denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,769 Commits 1 Branch 0 Tags
530dd57c6a085f2cac1b74123770323e63917e02
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00
Andreas Steffen 1fbdab8507 right=%<fqdn> wildcard added 2007-06-27 13:31:16 +00:00
Andreas Steffen 7900ab1b7a update ipsec.conf man page 2007-06-27 13:29:36 +00:00
Andreas Steffen c4c916f90a add starter.8 man page to distribution 2007-06-27 13:29:20 +00:00
Andreas Steffen 6fa8bd61c1 cosmetics 2007-06-27 10:04:02 +00:00
Andreas Steffen 2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen a80521d13e recognize wildcards right=%group and keyingtries=%forever 2007-06-27 08:11:08 +00:00
Andreas Steffen cae8f3e9b6 updated copyright statement 2007-06-27 07:36:44 +00:00
Andreas Steffen 31302718ff fixed distro and copyright information 2007-06-27 07:25:19 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 3f946e1c90 support of right=%<FQDN> wildcard 2007-06-25 11:28:39 +00:00
Andreas Steffen e6a22d8728 discarded unused functions 2007-06-25 09:06:13 +00:00
Andreas Steffen 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors 2007-06-25 07:10:23 +00:00
Andreas Steffen 078ce348ae IKEv1 rightallowany flag introduced 2007-06-20 09:46:54 +00:00
Andreas Steffen 280f6b1ab2 set nexthop to him when instantiating rightallowyes template with leftnexthop == right 2007-06-18 20:07:47 +00:00
Andreas Steffen d0f55e236d support of right|leftallowany flag 2007-06-18 17:51:45 +00:00
Andreas Steffen 571bca865b added dynamic DNS scenarios 2007-06-18 17:50:54 +00:00
Andreas Steffen 174c9e18c1 eliminated nexthop 2007-06-17 15:29:49 +00:00
Andreas Steffen 2dc0366994 fixed typo 2007-06-16 20:22:05 +00:00
Andreas Steffen 0c8e0615aa recognize strongswan-2.8.5 VID 2007-06-16 20:21:14 +00:00
Andreas Steffen aca0317d92 removed all nexthop statements 2007-06-10 18:52:14 +00:00
Andreas Steffen b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 2007-06-08 07:11:06 +00:00
Andreas Steffen ed1813ff6f added x as a wildcard for number of tests 2007-06-08 07:10:00 +00:00
Andreas Steffen 0b455e2e7b pass eroutes now need explicit routes 2007-06-08 07:06:10 +00:00
Andreas Steffen b7af55ac87 no need for left|rightnexthop parameter any more 2007-06-08 07:03:14 +00:00
Andreas Steffen 7a1f49c314 do not delete existing routes with NETKEY 2007-06-08 07:01:17 +00:00
Andreas Steffen e93c68ba0d _updown inserts routes only if a sourceip is defined 2007-06-06 13:37:43 +00:00
Andreas Steffen ef01451916 insert route only in case of sourceip 2007-06-06 13:30:27 +00:00
Andreas Steffen 9bac1d6640 do not print nexthop in ipsec status[all] 2007-06-06 13:16:48 +00:00
Andreas Steffen d0a6ed9a3c version bump to 4.1.4 2007-05-26 19:07:39 +00:00
Andreas Steffen b5463662d2 version bump to 4.1.4 2007-05-26 19:05:34 +00:00
Andreas Steffen ad8c6c60dc moved assignment of CERT_UNKNOWN 2007-05-25 14:04:39 +00:00
Andreas Steffen 2b34eafbc0 changed exceeded to reached 2007-05-25 11:42:00 +00:00
Andreas Steffen 3f9834a491 log trust pathlen 2007-05-25 11:41:06 +00:00
Andreas Steffen 3367fa8b74 fixed html output 2007-05-25 11:33:49 +00:00
Andreas Steffen 41e16cf4cf libfreeswan kernel header problem fixed 2007-05-25 11:17:16 +00:00
Andreas Steffen 89eeedc243 included a certificate label in the is_trusted() method 2007-05-25 11:10:35 +00:00
Andreas Steffen 60b44bbe62 stop dave in posttest.dat 2007-05-25 09:29:10 +00:00
Andreas Steffen 0bc543f1dc multi-level-ca-strict scenario added 2007-05-25 09:23:24 +00:00
Andreas Steffen 238b92d632 virtual-ip-override scenario added 2007-05-25 09:22:42 +00:00
Andreas Steffen 845cfa025b stop iptables on dave 2007-05-25 09:22:08 +00:00
Andreas Steffen f44dbc639b DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor 2007-05-25 08:29:35 +00:00
Andreas Steffen 13b872ebd2 set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification 2007-05-25 08:21:27 +00:00
Andreas Steffen f2566a3bac x509_t* argument in get_issuer() method is not constant any more because a short cut to the ca might be set 2007-05-25 08:17:29 +00:00
Andreas Steffen fc92116296 fixed virtual-ip scenario 2007-05-25 07:28:00 +00:00
Andreas Steffen ea7f3e1bca version bump to 4.1.3 2007-05-25 07:27:33 +00:00
Andreas Steffen 64bf6e564b added parsing of charging and group attributes 2007-05-25 07:26:33 +00:00
Andreas Steffen babb69109f version bump to 4.1.3 2007-05-25 07:25:38 +00:00
