 Andreas Steffen
|
bcd20cc987
|
added ikev2/dhcp-dynamic scenario
|
2010-04-23 11:52:37 +02:00 |
|
|
Andreas Steffen
|
19d49af539
|
make DHCP debug messages consistent
|
2010-04-23 07:37:16 +02:00 |
|
|
Andreas Steffen
|
500a6d38ee
|
fixed typo
|
2010-04-23 00:02:13 +02:00 |
|
|
Martin Willi
|
1f6a707d10
|
Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group
|
2010-04-21 08:41:46 +02:00 |
|
|
Heiko Hund
|
d0f1b3b96f
|
fixed segfault in pluto with multiple ISAKMP SAs in delete payload
|
2010-04-20 21:23:05 +02:00 |
|
|
Martin Willi
|
4590260b2d
|
Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten
|
2010-04-19 14:41:20 +02:00 |
|
|
Martin Willi
|
f0212e8837
|
Accept DHCP replies on bootps port, as we act as a relay agent if server address configured
|
2010-04-19 11:18:58 +02:00 |
|
|
Tobias Brunner
|
6edbe1652b
|
Integrating libhydra into the Android build system.
|
2010-04-12 16:47:47 +02:00 |
|
|
Tobias Brunner
|
b73b3a033f
|
Use openssl in Android by default.
|
2010-04-12 15:54:48 +02:00 |
|
|
Tobias Brunner
|
355c3a66b1
|
When logging to the database, the IDs of an IKE SA are initially NULL.
|
2010-04-12 13:51:10 +02:00 |
|
|
Andreas Steffen
|
054fd74658
|
fixed silly bug
|
2010-04-12 11:25:46 +02:00 |
|
|
Andreas Steffen
|
9391b485f7
|
updated DER versions of research and sales CAs
|
2010-04-11 22:00:01 +02:00 |
|
|
Andreas Steffen
|
d3d2b7390f
|
implemented inheritance of virtual IP assigned by Mode Config on the responder side
|
2010-04-11 19:19:20 +02:00 |
|
|
Andreas Steffen
|
6e939d2f94
|
added ikev1/ip-two-pools-mixed scenario
|
2010-04-11 17:05:42 +02:00 |
|
|
Andreas Steffen
|
9235edc276
|
added support of RAM-based pools to NEWS
|
2010-04-11 16:29:39 +02:00 |
|
|
Andreas Steffen
|
2544e08ec7
|
IKEv1 uses Mode Config payload
|
2010-04-11 16:09:09 +02:00 |
|
|
Andreas Steffen
|
b87edeaade
|
added ikev1/ip-two-pools scenario
|
2010-04-11 16:05:54 +02:00 |
|
|
Andreas Steffen
|
a4b2332fd2
|
remove virtual interfaces after scenario
|
2010-04-11 16:05:04 +02:00 |
|
|
Andreas Steffen
|
b516382cc9
|
added ikev1/ip-pool scenario
|
2010-04-11 14:40:04 +02:00 |
|
|
Andreas Steffen
|
ec96692c38
|
show in-memory pools in ipsec statusall
|
2010-04-11 11:46:47 +02:00 |
|
|
Andreas Steffen
|
b1701d097c
|
added missing curly brackets
|
2010-04-11 00:49:04 +02:00 |
|
|
Andreas Steffen
|
b3127b42f9
|
support in-memory pools in swapped connection definitions
|
2010-04-11 00:27:04 +02:00 |
|
|
Tobias Brunner
|
9f4b02e31d
|
Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan.
|
2010-04-10 12:10:04 +02:00 |
|
|
Andreas Steffen
|
b74cd9573d
|
pluto now requires attr plugin for dns and nbns server loading from strongswan.conf
|
2010-04-09 21:03:44 +02:00 |
|
|
Martin Willi
|
b34b93dbf7
|
Store DH generator in a chunk, hide non-public data in a private struct
|
2010-04-08 15:08:35 +02:00 |
|
|
Andreas Steffen
|
6c1dc87551
|
recovered private keys of no CDP certificates
|
2010-04-07 19:38:10 +02:00 |
|
|
Andreas Steffen
|
589d175a05
|
recovered lost Duck CA certificates
|
2010-04-07 19:38:10 +02:00 |
|
|
Martin Willi
|
613ceca96c
|
Migrated scepclient/openac logging hooks to new signature
|
2010-04-07 15:51:55 +02:00 |
|
|
Martin Willi
|
54e354f2d6
|
Remove to_referer() method, as it fails if no referer was given
|
2010-04-07 15:36:22 +02:00 |
|
|
Martin Willi
|
f7c32feec0
|
Renamed clone function to avoid name clash with uclibc
|
2010-04-07 14:54:22 +02:00 |
|
|
Martin Willi
|
d101a61f87
|
NEWS about HA plugin
|
2010-04-07 14:16:52 +02:00 |
|
|
Martin Willi
|
140418453a
|
Updated HA plugin to new APIs
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
647008c8a7
|
Updated location of traffic selector header
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
29a46aacad
|
Moved ha plugin to libcharon
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
3e8caf6af6
|
Make resync/monitoring functionality optional
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
f24ca1dd55
|
Listen to ike_updown/rekey hook instead of ike_state_change
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
c866a42737
|
Request a complete resync after daemon startup
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
1466af8556
|
Do not automatically take over segments, as we need to resync first
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
ea249cc6f0
|
Drop overlapping segments only if we have no active SAs on it
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
a05e388540
|
Do not install iptables rules, they should stay active after shutdown
|
2010-04-07 13:55:16 +02:00 |
|
|
Martin Willi
|
e262f4e543
|
Take over all segments if heartbeat becomes silent
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
d87489661c
|
Renamed ha-sync plugin to ha
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
3c82381296
|
Try to send HA sync messages synchronously
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
f4f394e67c
|
Do not sync a delete for a child in a destroying IKE_SA
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
5a0a359b88
|
Include ICMP traffic in sync tunnel
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
874c0bd8b8
|
Refactored segment enabling/disabling
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
5d67259042
|
Use a connected UDP socket
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
06308d9ede
|
Removed obsolete socket subclasses
|
2010-04-07 13:55:15 +02:00 |
|
|
Martin Willi
|
3912fdb1ec
|
Automatically segment cluster using periodically sent status messages
|
2010-04-07 13:55:14 +02:00 |
|
|
Martin Willi
|
b7f15be136
|
Do not enable/disable our own sync tunnel
|
2010-04-07 13:55:14 +02:00 |
|