 Andreas Steffen
|
6b717cc28d
|
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
|
2010-08-05 12:47:09 +02:00 |
|
|
Andreas Steffen
|
7ea87db00d
|
added some more TLS debug output
|
2010-08-05 09:51:05 +02:00 |
|
|
Andreas Steffen
|
7030e3950a
|
fixed type in cipher suite list build
|
2010-08-05 01:26:10 +02:00 |
|
|
Andreas Steffen
|
4657b3a42a
|
log selected TLS version and cipher suite
|
2010-08-05 01:21:59 +02:00 |
|
|
Andreas Steffen
|
289c9ac3d7
|
log TLS handshake messages in debug level 2
|
2010-08-04 16:55:55 +02:00 |
|
|
Andreas Steffen
|
8e7920eea1
|
generated aaa certificate
|
2010-08-04 12:44:47 +02:00 |
|
|
Andreas Steffen
|
f8bb082f1f
|
added ikev2/rw-eap-tls-only scenario
|
2010-08-04 08:36:27 +02:00 |
|
|
Andreas Steffen
|
9dffc26b73
|
--enable eap-tls and --disable-load-warning in uml build
|
2010-08-04 07:48:19 +02:00 |
|
|
Andreas Steffen
|
50fb724ddd
|
delete tarball files
|
2010-07-30 22:27:41 +02:00 |
|
|
Andreas Steffen
|
b599b80013
|
version bump to 4.4.2
|
2010-07-30 22:26:14 +02:00 |
|
|
Andreas Steffen
|
ff7b0dd289
|
added NETMAP rules for the reverse direction
|
2010-07-27 21:16:44 +02:00 |
|
|
Andreas Steffen
|
c100dd6b5f
|
fixed description of ikev2/net2net-same-nets scenario
|
2010-07-27 20:50:28 +02:00 |
|
|
Andreas Steffen
|
c74c4c2a20
|
added net2net-same-nets
|
2010-07-25 11:56:33 +02:00 |
|
|
Andreas Steffen
|
b59340a2c3
|
NEWS cosmetics
|
2010-07-21 21:43:43 +02:00 |
|
|
Andreas Steffen
|
e93f452825
|
remove the private updown scripts after use
|
2010-07-17 23:25:15 +02:00 |
|
|
Andreas Steffen
|
15fd135564
|
minor fixes in the ikev2/rw-mark-in-out scenarios
|
2010-07-17 17:36:04 +02:00 |
|
|
Andreas Steffen
|
b22bb9f21c
|
updated NEWS
|
2010-07-17 17:25:01 +02:00 |
|
|
Andreas Steffen
|
f5baa5c4cf
|
some reformulations
|
2010-07-17 17:19:26 +02:00 |
|
|
Andreas Steffen
|
d2d7ed9227
|
the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
|
2010-07-17 16:32:47 +02:00 |
|
|
Andreas Steffen
|
16c97c8e59
|
documented the new PLUTO environment variables available in the updown script
|
2010-07-17 13:41:40 +02:00 |
|
|
Andreas Steffen
|
ae0e3b03b7
|
in a ESP_IN_UDP situation make UDP port available in the updown script
|
2010-07-17 13:27:19 +02:00 |
|
|
Andreas Steffen
|
34e93c0280
|
fix html error in scenario description
|
2010-07-17 13:09:28 +02:00 |
|
|
Andreas Steffen
|
14665981a5
|
make xfrm marks available in the updown scripts
|
2010-07-17 13:08:50 +02:00 |
|
|
Andreas Steffen
|
ff090f8781
|
check for mark changes in ipsec update
|
2010-07-17 09:13:48 +02:00 |
|
|
Andreas Steffen
|
cde633d632
|
all x509 based sql scenarios require the revocation plugin
|
2010-07-15 23:19:52 +02:00 |
|
|
Andreas Steffen
|
c349a68b2e
|
all x509 based pfkey scenarios require the revocation plugin
|
2010-07-15 23:17:37 +02:00 |
|
|
Andreas Steffen
|
f5731b4579
|
all x509 based p2pnat scenarios require the revocation plugin
|
2010-07-15 23:07:12 +02:00 |
|
|
Andreas Steffen
|
295d9cc313
|
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
|
2010-07-15 23:02:17 +02:00 |
|
|
Andreas Steffen
|
84fe65bd43
|
all x509 based ike scenarios require the revocation plugin
|
2010-07-15 22:40:20 +02:00 |
|
|
Andreas Steffen
|
001787b3eb
|
all x509 based openssl-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:33:05 +02:00 |
|
|
Andreas Steffen
|
6c2bd2a7d8
|
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:03:16 +02:00 |
|
|
Andreas Steffen
|
2cf4d34f2f
|
all x509 based ikev2 scenarios require the revocation plugin
|
2010-07-15 21:39:01 +02:00 |
|
|
Andreas Steffen
|
afe5d482db
|
ikev2/net2net-psk-dscp does not need certificate support
|
2010-07-15 21:37:45 +02:00 |
|
|
Andreas Steffen
