Andreas Steffen
7d4bb52073
make config_auth_method_t backward compatible to existing sql templates
2008-06-10 20:31:53 +00:00
Martin Willi
ddedf511bb
fixed compile error in smp plugin
2008-06-10 11:29:46 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Martin Willi
a8ed846be7
added strongswan.conf option "routing_table" and "routing_table_prio"
2008-06-10 07:51:21 +00:00
Martin Willi
5dcda9e25b
added strongswan.conf option to disable route installation
2008-06-10 06:58:39 +00:00
Martin Willi
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
2008-06-06 15:05:54 +00:00
Andreas Steffen
1e5522ffd7
convert comma-separated RDNs into slash-separated OpenSSL --subject format
2008-06-05 19:28:08 +00:00
Martin Willi
6649a3ca80
fixed --utc parsing position
...
support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1
changed order of --leases columns
2008-06-05 13:56:10 +00:00
Martin Willi
4fa74562ae
fixed UTC identitation
...
implement filtering in --leases
2008-06-05 08:52:27 +00:00
Andreas Steffen
89c87995e2
cosmetics in size field of ipsec pool --status command
2008-06-04 22:20:19 +00:00
Martin Willi
011b1cca94
do not roam IKE_SA in created or deleting state
2008-06-04 14:31:06 +00:00
Martin Willi
2ba1f9e761
added pool statistics (size, online, lease count, with usage ratio)
2008-06-04 14:01:44 +00:00
Martin Willi
f3e11fc478
some input validation checks for --add and --resize
...
--purge keeps an entry for each address to allow their reallaction
2008-06-04 13:18:55 +00:00
Andreas Steffen
f9b1bcad24
do not list empty certuribase strings
2008-05-24 05:47:37 +00:00
Andreas Steffen
7dfb8a1bde
fix caption alignment if date is displayed in local time
2008-05-23 19:21:08 +00:00
Martin Willi
7624dbf068
process payload length more strictly
2008-05-23 18:23:17 +00:00
Martin Willi
5e17e35c8d
fixed some compiler warnings
2008-05-23 15:49:43 +00:00
Andreas Steffen
c7d81ad12c
added --utc option to ipsec pool
2008-05-23 15:46:25 +00:00
Martin Willi
de3d65a132
filtering out non matching path probing pairs explicitly
2008-05-23 15:43:42 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
eaa1399812
fixed the strongswan.conf path
2008-05-22 21:59:30 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Andreas Steffen
be1585c587
log received DH groups and PRFs if no common proposal is found
2008-05-22 14:18:44 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Tobias Brunner
31430acc1b
correctly initialize the mediation and connection manager
2008-05-22 11:33:35 +00:00
Martin Willi
e1d2435dbf
fixed parsing of UNKNOWN_PAYLOADs
2008-05-21 21:53:38 +00:00
Andreas Steffen
0005cee527
fixed typo
2008-05-21 21:52:59 +00:00
Martin Willi
85a119bc0b
replying to COOKIE2 mobike notify properly
...
including COOKIE2 ourself after path probing
2008-05-21 17:56:21 +00:00
Martin Willi
cb9edc54eb
using fixed size keys in key derivation for AES-XCBC PRF
2008-05-21 14:58:03 +00:00
Andreas Steffen
8bbb212f3a
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
2008-05-20 21:54:33 +00:00
Martin Willi
da1bc5e860
fixed loading of smp plugin
2008-05-19 14:20:07 +00:00
Tobias Brunner
6f2ba57a4e
added a fixup for addresses from shared libraries in segmentation fault handler
2008-05-19 12:49:35 +00:00
Tobias Brunner
68ac3b44d1
fixed a bug introduced in [3973]
2008-05-19 08:48:44 +00:00
Andreas Steffen
a327ee9589
suppress listing of integrity algorithm if it is undefined
2008-05-17 21:52:58 +00:00
Andreas Steffen
15c508c708
ccm and gcm icv_sizes are accepted both in bits and octets
2008-05-17 21:51:47 +00:00
Tobias Brunner
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
2008-05-16 13:27:21 +00:00
Martin Willi
99968bf0a0
fixed plugin names of EAP modules
2008-05-16 12:14:48 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Martin Willi
89658f6d6c
static leases use 0, not NULL timeout
...
fixed static leases
2008-05-15 09:26:47 +00:00
Martin Willi
782db7edd1
prototype of mediation client database plugin
2008-05-14 07:26:19 +00:00
Martin Willi
0fd4caea66
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
2008-05-14 06:49:31 +00:00
Martin Willi
4d4fc2eaa1
fixed "pool --purge" on mysql
2008-05-13 07:39:24 +00:00
Martin Willi
5373f2a642
fixed lookup for expired leases
...
initializing database if in inconsistent state
2008-05-13 07:24:53 +00:00
Andreas Steffen
f85d02a419
fixed typos
2008-05-11 20:36:14 +00:00
Andreas Steffen
95c297b580
added missing ipcomp DB type definition
2008-05-11 16:41:51 +00:00
Martin Willi
6cf1215e3c
ported IP pool to mysql
2008-05-09 15:01:22 +00:00
Martin Willi
7051ef4091
usable prototype of "ipsec pool" tool
2008-05-09 12:55:41 +00:00
Martin Willi
f3bcd7f041
correctly reassigning valid leases
2008-05-09 12:22:20 +00:00