Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 3a8852c76f Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator Tobias Brunner 2012-09-18 11:16:10 +02:00
• cf1ec85207 New Android release after fixing Unicode conversion bug Tobias Brunner 2012-09-17 10:55:10 +02:00
• b7c54cf226 android: Fix conversion of actual Unicode strings (i.e. bytes!=chars) Tobias Brunner 2012-09-17 10:30:39 +02:00
• 6d30954ae8 Removed the unneeded socket-raw plugin Tobias Brunner 2012-09-14 14:10:14 +02:00
• a889cfe5e1 Change traffic selectors during Quick Mode in case of a NAT in transport mode Tobias Brunner 2012-09-14 09:07:21 +02:00
• 7d786057b4 Merge branch 'custom-crypto' Tobias Brunner 2012-09-13 15:50:52 +02:00
• 08ad639f32 Added algorithm lookup via kernel_interface_t to the various kernel interfaces Tobias Brunner 2012-09-13 15:22:37 +02:00
• 524fb37ccd Added possibility to register custom kernel algorithms to kernel interface Tobias Brunner 2012-09-13 14:36:04 +02:00
• 4c57c63062 Added possibility to register custom proposal keywords Tobias Brunner 2012-09-13 14:22:08 +02:00
• 995875210a Removed len argument from proposal_get_token() Tobias Brunner 2012-09-13 13:39:33 +02:00
• 1962e12fd3 Make arguments for enumerator_create_token|directory const Tobias Brunner 2012-09-13 12:30:22 +02:00
• 8c2ec47149 Moved proposal_keywords to proposal_keywords_static Francois ten Krooden 2012-08-24 14:56:42 +02:00
• bc6ec4de73 Option added to enforce a configured destination address for DHCP packets Tobias Brunner 2012-07-05 19:06:44 +02:00
• 493f85b696 version bump to 5.0.1rc1 Andreas Steffen 2012-09-12 23:56:12 +02:00
• 4a4d20de9d Allow calls to set_address() for any host-sized TS, not only dynamic ones Tobias Brunner 2012-09-12 18:10:04 +02:00
• 455accc687 Ensure traffic selectors are dynamic before calling set_address() when deriving them Tobias Brunner 2012-09-12 18:07:41 +02:00
• fa96a350c2 Consistently log XFRM mark masks with 0 prefix in kernel-netlink plugin Tobias Brunner 2012-09-12 17:40:36 +02:00
• dc80ef0cde starter: Added --nolog option to suppress logging in starter itself Tobias Brunner 2012-09-12 17:11:54 +02:00
• 629cdca82c Updates to strongswan.conf(5) man page (added several missing options) Tobias Brunner 2012-09-12 16:52:56 +02:00
• 72970b458d Some updates to ipsec.conf(5) man page Tobias Brunner 2012-09-12 15:44:00 +02:00
• 23b4d3a52f starter: Allow %any also for protocol in left|rightprotoport Tobias Brunner 2012-09-12 15:31:02 +02:00
• ab2c989c32 Don't allow NULL encryption with PEAP Martin Willi 2012-08-30 11:13:02 +02:00
• acada66a35 Use memmove on overlapping regions, and operate with correct sizeof() Martin Willi 2012-08-30 11:46:14 +02:00
• fb3cf1b708 Whitespace cleanups in tls_eap Martin Willi 2012-08-30 11:14:01 +02:00
• 5b96503e13 Use uintptr_t in mem pool to avoid compiler warning if sizeof(void*) != sizeof(int) Martin Willi 2012-09-12 12:02:11 +02:00
• 979027ae04 ikev1 hybrid authentication does not need client certificates Andreas Steffen 2012-09-12 12:42:24 +02:00
• e1588893f5 corrected topology in ikev2/rw-radius-accounting scenario Andreas Steffen 2012-09-12 12:26:39 +02:00
• 9ce931f3af added ikev2/rw-eap-dynamic scenario Andreas Steffen 2012-09-12 12:15:17 +02:00
• d4cca1beea Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty Martin Willi 2012-09-11 17:20:17 +02:00
• c4acf37502 Don't use host address for dynamic TS in IKEv1 if a virtual IP was expected Martin Willi 2012-09-11 12:56:29 +02:00
• 7d82aaea8d Don't use host address for dynamic TS in IKEv2 if a virtual IP was expected Martin Willi 2012-09-11 12:38:45 +02:00
• 4cb0783f3c Don't return a subset for a dynamic TS unless set_address has been called Martin Willi 2012-09-11 12:46:31 +02:00
