Andreas Steffen
87799b0c00
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
2010-08-13 15:07:53 +02:00
Andreas Steffen
4412ee86c5
recognize eap-ttls method
2010-08-12 23:58:54 +02:00
Martin Willi
2107953804
Added EAP-TLS plugin stub
2010-08-03 15:39:24 +02:00
Waldemar Brodkorb
45e962edef
substitute obsolete function calls(bzero/index)
2010-08-01 21:20:15 +02:00
Andreas Steffen
ff090f8781
check for mark changes in ipsec update
2010-07-17 09:13:48 +02:00
Andreas Steffen
3de510ca43
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
2010-07-15 06:29:26 +02:00
Martin Willi
83b957107f
Revert "Warn about manual plugin load directives for pluto/charon"
...
This reverts commit 5c46726d0d
2010-07-14 07:17:16 +02:00
Martin Willi
5c46726d0d
Warn about manual plugin load directives for pluto/charon
2010-07-13 14:43:45 +02:00
Andreas Steffen
d5f29da3d2
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
2010-07-13 09:15:53 +02:00
Andreas Steffen
db4ad736be
transport reqid, mark_in and mark_out in whack message
2010-07-09 12:19:39 +02:00
Andreas Steffen
26c4d0102a
configuration of different marks for inbound and outbound direction
2010-07-09 09:06:07 +02:00
Andreas Steffen
a729d17afa
added req parameter to ipsec.conf man page
2010-07-06 20:32:33 +02:00
Andreas Steffen
ee26c537d7
support of xfrm marks for IKEv2
2010-07-02 23:46:09 +02:00
Martin Willi
80b5661a9b
Added generated manpages to .gitignore
2010-05-31 13:41:25 +02:00
Tobias Brunner
8f76653a4c
Adding the version number to the most relevant manual pages.
2010-05-30 13:03:04 +02:00
Tobias Brunner
f115838bee
Updated and corrected the ipsec.conf(5) manual page.
2010-05-30 12:29:26 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Reto Buerki
1f83541d7b
Include reqid in stroke add connection message.
2010-05-04 14:38:34 +02:00
Reto Buerki
2b26a9c30d
Add reqid keyword to config connection section.
2010-05-04 14:38:34 +02:00
Andreas Steffen
fc753c1d3e
remove subnet from sourceip
2010-05-02 17:58:36 +02:00
Andreas Steffen
61e48488d9
final fix for cloning and deleting sourceip strings
2010-05-02 15:55:46 +02:00
Andreas Steffen
a48484322e
fixed end->sourceip memory leak in ipsec starter
2010-05-02 14:56:35 +02:00
Andreas Steffen
34f92dcfba
fixed flex parser memory leaks in ipsec starter
2010-05-02 11:40:46 +02:00
Andreas Steffen
2724ae521e
free config before exiting since library_deinit() calls leak detective
2010-05-02 11:00:21 +02:00
Tobias Brunner
26a3d7e78e
Initialize libstrongswan in starter (fixes Vstr logging).
2010-04-29 14:33:29 +02:00
Tobias Brunner
6bfa8e907c
Added options to whack to query in-memory leases.
2010-04-06 12:47:39 +02:00
Thomas Egerer
980f0eccd0
Fixed use of stack local variable outside of function scope
2010-03-31 16:44:31 +02:00
Thomas Egerer
a47576bff7
Fixed undefined behavior in use of stack variable
2010-03-31 11:04:27 +02:00
Tobias Brunner
d6731a0f26
parser.l includes y.tab.h, so it must be built first
2010-03-05 14:59:22 +01:00
Tobias Brunner
73f5940b1c
Ignore the generated y.output.
2010-03-05 14:47:08 +01:00
Martin Willi
da2303ca69
Fixed starter left-/rightikeport keyword
2010-02-26 11:44:34 +01:00
Martin Willi
667b73721a
Added left-/rightikeport ipsec.conf options to use custom IKE ports
2010-02-26 11:44:33 +01:00
Martin Willi
313a53d4fc
Use destination address of ppp interfaces as nexthop in starters default route lookup
2010-02-05 09:28:31 +01:00
Martin Willi
8015c91cb9
Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs
2010-01-27 16:05:11 +01:00
Andreas Steffen
ee2679ec25
if end id is missing assign IP address to raw public key
2009-12-09 07:24:43 +01:00
Andreas Steffen
93e2377c7f
allow ECP DH groups in pfsgroup definition
2009-11-24 14:35:25 +01:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Martin Willi
075448fbc8
Complain about missing %defaultroute support only if one is actually used
2009-09-16 13:27:49 +02:00
Martin Willi
88fdf88a1f
Disable rtnetlink defaultroute lookup if pluto is disabled
...
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
2009-09-15 13:16:39 +02:00
Heiko Hund
aa5d446939
Get starter default route via rtnetlink
...
This patch changes the way routes are fetched from the kernel by starter.
The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.
The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.
2009-09-15 12:55:25 +02:00
Martin Willi
faa4bd49fb
use sysconfdir, no need for an additional confdir variable
2009-09-07 15:10:30 +02:00
Martin Willi
b7b5653386
Use macros to define --with options
2009-09-07 15:00:45 +02:00
Martin Willi
8b3b4a244e
Removed trailing whitespaces in configure.in/Makefile.am
2009-09-07 11:48:03 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Tobias Brunner
deddfde91b
Description of new lifetime limits added to manpage.
2009-09-01 12:54:33 +02:00
Tobias Brunner
686aba2589
Added lifetime/margintime keywords as alias for keylife/rekeymargin.
2009-09-01 12:54:33 +02:00
Tobias Brunner
abff49a7ff
Handling of new lifetime limits added to stroke.
2009-09-01 12:53:44 +02:00
Tobias Brunner
ca41aa0602
Added keywords for the new lifetime limits to starter.
2009-09-01 12:53:44 +02:00
Tobias Brunner
9c7faa8618
Added parser for unsigned long long ints to starter.
2009-09-01 12:53:44 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Andreas Steffen