Andreas Steffen 8c06e9c0ed added #define LDAP_DEPRECATED in order to use old ldap_init() function 2007-05-24 12:09:48 +00:00
Andreas Steffen 3e4eac0b63 removed unneeded libdes files speed.c and des_opts.c 2007-05-24 12:08:44 +00:00
Andreas Steffen 0749196612 cecho changes in UML scripts 2007-05-23 22:24:47 +00:00
Andreas Steffen c502b1b4c6 added virtual-ip scenario 2007-05-23 21:41:05 +00:00
Andreas Steffen 02ee40ad6a defined ietfAttr_t type and its destroy function 2007-05-23 19:43:24 +00:00
Andreas Steffen 8fbac48e26 removed old FreeS/WAN cvs revision entries 2007-05-23 19:27:48 +00:00
Andreas Steffen 2911f4ee37 added #include <linux/types.h> required by 2.6.21 linux headers 2007-05-23 19:27:02 +00:00
Andreas Steffen 3eb9630071 support of left|rightgroups parameter 2007-05-20 15:38:36 +00:00
Andreas Steffen 9a590819a2 reduced crl validity of research and sales ca to 15 days 2007-05-19 19:47:24 +00:00
Andreas Steffen 3388e7674d fixed nextUpdate and until behaviour in the non-strict case 2007-05-19 19:46:13 +00:00
Andreas Steffen 4756b7aa5d set rightca= to root CA 2007-05-18 13:19:47 +00:00
Andreas Steffen 9619b0d33a added multi-level-ca-revoked scenario 2007-05-18 13:18:28 +00:00
Andreas Steffen 51a9174071 added multi-level-ca-loop scenario 2007-05-18 12:42:49 +00:00
Andreas Steffen 35d4809c3e support of CA-based ipsec policies 2007-05-18 12:28:05 +00:00
Andreas Steffen 6e04f25313 support of CA-based ipsec policies 2007-05-18 12:25:37 +00:00
Andreas Steffen a11cd0a102 support of crlnumber in research and sales CAs 2007-05-18 12:24:50 +00:00
Andreas Steffen 162f1b7056 added multi-level-ca-ldap scenario 2007-05-18 12:23:31 +00:00
Andreas Steffen 9f97b8a108 added multi-level-ca scenario 2007-05-18 12:23:10 +00:00
Andreas Steffen f24b4886ac ca-based policy now requires rightca=%any in the two-certs scenario 2007-05-18 10:53:58 +00:00
Andreas Steffen 89665b3866 add is_ca() method 2007-05-18 10:16:10 +00:00
Andreas Steffen 27432db603 added set_ca_info() and get_ca_info() methods 2007-05-18 10:15:23 +00:00
Andreas Steffen 889c2ded1c output of eap_type_names requires %N format 2007-05-18 10:14:01 +00:00
Andreas Steffen ec3c02a303 added set_other_ca() and get_other_ca() 2007-05-17 17:55:29 +00:00
Andreas Steffen 7d26a0ee03 added set_other_ca() and get_other_ca() 2007-05-17 17:55:02 +00:00
Andreas Steffen 13de65882b export MAX_CA_PATH_LEN 2007-05-17 17:19:09 +00:00
Andreas Steffen 45156cc791 check self-signedness of certificate at creation time 2007-05-17 17:18:38 +00:00
Andreas Steffen ad9da6ec4b hierarchical display of tests 2007-05-15 20:30:21 +00:00
Andreas Steffen a3354a6908 multiple peer certificate support 2007-05-15 19:07:38 +00:00
Andreas Steffen 522bd94862 removed reference to radij.c code 2007-05-15 19:06:05 +00:00
Andreas Steffen 9b6591e796 authentication failure is handled in ike_auth.c 2007-05-15 19:05:26 +00:00
Andreas Steffen 16c72c0c4f cosmetics 2007-05-15 19:04:15 +00:00
Andreas Steffen 8a664830d0 cosmetics 2007-05-15 19:03:23 +00:00
Andreas Steffen 547f1dd56c added two-certs scenario 2007-05-15 15:54:06 +00:00
Andreas Steffen df9fbd2c64 adapted authentication failure text to those in the authenticators 2007-05-15 14:52:44 +00:00
Andreas Steffen ca78602304 verification of locally loaded peer certificates 2007-05-15 14:51:04 +00:00
Andreas Steffen 2e324229c0 support of multiple certificates with same peer id 2007-05-15 12:46:05 +00:00
Andreas Steffen b17e0db372 cosmetics 2007-05-15 12:45:19 +00:00
Andreas Steffen 4262749f11 version bump to 4.1.3 2007-05-10 12:40:09 +00:00
Andreas Steffen 5fc278edf3 added udp.h 2007-04-29 19:48:54 +00:00
Andreas Steffen 803ae77638 fixed include 2007-04-29 19:31:27 +00:00
Andreas Steffen ffef96bbad local include of pfkeyv2.h and netlink.h 2007-04-29 19:23:56 +00:00
Andreas Steffen a26b6acf92 reverted to original header files 2007-04-29 18:19:02 +00:00
Andreas Steffen c6f1e1b16c actually not needed 2007-04-28 21:32:57 +00:00
Andreas Steffen 589ae108f7 actually not needed 2007-04-28 21:28:19 +00:00
Andreas Steffen 7ab40b41d6 actually not needed 2007-04-28 21:28:08 +00:00
Andreas Steffen 5df7f3f7d4 added compiler.h filter.h in.h and udp.h to src/include/linux/ 2007-04-28 21:18:56 +00:00
Andreas Steffen 0fa646ecac added netlink.h and rtnetlink.h to src/include/linux 2007-04-28 20:35:23 +00:00