Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• da6d86dd94 Try to keep the given source address when looking up routes Tobias Brunner 2011-09-01 11:33:13 +02:00
• 6676769e8c Make sure we propose a dynamic TS if we don't have hosts to derive a TS from Tobias Brunner 2012-09-21 18:13:42 +02:00
• 0d33f428d1 Move rw-eap-dynamic scenario to its proper location Tobias Brunner 2012-09-21 09:34:10 +02:00
• f0a2fef8a5 In mem_pool, check for an existing ID entry before creating a new one Martin Willi 2012-09-20 11:04:55 +02:00
• a69bc12a3a Merge branch 'unity' Martin Willi 2012-09-18 17:22:30 +02:00
• 995a9c8a0a Add a simple test case for the unity plugin, featuring both includes and excludes Martin Willi 2012-09-17 16:23:10 +02:00
• f728ae590b Build unity plugin in strongSwan test suite Martin Willi 2012-09-17 15:39:29 +02:00
• cc48f36084 Add unity plugin NEWS Martin Willi 2012-09-17 11:48:31 +02:00
• 55f126fd55 Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity Martin Willi 2012-09-17 11:43:11 +02:00
• 77c37ea5e0 As Unity responder, don't change the proposed TS at all, racoon doesn't like that Martin Willi 2012-09-17 14:30:35 +02:00
• 336dd7a9c7 Don't complain about multiple TS in IKEv1, as it supported with Unity Martin Willi 2012-09-13 15:57:39 +02:00
• 7a7deec283 As initiator, narrow received Unity attributes to configured TS Martin Willi 2012-09-13 15:57:06 +02:00
• b8db3775f3 When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too Martin Willi 2012-09-13 15:38:04 +02:00
• 284ed1b352 Enable Cisco Unity only if Unity vendor id received Martin Willi 2012-09-13 15:09:21 +02:00
• 6e60807637 Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange Martin Willi 2012-07-24 13:23:48 +02:00
• f2463f1bd6 Add a Unity attribute provider that adds Split-Includes for TS Martin Willi 2012-07-24 12:21:25 +02:00
• e39e697429 Check if subset calculation actually yields a TS in Unity narrowing Martin Willi 2012-07-24 12:20:32 +02:00
• 92b5066705 Request Unity configuration attributes for IKEv1 only Martin Willi 2012-07-24 10:55:46 +02:00
• 5ff012f717 Add Cisco Unity client support for Split-Include and Local-LAN Martin Willi 2012-07-23 17:14:47 +02:00
• 56ea95195a Add a road-warrior test case requesting both an IPv4 and an IPv6 virtual address Martin Willi 2012-09-18 16:31:15 +02:00
• 7ee37114c9 Derive a dynamic TS to multiple virtual IPs Martin Willi 2012-09-18 12:46:36 +02:00
• abdb82fcc5 Use the vararg list constructor in quick mode task Martin Willi 2012-09-18 12:44:59 +02:00
• 5f9d62fb91 Add a linked list constructor taking items from a vararg list Martin Willi 2012-09-18 12:43:31 +02:00
• 8c19323c37 Make stroke user-creds work with XAuth configs Tobias Brunner 2012-09-18 16:56:17 +02:00
• 4e16d2e864 Fix Doxygen comment for proposal_keywords_t Tobias Brunner 2012-09-18 16:11:53 +02:00
• 4157a40b45 New Android release after fixing IDr problems Tobias Brunner 2012-09-18 15:29:29 +02:00
• af16b5afb0 Use random ports in NetworkManager backend Tobias Brunner 2012-09-18 14:57:05 +02:00
• 35e2afd459 Fix equality comparison of auth_cfg_t Tobias Brunner 2012-09-18 12:47:17 +02:00
• b7a500e985 Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> Tobias Brunner 2012-09-18 11:45:12 +02:00
• e6fcc172f8 Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend Tobias Brunner 2012-09-18 14:39:45 +02:00
• e596d0ef1e android: Use AUTH_RULE_IDENTITY_LOOSE Tobias Brunner 2012-09-18 11:21:49 +02:00
• 3a8852c76f Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator Tobias Brunner 2012-09-18 11:16:10 +02:00
• cf1ec85207 New Android release after fixing Unicode conversion bug Tobias Brunner 2012-09-17 10:55:10 +02:00
• b7c54cf226 android: Fix conversion of actual Unicode strings (i.e. bytes!=chars) Tobias Brunner 2012-09-17 10:30:39 +02:00
• 6d30954ae8 Removed the unneeded socket-raw plugin Tobias Brunner 2012-09-14 14:10:14 +02:00
• a889cfe5e1 Change traffic selectors during Quick Mode in case of a NAT in transport mode Tobias Brunner 2012-09-14 09:07:21 +02:00
• 7d786057b4 Merge branch 'custom-crypto' Tobias Brunner 2012-09-13 15:50:52 +02:00
