 Andreas Steffen
|
573fd9ce03
|
ipsec starter gives the charon daemon 8s to terminate gracefully before killing the process brutally
|
2008-08-01 10:35:59 +00:00 |
|
|
Andreas Steffen
|
181abd3fdd
|
fixed the close_peerlog() bug causing ipsec pluto --help to segfault
|
2008-08-01 10:12:33 +00:00 |
|
|
Andreas Steffen
|
f5a0d968fc
|
added keyid2sql helper script
|
2008-07-29 19:46:39 +00:00 |
|
|
Andreas Steffen
|
ce91f67f60
|
starter now waits for a maximum of 10s instead of 1s for charon before restarting the daemon
|
2008-07-29 19:44:54 +00:00 |
|
|
Andreas Steffen
|
98ba96f185
|
demoted IKE state change output to debug level 2
|
2008-07-28 14:01:45 +00:00 |
|
|
Andreas Steffen
|
3fd9c75717
|
ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier
|
2008-07-28 13:53:04 +00:00 |
|
|
Andreas Steffen
|
5c96dab653
|
version bump to 4.2.6
|
2008-07-28 09:14:07 +00:00 |
|
|
Andreas Steffen
|
2863509616
|
updated UML INSTALL information
|
2008-07-25 10:30:53 +00:00 |
|
|
Andreas Steffen
|
77a06476dc
|
adapted UML scenarios to improved virtual IP address pool
|
2008-07-25 10:18:23 +00:00 |
|
|
Andreas Steffen
|
cae0c12d53
|
SQLite database template with improved address pool management
|
2008-07-25 08:02:53 +00:00 |
|
|
Andreas Steffen
|
8124e49148
|
added changes for the 4.2.5 release
|
2008-07-25 08:00:04 +00:00 |
|
|
Andreas Steffen
|
f6facbe75c
|
completed IKE_SA logging at the AUDIT level
|
2008-07-23 18:46:34 +00:00 |
|
|
Andreas Steffen
|
6410231335
|
IKE_SA rekeying inherits other_host from old IKE_SA
|
2008-07-23 07:44:26 +00:00 |
|
|
Andreas Steffen
|
0eede4a31f
|
cosmetics
|
2008-07-23 06:38:24 +00:00 |
|
|
Andreas Steffen
|
295826b9f0
|
start default strongSwan UML topology
|
2008-07-22 17:21:01 +00:00 |
|
|
Andreas Steffen
|
51c8f8261f
|
some more changes to IKE_SA and CHILD_SA logging
|
2008-07-22 17:10:10 +00:00 |
|
|
Andreas Steffen
|
32f5ee159e
|
cosmetics
|
2008-07-22 12:13:48 +00:00 |
|
|
Andreas Steffen
|
66da78b4bb
|
ipsec status lists IPCOMP CPIs
|
2008-07-22 12:03:58 +00:00 |
|
|
Andreas Steffen
|
c3967e779e
|
own CPI was not deleted due to copy-and-paste error
|
2008-07-22 10:53:56 +00:00 |
|
|
Andreas Steffen
|
eba7470b76
|
consistent logging of SPIs and CPIs
|
2008-07-22 10:16:45 +00:00 |
|
|
Andreas Steffen
|
7db7d06e28
|
missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenario
|
2008-07-22 06:24:00 +00:00 |
|
|
Andreas Steffen
|
af18c84ffb
|
display protoport in dynamic/32 traffic selectors
|
2008-07-21 19:08:03 +00:00 |
|
|
Andreas Steffen
|
fb34475b5c
|
consistent logging of IKE and CHILD SAs
|
2008-07-21 12:47:59 +00:00 |
|
|
Andreas Steffen
|
bb7b613b83
|
eliminated bashisms in _updown scripts
|
2008-07-18 10:04:40 +00:00 |
|
|
Andreas Steffen
|
08ab369b8c
|
included Thomas in copyright statement
|
2008-07-16 12:28:29 +00:00 |
|
|
Andreas Steffen
|
519e87b078
|
updated copyright statement
|
2008-07-16 10:17:04 +00:00 |
|
|
Andreas Steffen
|
872aa6ea51
|
fixed bashism in ipsec.in
|
2008-07-16 06:59:08 +00:00 |
|
|
Andreas Steffen
|
326bfd0450
|
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
|
2008-07-15 21:35:55 +00:00 |
|
|
Andreas Steffen
|
de5f70e74d
|
typo
|
2008-07-15 15:31:34 +00:00 |
|
|
Andreas Steffen
|
eb0cc33886
|
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
|
2008-07-15 15:28:00 +00:00 |
|
|
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
|
|
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
|
