denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,121 Commits 1 Branch 0 Tags
c117f24e61a204b1de6f784f174ae290f1876021
Commit Graph
56 Commits
Author SHA1 Message Date
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Andreas Steffen 61670ba284 support of %any address string 2008-11-05 04:53:45 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi a02bc1dbea updated location of auth_class_t 2008-06-24 13:36:10 +00:00
Andreas Steffen 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates 2008-06-10 20:31:53 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Andreas Steffen 496e76cbdf added RCSID 2007-10-08 19:57:54 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Andreas Steffen 3eb9630071 support of left|rightgroups parameter 2007-05-20 15:38:36 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Martin Willi a02ae4ccd5 using "left" as my host per default, swapping to "right" when needed 2007-02-15 12:13:18 +00:00
Andreas Steffen 06133e1de7 enabled adding and deleting ca information records 2007-02-14 01:02:09 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Andreas Steffen fb34660632 negated POLICY_REAUTH to POLICY_DONT_REAUTH 2006-12-21 20:05:08 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Andreas Steffen 923ee10eef solved 64 bit issue in push/pop stroke interface 2006-10-31 23:17:21 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Andreas Steffen 5d71e72db5 added hostaccess support 2006-09-25 05:46:56 +00:00
Andreas Steffen 4f383c6950 added auth_method field 2006-09-18 07:46:16 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up 
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
 2006-07-21 13:31:53 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Andreas Steffen b17e4d2bfd added support of updown parameter 2006-07-03 06:21:14 +00:00
Martin Willi 56f1a8f2d6 handling of "rekey=no" parameter added 2006-06-15 11:02:15 +00:00
Andreas Steffen 5347233204 support for stroke listcerts|listcacerts|listall and left|rightca= 2006-06-12 08:43:46 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Andreas Steffen ecadab2ba7 stroke now uses constant size string buffer 2006-05-29 07:14:57 +00:00