|
a3527c39dd
|
add revocation plugin to ikev2/rw-cert scenario
|
2010-07-15 20:03:11 +02:00 |
|
|
Andreas Steffen
|
3de510ca43
|
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
|
2010-07-15 06:29:26 +02:00 |
|
|
Andreas Steffen
|
fccf00576f
|
activate --enable-addrblock configure option in UML scenarios
|
2010-07-13 21:04:20 +02:00 |
|
|
Andreas Steffen
|
d5f29da3d2
|
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
|
2010-07-13 09:15:53 +02:00 |
|
|
Andreas Steffen
|
c1918dc28f
|
we need some ordering
|
2010-07-12 22:44:27 +02:00 |
|
|
Andreas Steffen
|
c13a4b4030
|
changed ordering of statusattr output
|
2010-07-12 22:38:18 +02:00 |
|
|
Andreas Steffen
|
bb021fbbc9
|
updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes
|
2010-07-12 20:54:40 +02:00 |
|
|
Andreas Steffen
|
1cecc6a6ef
|
fixed alignment of caption
|
2010-07-12 20:48:14 +02:00 |
|
|
Andreas Steffen
|
ab635e029e
|
updated SQL templates to support attribute pool and identity parameters
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
cb0a9d58a3
|
output identities correctly
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
5047fe7ad3
|
added second example scenario
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
db4ad736be
|
transport reqid, mark_in and mark_out in whack message
|
2010-07-09 12:19:39 +02:00 |
|
|
Andreas Steffen
|
f65e0dc80f
|
added ikev2/net2net-psk-dscp2 DiffServ scenario
|
2010-07-09 11:55:01 +02:00 |
|
|
Andreas Steffen
|
9f94906815
|
added ikev2/nat-two-rw-mark-in-out scenario
|
2010-07-09 09:36:03 +02:00 |
|
|
Andreas Steffen
|
bcf608c848
|
some changes to the ikev2/nat-two-rw-mark scenario
|
2010-07-09 09:35:02 +02:00 |
|
|
Andreas Steffen
|
26c4d0102a
|
configuration of different marks for inbound and outbound direction
|
2010-07-09 09:06:07 +02:00 |
|
|
Andreas Steffen
|
a729d17afa
|
added req parameter to ipsec.conf man page
|
2010-07-06 20:32:33 +02:00 |
|
|
Andreas Steffen
|
ec40c02ad2
|
added IKEv2 xfrm marks support to NEWS
|
2010-07-03 22:14:45 +02:00 |
|
|
Andreas Steffen
|
36b3c0a8dd
|
regenerated loop intermediate CA certificates
|
2010-07-03 18:18:30 +02:00 |
|
|
Andreas Steffen
|
342fc85e9e
|
added ikev2/nat-two-rw-mark scenario
|
2010-07-03 13:25:09 +02:00 |
|
|
Andreas Steffen
|
ee26c537d7
|
support of xfrm marks for IKEv2
|
2010-07-02 23:46:09 +02:00 |
|
|
Andreas Steffen
|
b3f65304ba
|
check for installed aead algorithms in kernel
|
2010-06-27 22:26:00 +02:00 |
|
|
Andreas Steffen
|
f031e41bea
|
upgraded xfrm.h to linux-2.6.34
|
2010-06-27 11:23:35 +02:00 |
|
|
Andreas Steffen
|
5d4c258de7
|
refer to correct PLUTO_XAUTH_ID variable
|
2010-06-09 15:21:26 +02:00 |
|
|
Andreas Steffen
|
fcfd54acde
|
rename environment variable to PLUTO_XAUTH_ID
|
2010-06-08 23:18:51 +02:00 |
|
|
Andreas Steffen
|
611368339b
|
do not destroy xauth_id if phase2 equals phase1 connection
|
2010-06-08 23:18:00 +02:00 |
|
|
Andreas Steffen
|
964f6372cc
|
make an optional XAUTH user ID available in the updown script
|
2010-06-08 17:50:22 +02:00 |
|
|
Andreas Steffen
|
39e3b58fe4
|
use --addattr
|
2010-06-05 13:49:01 +02:00 |
|
|
Andreas Steffen
|
88613f159d
|
use --addattr
|
2010-06-05 13:47:23 +02:00 |
|
|
Andreas Steffen
|
4321d19d1e
|
added ikev2/nat-virtual-ip scenario
|
2010-06-05 13:42:28 +02:00 |
|
|
Andreas Steffen
|
b2be7dd621
|
remove stray carolReq.pem
|
2010-06-05 13:36:39 +02:00 |
|
|
Andreas Steffen
|
5a9a255ae5
|
share pool in ikev1/mode-config-multiple scenario
|
2010-06-05 13:17:51 +02:00 |
|
|
Andreas Steffen
|
6d989d356b
|
use --addattr
|
2010-06-05 13:15:03 +02:00 |
|
|
Andreas Steffen
|
bdd28aa9c5
|
remove stray scenario files
|
2010-06-05 13:10:39 +02:00 |
|
|
Andreas Steffen
