Tobias Brunner
013698d51e
pluto: Migrated get_sa_info to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
95898bcc56
pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
3ecf66c9e3
pluto: Adapted sag_eroute to the new signature of eroute_connection.
2010-09-02 19:04:20 +02:00
Tobias Brunner
952487d689
pluto: Migrated raw_eroute to libhydra's kernel interface.
...
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
2010-09-02 19:04:20 +02:00
Tobias Brunner
deea15f04e
pluto: Added a function to create a traffic_selector_t from an ip_subnet.
2010-09-02 19:04:20 +02:00
Tobias Brunner
230aa11fb4
pluto: Migrated update_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
1ad497c78f
pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added.
2010-09-02 19:04:20 +02:00
Tobias Brunner
7dd0c17cd4
pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions.
2010-09-02 19:04:20 +02:00
Tobias Brunner
afc4505e11
pluto: Removed KLIPS specific algorithm detection.
2010-09-02 19:04:19 +02:00
Tobias Brunner
54f42e350e
pluto: Removed KLIPS specific bare shunt scanning.
2010-09-02 19:04:19 +02:00
Tobias Brunner
6a066ad19b
pluto: Migrated get_my_cpi to libhydra's kernel interface.
2010-09-02 19:04:19 +02:00
Tobias Brunner
89f0cca111
pluto: Migrated get_ipsec_spi to libhydra's kernel interface.
2010-09-02 19:04:19 +02:00
Tobias Brunner
c5fb6882f2
Initialize the thread pool in pluto.
2010-09-02 19:04:19 +02:00
Tobias Brunner
08c0d340b8
Moved ipsec_transform_t to kernel_ipsec.h in libhydra.
...
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
2010-09-02 19:01:25 +02:00
Martin Willi
45684ee65c
Fixed pluto smartcard support after introducing encryption schemes
2010-08-30 10:14:45 +02:00
Tobias Brunner
cb7a0cef48
Fixed documentation of XAUTH in ipsec.secrets.
2010-08-26 10:25:08 +02:00
Martin Willi
3102d8669d
Use IV length of a crypter instead of block size for IV calculations
2010-08-13 17:11:53 +02:00
Martin Willi
8f01815143
Build dedicated plugin lists for each strongSwan component
2010-08-12 14:46:57 +02:00
Martin Willi
a944d2092b
Use bits instead of bytes for a private/public key
2010-08-10 18:46:30 +02:00
Martin Willi
33ddaaabec
Added support for different encryption schemes to private/public keys
2010-08-10 18:46:30 +02:00
Martin Willi
0d08ebe7ac
Pass type of requested key in the callback credential set
2010-08-04 09:26:21 +02:00
Martin Willi
15177f5785
Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets
2010-08-04 09:26:21 +02:00
Martin Willi
1e4e29076c
Updated ipsec.secrets.5 regarding IKEv2 smartcard support
2010-08-04 09:26:21 +02:00
Waldemar Brodkorb
45e962edef
substitute obsolete function calls(bzero/index)
2010-08-01 21:20:15 +02:00
Martin Willi
b8aeaea80c
Fix use of snprintf() in pluto subjectAltName enumeration
2010-07-28 10:54:48 +02:00
Martin Willi
0406eeaacb
Support different encoding types in certificate.get_encoding()
2010-07-13 13:53:20 +02:00
Martin Willi
da9724e6d0
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
2010-07-13 11:29:35 +02:00
Martin Willi
5db798c8e0
Charon uses a generic trunstchain length limit, not only for X509 certificates
2010-07-13 10:26:06 +02:00
Heiko Hund
ec7adea007
Added support for named attribute groups
...
Add the possibility to group attributes by a name and assign these
groups to connections. This allows a more granular configuration of
which client will receive what atrributes.
2010-07-09 13:09:31 +02:00
Martin Willi
5d31217232
Ignore IKEv2 packets in pluto with any minor version
2010-06-22 11:14:07 +02:00
Tobias Brunner
946be4d357
Adding support for the native Linux capabilities interface.
...
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
2010-06-15 19:58:30 +02:00
Tobias Brunner
b77e493bea
Explicitly refer to LIBCAP in Makefiles.
2010-06-15 19:57:31 +02:00
Andreas Steffen
5d4c258de7
refer to correct PLUTO_XAUTH_ID variable
2010-06-09 15:21:26 +02:00
Andreas Steffen
fcfd54acde
rename environment variable to PLUTO_XAUTH_ID
2010-06-08 23:18:51 +02:00
Andreas Steffen
611368339b
do not destroy xauth_id if phase2 equals phase1 connection
2010-06-08 23:18:00 +02:00
Andreas Steffen
964f6372cc
make an optional XAUTH user ID available in the updown script
2010-06-08 17:50:22 +02:00
Heiko Hund
52ee813156
inherit XAUTH identities in Phase 2
2010-06-08 12:15:42 +02:00
Martin Willi
80b5661a9b
Added generated manpages to .gitignore
2010-05-31 13:41:25 +02:00
Tobias Brunner
8f76653a4c
Adding the version number to the most relevant manual pages.
2010-05-30 13:03:04 +02:00
Tobias Brunner
1d3a48b559
Updated and corrected the ipsec.secrets(5) manual page.
2010-05-30 12:29:32 +02:00
Andreas Steffen
e8960c2a99
be lenient towards wrong attribute encodings
2010-05-28 15:07:21 +02:00
Martin Willi
24632bc0e8
Fixed compiler warning in invocation of crl_is_newer()
2010-05-21 16:41:13 +02:00
Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Andreas Steffen
ab0ecb7dd9
register virtual IPs under the XAUTH identity
2010-05-18 22:41:22 +02:00
Andreas Steffen
8d7fffc942
clarified secret loading debug output
2010-05-18 16:54:25 +02:00
Tobias Brunner
9ffb475e5d
Typo fixed.
2010-05-18 13:59:23 +02:00
Andreas Steffen
26ec52a405
implemented xauth as a pluto plugin
2010-05-18 13:51:27 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Andreas Steffen
03b5e4d8d7
refactoring of Mode Config functionality allows transport and handling of any attribute
2010-05-14 17:07:03 +02:00
Andreas Steffen
fb7de3a8bf
implemented support of resolve plugin
2010-05-08 16:09:02 +02:00
Tobias Brunner