Martin Willi
9164e49ac0
added mobike=yes|no connection option
...
yes: include mobike support notifies as initiator
no: only enable mobike as responder when initiator supports it
default: yes
2007-08-29 12:11:25 +00:00
Andreas Steffen
ec11518d1b
handle dns lookup failures
2007-08-02 18:38:28 +00:00
Andreas Steffen
0761886051
added to ipsec.conf installation path
2007-07-11 16:22:02 +00:00
Andreas Steffen
eea626ed25
describe eap option in ipsec.conf.5 man page
2007-07-04 05:42:58 +00:00
Andreas Steffen
ae4388dca0
cosmetics
2007-07-04 05:42:09 +00:00
Andreas Steffen
4f22a3e339
removed the ipsec.conf version number
2007-07-04 05:41:51 +00:00
Andreas Steffen
dd0ee786db
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:33:02 +00:00
Andreas Steffen
e0e6137dd3
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:26:44 +00:00
Andreas Steffen
fdd32ee6e5
fix of the bug fix, courtesy of Robert Varga
2007-07-02 17:48:30 +00:00
Andreas Steffen
2f806bd866
bug fix courtesy of Robert Varga
2007-07-02 17:42:16 +00:00
Andreas Steffen
c2bc2b2782
alphabetical order
2007-06-27 21:49:09 +00:00
Andreas Steffen
e0e7ef070d
separated pluto, charon, and klips setup config section parameters
2007-06-27 15:42:11 +00:00
Andreas Steffen
487fe29ee3
added lefthostaccess and leftprotoport parameters
2007-06-27 14:03:56 +00:00
Andreas Steffen
7900ab1b7a
update ipsec.conf man page
2007-06-27 13:29:36 +00:00
Andreas Steffen
c4c916f90a
add starter.8 man page to distribution
2007-06-27 13:29:20 +00:00
Andreas Steffen
6fa8bd61c1
cosmetics
2007-06-27 10:04:02 +00:00
Andreas Steffen
2f153a2263
recognize wildcard keyingtries=%forever
2007-06-27 08:11:22 +00:00
Andreas Steffen
a80521d13e
recognize wildcards right=%group and keyingtries=%forever
2007-06-27 08:11:08 +00:00
Andreas Steffen
3f946e1c90
support of right=%<FQDN> wildcard
2007-06-25 11:28:39 +00:00
Andreas Steffen
e6a22d8728
discarded unused functions
2007-06-25 09:06:13 +00:00
Andreas Steffen
3345c0a1ed
make starter behave more gracefully in the presence of non-fatal errors
2007-06-25 07:10:23 +00:00
Andreas Steffen
d0f55e236d
support of right|leftallowany flag
2007-06-18 17:51:45 +00:00
Martin Willi
5e564f2bff
added setsid() to properly detach from console
2007-06-11 12:21:12 +00:00
Martin Willi
532137e70f
fixed man page
2007-05-25 07:19:49 +00:00
Martin Willi
8e79d8d3de
updated man-page for left/rightsourceip
2007-05-25 07:15:18 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
3d63b7639e
setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker
2007-05-02 09:59:47 +00:00
Andreas Steffen
4841189b72
implementation of strictcrlpolicy=ifuri
2007-04-20 11:12:08 +00:00
Andreas Steffen
7ef4be2cb1
unshare argument buffers
2007-04-19 14:26:11 +00:00
Martin Willi
b7ade11b16
updated man page: proposals using PFS
2007-04-19 14:22:53 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
e58afb1a0a
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
2007-04-04 07:49:05 +00:00
Martin Willi
9b45443dc2
updated NEWS, TODO and man page
2007-03-20 08:59:03 +00:00
Martin Willi
b0f24449dd
added EAP-SIM authentication
...
client side only
uses an external SIM reader library specified with SIM_READER_LIB
untested
2007-03-13 15:01:02 +00:00
Martin Willi
0c8aba6771
added support for 0.0.0.0/0 traffic selectors
...
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Andreas Steffen
7eb4010c01
replace ca is realized as del_ca followed by add_ca
2007-02-24 23:20:27 +00:00
Andreas Steffen
98a905838a
last CA keyword is KW_OCSPURI2
2007-02-24 23:19:28 +00:00
Andreas Steffen
113be7f186
support of ca info records
2007-02-23 15:13:21 +00:00
Martin Willi
a02ae4ccd5
using "left" as my host per default, swapping to "right" when needed
2007-02-15 12:13:18 +00:00
Andreas Steffen
06133e1de7
enabled adding and deleting ca information records
2007-02-14 01:02:09 +00:00
Andreas Steffen
3a5f6dff7a
fixed starter crash due to freeing default IPSEC_EAPDIR string
2007-02-14 00:56:58 +00:00
Andreas Steffen
8245a9142c
add --eapdir option only if defined in ipsec.conf
2007-02-14 00:53:45 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi
af87afed47
added config option for BEET mode
2007-01-03 13:16:21 +00:00
Andreas Steffen
fb34660632
negated POLICY_REAUTH to POLICY_DONT_REAUTH
2006-12-21 20:05:08 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
532f2347dc
first try to update ipsec.conf manual
2006-12-19 08:32:25 +00:00
Martin Willi