 Andreas Steffen
|
cde633d632
|
all x509 based sql scenarios require the revocation plugin
|
2010-07-15 23:19:52 +02:00 |
|
|
Andreas Steffen
|
c349a68b2e
|
all x509 based pfkey scenarios require the revocation plugin
|
2010-07-15 23:17:37 +02:00 |
|
|
Andreas Steffen
|
f5731b4579
|
all x509 based p2pnat scenarios require the revocation plugin
|
2010-07-15 23:07:12 +02:00 |
|
|
Andreas Steffen
|
295d9cc313
|
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
|
2010-07-15 23:02:17 +02:00 |
|
|
Andreas Steffen
|
84fe65bd43
|
all x509 based ike scenarios require the revocation plugin
|
2010-07-15 22:40:20 +02:00 |
|
|
Andreas Steffen
|
001787b3eb
|
all x509 based openssl-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:33:05 +02:00 |
|
|
Andreas Steffen
|
6c2bd2a7d8
|
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:03:16 +02:00 |
|
|
Andreas Steffen
|
2cf4d34f2f
|
all x509 based ikev2 scenarios require the revocation plugin
|
2010-07-15 21:39:01 +02:00 |
|
|
Andreas Steffen
|
afe5d482db
|
ikev2/net2net-psk-dscp does not need certificate support
|
2010-07-15 21:37:45 +02:00 |
|
|
Andreas Steffen
|
a3527c39dd
|
add revocation plugin to ikev2/rw-cert scenario
|
2010-07-15 20:03:11 +02:00 |
|
|
Andreas Steffen
|
3de510ca43
|
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
|
2010-07-15 06:29:26 +02:00 |
|
|
Andreas Steffen
|
fccf00576f
|
activate --enable-addrblock configure option in UML scenarios
|
2010-07-13 21:04:20 +02:00 |
|
|
Andreas Steffen
|
d5f29da3d2
|
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
|
2010-07-13 09:15:53 +02:00 |
|
|
Andreas Steffen
|
c1918dc28f
|
we need some ordering
|
2010-07-12 22:44:27 +02:00 |
|
|
Andreas Steffen
|
c13a4b4030
|
changed ordering of statusattr output
|
2010-07-12 22:38:18 +02:00 |
|
|
Andreas Steffen
|
bb021fbbc9
|
updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes
|
2010-07-12 20:54:40 +02:00 |
|
|
Andreas Steffen
|
1cecc6a6ef
|
fixed alignment of caption
|
2010-07-12 20:48:14 +02:00 |
|
|
Andreas Steffen
|
ab635e029e
|
updated SQL templates to support attribute pool and identity parameters
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
cb0a9d58a3
|
output identities correctly
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
5047fe7ad3
|
added second example scenario
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
db4ad736be
|
transport reqid, mark_in and mark_out in whack message
|
2010-07-09 12:19:39 +02:00 |
|
|
Andreas Steffen
|
f65e0dc80f
|
added ikev2/net2net-psk-dscp2 DiffServ scenario
|
2010-07-09 11:55:01 +02:00 |
|
|
Andreas Steffen
|
9f94906815
|
added ikev2/nat-two-rw-mark-in-out scenario
|
2010-07-09 09:36:03 +02:00 |
|
|
Andreas Steffen
|
bcf608c848
|
some changes to the ikev2/nat-two-rw-mark scenario
|
2010-07-09 09:35:02 +02:00 |
|
|
Andreas Steffen
|
26c4d0102a
|
configuration of different marks for inbound and outbound direction
|
2010-07-09 09:06:07 +02:00 |
|
|
Andreas Steffen
|
a729d17afa
|
added req parameter to ipsec.conf man page
|
2010-07-06 20:32:33 +02:00 |
|
|
Andreas Steffen
|
ec40c02ad2
|
added IKEv2 xfrm marks support to NEWS
|
2010-07-03 22:14:45 +02:00 |
|
|
Andreas Steffen
|
36b3c0a8dd
|
regenerated loop intermediate CA certificates
|
2010-07-03 18:18:30 +02:00 |
|
|
Andreas Steffen
|
342fc85e9e
|
added ikev2/nat-two-rw-mark scenario
|
2010-07-03 13:25:09 +02:00 |
|
|
Andreas Steffen
|
ee26c537d7
|
support of xfrm marks for IKEv2
|
2010-07-02 23:46:09 +02:00 |
|
|
Andreas Steffen
|
b3f65304ba
|
check for installed aead algorithms in kernel
|
2010-06-27 22:26:00 +02:00 |
|
|
Andreas Steffen
|
f031e41bea
|
upgraded xfrm.h to linux-2.6.34
|
2010-06-27 11:23:35 +02:00 |
|
|
Andreas Steffen
|
5d4c258de7
|
