Andreas Steffen
db61efdbbb
include default route also in src address evaluation
2007-07-13 09:00:39 +00:00
Andreas Steffen
018219ae3a
include default route with missing dst field into route evaluation
2007-07-13 06:13:14 +00:00
Andreas Steffen
0761886051
added to ipsec.conf installation path
2007-07-11 16:22:02 +00:00
Martin Willi
e5e868e430
doing route lookup in userspace to ignore routes installed by us
2007-07-11 12:37:24 +00:00
Martin Willi
9ba1d73890
using own routing table for installed routes (table 100, prio 100)
2007-07-11 06:55:11 +00:00
Andreas Steffen
92901c74f2
version bump to 4.1.5
2007-07-08 19:40:11 +00:00
Andreas Steffen
c520944800
version bump to 4.1.5
2007-07-08 19:08:31 +00:00
Martin Willi
19ff7d2207
added first draft of SMP relax-ng schema
2007-07-06 13:44:43 +00:00
Andreas Steffen
1fb704404b
execute conntrack -F at the outset
2007-07-04 18:55:54 +00:00
Andreas Steffen
13763a385c
suppress stderr in start-switches script
2007-07-04 18:50:21 +00:00
Andreas Steffen
0a46e963ff
added three mobike scenarios
2007-07-04 17:39:10 +00:00
Andreas Steffen
01a08cb2e7
output crl uri as a printable string instead of a binary blob
2007-07-04 13:36:41 +00:00
Andreas Steffen
ed0d8e8008
added entrustVersInfo OID
2007-07-04 12:11:38 +00:00
Martin Willi
fa1bd44f23
ignoring unkown crl/ocsp uris
2007-07-04 12:00:33 +00:00
Martin Willi
1b8da84913
using correct nexthop for inserted route
2007-07-04 09:10:13 +00:00
Martin Willi
29100db902
changed mobike behavior to NOT use additional responder addresses until we have path discovery
2007-07-04 07:26:34 +00:00
Martin Willi
419201c15d
fixed responder initiated CHILD_SA rekeying when using virtual IPs
2007-07-04 06:27:33 +00:00
Andreas Steffen
eea626ed25
describe eap option in ipsec.conf.5 man page
2007-07-04 05:42:58 +00:00
Andreas Steffen
ae4388dca0
cosmetics
2007-07-04 05:42:09 +00:00
Andreas Steffen
4f22a3e339
removed the ipsec.conf version number
2007-07-04 05:41:51 +00:00
Martin Willi
7b8bae9941
fixed firewall script invocation when interface is not available anymore
2007-07-03 13:49:29 +00:00
Andreas Steffen
959b01aca5
version bumps
2007-07-03 13:08:13 +00:00
Andreas Steffen
3ba90600f2
recognize strongswan-2.8.6 VID
2007-07-03 13:06:27 +00:00
Andreas Steffen
a0a0bdd727
starter bug fix and pkcs11initargs patch by Robert Varga
2007-07-03 12:51:29 +00:00
Martin Willi
3bc62fe70e
improved MOBIKE:
...
prefer address family already used
do not change address implicit when mobike supported
handle multiple simultaneous roaming requests more properly
proper enabling/disabling of UDP encapsulation
2007-07-03 12:32:38 +00:00
Andreas Steffen
dd0ee786db
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:33:02 +00:00
Andreas Steffen
e0e6137dd3
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:26:44 +00:00
Martin Willi
4979e85871
added message ID to message log
2007-07-03 09:00:16 +00:00
Martin Willi
cba7ba7f9d
show kind of notify contained in messages in log
2007-07-03 08:50:14 +00:00
Andreas Steffen
bcac22f3a6
DBG1 level for 'peer supports MOBIKE' debug message
2007-07-02 20:13:15 +00:00
Andreas Steffen
561f88e306
fixed typo
2007-07-02 20:10:26 +00:00
Andreas Steffen
066518270f
cosmetics
2007-07-02 17:56:04 +00:00
Andreas Steffen
fdd32ee6e5
fix of the bug fix, courtesy of Robert Varga
2007-07-02 17:48:30 +00:00
Andreas Steffen
2f806bd866
bug fix courtesy of Robert Varga
2007-07-02 17:42:16 +00:00
Martin Willi
e3606f2ba1
updated documentation files
2007-07-02 12:55:43 +00:00
Martin Willi
3d928c9ffd
fixed mobike address update from and to NAT
2007-07-02 12:55:07 +00:00
Andreas Steffen
c598ac6360
changes in uml configuration to allow mobike
2007-07-02 09:52:20 +00:00
Martin Willi
face844a87
proper update of IPsec SA when roaming a host-to-host tunnel
...
roaming of IPsec SAs using virtual IPs
2007-07-02 09:49:22 +00:00
Martin Willi
530dd57c6a
fixed memleak
2007-07-02 08:33:15 +00:00
Martin Willi
0d30da5dfd
updated charons architecture description
2007-06-29 09:21:28 +00:00
Martin Willi
ffbca197c1
fixed dpd=hold when using virtual IPs
2007-06-29 08:03:32 +00:00
Martin Willi
8ba7d34253
removed accidently checked in debbuging code
2007-06-29 07:40:04 +00:00
Andreas Steffen
cea6634fde
MobIKE requires iptables to open udp/4500
2007-06-28 21:33:51 +00:00
Andreas Steffen
b9212e5a93
MobIKE requires iptables to open udp/4500
2007-06-28 21:33:13 +00:00
Martin Willi
c532d6460d
fixed IKE_SA reestablishment after DPD using port 500
2007-06-28 15:24:24 +00:00
Andreas Steffen
c2bc2b2782
alphabetical order
2007-06-27 21:49:09 +00:00
Andreas Steffen
e0e7ef070d
separated pluto, charon, and klips setup config section parameters
2007-06-27 15:42:11 +00:00
Andreas Steffen
6a39bc4061
added passthrough scenario
2007-06-27 14:25:15 +00:00
Andreas Steffen
487fe29ee3
added lefthostaccess and leftprotoport parameters
2007-06-27 14:03:56 +00:00
Andreas Steffen
1fbdab8507
right=%<fqdn> wildcard added
2007-06-27 13:31:16 +00:00
Andreas Steffen