denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,852 Commits 1 Branch 0 Tags
10c6cc0a36f5628a4381cf696810b152aff252b7
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 3dcf9dbd70 version bump to 4.1.6 2007-08-08 08:17:48 +00:00
Andreas Steffen 037575682a bug fix in linked_list deletion - instead of acerts destroyed certs twice 2007-08-08 06:02:59 +00:00
Andreas Steffen dce4600015 version bumps 2007-08-07 21:14:06 +00:00
Andreas Steffen f51d505e5e implemented listing of attribute certificates 2007-08-07 20:32:11 +00:00
Andreas Steffen 7ad634a2ef tolerate DNS lookup failures 2007-08-06 12:02:12 +00:00
Andreas Steffen d9f129eb1d separate the PSK IDs by spaces 2007-08-06 11:52:21 +00:00
Andreas Steffen afc51a247f debug info on preshared secrets 2007-08-06 11:05:11 +00:00
Andreas Steffen 1eef2ae8d2 added doxygen comments 2007-08-04 10:54:26 +00:00
Andreas Steffen 2b49135d5e doxygen cosmetics 2007-08-04 07:32:37 +00:00
Andreas Steffen ca694c614d improved source routing table creation 2007-08-03 17:59:13 +00:00
Andreas Steffen f7b49faa51 ID_FQDN lost its @ prefix 2007-08-03 13:36:28 +00:00
Andreas Steffen dfcdae0335 recognize strongswan-2.8.7 VID 2007-08-03 11:34:44 +00:00
Andreas Steffen a263d322a1 re-introduced listing of nexthop in ipsec status 2007-08-03 11:16:43 +00:00
Andreas Steffen 90b21fde11 use cgecho for green output 2007-08-03 10:58:45 +00:00
Andreas Steffen d49cc7b383 check source routing table 100 2007-08-03 10:57:37 +00:00
Andreas Steffen 0698d91c31 re-introduced leftnexthop=%direct 2007-08-03 10:57:08 +00:00
Andreas Steffen 1f4357ca4d added routing table 50 for passthrough routes 2007-08-03 10:56:40 +00:00
Andreas Steffen f6f55adb3a use table 100 for source routing 2007-08-03 10:05:15 +00:00
Andreas Steffen ec11518d1b handle dns lookup failures 2007-08-02 18:38:28 +00:00
Andreas Steffen 70c5c34da7 corrected typo 2007-07-30 10:55:09 +00:00
Andreas Steffen db61efdbbb include default route also in src address evaluation 2007-07-13 09:00:39 +00:00
Andreas Steffen 018219ae3a include default route with missing dst field into route evaluation 2007-07-13 06:13:14 +00:00
Andreas Steffen 0761886051 added to ipsec.conf installation path 2007-07-11 16:22:02 +00:00
Andreas Steffen 92901c74f2 version bump to 4.1.5 2007-07-08 19:40:11 +00:00
Andreas Steffen c520944800 version bump to 4.1.5 2007-07-08 19:08:31 +00:00
Andreas Steffen 1fb704404b execute conntrack -F at the outset 2007-07-04 18:55:54 +00:00
Andreas Steffen 13763a385c suppress stderr in start-switches script 2007-07-04 18:50:21 +00:00
Andreas Steffen 0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen 01a08cb2e7 output crl uri as a printable string instead of a binary blob 2007-07-04 13:36:41 +00:00
Andreas Steffen ed0d8e8008 added entrustVersInfo OID 2007-07-04 12:11:38 +00:00
Andreas Steffen eea626ed25 describe eap option in ipsec.conf.5 man page 2007-07-04 05:42:58 +00:00
Andreas Steffen ae4388dca0 cosmetics 2007-07-04 05:42:09 +00:00
Andreas Steffen 4f22a3e339 removed the ipsec.conf version number 2007-07-04 05:41:51 +00:00
Andreas Steffen 959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen 3ba90600f2 recognize strongswan-2.8.6 VID 2007-07-03 13:06:27 +00:00
Andreas Steffen a0a0bdd727 starter bug fix and pkcs11initargs patch by Robert Varga 2007-07-03 12:51:29 +00:00
Andreas Steffen dd0ee786db support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:33:02 +00:00
Andreas Steffen e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Andreas Steffen bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00
Andreas Steffen 561f88e306 fixed typo 2007-07-02 20:10:26 +00:00
Andreas Steffen 066518270f cosmetics 2007-07-02 17:56:04 +00:00
Andreas Steffen fdd32ee6e5 fix of the bug fix, courtesy of Robert Varga 2007-07-02 17:48:30 +00:00
Andreas Steffen 2f806bd866 bug fix courtesy of Robert Varga 2007-07-02 17:42:16 +00:00
Andreas Steffen c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00
Andreas Steffen 1fbdab8507 right=%<fqdn> wildcard added 2007-06-27 13:31:16 +00:00
Andreas Steffen 7900ab1b7a update ipsec.conf man page 2007-06-27 13:29:36 +00:00
Andreas Steffen c4c916f90a add starter.8 man page to distribution 2007-06-27 13:29:20 +00:00