refer to correct PLUTO_XAUTH_ID variable
|
2010-06-09 15:21:26 +02:00 |
|
|
Andreas Steffen
|
fcfd54acde
|
rename environment variable to PLUTO_XAUTH_ID
|
2010-06-08 23:18:51 +02:00 |
|
|
Andreas Steffen
|
611368339b
|
do not destroy xauth_id if phase2 equals phase1 connection
|
2010-06-08 23:18:00 +02:00 |
|
|
Andreas Steffen
|
964f6372cc
|
make an optional XAUTH user ID available in the updown script
|
2010-06-08 17:50:22 +02:00 |
|
|
Andreas Steffen
|
39e3b58fe4
|
use --addattr
|
2010-06-05 13:49:01 +02:00 |
|
|
Andreas Steffen
|
88613f159d
|
use --addattr
|
2010-06-05 13:47:23 +02:00 |
|
|
Andreas Steffen
|
4321d19d1e
|
added ikev2/nat-virtual-ip scenario
|
2010-06-05 13:42:28 +02:00 |
|
|
Andreas Steffen
|
b2be7dd621
|
remove stray carolReq.pem
|
2010-06-05 13:36:39 +02:00 |
|
|
Andreas Steffen
|
5a9a255ae5
|
share pool in ikev1/mode-config-multiple scenario
|
2010-06-05 13:17:51 +02:00 |
|
|
Andreas Steffen
|
6d989d356b
|
use --addattr
|
2010-06-05 13:15:03 +02:00 |
|
|
Andreas Steffen
|
bdd28aa9c5
|
remove stray scenario files
|
2010-06-05 13:10:39 +02:00 |
|
|
Andreas Steffen
|
c77f4b305e
|
fixed configuration attribute type determination
|
2010-06-02 11:52:17 +02:00 |
|
|
Andreas Steffen
|
616b13c7a5
|
ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known
|
2010-06-01 16:47:56 +02:00 |
|
|
Andreas Steffen
|
185d8b7335
|
added unity_def_domain keyword tip ipsec pool
|
2010-05-31 16:47:06 +02:00 |
|
|
Andreas Steffen
|
d9c751daac
|
added --leases command line option to synopsis
|
2010-05-29 13:29:23 +02:00 |
|
|
Andreas Steffen
|
751379e5e8
|
added --showattr command line option to synopsys
|
2010-05-29 13:23:20 +02:00 |
|
|
Andreas Steffen
|
3561cc4b3b
|
added X.509 support by openssl plugin to NEWS
|
2010-05-29 11:22:36 +02:00 |
|
|
Andreas Steffen
|
5b6200888b
|
remove x509 plugin from openssl-ikev1 scenarios
|
2010-05-28 23:22:15 +02:00 |
|
|
Andreas Steffen
|
e8960c2a99
|
be lenient towards wrong attribute encodings
|
2010-05-28 15:07:21 +02:00 |
|
|
Andreas Steffen
|
bd371ccac7
|
remove x509 plugin from remaining openssl-ikev2 scenarios
|
2010-05-25 15:49:58 +02:00 |
|
|
Andreas Steffen
|
2996cb3163
|
openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more
|
2010-05-25 15:26:46 +02:00 |
|
|
Andreas Steffen
|
e2bd6b616e
|
several subnets can be concatenated
|
2010-05-22 22:53:24 +02:00 |
|
|
Andreas Steffen
|
2111dc1b84
|
added --showattr command to usage()
|
2010-05-22 10:46:15 +02:00 |
|
|
Andreas Steffen
|
3e3059ba7c
|
oops, removed stray parenthesis
|
2010-05-20 17:39:10 +02:00 |
|
|
Andreas Steffen
|
36c1650b19
|
range check for configuration attribute types
|
2010-05-20 17:35:10 +02:00 |
|
|
Andreas Steffen
|
c2d10df6e7
|
implement ipsec pool -showattr function
|
2010-05-20 17:24:43 +02:00 |
|
|
Andreas Steffen
|
05f1096cd8
|
removed deprecated use of ipsec pool --attr|del dns|nbns from usage()
|
2010-05-20 16:30:15 +02:00 |
|
|
Andreas Steffen
|
c5c6f9b6da
|
added ipsec pool attribute support to NEWS
|
2010-05-19 21:53:55 +02:00 |
|
|
Andreas Steffen
|
ad6dbc41e5
|
management of any attribute by ipsec pool
|
2010-05-19 21:51:21 +02:00 |
|
|
Andreas Steffen
|
b596f4f260
|
updated ikev1/rw-cert scenario to support xauth integrity test
|
2010-05-19 08:31:39 +02:00 |
|
|
Andreas Steffen
|
f71cb4777e
|
checksum_builder() needs the pluto symbol
|
2010-05-19 08:02:22 +02:00 |
|
|
Andreas Steffen
|
73434ce9eb
|
updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin
|
2010-05-18 22:57:12 +02:00 |
|
|
Andreas Steffen
|
1fe5d973cb
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:56:42 +02:00 |
|
|
Andreas Steffen
|
17adc8d074
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:48:37 +02:00 |
|
|
