 Martin Willi
|
fca4d3ee03
|
implementation of a simple "token enumerator"
|
2008-07-02 08:09:07 +00:00 |
|
|
Martin Willi
|
2f2b99282a
|
fixed compiler warning
updated svn:ignore property
|
2008-07-02 08:05:51 +00:00 |
|
|
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
|
|
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
|
|
Andreas Steffen
|
8997db6a99
|
added ikev2/ip-two-pools-db scenario
|
2008-07-01 15:16:28 +00:00 |
|
|
Martin Willi
|
ab89517218
|
fixed medsrv database uri key
|
2008-07-01 13:57:47 +00:00 |
|
|
Andreas Steffen
|
556e426fd8
|
renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP
|
2008-07-01 13:47:26 +00:00 |
|
|
Martin Willi
|
131064995a
|
added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip
|
2008-07-01 12:48:56 +00:00 |
|
|
Martin Willi
|
d01783dba4
|
logging peer addresses in peer_cfg lookup
|
2008-07-01 11:10:37 +00:00 |
|
|
Martin Willi
|
9eeaa25f5d
|
added host match prio to debugging output
|
2008-07-01 11:01:27 +00:00 |
|
|
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
|
|
Martin Willi
|
866ba8e0b6
|
strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails
|
2008-07-01 07:54:09 +00:00 |
|
|
Martin Willi
|
fe5d7c43be
|
whitelisting leaks of ENGINE_load_builtin_engines
|
2008-07-01 07:53:03 +00:00 |
|
|
Martin Willi
|
d510eaea47
|
sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found
|
2008-07-01 06:36:52 +00:00 |
|
|
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
|
|
Martin Willi
|
b119f89a4e
|
fixed chunk_increment, fixes reuse of already assigned addresses
|
2008-06-30 12:33:38 +00:00 |
|
|
Martin Willi
|
7da767f773
|
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
use recursive locking if libsqlite3 < 3.5.0
|
2008-06-30 11:06:18 +00:00 |
|
|
Martin Willi
|
aafe8ced39
|
added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA
|
2008-06-30 08:45:11 +00:00 |
|
|
Andreas Steffen
|
9d1f86cf1a
|
added sql/rw-eap-aka-rsa scenario
|
2008-06-30 07:24:55 +00:00 |
|
|
Andreas Steffen
|
1b7db64f6f
|
configure plugin path in scripts
|
2008-06-29 14:43:50 +00:00 |
|
|
Andreas Steffen
|
39b7780df9
|
created scripts/Makefile.am
|
2008-06-29 13:57:00 +00:00 |
|
|
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
|
|
Andreas Steffen
|
dc04f16e26
|
corrected vendor_id_payload diagram
|
2008-06-27 15:22:27 +00:00 |
|
|
Andreas Steffen
|
9de95037a0
|
corrected some NEWS entries
|
2008-06-26 13:50:54 +00:00 |
|
|
Andreas Steffen
|
f234c83612
|
corrected description of openssl/ike-alg-ecp-high scenario
|
2008-06-26 13:49:48 +00:00 |
|
|
Andreas Steffen
|
615611afc1
|
version bump to 4.2.5
|
2008-06-26 09:59:55 +00:00 |
|
|
Andreas Steffen
|
6567648616
|
check migration of ESP sequence numbers in MOBIKE scenarios
|
2008-06-26 09:46:23 +00:00 |
|
|
Andreas Steffen
|
e25bedb722
|
use ip xfrm with the detailed -s option
|
2008-06-26 09:41:22 +00:00 |
|
|
Martin Willi
|
c66a1b757f
|
ike/kernel protocol identifier conversion functions
|
2008-06-26 08:59:39 +00:00 |
|
|
Andreas Steffen
|
e0bb4dbbfe
|
mention ESP sequence number updates
|
2008-06-26 08:44:59 +00:00 |
|
|
Martin Willi
|
854a2e1760
|
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
|
2008-06-26 07:31:52 +00:00 |
|
|
Martin Willi
|
236083cb56
|
fixed plugin loader destruction
|
2008-06-25 14:53:49 +00:00 |
|
|
Tobias Brunner
|
1b7d2e31a6
|
enabling support for hardware accelerators in OpenSSL
|
2008-06-25 12:39:32 +00:00 |
|
|
Martin Willi
|
7e8af02626
|
flushing task_manager on shutdown while IKE_SA is usable
|
2008-06-25 11:40:50 +00:00 |
|
|
Andreas Steffen
|
73a8eed31c
|
updated NEWS for the imminent 4.2.4 release
|
2008-06-25 08:41:16 +00:00 |
|
|
Tobias Brunner
|
be33d1a51b
|
merging the ESP sequence numbers of an SA in update_sa (fixing #52)
|
2008-06-24 15:35:09 +00:00 |
|
|
Martin Willi
|
fae6e24dad
|
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
|
2008-06-24 14:30:14 +00:00 |
|
|
Martin Willi
|
a02bc1dbea
|
updated location of auth_class_t
|
2008-06-24 13:36:10 +00:00 |
|
|
Martin Willi
|
eec675bf8c
|
enumerating loaded plugins in "ipsec statusall"
|
2008-06-24 12:49:04 +00:00 |
|
|
Tobias Brunner
|
ad4d3f81c1
|
changed ipsec.secrets keyword EC to ECDSA
|
2008-06-24 06:57:47 +00:00 |
|
|
Andreas Steffen
|
7c8eff1eaa
|
cosmetics
|
2008-06-23 09:08:49 +00:00 |
|
|
Martin Willi
|
857ba3574b
|
fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active
|
2008-06-23 08:53:37 +00:00 |
|
|
Martin Willi
|
417421048c
|
fixed medsrv mysql scheme
|
2008-06-23 08:30:57 +00:00 |
|
|
Martin Willi
|
e9ab669bc2
|
resolving hosts before route
|
2008-06-23 08:30:35 +00:00 |
|
|
Andreas Steffen
|
7f6d8d5172
|
set version to 4.2.4
|
2008-06-22 18:08:37 +00:00 |
|
|
Andreas Steffen
|
63265f0e58
|
generate CRL for strongSwan EC Root CA
|
2008-06-22 17:56:42 +00:00 |
|
|
Andreas Steffen
|
0d12006def
|
support of ECDSA signatures for all certificate types
|
2008-06-22 17:41:07 +00:00 |
|
|
Andreas Steffen
|
3af698fa4d
|
added openssl/ecdsa-certs scenario
|
2008-06-22 16:54:45 +00:00 |
|
|
Andreas Steffen
|
1bd02e864c
|
added strongSwan EC Root CA
|
2008-06-22 16:41:00 +00:00 |
|
|
Andreas Steffen
|
867aae5d76
|
remove ikev2/nat-pf scenario
|
2008-06-22 11:41:49 +00:00 |
|