denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,577 Commits 1 Branch 0 Tags
f85d02a419d61c0e6f6b560fbfc3f76441c5bc53
Commit Graph
133 Commits
Author SHA1 Message Date
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Andreas Steffen 9a6d9f10e2 support of plutostderrlog keyword 2008-05-11 07:59:00 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Andreas Steffen 77b9c3a214 end->srcip string must be removed if it contains %config 2008-04-27 11:28:58 +00:00
Andreas Steffen 2988273b3a fixed starter_cmp_end() 2008-04-27 11:04:13 +00:00
Andreas Steffen 937eb2db00 fixed memory corruption problem in starter 2008-04-27 10:49:31 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 66bb16b033 shipping a default strongswan.conf 2008-04-18 12:52:47 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Andreas Steffen f45411c045 set long-forgotten DPD defaults 2008-04-15 11:27:45 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Andreas Steffen ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c 2008-04-13 21:42:44 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Martin Willi 0d2670e7e6 removed unused yynuput to fix compiler warning 2008-03-28 11:45:01 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Andreas Steffen 754c1c0ef7 suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko Hund from Astaro. 2008-03-21 09:34:40 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi e633b1998f creating sysconfdir if it does not exist 
moved all directory creations into starters Makefile
 2008-02-22 14:50:38 +00:00
Andreas Steffen aa1a730bfb set nexthop default value to 0::0 in IPv6 connections 2007-12-19 00:49:32 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Andreas Steffen 0b72091970 ipsec and starter exit with LSB-compliant return codes 2007-11-28 17:02:12 +00:00
Martin Willi 1871cffdc4 be less agressive, but more verbose in killing charon 2007-11-15 18:34:05 +00:00
Andreas Steffen 496e76cbdf added RCSID 2007-10-08 19:57:54 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Andreas Steffen 3b4b26cdf3 moved loglite.c from openac to scepclient 2007-09-18 15:59:56 +00:00
Andreas Steffen 8c4339bdd2 added mobike option to man page 2007-09-02 11:44:32 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Andreas Steffen ec11518d1b handle dns lookup failures 2007-08-02 18:38:28 +00:00
Andreas Steffen 0761886051 added to ipsec.conf installation path 2007-07-11 16:22:02 +00:00
Andreas Steffen eea626ed25 describe eap option in ipsec.conf.5 man page 2007-07-04 05:42:58 +00:00
Andreas Steffen ae4388dca0 cosmetics 2007-07-04 05:42:09 +00:00
Andreas Steffen 4f22a3e339 removed the ipsec.conf version number 2007-07-04 05:41:51 +00:00
Andreas Steffen dd0ee786db support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:33:02 +00:00
Andreas Steffen e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Andreas Steffen fdd32ee6e5 fix of the bug fix, courtesy of Robert Varga 2007-07-02 17:48:30 +00:00
Andreas Steffen 2f806bd866 bug fix courtesy of Robert Varga 2007-07-02 17:42:16 +00:00
Andreas Steffen c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen 487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00