 Andreas Steffen
|
41b1cd6b87
|
wait 5 seconds before deactivating eth1 interface on alice
|
2008-10-07 04:56:50 +00:00 |
|
|
Andreas Steffen
|
e8c58d8e64
|
explicitly load kernel-netlink plugin in UML scenarios
|
2008-10-07 04:51:20 +00:00 |
|
|
Andreas Steffen
|
09d7ef2614
|
added --disable-kernel-netlink configure option
|
2008-10-03 03:27:42 +00:00 |
|
|
Andreas Steffen
|
414caff027
|
version bump to 4.2.8
|
2008-09-18 00:42:22 +00:00 |
|
|
Andreas Steffen
|
b37cda8211
|
completed NEWS for 4.2.7 release
|
2008-09-18 00:34:31 +00:00 |
|
|
Andreas Steffen
|
b33c11b6c7
|
stroke parses and lists AC groups
|
2008-09-17 02:17:01 +00:00 |
|
|
Andreas Steffen
|
07d7f9a402
|
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
|
2008-09-04 16:19:46 +00:00 |
|
|
Andreas Steffen
|
60055b7e1c
|
charon.keep_alive = 0 disables the sending of NAT keep alives
|
2008-09-03 19:00:08 +00:00 |
|
|
Andreas Steffen
|
3dfecde4c0
|
configure NAT keep alive interval using the charon.keep_alive key
|
2008-09-03 18:49:06 +00:00 |
|
|
Andreas Steffen
|
4da0116d78
|
OIDs used by strongSwan
|
2008-09-01 11:38:03 +00:00 |
|
|
Andreas Steffen
|
1a4d27c854
|
added thread_analysis tool
|
2008-09-01 11:19:07 +00:00 |
|
|
Andreas Steffen
|
8fa6f2dc66
|
streamlined ipsec listalgs output
|
2008-08-29 05:35:09 +00:00 |
|
|
Andreas Steffen
|
a9bb69c8a8
|
version bump to 4.2.7
|
2008-08-27 12:01:57 +00:00 |
|
|
Andreas Steffen
|
9f9d6ece39
|
my changes for the 4.2.6 release
|
2008-08-27 07:19:40 +00:00 |
|
|
Andreas Steffen
|
2c6dced953
|
added ikev2/rw-eap-aka-identity scenario
|
2008-08-26 20:02:58 +00:00 |
|
|
Andreas Steffen
|
a44d02627f
|
cosmetics
|
2008-08-26 19:54:47 +00:00 |
|
|
Andreas Steffen
|
41dc6b56b0
|
ipsec statusall lists eap_type and eap_identity
|
2008-08-26 19:45:44 +00:00 |
|
|
Andreas Steffen
|
a625146517
|
enable-eap-identity in UML scenarios
|
2008-08-26 19:17:14 +00:00 |
|
|
Andreas Steffen
|
d9fc51387d
|
added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenarios
|
2008-08-26 05:34:33 +00:00 |
|
|
Andreas Steffen
|
919019b3cd
|
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
|
2008-08-26 05:15:34 +00:00 |
|
|
Andreas Steffen
|
bafb220857
|
adapted sql/rw-eap-aka-rsa scenario to new EAP identity type
|
2008-08-25 13:52:26 +00:00 |
|
|
Andreas Steffen
|
3c87e92695
|
list CA restrictions in ipsec statusall
|
2008-08-25 12:35:18 +00:00 |
|
|
Andreas Steffen
|
dc6a2edd0d
|
corrected caption
|
2008-08-21 11:58:58 +00:00 |
|
|
Andreas Steffen
|
5cd07d18a3
|
charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE events. Useful for taking down hundreds of virtual IPs on the same host
|
2008-08-21 11:55:16 +00:00 |
|
|
Andreas Steffen
|
59bb33e1e0
|
set version back to 4.2.6
|
2008-08-19 18:53:15 +00:00 |
|
|
Andreas Steffen
|
af165431d2
|
fixed libstrongswan integrity test
|
2008-08-19 18:51:30 +00:00 |
|
|
Andreas Steffen
|
7cdf728586
|
do not fire a roam job when virtual IP is deleted
|
2008-08-15 19:15:52 +00:00 |
|
|
Andreas Steffen
|
26fd3f0057
|
temporary workaround to prevent roam jobs due to virtual IP installations
|
2008-08-11 19:04:48 +00:00 |
|
|
Andreas Steffen
|
9f1ec81290
|
corrected typo
|
2008-08-11 18:40:22 +00:00 |
|
|
Andreas Steffen
|
990ebd4a75
|
added ipv6/net2net-ip6-in-ip6-ikev2 scenario
|
2008-08-06 20:40:14 +00:00 |
|
|
Andreas Steffen
|
249a90af98
|
add additional scenario diagrams
|
2008-08-06 20:35:42 +00:00 |
