denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,444 Commits 1 Branch 0 Tags
ff41ca0dc44a87047372386d3a481eb7030cc6d1
Commit Graph
118 Commits
Author SHA1 Message Date
Martin Willi 3d63b7639e setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker 2007-05-02 09:59:47 +00:00
Andreas Steffen 4841189b72 implementation of strictcrlpolicy=ifuri 2007-04-20 11:12:08 +00:00
Andreas Steffen 7ef4be2cb1 unshare argument buffers 2007-04-19 14:26:11 +00:00
Martin Willi b7ade11b16 updated man page: proposals using PFS 2007-04-19 14:22:53 +00:00
Andreas Steffen 8883eef7b8 support cachecrls=yes 2007-04-05 17:07:14 +00:00
Andreas Steffen e58afb1a0a support of crlcheckinterval=0 to disable IKEv2 CRL fetching 2007-04-04 07:49:05 +00:00
Martin Willi 9b45443dc2 updated NEWS, TODO and man page 2007-03-20 08:59:03 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication 
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
 2007-03-13 15:01:02 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Andreas Steffen 7eb4010c01 replace ca is realized as del_ca followed by add_ca 2007-02-24 23:20:27 +00:00
Andreas Steffen 98a905838a last CA keyword is KW_OCSPURI2 2007-02-24 23:19:28 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Martin Willi a02ae4ccd5 using "left" as my host per default, swapping to "right" when needed 2007-02-15 12:13:18 +00:00
Andreas Steffen 06133e1de7 enabled adding and deleting ca information records 2007-02-14 01:02:09 +00:00
Andreas Steffen 3a5f6dff7a fixed starter crash due to freeing default IPSEC_EAPDIR string 2007-02-14 00:56:58 +00:00
Andreas Steffen 8245a9142c add --eapdir option only if defined in ipsec.conf 2007-02-14 00:53:45 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Andreas Steffen fb34660632 negated POLICY_REAUTH to POLICY_DONT_REAUTH 2006-12-21 20:05:08 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 532f2347dc first try to update ipsec.conf manual 2006-12-19 08:32:25 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Martin Willi 5347a84f81 fixed HAVE_BACKTRACE checks 
starter Makefile now uses proper $(COMPILE) to build pluto objects
 2006-12-11 09:29:34 +00:00
Andreas Steffen 15b050c945 added XAUTH support 2006-12-05 23:13:02 +00:00
Andreas Steffen 923ee10eef solved 64 bit issue in push/pop stroke interface 2006-10-31 23:17:21 +00:00
Andreas Steffen 0e4d1d05ad added 'modeconfig=pull|push' and 'left|rightnatip' keywords 2006-10-25 08:40:34 +00:00
Andreas Steffen b701b7895b added has_natip flag 2006-10-25 08:39:39 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi 107936f55a added charondebug config parameter to set debug level at startup 2006-10-18 11:46:57 +00:00
Andreas Steffen 5d71e72db5 added hostaccess support 2006-09-25 05:46:56 +00:00
Andreas Steffen 4f383c6950 added auth_method field 2006-09-18 07:46:16 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up 
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
 2006-07-21 13:31:53 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Andreas Steffen 5c149670df generation of default key 2006-07-03 06:21:56 +00:00
Andreas Steffen 0e3cb317e2 cosmetics 2006-07-03 06:21:40 +00:00
Andreas Steffen b17e4d2bfd added support of updown parameter 2006-07-03 06:21:14 +00:00
Martin Willi 13b8fa0e8d fixed execv call args to work when using strictcrl and syslog 2006-06-20 10:04:35 +00:00
Martin Willi 56f1a8f2d6 handling of "rekey=no" parameter added 2006-06-15 11:02:15 +00:00
Martin Willi ad038f770d changed default algorithms to: 
ike: aes128-sha-modp2048
  esp: aes128-sha1, 3des-md5
 2006-06-15 11:01:17 +00:00
Andreas Steffen 311b225740 added strictcrlpolicy command line argument 2006-06-14 12:43:51 +00:00
Andreas Steffen 5347233204 support for stroke listcerts|listcacerts|listall and left|rightca= 2006-06-12 08:43:46 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Andreas Steffen 2a13996de0 corrected type 2006-06-09 11:06:37 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00