Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Martin Willi
f061d83358
ported NM plugin to upstream NetworkManager changes
...
splitted secrets (4031)
using uuid in auth-dialog (4053)
2008-09-12 13:28:31 +00:00
Martin Willi
1d03954aad
NM plugin supports (encrypted) private key files
2008-09-05 13:26:58 +00:00
Andreas Steffen
07d7f9a402
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
2008-09-04 16:19:46 +00:00
Martin Willi
0c6a489046
fixed some translations/encoding
2008-09-04 13:51:35 +00:00
Martin Willi
f0e8a8f7f3
an initial German translation for NM plugin
2008-09-04 13:39:37 +00:00
Martin Willi
82840e6c92
reduced nm verbosity
2008-09-04 10:35:20 +00:00
Martin Willi
aff26a62c3
implemented NetworkManager certificate/private key authentication using ssh-agent
2008-09-04 08:40:37 +00:00
Martin Willi
994ed35312
added a configure option to select charon binary
2008-09-04 08:37:31 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Martin Willi
eb3e27059b
use libcap for capability dropping
...
optional, must be enabled --with-capabilities=libcap
will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
Andreas Steffen
8fa6f2dc66
streamlined ipsec listalgs output
2008-08-29 05:35:09 +00:00
Martin Willi
e609b1cda2
capability API to allow plugin-controlled capability set
2008-08-28 16:27:48 +00:00
Martin Willi
dc98e50153
cosmetics
2008-08-28 11:15:01 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Martin Willi
ee210ca353
check user account validity after PAM authentication
2008-08-27 13:48:54 +00:00
Andreas Steffen
41dc6b56b0
ipsec statusall lists eap_type and eap_identity
2008-08-26 19:45:44 +00:00
Martin Willi
281dd55891
using strongSwan, not NetworkManager version number
2008-08-26 14:27:53 +00:00
Martin Willi
be49236373
fixing charon path for now for ubuntu package
2008-08-26 14:27:12 +00:00
Andreas Steffen
919019b3cd
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
2008-08-26 05:15:34 +00:00
Andreas Steffen
3c87e92695
list CA restrictions in ipsec statusall
2008-08-25 12:35:18 +00:00
Martin Willi
f6ecd44fc6
added NM gnome plugin to distribution
2008-08-25 08:21:51 +00:00
Martin Willi
c1ee908e4c
removed generated Makefile.in.in from svn
2008-08-25 08:15:57 +00:00
Martin Willi
a88aae3df6
enforce DN of configured gateway certificate
2008-08-25 07:50:21 +00:00
Martin Willi
7945c90adb
new EAP-Identity handling uses ID_EAP in plugins
2008-08-25 07:49:48 +00:00
Martin Willi
1a109c9fc6
disabled PSK option until we have a way to enforce strong secrets
2008-08-25 07:48:11 +00:00
Martin Willi
1995f79f10
use username part of RFC822 IDs for PAM authentication
2008-08-25 07:47:16 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Martin Willi
5ba7efb083
pool names are unique
2008-08-22 07:38:59 +00:00
Martin Willi
b848f0377c
fixed EAP-GTC secret lookup
...
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
2008-08-21 14:40:03 +00:00
Martin Willi
1caa265c61
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
2008-08-21 12:10:07 +00:00
Martin Willi
bdbf3c49fc
some string fixes
2008-08-20 13:59:37 +00:00
Martin Willi
6368a58ffc
added missing tooltip
2008-08-20 12:02:53 +00:00
Martin Willi
1b9f6c2410
handle DBUS permission problems gracefully
2008-08-20 11:44:47 +00:00
Martin Willi
142eaea43c
fixed shared key lookup by ID
...
proper auth method selection
2008-08-20 08:51:18 +00:00
Martin Willi
592dc30108
fixed auth-dialog password flush
2008-08-20 08:49:47 +00:00
Martin Willi
ec24987164
certificate based gateway authentication
...
prototype PSK user authentication with auth-dialog
2008-08-19 15:19:45 +00:00
Martin Willi
62556b2b45
updated nm plugin to NetworkManager API changes
2008-08-18 11:59:19 +00:00
Martin Willi
39c0ae3780
configuration plugin for NetworkManager
2008-07-31 15:07:52 +00:00
Martin Willi
092a9b88ad
added options for virtual IP, UDP encapsulation, IPComp
...
proper handling of libstrongswan/glib TRUE/FALSE conflict
2008-07-31 14:32:11 +00:00
Martin Willi
6dbce9c803
reimplemented dbus plugin for NetworkManager 0.7, renamed to nm
2008-07-31 11:16:14 +00:00
Martin Willi
2d87903db9
recreating FIFO if it exists
2008-07-31 09:04:54 +00:00
Martin Willi
eb04645c10
fixed usage typo
2008-07-31 09:01:56 +00:00
Martin Willi
19ad10b5d3
increased stroke socket backlog to 10
2008-07-30 14:17:05 +00:00
Martin Willi
38a8e39739
using shared read locks in credential set enumerators to avoid deadlocks
2008-07-30 11:38:44 +00:00
Martin Willi
6ef70d2109
added tests.h to distribution
2008-07-24 12:48:36 +00:00
Martin Willi
b6bf863459
fixed UCI thread cancellation on ARM
2008-07-24 08:52:12 +00:00
Martin Willi
3bc5a137cb
added option charon.plugins.sql.lease_history to disable lease history logging
2008-07-24 08:28:45 +00:00
Martin Willi
875a8326b3
fixed statistic calcuation for static leases
2008-07-24 08:21:55 +00:00
Martin Willi
a01ad99341
fixed pool statistics
2008-07-23 13:56:07 +00:00