|
|
Andreas Steffen
|
342c84ddec
|
initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates
|
2008-08-05 09:05:57 +00:00 |
|
|
Andreas Steffen
|
ea36a1f159
|
fixed improper TAILQ fix which caused pluto to segfault
|
2008-08-03 18:01:21 +00:00 |
|
|
Andreas Steffen
|
619998b3ac
|
corrected caption
|
2008-08-01 12:59:08 +00:00 |
|
|
Andreas Steffen
|
7ebac6728b
|
Redhat/Fedora requires var/lock/subsys/ipsec for runlevel changes
|
2008-08-01 12:04:35 +00:00 |
|
|
Andreas Steffen
|
573fd9ce03
|
ipsec starter gives the charon daemon 8s to terminate gracefully before killing the process brutally
|
2008-08-01 10:35:59 +00:00 |
|
|
Andreas Steffen
|
181abd3fdd
|
fixed the close_peerlog() bug causing ipsec pluto --help to segfault
|
2008-08-01 10:12:33 +00:00 |
|
|
Andreas Steffen
|
f5a0d968fc
|
added keyid2sql helper script
|
2008-07-29 19:46:39 +00:00 |
|
|
Andreas Steffen
|
ce91f67f60
|
starter now waits for a maximum of 10s instead of 1s for charon before restarting the daemon
|
2008-07-29 19:44:54 +00:00 |
|
|
Andreas Steffen
|
98ba96f185
|
demoted IKE state change output to debug level 2
|
2008-07-28 14:01:45 +00:00 |
|
|
Andreas Steffen
|
3fd9c75717
|
ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier
|
2008-07-28 13:53:04 +00:00 |
|
|
Andreas Steffen
|
5c96dab653
|
version bump to 4.2.6
|
2008-07-28 09:14:07 +00:00 |
|
|
Andreas Steffen
|
2863509616
|
updated UML INSTALL information
|
2008-07-25 10:30:53 +00:00 |
|
|
Andreas Steffen
|
77a06476dc
|
adapted UML scenarios to improved virtual IP address pool
|
2008-07-25 10:18:23 +00:00 |
|
|
Andreas Steffen
|
cae0c12d53
|
SQLite database template with improved address pool management
|
2008-07-25 08:02:53 +00:00 |
|
|
Andreas Steffen
|
8124e49148
|
added changes for the 4.2.5 release
|
2008-07-25 08:00:04 +00:00 |
|
|
Andreas Steffen
|
f6facbe75c
|
completed IKE_SA logging at the AUDIT level
|
2008-07-23 18:46:34 +00:00 |
|
|
Andreas Steffen
|
6410231335
|
IKE_SA rekeying inherits other_host from old IKE_SA
|
2008-07-23 07:44:26 +00:00 |
|
|
Andreas Steffen
|
0eede4a31f
|
cosmetics
|
2008-07-23 06:38:24 +00:00 |
|
|
Andreas Steffen
|
295826b9f0
|
start default strongSwan UML topology
|
2008-07-22 17:21:01 +00:00 |
|
|
Andreas Steffen
|
51c8f8261f
|
some more changes to IKE_SA and CHILD_SA logging
|
2008-07-22 17:10:10 +00:00 |
|
|
Andreas Steffen
|
32f5ee159e
|
cosmetics
|
2008-07-22 12:13:48 +00:00 |
|
|
Andreas Steffen
|
66da78b4bb
|
ipsec status lists IPCOMP CPIs
|
2008-07-22 12:03:58 +00:00 |
|
|
Andreas Steffen
|
c3967e779e
|
own CPI was not deleted due to copy-and-paste error
|
2008-07-22 10:53:56 +00:00 |
|
|
Andreas Steffen
|
eba7470b76
|
consistent logging of SPIs and CPIs
|
2008-07-22 10:16:45 +00:00 |
|
|
Andreas Steffen
|
7db7d06e28
|
missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenario
|
2008-07-22 06:24:00 +00:00 |
|
|
Andreas Steffen
|
af18c84ffb
|
display protoport in dynamic/32 traffic selectors
|
2008-07-21 19:08:03 +00:00 |
|
|
Andreas Steffen
|
fb34475b5c
|
consistent logging of IKE and CHILD SAs
|
2008-07-21 12:47:59 +00:00 |
|
|
Andreas Steffen
|
bb7b613b83
|
eliminated bashisms in _updown scripts
|
2008-07-18 10:04:40 +00:00 |
|
|
Andreas Steffen
|
08ab369b8c
|
included Thomas in copyright statement
|
2008-07-16 12:28:29 +00:00 |
|
|
Andreas Steffen
|
519e87b078
|
updated copyright statement
|
2008-07-16 10:17:04 +00:00 |
|
|
Andreas Steffen
|
