Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Andreas Steffen
8fa6f2dc66
streamlined ipsec listalgs output
2008-08-29 05:35:09 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Andreas Steffen
41dc6b56b0
ipsec statusall lists eap_type and eap_identity
2008-08-26 19:45:44 +00:00
Andreas Steffen
919019b3cd
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
2008-08-26 05:15:34 +00:00
Andreas Steffen
3c87e92695
list CA restrictions in ipsec statusall
2008-08-25 12:35:18 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Martin Willi
19ad10b5d3
increased stroke socket backlog to 10
2008-07-30 14:17:05 +00:00
Martin Willi
38a8e39739
using shared read locks in credential set enumerators to avoid deadlocks
2008-07-30 11:38:44 +00:00
Andreas Steffen
32f5ee159e
cosmetics
2008-07-22 12:13:48 +00:00
Andreas Steffen
66da78b4bb
ipsec status lists IPCOMP CPIs
2008-07-22 12:03:58 +00:00
Andreas Steffen
eba7470b76
consistent logging of SPIs and CPIs
2008-07-22 10:16:45 +00:00
Martin Willi
a4a3e0c7dc
introduced an additional bus->signal parameter for signal specific data
...
added SIG_IKE/SIG_CHD macros for signal emitting
2008-07-18 15:51:40 +00:00
Andreas Steffen
858a9fd584
update_peerid() does not accept %any as a certificate's subjectAltName
2008-07-09 22:13:39 +00:00
Andreas Steffen
2c258d7373
ipsec statusall displays dpd options
2008-07-02 10:48:57 +00:00
Martin Willi
131064995a
added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip
2008-07-01 12:48:56 +00:00
Andreas Steffen
5397a7f91d
show authentication method in ipsec statusall
2008-06-30 17:08:47 +00:00
Martin Willi
eec675bf8c
enumerating loaded plugins in "ipsec statusall"
2008-06-24 12:49:04 +00:00
Tobias Brunner
ad4d3f81c1
changed ipsec.secrets keyword EC to ECDSA
2008-06-24 06:57:47 +00:00
Andreas Steffen
7c8eff1eaa
cosmetics
2008-06-23 09:08:49 +00:00
Martin Willi
857ba3574b
fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active
2008-06-23 08:53:37 +00:00
Andreas Steffen
bc997f6583
display selected IKE proposal in ipsec statusall
2008-06-22 11:24:33 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Martin Willi
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
2008-06-06 15:05:54 +00:00
Andreas Steffen
f9b1bcad24
do not list empty certuribase strings
2008-05-24 05:47:37 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Andreas Steffen
a327ee9589
suppress listing of integrity algorithm if it is undefined
2008-05-17 21:52:58 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Martin Willi
0fd4caea66
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
2008-05-14 06:49:31 +00:00
Andreas Steffen
f85d02a419
fixed typos
2008-05-11 20:36:14 +00:00
Tobias Brunner
d4aad55434
IPComp for IKEv2
2008-05-08 16:19:11 +00:00
Martin Willi
25b12c696b
replaced --with-gid/uid by --with-group/user
...
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi
3444390241
supporting multiple comma seperated subnets in left/rightsubnet definition
...
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
Martin Willi
5e6bbf4f77
added _GNU_SOURCE and limits.h to build against glibc-2.8
2008-04-24 13:49:20 +00:00
Martin Willi
9213ad27c2
replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions
2008-04-24 13:26:22 +00:00
Andreas Steffen
1d5d6f9667
Hash and URL cosmetics
2008-04-18 21:27:08 +00:00
Tobias Brunner
6439267a8c
support for hash and URL encoded certificate payloads in charon
2008-04-18 11:24:45 +00:00
Andreas Steffen
8eeb796a51
changed logging of crl writing to old style
2008-04-17 20:23:31 +00:00
Martin Willi
b360e3933d
respecting ipsec.conf cachecrls= option
2008-04-17 15:01:57 +00:00
Martin Willi
d33fa48bc7
caching of CRLs to /etc/ipsec.d/crls
2008-04-17 14:08:38 +00:00
Martin Willi
2270b396b3
added missing credential_set method to stroke_ca
2008-04-17 13:00:05 +00:00
Martin Willi
233b853dfa
extended credential_set_t interface by a cache_cert() method
...
allows persistent or in-memory caching of fetched certificates
2008-04-17 11:22:37 +00:00
Martin Willi
e5617e40d1
adding rightsourceip=%poolname properly to peer config
2008-04-17 08:55:32 +00:00
Martin Willi
140ed97c0c
disable DPD if dpddelay is set but dpdaction=none
2008-04-16 05:50:56 +00:00
Martin Willi
6a365f0740
added API for random number generators, served through credential factory
...
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Martin Willi
0644ebd3de
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
...
additionally supports a "keep" value to keep the old IKE_SA
2008-04-14 13:23:24 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
348af092ac
added close_action as a seperate config option to dpd_action
2008-04-14 08:17:18 +00:00
Andreas Steffen