNS attributesMartin Willi2012-08-217-0/+11
| | |
* | | Merge branch 'eap-client-select'Tobias Brunner2012-08-3116-83/+959
|\ \ \ | | | | | | | | | | | | | | | | | | | | This brings support for EAP-Nak payloads on the client (to select a specific or supported method), and the server (via the eap-dynamic plugin which selects a method supported/requested by the client).
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-16 16:42:13 +0000