denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,747 Commits 1 Branch 0 Tags
4cb9d7a758751dfe658258bdf39671491ef29cc7
Commit Graph
78 Commits
Author SHA1 Message Date
Andreas Steffen 3f946e1c90 support of right=%<FQDN> wildcard 2007-06-25 11:28:39 +00:00
Andreas Steffen e6a22d8728 discarded unused functions 2007-06-25 09:06:13 +00:00
Andreas Steffen 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors 2007-06-25 07:10:23 +00:00
Andreas Steffen d0f55e236d support of right|leftallowany flag 2007-06-18 17:51:45 +00:00
Martin Willi 5e564f2bff added setsid() to properly detach from console 2007-06-11 12:21:12 +00:00
Martin Willi 532137e70f fixed man page 2007-05-25 07:19:49 +00:00
Martin Willi 8e79d8d3de updated man-page for left/rightsourceip 2007-05-25 07:15:18 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Andreas Steffen 3eb9630071 support of left|rightgroups parameter 2007-05-20 15:38:36 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon 
added --with-uid/--with-gid configure option
 2007-05-07 12:38:46 +00:00
Martin Willi 3d63b7639e setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker 2007-05-02 09:59:47 +00:00
Andreas Steffen 4841189b72 implementation of strictcrlpolicy=ifuri 2007-04-20 11:12:08 +00:00
Andreas Steffen 7ef4be2cb1 unshare argument buffers 2007-04-19 14:26:11 +00:00
Martin Willi b7ade11b16 updated man page: proposals using PFS 2007-04-19 14:22:53 +00:00
Andreas Steffen 8883eef7b8 support cachecrls=yes 2007-04-05 17:07:14 +00:00
Andreas Steffen e58afb1a0a support of crlcheckinterval=0 to disable IKEv2 CRL fetching 2007-04-04 07:49:05 +00:00
Martin Willi 9b45443dc2 updated NEWS, TODO and man page 2007-03-20 08:59:03 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication 
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
 2007-03-13 15:01:02 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Andreas Steffen 7eb4010c01 replace ca is realized as del_ca followed by add_ca 2007-02-24 23:20:27 +00:00
Andreas Steffen 98a905838a last CA keyword is KW_OCSPURI2 2007-02-24 23:19:28 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Martin Willi a02ae4ccd5 using "left" as my host per default, swapping to "right" when needed 2007-02-15 12:13:18 +00:00
Andreas Steffen 06133e1de7 enabled adding and deleting ca information records 2007-02-14 01:02:09 +00:00
Andreas Steffen 3a5f6dff7a fixed starter crash due to freeing default IPSEC_EAPDIR string 2007-02-14 00:56:58 +00:00
Andreas Steffen 8245a9142c add --eapdir option only if defined in ipsec.conf 2007-02-14 00:53:45 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Andreas Steffen fb34660632 negated POLICY_REAUTH to POLICY_DONT_REAUTH 2006-12-21 20:05:08 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 532f2347dc first try to update ipsec.conf manual 2006-12-19 08:32:25 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Martin Willi 5347a84f81 fixed HAVE_BACKTRACE checks 
starter Makefile now uses proper $(COMPILE) to build pluto objects
 2006-12-11 09:29:34 +00:00
Andreas Steffen 15b050c945 added XAUTH support 2006-12-05 23:13:02 +00:00
Andreas Steffen 923ee10eef solved 64 bit issue in push/pop stroke interface 2006-10-31 23:17:21 +00:00
Andreas Steffen 0e4d1d05ad added 'modeconfig=pull|push' and 'left|rightnatip' keywords 2006-10-25 08:40:34 +00:00
Andreas Steffen b701b7895b added has_natip flag 2006-10-25 08:39:39 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi 107936f55a added charondebug config parameter to set debug level at startup 2006-10-18 11:46:57 +00:00
Andreas Steffen 5d71e72db5 added hostaccess support 2006-09-25 05:46:56 +00:00
Andreas Steffen 4f383c6950 added auth_method field 2006-09-18 07:46:16 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up 
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
 2006-07-21 13:31:53 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Andreas Steffen 5c149670df generation of default key 2006-07-03 06:21:56 +00:00
Andreas Steffen 0e3cb317e2 cosmetics 2006-07-03 06:21:40 +00:00