Commit Graph
51 Commits
Author SHA1 Message Date
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Andreas Steffen fb34660632 negated POLICY_REAUTH to POLICY_DONT_REAUTH 2006-12-21 20:05:08 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi 532f2347dc first try to update ipsec.conf manual 2006-12-19 08:32:25 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Martin Willi 5347a84f81 fixed HAVE_BACKTRACE checks
starter Makefile now uses proper $(COMPILE) to build pluto objects
2006-12-11 09:29:34 +00:00
Andreas Steffen 15b050c945 added XAUTH support 2006-12-05 23:13:02 +00:00
Andreas Steffen 923ee10eef solved 64 bit issue in push/pop stroke interface 2006-10-31 23:17:21 +00:00
Andreas Steffen 0e4d1d05ad added 'modeconfig=pull|push' and 'left|rightnatip' keywords 2006-10-25 08:40:34 +00:00
Andreas Steffen b701b7895b added has_natip flag 2006-10-25 08:39:39 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi 107936f55a added charondebug config parameter to set debug level at startup 2006-10-18 11:46:57 +00:00
Andreas Steffen 5d71e72db5 added hostaccess support 2006-09-25 05:46:56 +00:00
Andreas Steffen 4f383c6950 added auth_method field 2006-09-18 07:46:16 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
2006-09-05 14:07:25 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed)
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
2006-08-30 17:12:56 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
2006-07-21 13:31:53 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Andreas Steffen 5c149670df generation of default key 2006-07-03 06:21:56 +00:00
Andreas Steffen 0e3cb317e2 cosmetics 2006-07-03 06:21:40 +00:00
Andreas Steffen b17e4d2bfd added support of updown parameter 2006-07-03 06:21:14 +00:00
Martin Willi 13b8fa0e8d fixed execv call args to work when using strictcrl and syslog 2006-06-20 10:04:35 +00:00
Martin Willi 56f1a8f2d6 handling of "rekey=no" parameter added 2006-06-15 11:02:15 +00:00
Martin Willi ad038f770d changed default algorithms to:
ike: aes128-sha-modp2048
  esp: aes128-sha1, 3des-md5
2006-06-15 11:01:17 +00:00
Andreas Steffen 311b225740 added strictcrlpolicy command line argument 2006-06-14 12:43:51 +00:00
Andreas Steffen 5347233204 support for stroke listcerts|listcacerts|listall and left|rightca= 2006-06-12 08:43:46 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time
loading lifetime policies from ipsec.conf
2006-06-12 07:33:20 +00:00
Andreas Steffen 2a13996de0 corrected type 2006-06-09 11:06:37 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00
Andreas Steffen 6d5e617f7d full support of ikev1 and ikev2 connection flags 2006-05-30 11:10:42 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
2006-05-29 11:09:45 +00:00
Andreas Steffen ecadab2ba7 stroke now uses constant size string buffer 2006-05-29 07:14:57 +00:00
Martin Willi 298b06c28c - build gets perl and gperf from configure now
- moved built sources to maintainer-clean
2006-05-24 06:36:46 +00:00
Martin Willi 3572b3b689 - updated ipsec.conf manual to reflect actual state of
keyexchange-parameter
2006-05-23 10:53:44 +00:00
Martin Willi 7ba69503aa - changed config load strategy:
starter loads both connections in charon & pluto,
  charon ignores anything with keyexchange!=ikev2.
  pluto needs the same behavior.
2006-05-23 10:07:02 +00:00
Martin Willi 4a5bba25e2 - reimplemented proper IKE SA deletion using a seperate state,
should conform now to IKEv2
2006-05-23 08:01:49 +00:00
Martin Willi 7ca49e4037 - removed lex, yacc and gperf output from svn,
added them to "dist" and "distclean"
2006-05-19 14:05:26 +00:00
Martin Willi bea98d4dd7 - added missing ipsec.conf.5 to distribution :-/ 2006-05-19 11:16:48 +00:00
Martin Willi fea5e716c4 - added missing ipsec.conf ipsec.conf.5
- existing ipsec.conf won't get overwritten anymore
2006-05-19 08:59:19 +00:00
Martin Willi 3e61d63a3a - added ipsec.conf template and man page back
- removed old Makefiles
- added new strongswan KDevelop project & startup hack
2006-05-18 14:21:58 +00:00
Martin Willi b5e1560659 - applied andreas's patch
- logger output improvements
  - testin gupdates
  - and a lot more
2006-05-18 06:02:28 +00:00
Martin Willi db26d00e73 - added random source ./configure options
- fixed default-pkcs11 option
2006-05-17 14:21:38 +00:00
Martin Willi f2c2d395ff - introduced autotools
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
2006-05-16 14:24:03 +00:00
Martin Willi 37a2b616e2 - fixed stroke error output to starter 2006-05-10 07:11:52 +00:00
Martin Willi 65cf07ac1d - applied patch from andreas
- added charonstart option to config
  - new ikev2 tests for UML
2006-05-06 07:09:45 +00:00
Martin Willi 9820c0e208 - applied patch from andreas
- pem loading
	- secrets file parsing
	- ikev2 testcase
	- some other additions here and there
2006-05-04 07:55:42 +00:00