 Andreas Steffen
|
80c5b17d1a
|
make IKEv1 DPD timeout configurable in charon
|
2012-05-17 19:49:22 +02:00 |
|
|
Martin Willi
|
b24be29646
|
Merge branch 'ikev1'
Conflicts:
configure.in
man/ipsec.conf.5.in
src/libcharon/encoding/generator.c
src/libcharon/encoding/payloads/notify_payload.c
src/libcharon/encoding/payloads/notify_payload.h
src/libcharon/encoding/payloads/payload.c
src/libcharon/network/receiver.c
src/libcharon/sa/authenticator.c
src/libcharon/sa/authenticator.h
src/libcharon/sa/ikev2/tasks/ike_init.c
src/libcharon/sa/task_manager.c
src/libstrongswan/credentials/auth_cfg.c
|
2012-05-02 11:12:31 +02:00 |
|
|
Andreas Steffen
|
552557a65d
|
add AUTH_RULE_SUBJECT_CERT for raw public keys
|
2012-04-30 13:40:48 +02:00 |
|
|
Andreas Steffen
|
5f1931ada1
|
added support for raw RSA public keys to stroke
|
2012-04-30 00:31:42 +02:00 |
|
|
Tobias Brunner
|
7e84c4275c
|
Removed auth_cfg_t.replace_value() and replaced usages with add().
replace_value() was used to replace identities. Since for these the latest is
now returned by get(), adding the new identity with add() is sufficient.
|
2012-04-18 18:50:14 +02:00 |
|
|
Tobias Brunner
|
80067cf9e6
|
Store password with remote ID to tie it stronger to a specific connection.
|
2012-04-18 13:32:49 +02:00 |
|
|
Tobias Brunner
|
9f1b303afc
|
Added stroke user-creds command, to set username/password for a connection.
|
2012-04-17 14:20:58 +02:00 |
|
|
Martin Willi
|
c791def8c1
|
Added support for authby/xauth_server legacy options
|
2012-03-20 17:31:38 +01:00 |
|
|
Martin Willi
|
e129168ba6
|
Added a "aggressive" ipsec.conf connection option
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
5ce59d4c06
|
Added an aggressive mode peer_cfg option
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
d94c923648
|
Support an "any" IKE version for both IKEv1 or IKEv2
|
2012-03-20 17:31:25 +01:00 |
|
|
Martin Willi
|
21a4fc832e
|
Pass ipsec.conf xauth_identity option via stroke to charon configurations
|
2012-03-20 17:31:23 +01:00 |
|
|
Martin Willi
|
cbda13f6fe
|
Accept a xauth backend name appended to left/rightauth
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
96c9159d96
|
Use a second authentication config to configure XAUTH authentication
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
b4e815354c
|
Map auth_class to auth method and IKEv1 proposal attribute
|
2012-03-20 17:30:53 +01:00 |
|
|
Clavister OpenSource
|
23f4e4b42d
|
IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response.
|
2012-03-20 17:30:49 +01:00 |
|
|
Tobias Brunner
|
f7a8fcedc0
|
Use enum to define IKE version on peer_cfg_t.
Replaced all those magic numbers.
|
2012-03-20 17:30:41 +01:00 |
|
|
Andreas Steffen
|
f87991704e
|
implemented PASS and DROP shunt policies
|
2011-06-28 19:42:54 +02:00 |
|
|
Martin Willi
|
f34ebc845b
|
Add a closeaction ipsec.conf keyword to configure close action
|
2011-06-07 12:07:21 +02:00 |
|
|
Andreas Steffen
|
a2ebc1bd69
|
put DN in double quotes
|
2011-03-01 22:19:59 +01:00 |
|
|
Martin Willi
|
44e513a320
|
Added support for trustchain key strength checking to rightauth option
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
6367de28ad
|
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
6c302616f1
|
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
|
2010-12-20 09:45:39 +01:00 |
|
|
Martin Willi
|
37788b1d06
|
Added a TFC padding option to child_cfg
|
2010-12-20 09:45:39 +01:00 |
|
|
Andreas Steffen
|
a9ac8c51ea
|
Migrated stroke_config_t to INIT/METHOD macros
|
2010-11-27 01:12:58 +01:00 |
|
|
Tobias Brunner
|
f6659688ab
|
Refer to kernel interface via hydra and not charon.
|
2010-09-02 19:01:25 +02:00 |
|
|
Martin Willi
|
33b1a2567f
|
Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined
|
2010-08-31 18:10:23 +02:00 |
|
|
Martin Willi
|
64d7b0733f
|
Added support for the ipsec.conf aaa_identity keyword
|
2010-08-31 17:52:52 +02:00 |
|
|
Martin Willi
|
2ccc02a4fd
|
Moved credential manager to libstrongswan
|
2010-07-13 10:26:07 +02:00 |
|
|
Andreas Steffen
|
26c4d0102a
|
configuration of different marks for inbound and outbound direction
|
2010-07-09 09:06:07 +02:00 |
|
|
Martin Willi
|
4172574bfb
|
Use the group constraint in a more generic fashion, not only for attribute certificates
|
2010-07-05 09:41:04 +02:00 |
|
|
Andreas Steffen
|
ee26c537d7
|
support of xfrm marks for IKEv2
|
2010-07-02 23:46:09 +02:00 |
|
|
Reto Buerki
|
277fcf9f86
|
Add reqid field and getter function to child_cfg_t.
|
2010-05-04 14:38:34 +02:00 |
|
|
Tobias Brunner
|
08c5572602
|
Moving charon to libcharon.
|
2010-03-19 13:34:52 +01:00 |
|