Andreas Steffen
|
ab0ecb7dd9
|
register virtual IPs under the XAUTH identity
|
2010-05-18 22:41:22 +02:00 |
|
|
Andreas Steffen
|
efde96b38e
|
updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin
|
2010-05-18 20:20:55 +02:00 |
|
|
Andreas Steffen
|
4f1110ab7b
|
created ikev1/xauth-id-psk scenario
|
2010-05-18 20:04:52 +02:00 |
|
|
Andreas Steffen
|
dc5d63a599
|
updated ikev1/xauth-psk scenario to support xauth plugin
|
2010-05-18 20:04:02 +02:00 |
|
|
Andreas Steffen
|
8d7fffc942
|
clarified secret loading debug output
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
8ebc3da64c
|
updated ikev1/xauth-rsa-fail scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
2549ff7849
|
created ikev1/xauth-id-rsa scenario using XAUTH identities
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
0a6085b13e
|
updated ikev1/xauth-rsa scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
26ec52a405
|
implemented xauth as a pluto plugin
|
2010-05-18 13:51:27 +02:00 |
|
|
Andreas Steffen
|
ee1bdd85d3
|
it's too late on Saturday evening
|
2010-05-15 18:52:59 +02:00 |
|
|
Andreas Steffen
|
3399c3dca0
|
roll back some changes
|
2010-05-15 18:48:35 +02:00 |
|
|
Andreas Steffen
|
31b39e5f7c
|
encoding of MODE_TUNNEL changed
|
2010-05-15 18:36:14 +02:00 |
|
|
Andreas Steffen
|
20ae6eccf5
|
the keyid is a subjectKeyIdentifier
|
2010-05-15 17:03:04 +02:00 |
|
|
Andreas Steffen
|
ccfd54e68d
|
fixed keyids in sql/rw-psk-rsa-split scenario
|
2010-05-15 16:55:08 +02:00 |
|
|
Andreas Steffen
|
4636f1579c
|
fixed keyids in sql/rw-eap-aka-rsa scenario
|
2010-05-15 16:44:53 +02:00 |
|
|
Andreas Steffen
|
88e180489a
|
fixed keyids in sql/rw-cert scenario
|
2010-05-15 16:34:50 +02:00 |
|
|
Andreas Steffen
|
829b790e5b
|
fixed keyids in sql/net2net-cert scenario
|
2010-05-15 16:20:34 +02:00 |
|
|
Andreas Steffen
|
d147de932e
|
inserted newline
|
2010-05-15 16:13:22 +02:00 |
|
|
Andreas Steffen
|
c572f93ed7
|
fixed keyids in sql/ip-split-pools-db-restart scenario
|
2010-05-15 16:11:08 +02:00 |
|
|
Andreas Steffen
|
2948e3d0c2
|
fixed keyids in sql/ip-split-pools-db scenario
|
2010-05-15 13:40:11 +02:00 |
|
|
Andreas Steffen
|
1ae9353d8a
|
fixed keyids in sql/ip-pool-db-restart scenario
|
2010-05-15 13:22:49 +02:00 |
|
|
Andreas Steffen
|
f2c84bd890
|
fixed keyids in sql/ip-pool-db-expired scenario
|
2010-05-15 13:07:22 +02:00 |
|
|
Andreas Steffen
|
0ee2c5e9be
|
fixed keyids in sql/ip-pool-db scenario
|
2010-05-15 13:06:48 +02:00 |
|
|
Andreas Steffen
|
8143f10914
|
introduced xauth_identity keyword
|
2010-05-15 10:18:29 +02:00 |
|
|
Andreas Steffen
|
b8520ad50d
|
adapted evaltest of ikev1/ip-pool-db-push scenario to resolve plugin
|
2010-05-14 17:26:59 +02:00 |
|
|
Andreas Steffen
|
9e229e284f
|
adapted evaltest of ikev1/ip-pool-db scenario to resolve plugin
|
2010-05-14 17:20:28 +02:00 |
|
|
Andreas Steffen
|
03b5e4d8d7
|
refactoring of Mode Config functionality allows transport and handling of any attribute
|
2010-05-14 17:07:03 +02:00 |
|
|
Andreas Steffen
|
a273546854
|
adapted evaltest of ikev1/mode-config-push scenario to resolve plugin
|
2010-05-14 15:12:03 +02:00 |
|
|
Andreas Steffen
|
3cbf6db653
|
adapted evaltest to resolve plugin
|
2010-05-14 11:07:26 +02:00 |
|
|
Andreas Steffen
|
fb7de3a8bf
|
implemented support of resolve plugin
|
2010-05-08 16:09:02 +02:00 |
|
|
Andreas Steffen
|
c2651ff13d
|
include demux.h only once
|
2010-05-06 21:55:19 +02:00 |
|
|
Andreas Steffen
|
c158df0f23
|
already defined in attributes/attributes.h
|
2010-05-06 21:44:15 +02:00 |
|
|
Andreas Steffen
|
4eee16354b
|
include state.h only once
|
2010-05-06 21:35:00 +02:00 |
|
|
Andreas Steffen
|
3baf4922e2
|
removed stray file
|
2010-05-06 10:35:25 +02:00 |
|