|
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
|
|
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
|
|
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
|
|
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
|
|
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
|
|
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
|
|
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
|
|
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
|
|
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
|
|
Andreas Steffen
|
8997db6a99
|
added ikev2/ip-two-pools-db scenario
|
2008-07-01 15:16:28 +00:00 |
|
|
Andreas Steffen
|
556e426fd8
|
renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP
|
2008-07-01 13:47:26 +00:00 |
|
|
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
|
|
Andreas Steffen
|
9d1f86cf1a
|
added sql/rw-eap-aka-rsa scenario
|
2008-06-30 07:24:55 +00:00 |
|
|
Andreas Steffen
|
1b7db64f6f
|
configure plugin path in scripts
|
2008-06-29 14:43:50 +00:00 |
|
|
Andreas Steffen
|
39b7780df9
|
created scripts/Makefile.am
|
2008-06-29 13:57:00 +00:00 |
|
|
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
|
|
Andreas Steffen
|
dc04f16e26
|
corrected vendor_id_payload diagram
|
2008-06-27 15:22:27 +00:00 |
|
|
Andreas Steffen
|
9de95037a0
|
corrected some NEWS entries
|
2008-06-26 13:50:54 +00:00 |
|
|
Andreas Steffen
|
f234c83612
|
corrected description of openssl/ike-alg-ecp-high scenario
|
2008-06-26 13:49:48 +00:00 |
|
|
Andreas Steffen
|
615611afc1
|
version bump to 4.2.5
|
2008-06-26 09:59:55 +00:00 |
|
|
Andreas Steffen
|
6567648616
|
check migration of ESP sequence numbers in MOBIKE scenarios
|
2008-06-26 09:46:23 +00:00 |
|
|
Andreas Steffen
|
e25bedb722
|
use ip xfrm with the detailed -s option
|
2008-06-26 09:41:22 +00:00 |
|
|
Andreas Steffen
|
e0bb4dbbfe
|
mention ESP sequence number updates
|
2008-06-26 08:44:59 +00:00 |
|
|
Andreas Steffen
|
73a8eed31c
|
updated NEWS for the imminent 4.2.4 release
|
2008-06-25 08:41:16 +00:00 |
|
|
Andreas Steffen
|
7c8eff1eaa
|
cosmetics
|
2008-06-23 09:08:49 +00:00 |
|
|
Andreas Steffen
|
7f6d8d5172
|
set version to 4.2.4
|
2008-06-22 18:08:37 +00:00 |
|
|
Andreas Steffen
|
63265f0e58
|
generate CRL for strongSwan EC Root CA
|
2008-06-22 17:56:42 +00:00 |
|
|
Andreas Steffen
|
0d12006def
|
support of ECDSA signatures for all certificate types
|
2008-06-22 17:41:07 +00:00 |
|
|
Andreas Steffen
|
3af698fa4d
|
added openssl/ecdsa-certs scenario
|
2008-06-22 16:54:45 +00:00 |
|
|
Andreas Steffen
|
1bd02e864c
|
added strongSwan EC Root CA
|
2008-06-22 16:41:00 +00:00 |
|
|
Andreas Steffen
|
867aae5d76
|
remove ikev2/nat-pf scenario
|
2008-06-22 11:41:49 +00:00 |
|
|
Andreas Steffen
|
11f7d0f9fa
|
check for selected IKE proposal
|
2008-06-22 11:26:37 +00:00 |
|
|
Andreas Steffen
|
bc997f6583
|
display selected IKE proposal in ipsec statusall
|
2008-06-22 11:24:33 +00:00 |
|
|
Andreas Steffen
|
ff8d906b07
|
removed ikev2/nat-double-snat scenario
|
2008-06-21 13:45:54 +00:00 |
|
|
Andreas Steffen
|
c7fa158852
|
used ipsec pool --leases --filter option in evaltest.dat
|
2008-06-21 13:31:54 +00:00 |
|
|
Andreas Steffen
|
635ee1bf7d
|
adapted evaltest.dat to modified RSA signature debug output
|
2008-06-21 13:30:24 +00:00 |
|
|
Andreas Steffen
|
fa97d9104f
|
added strongswan.conf with plugin list
|
2008-06-21 13:24:49 +00:00 |
|
|
Andreas Steffen
|
9d3cb1afb3
|
test ipsec pool --del option
|
