denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,803 Commits 1 Branch 0 Tags
44107cb7b75551e02afd56061534495c10b94de3
Commit Graph
15803 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen afe5d482db ikev2/net2net-psk-dscp does not need certificate support 2010-07-15 21:37:45 +02:00
Andreas Steffen a3527c39dd add revocation plugin to ikev2/rw-cert scenario 2010-07-15 20:03:11 +02:00
Andreas Steffen 3de510ca43 Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option 2010-07-15 06:29:26 +02:00
Martin Willi 83b957107f Revert "Warn about manual plugin load directives for pluto/charon" 
This reverts commit 5c46726d0d.
 2010-07-14 07:17:16 +02:00
Andreas Steffen fccf00576f activate --enable-addrblock configure option in UML scenarios 2010-07-13 21:04:20 +02:00
Martin Willi 5c46726d0d Warn about manual plugin load directives for pluto/charon 2010-07-13 14:43:45 +02:00
Martin Willi 15d9904406 Remove plugin load directives from default strongswan.conf 2010-07-13 14:28:11 +02:00
Martin Willi 7f3a946874 Added NEWS about --signcrl and PEM support in pki utility 2010-07-13 14:18:19 +02:00
Martin Willi b5b95c75de Added pki PEM encoding support for certificates, CRLs and PKCS10 requests 2010-07-13 14:14:39 +02:00
Martin Willi e3b987f79b Added support for Certificate, CRL and PKCS10 encoding to PEM plugin 2010-07-13 13:53:33 +02:00
Martin Willi 0406eeaacb Support different encoding types in certificate.get_encoding() 2010-07-13 13:53:20 +02:00
Martin Willi da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding 2010-07-13 11:29:35 +02:00
Martin Willi 24d327ab4d Moved keys/key_encoding.[ch] to cred_encoding.[ch] 2010-07-13 11:02:35 +02:00
Martin Willi e1c51fd859 Fixed doxygen group of cert_validator interface 2010-07-13 10:42:02 +02:00
Martin Willi e9448cfc2f Added NEWS for revocation/addrblock plugin 2010-07-13 10:26:07 +02:00
Martin Willi f90d465ce2 Added addrblock plugin to RFC3779 test cases 2010-07-13 10:26:07 +02:00
Martin Willi 1f457546c1 Added revocation plugin to ikev2 crl/ocsp test cases 2010-07-13 10:26:07 +02:00
Martin Willi e57a29c731 Moved X509 ipAddrBlock checking to the addrblock plugin 2010-07-13 10:26:07 +02:00
Martin Willi be715344c2 Added a hook to narrow traffic selectors for CHILD_SAs 2010-07-13 10:26:07 +02:00
Martin Willi 88fa56b1ad Moved bus_t to METHOD/INIT macros 2010-07-13 10:26:07 +02:00
Martin Willi 1c8c924610 Moved addrblock plugin to libcharon 2010-07-13 10:26:07 +02:00
Martin Willi c2e5cee413 Moved CRL/OCSP checking to a dedicated plugin called revocation 2010-07-13 10:26:07 +02:00
Martin Willi c1f9dad672 Made some useful methods in the credential manager public 2010-07-13 10:26:07 +02:00
Martin Willi 5f9e62c54f Moved X509 addrBlock validation to a separate addrblock plugin 2010-07-13 10:26:07 +02:00
Martin Willi 2feb16f5dd Added a certificate validation hook to the credential manager 2010-07-13 10:26:07 +02:00
Martin Willi c3a9bef08e Migrated credential manager to INIT/METHOD macros 2010-07-13 10:26:07 +02:00
Martin Willi 2ccc02a4fd Moved credential manager to libstrongswan 2010-07-13 10:26:07 +02:00
Martin Willi 2ca7db1337 Move pathlen constraint checking to X509 specific checks 2010-07-13 10:26:06 +02:00
Martin Willi 5db798c8e0 Charon uses a generic trunstchain length limit, not only for X509 certificates 2010-07-13 10:26:06 +02:00
Martin Willi 01bb70e4ad Combined the OCSP/CRL options to a signle Online check option 2010-07-13 10:26:06 +02:00
Andreas Steffen d5f29da3d2 added mark, mark_in, and mark_out to the ipsec.conf.5 man page 2010-07-13 09:15:53 +02:00
Andreas Steffen c1918dc28f we need some ordering 2010-07-12 22:44:27 +02:00
Andreas Steffen c13a4b4030 changed ordering of statusattr output 2010-07-12 22:38:18 +02:00
Andreas Steffen bb021fbbc9 updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes 2010-07-12 20:54:40 +02:00
Andreas Steffen 1cecc6a6ef fixed alignment of caption 2010-07-12 20:48:14 +02:00
Andreas Steffen ab635e029e updated SQL templates to support attribute pool and identity parameters 2010-07-12 20:28:34 +02:00
Andreas Steffen cb0a9d58a3 output identities correctly 2010-07-12 20:28:34 +02:00
Andreas Steffen 5047fe7ad3 added second example scenario 2010-07-12 20:28:34 +02:00
Tobias Brunner dcb4651d8c apidoc is actually a directory not a file. 2010-07-12 15:28:55 +02:00
Tobias Brunner af7b34b13b Added missing pool parameter in DHCP attribute provider. 2010-07-12 12:27:49 +02:00
Martin Willi 52f97c3893 Do not interpret long class attributes (such as from NPS) as group 2010-07-09 13:53:43 +02:00
Martin Willi cfa1c07604 Group membership constraint is fulfilled if subject is member in one of the groups 2010-07-09 13:51:58 +02:00
Heiko Hund ec7adea007 Added support for named attribute groups 
Add the possibility to group attributes by a name and assign these
groups to connections. This allows a more granular configuration of
which client will receive what atrributes.
 2010-07-09 13:09:31 +02:00
Andreas Steffen db4ad736be transport reqid, mark_in and mark_out in whack message 2010-07-09 12:19:39 +02:00
Andreas Steffen f65e0dc80f added ikev2/net2net-psk-dscp2 DiffServ scenario 2010-07-09 11:55:01 +02:00
Andreas Steffen 9f94906815 added ikev2/nat-two-rw-mark-in-out scenario 2010-07-09 09:36:03 +02:00
Andreas Steffen bcf608c848 some changes to the ikev2/nat-two-rw-mark scenario 2010-07-09 09:35:02 +02:00
Andreas Steffen 26c4d0102a configuration of different marks for inbound and outbound direction 2010-07-09 09:06:07 +02:00
Martin Willi 6f07f5e3d4 The file logger supports a time prefix using a strftime() format specifier 2010-07-08 17:44:19 +02:00
Martin Willi 4cc9afe35f Print identity to a lease address on the same line for simpler greping 2010-07-08 17:44:19 +02:00