Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi
af87afed47
added config option for BEET mode
2007-01-03 13:16:21 +00:00
Andreas Steffen
fb34660632
negated POLICY_REAUTH to POLICY_DONT_REAUTH
2006-12-21 20:05:08 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
532f2347dc
first try to update ipsec.conf manual
2006-12-19 08:32:25 +00:00
Martin Willi
6fe03b0af0
implemented reauthentication using the new reauth=yes|no parameter
2006-12-19 07:30:07 +00:00
Martin Willi
4dfb3cb0f5
fixed stddef.h include
2006-12-14 15:58:32 +00:00
Martin Willi
5347a84f81
fixed HAVE_BACKTRACE checks
...
starter Makefile now uses proper $(COMPILE) to build pluto objects
2006-12-11 09:29:34 +00:00
Andreas Steffen
15b050c945
added XAUTH support
2006-12-05 23:13:02 +00:00
Andreas Steffen
923ee10eef
solved 64 bit issue in push/pop stroke interface
2006-10-31 23:17:21 +00:00
Andreas Steffen
0e4d1d05ad
added 'modeconfig=pull|push' and 'left|rightnatip' keywords
2006-10-25 08:40:34 +00:00
Andreas Steffen
b701b7895b
added has_natip flag
2006-10-25 08:39:39 +00:00
Martin Willi
5c4cc9a4e3
added verbosity level to stroke
2006-10-24 08:44:47 +00:00
Martin Willi
107936f55a
added charondebug config parameter to set debug level at startup
2006-10-18 11:46:57 +00:00
Andreas Steffen
5d71e72db5
added hostaccess support
2006-09-25 05:46:56 +00:00
Andreas Steffen
4f383c6950
added auth_method field
2006-09-18 07:46:16 +00:00
Martin Willi
1239c6f40b
implemented handling of dpdaction and dpddelay ipsec.conf parameters
2006-09-08 06:12:02 +00:00
Martin Willi
a655f5c09c
reuse reqid when a ROUTED child_sa gets INSTALLED
...
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
2006-09-05 14:07:25 +00:00
Martin Willi
48d9883a3e
initial support for IPv6 (more testing needed)
...
socket works (without v6 filter)
traffic selector handle IPv4/v4 cleanly
improvements in traffic selector code
kernel interface accepts v6 traffic selectors and hosts
host_t class has full IPv6 support
2006-08-30 17:12:56 +00:00
Martin Willi
45f76a7ddd
added possibility to route CHILD_SAs, without to set them up
...
support for auto=route parameter
support for ipsec route and ipsec unroute
initiating of CHILD and/or IKE_SAs based on kernel acquires
2006-07-21 13:31:53 +00:00
Martin Willi
d109b48968
added support for leftprotoport and rightprotoport
2006-07-05 13:13:07 +00:00
Andreas Steffen
5c149670df
generation of default key
2006-07-03 06:21:56 +00:00
Andreas Steffen
0e3cb317e2
cosmetics
2006-07-03 06:21:40 +00:00
Andreas Steffen
b17e4d2bfd
added support of updown parameter
2006-07-03 06:21:14 +00:00
Martin Willi
13b8fa0e8d
fixed execv call args to work when using strictcrl and syslog
2006-06-20 10:04:35 +00:00
Martin Willi
56f1a8f2d6
handling of "rekey=no" parameter added
2006-06-15 11:02:15 +00:00
Martin Willi
ad038f770d
changed default algorithms to:
...
ike: aes128-sha-modp2048
esp: aes128-sha1, 3des-md5
2006-06-15 11:01:17 +00:00
Andreas Steffen
311b225740
added strictcrlpolicy command line argument
2006-06-14 12:43:51 +00:00
Andreas Steffen
5347233204
support for stroke listcerts|listcacerts|listall and left|rightca=
2006-06-12 08:43:46 +00:00
Martin Willi
a2a3fb3e25
workaround for peers rekeying at the same time
...
loading lifetime policies from ipsec.conf
2006-06-12 07:33:20 +00:00
Andreas Steffen
2a13996de0
corrected type
2006-06-09 11:06:37 +00:00
Andreas Steffen
b7f9ca5837
added support for leftsendcert= and left|rightca= parameters
2006-06-09 05:50:41 +00:00
Andreas Steffen
fc0afb6810
created IPv6 environment
2006-06-06 05:41:21 +00:00
Andreas Steffen
6d5e617f7d
full support of ikev1 and ikev2 connection flags
2006-05-30 11:10:42 +00:00
Martin Willi
9fe14f4b8a
- policies contain a connections name now
...
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
ipsec update and ipsec reload
2006-05-29 11:09:45 +00:00
Andreas Steffen
ecadab2ba7
stroke now uses constant size string buffer
2006-05-29 07:14:57 +00:00
Martin Willi
298b06c28c
- build gets perl and gperf from configure now
...
- moved built sources to maintainer-clean
2006-05-24 06:36:46 +00:00
Martin Willi
3572b3b689
- updated ipsec.conf manual to reflect actual state of
...
keyexchange-parameter
2006-05-23 10:53:44 +00:00
Martin Willi
7ba69503aa
- changed config load strategy:
...
starter loads both connections in charon & pluto,
charon ignores anything with keyexchange!=ikev2.
pluto needs the same behavior.
2006-05-23 10:07:02 +00:00
Martin Willi
4a5bba25e2
- reimplemented proper IKE SA deletion using a seperate state,
...
should conform now to IKEv2
2006-05-23 08:01:49 +00:00
Martin Willi
7ca49e4037
- removed lex, yacc and gperf output from svn,
...
added them to "dist" and "distclean"
2006-05-19 14:05:26 +00:00
Martin Willi
bea98d4dd7
- added missing ipsec.conf.5 to distribution :-/
2006-05-19 11:16:48 +00:00
Martin Willi
fea5e716c4
- added missing ipsec.conf ipsec.conf.5
...
- existing ipsec.conf won't get overwritten anymore
2006-05-19 08:59:19 +00:00
Martin Willi
3e61d63a3a
- added ipsec.conf template and man page back
...
- removed old Makefiles
- added new strongswan KDevelop project & startup hack
2006-05-18 14:21:58 +00:00
Martin Willi
b5e1560659
- applied andreas's patch
...
- logger output improvements
- testin gupdates
- and a lot more
2006-05-18 06:02:28 +00:00
Martin Willi
db26d00e73
- added random source ./configure options
...
- fixed default-pkcs11 option
2006-05-17 14:21:38 +00:00
Martin Willi
f2c2d395ff
- introduced autotools
...
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
2006-05-16 14:24:03 +00:00
Martin Willi
37a2b616e2
- fixed stroke error output to starter
2006-05-10 07:11:52 +00:00
Martin Willi
65cf07ac1d
- applied patch from andreas
...
- added charonstart option to config
- new ikev2 tests for UML
2006-05-06 07:09:45 +00:00
Martin Willi
9820c0e208
- applied patch from andreas
...
- pem loading
- secrets file parsing
- ikev2 testcase
- some other additions here and there
2006-05-04 07:55:42 +00:00