|
c77f4b305e
|
fixed configuration attribute type determination
|
2010-06-02 11:52:17 +02:00 |
|
|
Andreas Steffen
|
616b13c7a5
|
ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known
|
2010-06-01 16:47:56 +02:00 |
|
|
Andreas Steffen
|
185d8b7335
|
added unity_def_domain keyword tip ipsec pool
|
2010-05-31 16:47:06 +02:00 |
|
|
Andreas Steffen
|
d9c751daac
|
added --leases command line option to synopsis
|
2010-05-29 13:29:23 +02:00 |
|
|
Andreas Steffen
|
751379e5e8
|
added --showattr command line option to synopsys
|
2010-05-29 13:23:20 +02:00 |
|
|
Andreas Steffen
|
3561cc4b3b
|
added X.509 support by openssl plugin to NEWS
|
2010-05-29 11:22:36 +02:00 |
|
|
Andreas Steffen
|
5b6200888b
|
remove x509 plugin from openssl-ikev1 scenarios
|
2010-05-28 23:22:15 +02:00 |
|
|
Andreas Steffen
|
e8960c2a99
|
be lenient towards wrong attribute encodings
|
2010-05-28 15:07:21 +02:00 |
|
|
Andreas Steffen
|
bd371ccac7
|
remove x509 plugin from remaining openssl-ikev2 scenarios
|
2010-05-25 15:49:58 +02:00 |
|
|
Andreas Steffen
|
2996cb3163
|
openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more
|
2010-05-25 15:26:46 +02:00 |
|
|
Andreas Steffen
|
e2bd6b616e
|
several subnets can be concatenated
|
2010-05-22 22:53:24 +02:00 |
|
|
Andreas Steffen
|
2111dc1b84
|
added --showattr command to usage()
|
2010-05-22 10:46:15 +02:00 |
|
|
Andreas Steffen
|
3e3059ba7c
|
oops, removed stray parenthesis
|
2010-05-20 17:39:10 +02:00 |
|
|
Andreas Steffen
|
36c1650b19
|
range check for configuration attribute types
|
2010-05-20 17:35:10 +02:00 |
|
|
Andreas Steffen
|
c2d10df6e7
|
implement ipsec pool -showattr function
|
2010-05-20 17:24:43 +02:00 |
|
|
Andreas Steffen
|
05f1096cd8
|
removed deprecated use of ipsec pool --attr|del dns|nbns from usage()
|
2010-05-20 16:30:15 +02:00 |
|
|
Andreas Steffen
|
c5c6f9b6da
|
added ipsec pool attribute support to NEWS
|
2010-05-19 21:53:55 +02:00 |
|
|
Andreas Steffen
|
ad6dbc41e5
|
management of any attribute by ipsec pool
|
2010-05-19 21:51:21 +02:00 |
|
|
Andreas Steffen
|
b596f4f260
|
updated ikev1/rw-cert scenario to support xauth integrity test
|
2010-05-19 08:31:39 +02:00 |
|
|
Andreas Steffen
|
f71cb4777e
|
checksum_builder() needs the pluto symbol
|
2010-05-19 08:02:22 +02:00 |
|
|
Andreas Steffen
|
73434ce9eb
|
updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin
|
2010-05-18 22:57:12 +02:00 |
|
|
Andreas Steffen
|
1fe5d973cb
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:56:42 +02:00 |
|
|
Andreas Steffen
|
17adc8d074
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:48:37 +02:00 |
|
|
Andreas Steffen
|
ab0ecb7dd9
|
register virtual IPs under the XAUTH identity
|
2010-05-18 22:41:22 +02:00 |
|
|
Andreas Steffen
|
efde96b38e
|
updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin
|
2010-05-18 20:20:55 +02:00 |
|
|
Andreas Steffen
|
4f1110ab7b
|
created ikev1/xauth-id-psk scenario
|
2010-05-18 20:04:52 +02:00 |
|
|
Andreas Steffen
|
dc5d63a599
|
updated ikev1/xauth-psk scenario to support xauth plugin
|
2010-05-18 20:04:02 +02:00 |
|
|
Andreas Steffen
|
8d7fffc942
|
clarified secret loading debug output
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
8ebc3da64c
|
updated ikev1/xauth-rsa-fail scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
2549ff7849
|
created ikev1/xauth-id-rsa scenario using XAUTH identities
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
0a6085b13e
|
updated ikev1/xauth-rsa scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
26ec52a405
|
implemented xauth as a pluto plugin
|
2010-05-18 13:51:27 +02:00 |
|
|
Andreas Steffen
|
ee1bdd85d3
|
it's too late on Saturday evening
|
2010-05-15 18:52:59 +02:00 |
|