Tobias Brunner
0a1233e642
Moved man pages for config files to a separate directory.
2010-09-10 12:01:19 +02:00
Tobias Brunner
3255e489be
Of course, mark is also supported by pluto.
2010-09-06 12:04:26 +02:00
Tobias Brunner
a674c79a37
mark_in and mark_out are also supported by pluto.
2010-09-06 11:53:59 +02:00
Tobias Brunner
ddc961c369
Fixed left-/rightnexthop ipsec.conf options.
2010-09-03 11:47:42 +02:00
Tobias Brunner
b5be105aaf
pluto: Added support for statically configured reqids.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a0d13f42e6
starter: Some whitespace cleanup.
2010-09-02 19:04:25 +02:00
Tobias Brunner
eeca1b0466
pluto: Removed references to KLIPS from documentation, log messages and comments.
2010-09-02 19:04:24 +02:00
Tobias Brunner
08c0d340b8
Moved ipsec_transform_t to kernel_ipsec.h in libhydra.
...
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
2010-09-02 19:01:25 +02:00
Martin Willi
64d7b0733f
Added support for the ipsec.conf aaa_identity keyword
2010-08-31 17:52:52 +02:00
Martin Willi
f13a03add0
Moved EAP type/code definitions to a seprate header file in libstrongswan
2010-08-31 15:35:29 +02:00
Andreas Steffen
87799b0c00
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
2010-08-13 15:07:53 +02:00
Andreas Steffen
4412ee86c5
recognize eap-ttls method
2010-08-12 23:58:54 +02:00
Martin Willi
2107953804
Added EAP-TLS plugin stub
2010-08-03 15:39:24 +02:00
Waldemar Brodkorb
45e962edef
substitute obsolete function calls(bzero/index)
2010-08-01 21:20:15 +02:00
Andreas Steffen
ff090f8781
check for mark changes in ipsec update
2010-07-17 09:13:48 +02:00
Andreas Steffen
3de510ca43
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
2010-07-15 06:29:26 +02:00
Martin Willi
83b957107f
Revert "Warn about manual plugin load directives for pluto/charon"
...
This reverts commit 5c46726d0d
2010-07-14 07:17:16 +02:00
Martin Willi
5c46726d0d
Warn about manual plugin load directives for pluto/charon
2010-07-13 14:43:45 +02:00
Andreas Steffen
d5f29da3d2
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
2010-07-13 09:15:53 +02:00
Andreas Steffen
db4ad736be
transport reqid, mark_in and mark_out in whack message
2010-07-09 12:19:39 +02:00
Andreas Steffen
26c4d0102a
configuration of different marks for inbound and outbound direction
2010-07-09 09:06:07 +02:00
Andreas Steffen
a729d17afa
added req parameter to ipsec.conf man page
2010-07-06 20:32:33 +02:00
Andreas Steffen
ee26c537d7
support of xfrm marks for IKEv2
2010-07-02 23:46:09 +02:00
Martin Willi
80b5661a9b
Added generated manpages to .gitignore
2010-05-31 13:41:25 +02:00
Tobias Brunner
8f76653a4c
Adding the version number to the most relevant manual pages.
2010-05-30 13:03:04 +02:00
Tobias Brunner
f115838bee
Updated and corrected the ipsec.conf(5) manual page.
2010-05-30 12:29:26 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Reto Buerki
1f83541d7b
Include reqid in stroke add connection message.
2010-05-04 14:38:34 +02:00
Reto Buerki
2b26a9c30d
Add reqid keyword to config connection section.
2010-05-04 14:38:34 +02:00
Andreas Steffen
fc753c1d3e
remove subnet from sourceip
2010-05-02 17:58:36 +02:00
Andreas Steffen
61e48488d9
final fix for cloning and deleting sourceip strings
2010-05-02 15:55:46 +02:00
Andreas Steffen
a48484322e
fixed end->sourceip memory leak in ipsec starter
2010-05-02 14:56:35 +02:00
Andreas Steffen
34f92dcfba
fixed flex parser memory leaks in ipsec starter
2010-05-02 11:40:46 +02:00
Andreas Steffen
2724ae521e
free config before exiting since library_deinit() calls leak detective
2010-05-02 11:00:21 +02:00
Tobias Brunner
26a3d7e78e
Initialize libstrongswan in starter (fixes Vstr logging).
2010-04-29 14:33:29 +02:00
Tobias Brunner
6bfa8e907c
Added options to whack to query in-memory leases.
2010-04-06 12:47:39 +02:00
Thomas Egerer
980f0eccd0
Fixed use of stack local variable outside of function scope
2010-03-31 16:44:31 +02:00
Thomas Egerer
a47576bff7
Fixed undefined behavior in use of stack variable
2010-03-31 11:04:27 +02:00
Tobias Brunner
d6731a0f26
parser.l includes y.tab.h, so it must be built first
2010-03-05 14:59:22 +01:00
Tobias Brunner
73f5940b1c
Ignore the generated y.output.
2010-03-05 14:47:08 +01:00
Martin Willi
da2303ca69
Fixed starter left-/rightikeport keyword
2010-02-26 11:44:34 +01:00
Martin Willi
667b73721a
Added left-/rightikeport ipsec.conf options to use custom IKE ports
2010-02-26 11:44:33 +01:00
Martin Willi
313a53d4fc
Use destination address of ppp interfaces as nexthop in starters default route lookup
2010-02-05 09:28:31 +01:00
Martin Willi
8015c91cb9
Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs
2010-01-27 16:05:11 +01:00
Andreas Steffen
ee2679ec25
if end id is missing assign IP address to raw public key
2009-12-09 07:24:43 +01:00
Andreas Steffen
93e2377c7f
allow ECP DH groups in pfsgroup definition
2009-11-24 14:35:25 +01:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Martin Willi
075448fbc8
Complain about missing %defaultroute support only if one is actually used
2009-09-16 13:27:49 +02:00
Martin Willi
88fdf88a1f
Disable rtnetlink defaultroute lookup if pluto is disabled
...
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
2009-09-15 13:16:39 +02:00
Heiko Hund
aa5d446939
Get starter default route via rtnetlink
...
This patch changes the way routes are fetched from the kernel by starter.
The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.
The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.
2009-09-15 12:55:25 +02:00
Tobias Brunner