Andreas Steffen
ff41ca0dc4
host_srcip was not properly initialized in starterwhack.c
2008-04-13 21:42:44 +00:00
Martin Willi
cdcfe777f4
implementation of an CFG attribute framework, currently supporting virtual IPs
...
updated ipsec.conf sourceip parameter to support
CIDR notatation to serve from a pool
%poolname to query a separate (database?) pool
2008-04-09 12:54:47 +00:00
Martin Willi
5df92bba51
changed force_encap to forceencaps
2008-04-08 12:53:36 +00:00
Andreas Steffen
7a9d3ae471
support of force_keepalive parameter
2008-04-02 18:35:23 +00:00
Martin Willi
0d2670e7e6
removed unused yynuput to fix compiler warning
2008-03-28 11:45:01 +00:00
Tobias Brunner
e74bc8e51d
changed external interface to the mediation extension.
2008-03-27 12:31:35 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Andreas Steffen
754c1c0ef7
suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko Hund from Astaro.
2008-03-21 09:34:40 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
e633b1998f
creating sysconfdir if it does not exist
...
moved all directory creations into starters Makefile
2008-02-22 14:50:38 +00:00
Andreas Steffen
aa1a730bfb
set nexthop default value to 0::0 in IPv6 connections
2007-12-19 00:49:32 +00:00
Martin Willi
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
Martin Willi
4b403e7672
merged EAP-MD5 into trunk
2007-12-12 14:29:10 +00:00
Andreas Steffen
0b72091970
ipsec and starter exit with LSB-compliant return codes
2007-11-28 17:02:12 +00:00
Martin Willi
1871cffdc4
be less agressive, but more verbose in killing charon
2007-11-15 18:34:05 +00:00
Andreas Steffen
496e76cbdf
added RCSID
2007-10-08 19:57:54 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
f9b8417a7c
renamed force_encap to forceencaps (as it is named in openswan)
2007-10-02 06:57:58 +00:00
Martin Willi
f53b74c96f
moved force_encap to ike_config, enables responder to enforce udp encapsulation
...
fixed bugs in force_encap code
2007-10-01 16:41:34 +00:00
Martin Willi
9dae1bed00
implemented IKEv2 force_encap connection parameter
...
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Andreas Steffen
3b4b26cdf3
moved loglite.c from openac to scepclient
2007-09-18 15:59:56 +00:00
Andreas Steffen
8c4339bdd2
added mobike option to man page
2007-09-02 11:44:32 +00:00
Martin Willi
9164e49ac0
added mobike=yes|no connection option
...
yes: include mobike support notifies as initiator
no: only enable mobike as responder when initiator supports it
default: yes
2007-08-29 12:11:25 +00:00
Andreas Steffen
ec11518d1b
handle dns lookup failures
2007-08-02 18:38:28 +00:00
Andreas Steffen
0761886051
added to ipsec.conf installation path
2007-07-11 16:22:02 +00:00
Andreas Steffen
eea626ed25
describe eap option in ipsec.conf.5 man page
2007-07-04 05:42:58 +00:00
Andreas Steffen
ae4388dca0
cosmetics
2007-07-04 05:42:09 +00:00
Andreas Steffen
4f22a3e339
removed the ipsec.conf version number
2007-07-04 05:41:51 +00:00
Andreas Steffen
dd0ee786db
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:33:02 +00:00
Andreas Steffen
e0e6137dd3
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:26:44 +00:00
Andreas Steffen
fdd32ee6e5
fix of the bug fix, courtesy of Robert Varga
2007-07-02 17:48:30 +00:00
Andreas Steffen
2f806bd866
bug fix courtesy of Robert Varga
2007-07-02 17:42:16 +00:00
Andreas Steffen
c2bc2b2782
alphabetical order
2007-06-27 21:49:09 +00:00
Andreas Steffen
e0e7ef070d
separated pluto, charon, and klips setup config section parameters
2007-06-27 15:42:11 +00:00
Andreas Steffen
487fe29ee3
added lefthostaccess and leftprotoport parameters
2007-06-27 14:03:56 +00:00
Andreas Steffen
7900ab1b7a
update ipsec.conf man page
2007-06-27 13:29:36 +00:00
Andreas Steffen
c4c916f90a
add starter.8 man page to distribution
2007-06-27 13:29:20 +00:00
Andreas Steffen
6fa8bd61c1
cosmetics
2007-06-27 10:04:02 +00:00
Andreas Steffen
2f153a2263
recognize wildcard keyingtries=%forever
2007-06-27 08:11:22 +00:00
Andreas Steffen
a80521d13e
recognize wildcards right=%group and keyingtries=%forever
2007-06-27 08:11:08 +00:00
Andreas Steffen
3f946e1c90
support of right=%<FQDN> wildcard
2007-06-25 11:28:39 +00:00
Andreas Steffen
e6a22d8728
discarded unused functions
2007-06-25 09:06:13 +00:00
Andreas Steffen
3345c0a1ed
make starter behave more gracefully in the presence of non-fatal errors
2007-06-25 07:10:23 +00:00
Andreas Steffen
d0f55e236d
support of right|leftallowany flag
2007-06-18 17:51:45 +00:00
Martin Willi
5e564f2bff
added setsid() to properly detach from console
2007-06-11 12:21:12 +00:00
Martin Willi
532137e70f
fixed man page
2007-05-25 07:19:49 +00:00
Martin Willi
8e79d8d3de
updated man-page for left/rightsourceip
2007-05-25 07:15:18 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Andreas Steffen