Martin Willi
8015c91cb9
Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs
2010-01-27 16:05:11 +01:00
Andreas Steffen
ee2679ec25
if end id is missing assign IP address to raw public key
2009-12-09 07:24:43 +01:00
Andreas Steffen
93e2377c7f
allow ECP DH groups in pfsgroup definition
2009-11-24 14:35:25 +01:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Martin Willi
075448fbc8
Complain about missing %defaultroute support only if one is actually used
2009-09-16 13:27:49 +02:00
Martin Willi
88fdf88a1f
Disable rtnetlink defaultroute lookup if pluto is disabled
...
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
2009-09-15 13:16:39 +02:00
Heiko Hund
aa5d446939
Get starter default route via rtnetlink
...
This patch changes the way routes are fetched from the kernel by starter.
The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.
The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.
2009-09-15 12:55:25 +02:00
Martin Willi
faa4bd49fb
use sysconfdir, no need for an additional confdir variable
2009-09-07 15:10:30 +02:00
Martin Willi
b7b5653386
Use macros to define --with options
2009-09-07 15:00:45 +02:00
Martin Willi
8b3b4a244e
Removed trailing whitespaces in configure.in/Makefile.am
2009-09-07 11:48:03 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Tobias Brunner
deddfde91b
Description of new lifetime limits added to manpage.
2009-09-01 12:54:33 +02:00
Tobias Brunner
686aba2589
Added lifetime/margintime keywords as alias for keylife/rekeymargin.
2009-09-01 12:54:33 +02:00
Tobias Brunner
abff49a7ff
Handling of new lifetime limits added to stroke.
2009-09-01 12:53:44 +02:00
Tobias Brunner
ca41aa0602
Added keywords for the new lifetime limits to starter.
2009-09-01 12:53:44 +02:00
Tobias Brunner
9c7faa8618
Added parser for unsigned long long ints to starter.
2009-09-01 12:53:44 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Andreas Steffen
5672eae131
make boolean expression less enigmatic
2009-08-25 21:09:54 +02:00
Martin Willi
eb641993d4
set stroke connection flags to a clear TRUE/FALSE
2009-08-25 19:57:36 +02:00
Tobias Brunner
26965b4ef3
OpenSolaris needs libsocket and libnsl for socket().
2009-08-14 14:50:53 +02:00
Tobias Brunner
e580e0a9a2
sockio.h is required on OpenSolaris for SIOCGIFADDR.
2009-08-14 14:50:50 +02:00
Tobias Brunner
a3ccf95f3f
LOG_AUTHPRIV is not defined on OpenSolaris.
2009-08-14 13:37:07 +02:00
Andreas Steffen
5d8306de68
use SS_RC_FIRST and SS_RC_LAST
2009-08-06 16:42:44 +02:00
Andreas Steffen
3646c8a159
abort pluto or charon if initialization fails
2009-08-06 16:32:52 +02:00
Andreas Steffen
10c13ed264
fixed dereferencing bug caused by bool type redefinition
2009-08-02 16:58:32 +02:00
Andreas Steffen
ecff28c5c5
fixe KW_END_FIRST..KW_END_LAST keyword range
2009-07-28 15:44:24 +02:00
Tobias Brunner
9af7715c3d
Fixed installation of config files in out-of-tree builds.
2009-07-20 21:13:45 +02:00
Tobias Brunner
7cdf712d3e
Use the numerical UID/GID to install the config files and create the ipsec.d directories.
2009-07-20 21:03:05 +02:00
Andreas Steffen
eab241fb56
stop strongswan if integrity check of libstrongswan or daemon fails
2009-07-17 20:33:19 +02:00
Andreas Steffen
ca366aeea0
enforce strongSwan coding rules
2009-07-17 16:57:07 +02:00
Tobias Brunner
599d2bcea8
Revert "gperf under FreeBSD does not know the -m option."
...
This reverts commit 0ead254919
2009-07-16 15:15:09 +02:00
Tobias Brunner
0ead254919
gperf under FreeBSD does not know the -m option.
...
We could use AC_PATH_PROGS_FEATURE_CHECK (added in Autoconf 2.62) to check for this option.
2009-07-14 12:09:22 +02:00
Andreas Steffen
c7f76958d7
authby=pubkey is now the default authentication
2009-06-19 10:41:38 +02:00
Andreas Steffen
ebde1a7ddd
consistent display of strongSwan version
2009-06-13 16:03:08 +02:00
Andreas Steffen
11e6d28533
pluto supports ECDSA authentication
2009-06-12 19:59:49 +02:00
Andreas Steffen
af1feed96a
NO_CREDENTIAL_FACTORY compile option not needed anymore
2009-05-28 15:44:22 +02:00
Andreas Steffen
517895bd05
eliminated ipsec_policy.h
2009-05-26 17:19:26 +02:00
Andreas Steffen
b75d6242c9
optimized gperf
2009-05-15 22:54:29 +02:00
Tobias Brunner
bcbf110938
fixing compilation when using the Vstr string library
2009-04-24 05:30:50 +02:00
Tobias Brunner
5533a88936
properly convert boolean flags when parsing ipsec.conf
2009-05-07 17:43:16 +02:00
Tobias Brunner
723534283c
use bool instead of int
2009-05-07 17:42:25 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
466f11bfaf
added .gitignore files, ready for the switch
2009-04-30 07:42:30 +00:00
Andreas Steffen
2e65569534
already had the correct formatting
2009-04-19 19:32:51 +00:00
Andreas Steffen
65607eb370
cosmetics
2009-04-19 19:32:02 +00:00
Andreas Steffen
9d53cc5d43
already had the correct formatting
2009-04-19 19:22:31 +00:00
Andreas Steffen
3d7a244b54
conversion from 8 spaces to 4 spaces per tab
2009-04-19 19:16:09 +00:00
Andreas Steffen
67411e66c3
port the libstrongswan memory allocation methods to pluto
2009-04-17 07:11:29 +00:00
Andreas Steffen
6319cd74ea
pluto uses the libstrongswan leak detective and a stripped-down version of library_t
2009-04-16 08:25:47 +00:00
Martin Willi