• c7294f7a58 Send FAILED_CP_REQUIRED if a configuration payload was expected, but not received Martin Willi 2012-09-11 12:20:37 +02:00
• 1e04488f32 Check for an existing lease in all stroke pools before creating a new one Martin Willi 2012-09-11 11:33:42 +02:00
• 28a3d5bfbd Pass full pool list to release_address Martin Willi 2012-09-11 11:19:56 +02:00
• 594c58e111 Pass the full list of pools to acquire_address, enumerate in providers Martin Willi 2012-09-11 10:41:11 +02:00
• dc7b79d8a5 Add a linked list constructor initializing from an enumerator Martin Willi 2012-09-11 10:40:10 +02:00
• f942588f95 Add a responder narrow() hook to change TS in the kernel, but not on the wire Martin Willi 2012-07-24 12:40:45 +02:00
• cf85ebbfec Support RADIUS accounting when using IKEv1 with xauth-eap and eap-radius Martin Willi 2012-09-11 15:21:25 +02:00
• 37095ce1c1 Fix leak while enumerating RADIUS Framed-IPs from IKE_SA Martin Willi 2012-09-11 15:20:33 +02:00
• f4cc7ea11b Add uniqueids=never to ignore INITIAL_CONTACT notifies Tobias Brunner 2012-09-10 17:24:21 +02:00
• c51af950b1 Add random plugin options to strongswan.conf.5 Martin Willi 2012-09-10 17:07:28 +02:00
• 7b68cd9212 Add strongswan.conf runtime options for /dev/[u]random files Martin Willi 2012-09-10 16:47:36 +02:00
• 98521f0821 this is the correct evaltest Andreas Steffen 2012-09-10 15:53:03 +02:00
• 2dd0883fb7 recovered ikev2/ip-two-pools-mixed evaltest Andreas Steffen 2012-09-10 15:46:50 +02:00
• d401bcfe97 adapted ip-pool evaltests Andreas Steffen 2012-09-10 15:41:19 +02:00
• 4065e2504c Use the proper types for comma separated attributes read from strongswan.conf Tobias Brunner 2012-09-10 15:17:17 +02:00
• 383c174a79 Print the name of mem pools instead of the confusing <base>/<size> Tobias Brunner 2012-09-10 12:37:31 +02:00
• 747fd544a7 Properly remove broadcast address from mem pools Tobias Brunner 2012-09-10 11:44:18 +02:00
• 32e30f15cb use base IMC ID if src IMC ID is not supported Andreas Steffen 2012-09-10 00:07:54 +02:00
• 3b51f34040 added libimcv.assessment_result to strongswan.conf man page Andreas Steffen 2012-09-09 23:50:32 +02:00
• a785bb8797 make sending of IETF Assessment Result attributes configurable Andreas Steffen 2012-09-09 23:24:23 +02:00
• 6f93927b6c introduced sending of standard IETF Assessment Result PA-TNC attribute by IMVs Andreas Steffen 2012-09-09 05:13:13 +02:00
• bcf8cdd556 Only initiate an exchange from send_dpd() if a task was actually queued Tobias Brunner 2012-09-07 18:05:22 +02:00
• ccba4f1533 android: New release after adding certificate authentication and reauth fix Tobias Brunner 2012-09-06 14:54:37 +02:00
• 3babde90bb Trigger ike_updown event caused by retransmits only after reestablish() has been called Tobias Brunner 2012-09-05 16:03:20 +02:00
• d7d2a5ec38 android: Properly handle reauthentication initiated by the client Tobias Brunner 2012-09-05 11:36:59 +02:00
• 0326ceda64 android: Create a new VpnService.Builder after VPN has been established Tobias Brunner 2012-09-05 11:36:00 +02:00
• 4dbb193190 Add ike_reestablish() event that is triggered when an IKE_SA is reestablished Tobias Brunner 2012-09-05 11:34:50 +02:00
• 873b63b771 Add a new condition to mark IKE_SAs that are currently being reauthenticated Tobias Brunner 2012-09-06 11:23:11 +02:00
• 4c91845452 starter: Load config again when restarting charon Tobias Brunner 2012-09-05 16:43:34 +02:00
• d2e8f20d94 Clear virtual IPs before storing assigned ones on the IKE_SA Tobias Brunner 2012-09-05 13:16:31 +02:00
• 4c892fe533 In mode_config, destroy temporary pool list instead of the virtual IP list twice Martin Willi 2012-09-05 14:18:52 +02:00
• d1604d0551 Merge branch 'android-client-cert' Tobias Brunner 2012-09-04 13:57:05 +02:00
• c89cc22692 android: Native parts handle ikev2-cert VPN type Tobias Brunner 2012-08-28 17:11:55 +02:00
