Martin Willi
1871cffdc4
be less agressive, but more verbose in killing charon
2007-11-15 18:34:05 +00:00
Andreas Steffen
496e76cbdf
added RCSID
2007-10-08 19:57:54 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
f9b8417a7c
renamed force_encap to forceencaps (as it is named in openswan)
2007-10-02 06:57:58 +00:00
Martin Willi
f53b74c96f
moved force_encap to ike_config, enables responder to enforce udp encapsulation
...
fixed bugs in force_encap code
2007-10-01 16:41:34 +00:00
Martin Willi
9dae1bed00
implemented IKEv2 force_encap connection parameter
...
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Andreas Steffen
3b4b26cdf3
moved loglite.c from openac to scepclient
2007-09-18 15:59:56 +00:00
Andreas Steffen
8c4339bdd2
added mobike option to man page
2007-09-02 11:44:32 +00:00
Martin Willi
9164e49ac0
added mobike=yes|no connection option
...
yes: include mobike support notifies as initiator
no: only enable mobike as responder when initiator supports it
default: yes
2007-08-29 12:11:25 +00:00
Andreas Steffen
ec11518d1b
handle dns lookup failures
2007-08-02 18:38:28 +00:00
Andreas Steffen
0761886051
added to ipsec.conf installation path
2007-07-11 16:22:02 +00:00
Andreas Steffen
eea626ed25
describe eap option in ipsec.conf.5 man page
2007-07-04 05:42:58 +00:00
Andreas Steffen
ae4388dca0
cosmetics
2007-07-04 05:42:09 +00:00
Andreas Steffen
4f22a3e339
removed the ipsec.conf version number
2007-07-04 05:41:51 +00:00
Andreas Steffen
dd0ee786db
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:33:02 +00:00
Andreas Steffen
e0e6137dd3
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:26:44 +00:00
Andreas Steffen
fdd32ee6e5
fix of the bug fix, courtesy of Robert Varga
2007-07-02 17:48:30 +00:00
Andreas Steffen
2f806bd866
bug fix courtesy of Robert Varga
2007-07-02 17:42:16 +00:00
Andreas Steffen
c2bc2b2782
alphabetical order
2007-06-27 21:49:09 +00:00
Andreas Steffen
e0e7ef070d
separated pluto, charon, and klips setup config section parameters
2007-06-27 15:42:11 +00:00
Andreas Steffen
487fe29ee3
added lefthostaccess and leftprotoport parameters
2007-06-27 14:03:56 +00:00
Andreas Steffen
7900ab1b7a
update ipsec.conf man page
2007-06-27 13:29:36 +00:00
Andreas Steffen
c4c916f90a
add starter.8 man page to distribution
2007-06-27 13:29:20 +00:00
Andreas Steffen
6fa8bd61c1
cosmetics
2007-06-27 10:04:02 +00:00
Andreas Steffen
2f153a2263
recognize wildcard keyingtries=%forever
2007-06-27 08:11:22 +00:00
Andreas Steffen
a80521d13e
recognize wildcards right=%group and keyingtries=%forever
2007-06-27 08:11:08 +00:00
Andreas Steffen
3f946e1c90
support of right=%<FQDN> wildcard
2007-06-25 11:28:39 +00:00
Andreas Steffen
e6a22d8728
discarded unused functions
2007-06-25 09:06:13 +00:00
Andreas Steffen
3345c0a1ed
make starter behave more gracefully in the presence of non-fatal errors
2007-06-25 07:10:23 +00:00
Andreas Steffen
d0f55e236d
support of right|leftallowany flag
2007-06-18 17:51:45 +00:00
Martin Willi
5e564f2bff
added setsid() to properly detach from console
2007-06-11 12:21:12 +00:00
Martin Willi
532137e70f
fixed man page
2007-05-25 07:19:49 +00:00
Martin Willi
8e79d8d3de
updated man-page for left/rightsourceip
2007-05-25 07:15:18 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
3d63b7639e
setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker
2007-05-02 09:59:47 +00:00
Andreas Steffen
4841189b72
implementation of strictcrlpolicy=ifuri
2007-04-20 11:12:08 +00:00
Andreas Steffen
7ef4be2cb1
unshare argument buffers
2007-04-19 14:26:11 +00:00
Martin Willi
b7ade11b16
updated man page: proposals using PFS
2007-04-19 14:22:53 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
e58afb1a0a
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
2007-04-04 07:49:05 +00:00
Martin Willi
9b45443dc2
updated NEWS, TODO and man page
2007-03-20 08:59:03 +00:00
Martin Willi
b0f24449dd
added EAP-SIM authentication
...
client side only
uses an external SIM reader library specified with SIM_READER_LIB
untested
2007-03-13 15:01:02 +00:00
Martin Willi
0c8aba6771
added support for 0.0.0.0/0 traffic selectors
...
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Andreas Steffen
7eb4010c01
replace ca is realized as del_ca followed by add_ca
2007-02-24 23:20:27 +00:00
Andreas Steffen
98a905838a
last CA keyword is KW_OCSPURI2
2007-02-24 23:19:28 +00:00
Andreas Steffen
113be7f186
support of ca info records
2007-02-23 15:13:21 +00:00
Martin Willi
a02ae4ccd5
using "left" as my host per default, swapping to "right" when needed
2007-02-15 12:13:18 +00:00
Martin Willi