872aa6ea51
|
fixed bashism in ipsec.in
|
2008-07-16 06:59:08 +00:00 |
|
|
Andreas Steffen
|
326bfd0450
|
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
|
2008-07-15 21:35:55 +00:00 |
|
|
Andreas Steffen
|
de5f70e74d
|
typo
|
2008-07-15 15:31:34 +00:00 |
|
|
Andreas Steffen
|
eb0cc33886
|
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
|
2008-07-15 15:28:00 +00:00 |
|
|
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
|
|
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
|
|
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
|
|
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
|
|
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
|
|
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
|
|
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
|
|
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
|
|
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
|
|
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
|
|
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
|
|
Andreas Steffen
|
8997db6a99
|
added ikev2/ip-two-pools-db scenario
|
2008-07-01 15:16:28 +00:00 |
|
|
Andreas Steffen
|
556e426fd8
|
renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP
|
2008-07-01 13:47:26 +00:00 |
|
|
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
|
|
Andreas Steffen
|
9d1f86cf1a
|
added sql/rw-eap-aka-rsa scenario
|
2008-06-30 07:24:55 +00:00 |
|
|
Andreas Steffen
|
1b7db64f6f
|
configure plugin path in scripts
|
2008-06-29 14:43:50 +00:00 |
|
|
Andreas Steffen
|
39b7780df9
|
created scripts/Makefile.am
|
2008-06-29 13:57:00 +00:00 |
|
|
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
|
|
Andreas Steffen
|
dc04f16e26
|
corrected vendor_id_payload diagram
|
2008-06-27 15:22:27 +00:00 |
|
|
Andreas Steffen
|
9de95037a0
|
corrected some NEWS entries
|
2008-06-26 13:50:54 +00:00 |
|
|
Andreas Steffen
|
f234c83612
|
corrected description of openssl/ike-alg-ecp-high scenario
|
2008-06-26 13:49:48 +00:00 |
|
|
Andreas Steffen
|
615611afc1
|
version bump to 4.2.5
|
2008-06-26 09:59:55 +00:00 |
|
|
Andreas Steffen
|
6567648616
|
check migration of ESP sequence numbers in MOBIKE scenarios
|
2008-06-26 09:46:23 +00:00 |
|
|
Andreas Steffen
|
e25bedb722
|
use ip xfrm with the detailed -s option
|
2008-06-26 09:41:22 +00:00 |
|
|
Andreas Steffen
|
e0bb4dbbfe
|
mention ESP sequence number updates
|
2008-06-26 08:44:59 +00:00 |
|
|
Andreas Steffen
|
73a8eed31c
|
updated NEWS for the imminent 4.2.4 release
|
2008-06-25 08:41:16 +00:00 |
|
|
Andreas Steffen
|
7c8eff1eaa
|
cosmetics
|
2008-06-23 09:08:49 +00:00 |
|
|
Andreas Steffen
|
7f6d8d5172
|
set version to 4.2.4
|
2008-06-22 18:08:37 +00:00 |
|
|
Andreas Steffen
|
63265f0e58
|
generate CRL for strongSwan EC Root CA
|
2008-06-22 17:56:42 +00:00 |
|
|
Andreas Steffen
|
0d12006def
|
support of ECDSA signatures for all certificate types
|
2008-06-22 17:41:07 +00:00 |
|
|
Andreas Steffen
|
3af698fa4d
|
added openssl/ecdsa-certs scenario
|
2008-06-22 16:54:45 +00:00 |
|
|
Andreas Steffen
|
1bd02e864c
|
added strongSwan EC Root CA
|
2008-06-22 16:41:00 +00:00 |
|
|
Andreas Steffen
|
867aae5d76
|
remove ikev2/nat-pf scenario
|
2008-06-22 11:41:49 +00:00 |
|
|
Andreas Steffen
|
11f7d0f9fa
|
check for selected IKE proposal
|
2008-06-22 11:26:37 +00:00 |
|
|
Andreas Steffen
|
bc997f6583
|
display selected IKE proposal in ipsec statusall
|
2008-06-22 11:24:33 +00:00 |
|