• 094a059bcf android: android_creds_t can provide a user's private key and certificate Tobias Brunner 2012-08-28 17:05:14 +02:00
• 3aba33868b android: Added JNI method to retrieve user certificate and private key Tobias Brunner 2012-08-28 17:02:53 +02:00
• 38e866c3dd android: Don't show the password dialog if not required Tobias Brunner 2012-08-28 17:01:37 +02:00
• 69f731a9d8 android: Enable pkcs8 plugin Tobias Brunner 2012-08-28 16:45:46 +02:00
• 5eb7ad3a38 android: Pass the type of VPN to the native parts Tobias Brunner 2012-08-28 15:32:14 +02:00
• 655362464e android: Make sure NULL jstrings are converted properly Tobias Brunner 2012-08-28 15:29:35 +02:00
• 6de38fe88a android: Display the selected certificate alias in the profile list Tobias Brunner 2012-08-28 14:47:00 +02:00
• f46da851ab android: Allow configuration of a user certificate Tobias Brunner 2012-08-28 14:09:18 +02:00
• 3f9e90f618 android: Remove NOT NULL constraint from username column Tobias Brunner 2012-08-28 12:41:56 +02:00
• d0f6481eb0 android: Separate view added to select certificates Tobias Brunner 2012-08-27 17:58:09 +02:00
• 7fedacb2e7 android: Don't try to load the profile with ID 0 Tobias Brunner 2012-08-27 16:53:07 +02:00
• 825c192d4f android: Spinner added to select the VPN type Tobias Brunner 2012-08-27 16:51:41 +02:00
• 1323dc1138 Merge branch 'multi-vip' Martin Willi 2012-08-31 12:55:56 +02:00
• 868409139b Merge branch 'eap-client-select' Tobias Brunner 2012-08-31 12:23:38 +02:00
• cbe244a5fe NEWS about eap-dynamic plugin added Tobias Brunner 2012-08-31 12:16:43 +02:00
• 5f6ef5d5ce Documentation for eap-dynamic added Tobias Brunner 2012-08-23 16:21:22 +02:00
• 7f2e3091ee Log the proper type for virtual EAP methods Tobias Brunner 2012-08-23 16:10:47 +02:00
• 333c3b6228 Added an option to prefer types sent by peer in eap-dynamic plugin Tobias Brunner 2012-08-23 16:02:51 +02:00
• 3dde55e67b eap-dynamic plugin handles EAP-Nak messages and selects a method supported by the peer Tobias Brunner 2012-08-23 15:00:20 +02:00
• a2f1d75eae Preferred EAP methods for eap-dynamic can be configured Tobias Brunner 2012-08-23 14:55:33 +02:00
• a2a61ec2e2 The eap-dynamic plugin uses the first supported method as default Tobias Brunner 2012-08-23 14:47:27 +02:00
• 700ff5def9 Added eap-dynamic plugin which can proxy any other EAP method Tobias Brunner 2012-08-23 14:42:23 +02:00
• 7240914955 Use eap_vendor_type_from_string() in stroke Tobias Brunner 2012-08-23 10:16:37 +02:00
• db409006e4 Function added that parses EAP method strings ([eap-]type[-vendor]) Tobias Brunner 2012-08-23 10:00:11 +02:00
• 576490ab09 Added method to enumerate EAP types contained in an EAP-Nak Tobias Brunner 2012-08-23 09:06:47 +02:00
• cc4eec56f7 Encode EAP-Naks in expanded format if we got an expanded type request Tobias Brunner 2012-08-23 08:36:24 +02:00
• 78e8dca94f Allow clients to request a configured EAP method via EAP-Nak Tobias Brunner 2012-08-21 17:11:14 +02:00
• 34742f1bf8 Virtual EAP methods handle EAP-Naks themselves Tobias Brunner 2012-08-21 16:57:34 +02:00
• af04233e14 Send EAP-Nak with supported types if requested type is unsupported Tobias Brunner 2012-08-21 16:54:21 +02:00
• 7cad171da8 Filter invalid EAP authentication types when enumerating them Tobias Brunner 2012-08-22 17:01:13 +02:00
• eae5616ae6 Move our pseudo EAP types out of the range of valid EAP methods Tobias Brunner 2012-08-31 11:31:48 +02:00
• 7b1c711ea0 version bump to 5.0.1dr4 Andreas Steffen 2012-08-31 02:47:19 +02:00
• 69e056a2c1 Added multiple left/rightsourceip NEWS Martin Willi 2012-08-27 16:52:22 +02:00
• e76f3d0df7 Added NEWS for left/rightdns options Martin Willi 2012-08-27 16:44:35 +02:00
• 26bc695806 Updated ipsec.conf.5 with multiple left/rightsourceip support Martin Willi 2012-08-27 16:58:10 +02:00