2008-06-21 13:19:58 +00:00 |
|
|
Andreas Steffen
|
949b9664a5
|
adapted evaltest.dat to modified RSA signature debug output
|
2008-06-21 13:19:13 +00:00 |
|
|
Andreas Steffen
|
5b0362ade9
|
public key operations using the OpenSSL library require the pubkey plugin
|
2008-06-21 13:16:17 +00:00 |
|
|
Andreas Steffen
|
7d4bb52073
|
make config_auth_method_t backward compatible to existing sql templates
|
2008-06-10 20:31:53 +00:00 |
|
|
Andreas Steffen
|
1e5522ffd7
|
convert comma-separated RDNs into slash-separated OpenSSL --subject format
|
2008-06-05 19:28:08 +00:00 |
|
|
Andreas Steffen
|
179dd12c3a
|
added statistics functions and input validation checks to ipsec pool
|
2008-06-05 12:17:08 +00:00 |
|
|
Andreas Steffen
|
da4ad32547
|
moved copying of tables.sql after the strongswan installation
|
2008-06-05 07:25:27 +00:00 |
|
|
Andreas Steffen
|
89c87995e2
|
cosmetics in size field of ipsec pool --status command
|
2008-06-04 22:20:19 +00:00 |
|
|
Andreas Steffen
|
0ebc87f73e
|
added missing strongswan.conf
|
2008-05-31 08:56:13 +00:00 |
|
|
Andreas Steffen
|
76340368a6
|
divided ipsec.sql into tables.sql and data.sql
|
2008-05-31 08:53:48 +00:00 |
|
|
Andreas Steffen
|
fe46d8da37
|
added missing TCPDUMPHOST alice
|
2008-05-29 08:58:49 +00:00 |
|
|
Andreas Steffen
|
5785683afe
|
added two Elliptic Curve DH Group scenarios using the openssl library
|
2008-05-29 08:28:20 +00:00 |
|
|
Andreas Steffen
|
0655fe4fd8
|
CIRCLEQ patch submitted by Jay Pfeifer
|
2008-05-29 07:49:47 +00:00 |
|
|
Andreas Steffen
|
0caf2b936e
|
added missing comma in enumeration
|
2008-05-29 06:55:03 +00:00 |
|
|
Andreas Steffen
|
2e6749af0a
|
activate --enable-openssl option in uml scenarios
|
2008-05-28 14:13:40 +00:00 |
|
|
Andreas Steffen
|
1cc594f9bc
|
added openssl/rw-cert uml scenario
|
2008-05-28 13:49:53 +00:00 |
|
|
Andreas Steffen
|
7fe3ae88e4
|
handle default key sizes in openssl_crypter
|
2008-05-28 12:20:38 +00:00 |
|
|
Andreas Steffen
|
f1c2489e1e
|
added ikev2/rw-eap-md5-rsa scenario
|
2008-05-28 10:38:12 +00:00 |
|
|
Andreas Steffen
|
e825ede271
|
reinsert hash_and_url = yes option in strongswan.conf
|
2008-05-28 08:35:28 +00:00 |
|
|
Andreas Steffen
|
c9be754a45
|
define plugins to be loaded in strongswan.conf
|
2008-05-28 08:29:51 +00:00 |
|
|
Andreas Steffen
|
8f7074cf2e
|
version bump to 4.2.4
|
2008-05-25 10:35:39 +00:00 |
|
|
Andreas Steffen
|
f9b1bcad24
|
do not list empty certuribase strings
|
2008-05-24 05:47:37 +00:00 |
|
|
Andreas Steffen
|
ed26207d08
|
fixed copy-and-paste error
|
2008-05-23 19:23:04 +00:00 |
|
|
Andreas Steffen
|
49b2395e3b
|
check if parsing of the RSA public key in an X.509 certificate was successful
|
2008-05-23 19:22:37 +00:00 |
|
|
Andreas Steffen
|
7dfb8a1bde
|
fix caption alignment if date is displayed in local time
|
2008-05-23 19:21:08 +00:00 |
|
|
Andreas Steffen
|
731ac6bf52
|
check if crypter is available in pem_to_bin()
|
2008-05-23 19:18:08 +00:00 |
|
|
Andreas Steffen
|
83d9e870ad
|
some bug fixes
|
2008-05-23 16:06:58 +00:00 |
|
|
Andreas Steffen
|
c7d81ad12c
|
added --utc option to ipsec pool
|
2008-05-23 15:46:25 +00:00 |
|
|
Andreas Steffen
|
0672aa7b0e
|
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
|
2008-05-23 14:24:24 +00:00 |
|
|
Andreas Steffen
|
8cc16c9d9e
|
fixed the strongswan.conf path
|
2008-05-22 21:59:54 +00:00 |
|
|
Andreas Steffen
|
eaa1399812
|
fixed the strongswan.conf path
|
2008-05-22 21:59:30 +00:00 |
|