Tobias Brunner
2ba5dadb12
peer-cfg: Use struct to pass data to constructor
2016-04-09 16:51:01 +02:00
Tobias Brunner
8a00a8452d
child-cfg: Use struct to pass data to constructor
2016-04-09 16:51:01 +02:00
Andreas Steffen
b12c53ce77
Use standard unsigned integer types
2016-03-24 18:52:48 +01:00
Tobias Brunner
ff0abde9ed
controller: Optionally adhere to init limits also when initiating IKE_SAs
2015-08-21 18:21:13 +02:00
Tobias Brunner
b2b54bd71d
Make sure getpass() is available
...
It's not on Android for example.
2014-05-29 12:28:53 +02:00
Martin Willi
8d74ec9e80
ike: Add an additional but separate AEAD proposal to CHILD config
...
This currently has no effect: We don't include AEAD algorithms in the default
ESP proposal, as we don't know if it is supported by the backend. But as we
hopefully get an algorithm query mechanism on kernel interfaces some day, we
add the appropriate functionality nonetheless.
2014-05-16 16:51:19 +02:00
Martin Willi
879e3d12ca
ike: Add an additional but separate AEAD proposal to IKE config, if supported
2014-05-16 16:51:19 +02:00
Martin Willi
064fe9c963
enum: Return boolean result for enum_from_name() lookup
...
Handling the result for enum_from_name() is difficult, as checking for
negative return values requires a cast if the enum type is unsigned. The new
signature clearly differentiates lookup result from lookup value.
Further, this actually allows to convert real -1 enum values, which could not
be distinguished from "not-found" and the -1 return value.
This also fixes several clang warnings where enums are unsigned.
2014-05-16 15:42:07 +02:00
Martin Willi
e2de972c55
charon-cmd: Request an IPv6 virtual IP if an IPv6 remote subnet given
2014-02-06 15:58:13 +01:00
Martin Willi
c9e85424a8
charon-cmd: Add --esp/--ah-proposal options to specify CHILD_SA proposals
2014-02-06 15:58:07 +01:00
Martin Willi
2796cf59bc
charon-cmd: Add an --ike-proposal option to specify non-default IKE proposals
2014-02-06 15:57:36 +01:00
Martin Willi
3070697f9f
ike: support multiple addresses, ranges and subnets in IKE address config
...
Replace the allowany semantic by a more powerful subnet and IP range matching.
Multiple addresses, DNS names, subnets and ranges can be specified in a comma
separated list. Initiators ignore the ranges/subnets, responders match
configurations against all addresses, ranges and subnets.
2013-09-04 10:38:37 +02:00
Martin Willi
9aeaa7396e
peer-cfg: add a pull/push mode option to use with mode config
2013-09-04 10:33:37 +02:00
Martin Willi
e8b36eb92f
charon-cmd: support prompting for a PIN
...
To support a Password and PIN XAuth combo, additionally support multiple
prompts for different credential types.
2013-09-03 16:26:19 +02:00
Martin Willi
44bb1dc3da
charon-cmd: add --eap-identity and --xauth-username options
2013-07-29 09:00:49 +02:00
Tobias Brunner
0ceb288815
Fix various API doc issues and typos
...
Partially based on an old patch by Adrian-Ken Rueegsegger.
2013-07-18 18:30:36 +02:00
Tobias Brunner
5e185047e1
charon-cmd: Shortened and fixed command descriptions
2013-06-21 16:04:45 +02:00
Tobias Brunner
463314b55a
charon-cmd: Simplify usage output for authentication profiles
...
The man page describes the min full.
2013-06-21 16:04:45 +02:00
Tobias Brunner
295d595b49
charon-cmd: Add --debug argument to set the default log level
2013-06-21 15:55:52 +02:00
Martin Willi
47ec2e407b
charon-cmd: use a copy of pid in initiate callback
...
When cancelling a connection that gets established, cmd_connection_t gets
freed before terminate() is called. This results in kill()ing invalid PID.
2013-06-20 11:02:28 +02:00
Martin Willi
e044a1a9e5
charon-cmd: add IKEv1 aggressive mode profiles
2013-06-20 11:01:37 +02:00
Tobias Brunner
02116fdc2d
charon-cmd: Add support for PKCS#12 files
2013-05-08 15:02:40 +02:00
Tobias Brunner
f77d6e16d2
charon-cmd: match_me/match_other are optional in callback credentials
2013-05-08 15:02:40 +02:00
Tobias Brunner
89d350f46a
charon-cmd: Request password for private keys
2013-05-08 15:02:40 +02:00
Tobias Brunner
6a6d0ea7cd
charon-cmd: --agent optionally takes the path to an ssh-agent socket
...
If not given it is read from the SSH_AUTH_SOCK environment variable.
2013-05-08 12:30:36 +02:00
Tobias Brunner
410abbd35f
charon-cmd: Properly initialize options with no additional lines
2013-05-07 17:08:31 +02:00
Tobias Brunner
e07e489d5f
agent: Use sshkey plugin to parse keys, adds support for ECDSA
2013-05-07 17:08:31 +02:00
Tobias Brunner
ee7b73832c
charon-cmd: Add --agent option to authenticate using ssh-agent(1)
...
The socket path is read from the SSH_AUTH_SOCK environment variable.
So using this with sudo might require the -E command line (or an appropriate
sudoers config) to preserve the environment.
2013-05-07 14:08:51 +02:00
Tobias Brunner
4dc50bf9de
charon-cmd: Use loose matching of gateway identity
2013-05-07 13:53:48 +02:00
Martin Willi
68fc0fe32e
charon-cmd: add an option to set a different server identity
2013-05-06 15:54:35 +02:00
Martin Willi
d2e2b9a2da
charon-cmd: add support for different IKEv1/IKEv2 authentication profiles
2013-05-06 15:54:31 +02:00
Martin Willi
d6b0c28b25
charon-cmd: support multi-line help text for each option in usage
2013-05-06 15:54:29 +02:00
Martin Willi
8e53682cd9
charon-cmd: add --local/remote-ts options to set traffic selectors
2013-05-06 15:54:27 +02:00
Martin Willi
3ca58c32be
charon-cmd: prompt for EAP passwords on-demand using a callback credential set
2013-05-06 15:28:27 +02:00
Martin Willi
b48941ae16
charon-cmd: authenticate with EAP if no private key is given
2013-05-06 15:28:27 +02:00
Martin Willi
f0749552a6
charon-cmd: add support for using dynamic ports in charon-cmd
2013-05-06 15:28:26 +02:00
Martin Willi
2baa7bbedb
charon-cmd: load certificates and RSA private keys
2013-05-06 15:28:26 +02:00
Martin Willi
78d7a0f7e2
charon-cmd: add a connection object and its initiation to charon-cmd
2013-05-06 15:28:26 +02:00
Martin Willi
be44723de0
charon-cmd: move command line options to separate file, obsolete short options
2013-05-06 15:28:26 +02:00
Tobias Brunner