denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,232 Commits 1 Branch 0 Tags
aa5c5d3fde1900ffbf4d38446197aa5649fb00fc
Commit Graph
157 Commits
Author SHA1 Message Date
Tobias Brunner 9dd1229407 fixing compilation on systems lacking linux/xfrm.h 2008-11-18 14:28:05 +00:00
Andreas Steffen 84bec926a3 added type=transport_proxy and installpolicy=yes|no to man page 2008-11-13 06:29:53 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Andreas Steffen 61670ba284 support of %any address string 2008-11-05 04:53:45 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Andreas Steffen 573fd9ce03 ipsec starter gives the charon daemon 8s to terminate gracefully before killing the process brutally 2008-08-01 10:35:59 +00:00
Andreas Steffen ce91f67f60 starter now waits for a maximum of 10s instead of 1s for charon before restarting the daemon 2008-07-29 19:44:54 +00:00
Andreas Steffen 6d58c2be9a cosmetics 2008-07-15 13:09:09 +00:00
Andreas Steffen 0ef961b878 added pfsgroup to ipsec.conf.5 man page 2008-07-15 13:07:27 +00:00
Andreas Steffen 1dec30625e check if parsing of ipsec update was successful 2008-07-02 05:51:49 +00:00
Martin Willi a02bc1dbea updated location of auth_class_t 2008-06-24 13:36:10 +00:00
Andreas Steffen 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates 2008-06-10 20:31:53 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi f13e23754f tolerating chown failures on installation, required to build some packages 2008-06-04 12:09:24 +00:00
Martin Willi 808ca43f92 fixed compiler warning (missing include) 2008-05-13 07:37:08 +00:00
Andreas Steffen 0fc1fc0ec8 forgot about alphabetical order 2008-05-12 12:46:30 +00:00
Andreas Steffen 2637c30c69 added description of plutostderrlog parameter to ipsec.conf.5 man page 2008-05-12 11:36:59 +00:00
Andreas Steffen a50818ed46 plutostderrlog parameter now declares a stderr redirection file 2008-05-12 10:05:49 +00:00
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Andreas Steffen 9a6d9f10e2 support of plutostderrlog keyword 2008-05-11 07:59:00 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Andreas Steffen 77b9c3a214 end->srcip string must be removed if it contains %config 2008-04-27 11:28:58 +00:00
Andreas Steffen 2988273b3a fixed starter_cmp_end() 2008-04-27 11:04:13 +00:00
Andreas Steffen 937eb2db00 fixed memory corruption problem in starter 2008-04-27 10:49:31 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 66bb16b033 shipping a default strongswan.conf 2008-04-18 12:52:47 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Andreas Steffen f45411c045 set long-forgotten DPD defaults 2008-04-15 11:27:45 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Andreas Steffen ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c 2008-04-13 21:42:44 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Martin Willi 0d2670e7e6 removed unused yynuput to fix compiler warning 2008-03-28 11:45:01 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Andreas Steffen 754c1c0ef7 suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko Hund from Astaro. 2008-03-21 09:34:40 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi e633b1998f creating sysconfdir if it does not exist 
moved all directory creations into starters Makefile
 2008-02-22 14:50:38 +00:00
Andreas Steffen aa1a730bfb set nexthop default value to 0::0 in IPv6 connections 2007-12-19 00:49:32 +00:00