Martin Willi
40921edc38
Support resolution of "allow_any" DNS names in charon (%hostname)
2011-09-02 13:42:45 +02:00
Martin Willi
e59a50009c
starter passes unresolved DNS names to charon
...
Based on an initial patch by Mirko Parthey.
2011-08-29 09:58:18 +02:00
Tobias Brunner
45048eae23
Verify that executables are available and set (pluto|charon)start accordingly.
...
Some distributions enable both daemons but then distribute the
executables in two separate packages. If only one package is installed
but both daemons are enabled in ipsec.conf, starter will try to start
the non existing daemon over and over again, and will each time readd
the configs to the other daemon.
2011-08-11 13:38:05 +02:00
Tobias Brunner
889a62a8d4
pluto: --debug-kernel aliasing was not fully complete.
2011-08-02 18:15:50 +02:00
Andreas Steffen
f87991704e
implemented PASS and DROP shunt policies
2011-06-28 19:42:54 +02:00
Martin Willi
f34ebc845b
Add a closeaction ipsec.conf keyword to configure close action
2011-06-07 12:07:21 +02:00
Martin Willi
513701f41b
Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable
2011-05-19 15:47:40 +02:00
Tobias Brunner
67ec2be665
IKEv2 was only partially the default for connections with auto=route and auto=start.
...
Connections with auto=route and auto=start that did not have
keyexchange=ikev2 explicitly specified did get added to charon,
but did not get routed or started by charon.
2011-04-27 11:33:06 +02:00
Tobias Brunner
f36a6ebd30
starter: Make sure interface name is null-terminated.
2011-04-19 13:48:51 +02:00
Tobias Brunner
1c004bebd8
Clearly mark switch cases that fall through.
2011-04-19 13:48:50 +02:00
Tobias Brunner
cc2429d9a2
In scanf the maxmium length of %s does not include the null-terminator.
2011-04-14 18:10:27 +02:00
Tobias Brunner
bac28c73ed
starter_conn_t.id is an unsigned long.
2011-04-14 18:10:27 +02:00
Tobias Brunner
e92e687584
Removed empty man page for starter.
2011-02-07 11:39:41 +01:00
Martin Willi
2b52d5cb41
Do not install config files with user/group, as it might not exist on build machine
2011-01-17 18:08:17 +01:00
Martin Willi
6367de28ad
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
2011-01-07 15:51:35 +01:00
Martin Willi
6c302616f1
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
2010-12-20 09:45:39 +01:00
Andreas Steffen
0bc5547d0c
*** HISTORICAL MOMENT: IKEv2 becomes the default! ***
2010-10-09 20:46:55 +02:00
Tobias Brunner
0a1233e642
Moved man pages for config files to a separate directory.
2010-09-10 12:01:19 +02:00
Tobias Brunner
3255e489be
Of course, mark is also supported by pluto.
2010-09-06 12:04:26 +02:00
Tobias Brunner
a674c79a37
mark_in and mark_out are also supported by pluto.
2010-09-06 11:53:59 +02:00
Tobias Brunner
ddc961c369
Fixed left-/rightnexthop ipsec.conf options.
2010-09-03 11:47:42 +02:00
Tobias Brunner
b5be105aaf
pluto: Added support for statically configured reqids.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a0d13f42e6
starter: Some whitespace cleanup.
2010-09-02 19:04:25 +02:00
Tobias Brunner
eeca1b0466
pluto: Removed references to KLIPS from documentation, log messages and comments.
2010-09-02 19:04:24 +02:00
Tobias Brunner
08c0d340b8
Moved ipsec_transform_t to kernel_ipsec.h in libhydra.
...
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
2010-09-02 19:01:25 +02:00
Martin Willi
64d7b0733f
Added support for the ipsec.conf aaa_identity keyword
2010-08-31 17:52:52 +02:00
Martin Willi
f13a03add0
Moved EAP type/code definitions to a seprate header file in libstrongswan
2010-08-31 15:35:29 +02:00
Andreas Steffen
87799b0c00
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
2010-08-13 15:07:53 +02:00
Andreas Steffen
4412ee86c5
recognize eap-ttls method
2010-08-12 23:58:54 +02:00
Martin Willi
2107953804
Added EAP-TLS plugin stub
2010-08-03 15:39:24 +02:00
Waldemar Brodkorb
45e962edef
substitute obsolete function calls(bzero/index)
2010-08-01 21:20:15 +02:00
Andreas Steffen
ff090f8781
check for mark changes in ipsec update
2010-07-17 09:13:48 +02:00
Andreas Steffen
3de510ca43
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
2010-07-15 06:29:26 +02:00
Martin Willi
83b957107f
Revert "Warn about manual plugin load directives for pluto/charon"
...
This reverts commit 5c46726d0d
2010-07-14 07:17:16 +02:00
Martin Willi
5c46726d0d
Warn about manual plugin load directives for pluto/charon
2010-07-13 14:43:45 +02:00
Andreas Steffen
d5f29da3d2
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
2010-07-13 09:15:53 +02:00
Andreas Steffen
db4ad736be
transport reqid, mark_in and mark_out in whack message
2010-07-09 12:19:39 +02:00
Andreas Steffen
26c4d0102a
configuration of different marks for inbound and outbound direction
2010-07-09 09:06:07 +02:00
Andreas Steffen
a729d17afa
added req parameter to ipsec.conf man page
2010-07-06 20:32:33 +02:00
Andreas Steffen
ee26c537d7
support of xfrm marks for IKEv2
2010-07-02 23:46:09 +02:00
Martin Willi
80b5661a9b
Added generated manpages to .gitignore
2010-05-31 13:41:25 +02:00
Tobias Brunner
8f76653a4c
Adding the version number to the most relevant manual pages.
2010-05-30 13:03:04 +02:00
Tobias Brunner
f115838bee
Updated and corrected the ipsec.conf(5) manual page.
2010-05-30 12:29:26 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Reto Buerki
1f83541d7b
Include reqid in stroke add connection message.
2010-05-04 14:38:34 +02:00
Reto Buerki
2b26a9c30d
Add reqid keyword to config connection section.
2010-05-04 14:38:34 +02:00
Andreas Steffen
fc753c1d3e
remove subnet from sourceip
2010-05-02 17:58:36 +02:00
Andreas Steffen
61e48488d9
final fix for cloning and deleting sourceip strings
2010-05-02 15:55:46 +02:00
Andreas Steffen
a48484322e
fixed end->sourceip memory leak in ipsec starter
2010-05-02 14:56:35 +02:00
Andreas Steffen
34f92dcfba
fixed flex parser memory leaks in ipsec starter
2010-05-02 11:40:46 +02:00
Martin Willi