Andreas Steffen 6fa8bd61c1 cosmetics 2007-06-27 10:04:02 +00:00
Andreas Steffen 2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen a80521d13e recognize wildcards right=%group and keyingtries=%forever 2007-06-27 08:11:08 +00:00
Andreas Steffen cae8f3e9b6 updated copyright statement 2007-06-27 07:36:44 +00:00
Andreas Steffen 31302718ff fixed distro and copyright information 2007-06-27 07:25:19 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 3f946e1c90 support of right=%<FQDN> wildcard 2007-06-25 11:28:39 +00:00
Andreas Steffen e6a22d8728 discarded unused functions 2007-06-25 09:06:13 +00:00
Andreas Steffen 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors 2007-06-25 07:10:23 +00:00
Andreas Steffen 078ce348ae IKEv1 rightallowany flag introduced 2007-06-20 09:46:54 +00:00
Andreas Steffen 280f6b1ab2 set nexthop to him when instantiating rightallowyes template with leftnexthop == right 2007-06-18 20:07:47 +00:00
Andreas Steffen d0f55e236d support of right|leftallowany flag 2007-06-18 17:51:45 +00:00
Andreas Steffen 571bca865b added dynamic DNS scenarios 2007-06-18 17:50:54 +00:00
Andreas Steffen 174c9e18c1 eliminated nexthop 2007-06-17 15:29:49 +00:00
Andreas Steffen 2dc0366994 fixed typo 2007-06-16 20:22:05 +00:00
Andreas Steffen 0c8e0615aa recognize strongswan-2.8.5 VID 2007-06-16 20:21:14 +00:00
Andreas Steffen aca0317d92 removed all nexthop statements 2007-06-10 18:52:14 +00:00
Andreas Steffen b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 2007-06-08 07:11:06 +00:00
Andreas Steffen ed1813ff6f added x as a wildcard for number of tests 2007-06-08 07:10:00 +00:00
Andreas Steffen 0b455e2e7b pass eroutes now need explicit routes 2007-06-08 07:06:10 +00:00
Andreas Steffen b7af55ac87 no need for left|rightnexthop parameter any more 2007-06-08 07:03:14 +00:00
Andreas Steffen 7a1f49c314 do not delete existing routes with NETKEY 2007-06-08 07:01:17 +00:00
Andreas Steffen e93c68ba0d _updown inserts routes only if a sourceip is defined 2007-06-06 13:37:43 +00:00
Andreas Steffen ef01451916 insert route only in case of sourceip 2007-06-06 13:30:27 +00:00
Andreas Steffen 9bac1d6640 do not print nexthop in ipsec status[all] 2007-06-06 13:16:48 +00:00
Andreas Steffen d0a6ed9a3c version bump to 4.1.4 2007-05-26 19:07:39 +00:00
Andreas Steffen b5463662d2 version bump to 4.1.4 2007-05-26 19:05:34 +00:00
Andreas Steffen ad8c6c60dc moved assignment of CERT_UNKNOWN 2007-05-25 14:04:39 +00:00
Andreas Steffen 2b34eafbc0 changed exceeded to reached 2007-05-25 11:42:00 +00:00
Andreas Steffen 3f9834a491 log trust pathlen 2007-05-25 11:41:06 +00:00
Andreas Steffen 3367fa8b74 fixed html output 2007-05-25 11:33:49 +00:00
Andreas Steffen 41e16cf4cf libfreeswan kernel header problem fixed 2007-05-25 11:17:16 +00:00
Andreas Steffen 89eeedc243 included a certificate label in the is_trusted() method 2007-05-25 11:10:35 +00:00
Andreas Steffen 60b44bbe62 stop dave in posttest.dat 2007-05-25 09:29:10 +00:00
Andreas Steffen 0bc543f1dc multi-level-ca-strict scenario added 2007-05-25 09:23:24 +00:00
Andreas Steffen 238b92d632 virtual-ip-override scenario added 2007-05-25 09:22:42 +00:00
Andreas Steffen 845cfa025b stop iptables on dave 2007-05-25 09:22:08 +00:00
Andreas Steffen f44dbc639b DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor 2007-05-25 08:29:35 +00:00
Andreas Steffen 13b872ebd2 set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification 2007-05-25 08:21:27 +00:00
Andreas Steffen f2566a3bac x509_t* argument in get_issuer() method is not constant any more because a short cut to the ca might be set 2007-05-25 08:17:29 +00:00
Andreas Steffen fc92116296 fixed virtual-ip scenario 2007-05-25 07:28:00 +00:00
Andreas Steffen ea7f3e1bca version bump to 4.1.3 2007-05-25 07:27:33 +00:00
Andreas Steffen 64bf6e564b added parsing of charging and group attributes 2007-05-25 07:26:33 +00:00
Andreas Steffen babb69109f version bump to 4.1.3 2007-05-25 07:25:38 +00:00
Andreas Steffen 8c06e9c0ed added #define LDAP_DEPRECATED in order to use old ldap_init() function 2007-05-24 12:09:48 +00:00
Andreas Steffen 3e4eac0b63 removed unneeded libdes files speed.c and des_opts.c 2007-05-24 12:08:44 +00:00
Andreas Steffen 0749196612 cecho changes in UML scripts 2007-05-23 22:24:47 +00:00