• 08ad639f32 Added algorithm lookup via kernel_interface_t to the various kernel interfaces Tobias Brunner 2012-09-13 15:22:37 +02:00
• 524fb37ccd Added possibility to register custom kernel algorithms to kernel interface Tobias Brunner 2012-09-13 14:36:04 +02:00
• 4c57c63062 Added possibility to register custom proposal keywords Tobias Brunner 2012-09-13 14:22:08 +02:00
• 995875210a Removed len argument from proposal_get_token() Tobias Brunner 2012-09-13 13:39:33 +02:00
• 1962e12fd3 Make arguments for enumerator_create_token|directory const Tobias Brunner 2012-09-13 12:30:22 +02:00
• 8c2ec47149 Moved proposal_keywords to proposal_keywords_static Francois ten Krooden 2012-08-24 14:56:42 +02:00
• bc6ec4de73 Option added to enforce a configured destination address for DHCP packets Tobias Brunner 2012-07-05 19:06:44 +02:00
• 493f85b696 version bump to 5.0.1rc1 Andreas Steffen 2012-09-12 23:56:12 +02:00
• 4a4d20de9d Allow calls to set_address() for any host-sized TS, not only dynamic ones Tobias Brunner 2012-09-12 18:10:04 +02:00
• 455accc687 Ensure traffic selectors are dynamic before calling set_address() when deriving them Tobias Brunner 2012-09-12 18:07:41 +02:00
• fa96a350c2 Consistently log XFRM mark masks with 0 prefix in kernel-netlink plugin Tobias Brunner 2012-09-12 17:40:36 +02:00
• dc80ef0cde starter: Added --nolog option to suppress logging in starter itself Tobias Brunner 2012-09-12 17:11:54 +02:00
• 629cdca82c Updates to strongswan.conf(5) man page (added several missing options) Tobias Brunner 2012-09-12 16:52:56 +02:00
• 72970b458d Some updates to ipsec.conf(5) man page Tobias Brunner 2012-09-12 15:44:00 +02:00
• 23b4d3a52f starter: Allow %any also for protocol in left|rightprotoport Tobias Brunner 2012-09-12 15:31:02 +02:00
• ab2c989c32 Don't allow NULL encryption with PEAP Martin Willi 2012-08-30 11:13:02 +02:00
• acada66a35 Use memmove on overlapping regions, and operate with correct sizeof() Martin Willi 2012-08-30 11:46:14 +02:00
• fb3cf1b708 Whitespace cleanups in tls_eap Martin Willi 2012-08-30 11:14:01 +02:00
• 5b96503e13 Use uintptr_t in mem pool to avoid compiler warning if sizeof(void*) != sizeof(int) Martin Willi 2012-09-12 12:02:11 +02:00
• 979027ae04 ikev1 hybrid authentication does not need client certificates Andreas Steffen 2012-09-12 12:42:24 +02:00
• e1588893f5 corrected topology in ikev2/rw-radius-accounting scenario Andreas Steffen 2012-09-12 12:26:39 +02:00
• 9ce931f3af added ikev2/rw-eap-dynamic scenario Andreas Steffen 2012-09-12 12:15:17 +02:00
• d4cca1beea Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty Martin Willi 2012-09-11 17:20:17 +02:00
• c4acf37502 Don't use host address for dynamic TS in IKEv1 if a virtual IP was expected Martin Willi 2012-09-11 12:56:29 +02:00
• 7d82aaea8d Don't use host address for dynamic TS in IKEv2 if a virtual IP was expected Martin Willi 2012-09-11 12:38:45 +02:00
• 4cb0783f3c Don't return a subset for a dynamic TS unless set_address has been called Martin Willi 2012-09-11 12:46:31 +02:00
• c7294f7a58 Send FAILED_CP_REQUIRED if a configuration payload was expected, but not received Martin Willi 2012-09-11 12:20:37 +02:00
• 1e04488f32 Check for an existing lease in all stroke pools before creating a new one Martin Willi 2012-09-11 11:33:42 +02:00
• 28a3d5bfbd Pass full pool list to release_address Martin Willi 2012-09-11 11:19:56 +02:00
• 594c58e111 Pass the full list of pools to acquire_address, enumerate in providers Martin Willi 2012-09-11 10:41:11 +02:00
• dc7b79d8a5 Add a linked list constructor initializing from an enumerator Martin Willi 2012-09-11 10:40:10 +02:00
• f942588f95 Add a responder narrow() hook to change TS in the kernel, but not on the wire Martin Willi 2012-07-24 12:40:45 +02:00
• cf85ebbfec Support RADIUS accounting when using IKEv1 with xauth-eap and eap-radius Martin Willi 2012-09-11 15:21:25 +02:00
• 37095ce1c1 Fix leak while enumerating RADIUS Framed-IPs from IKE_SA Martin Willi 2012-09-11 15:20:33 +02:00
• f4cc7ea11b Add uniqueids=never to ignore INITIAL_CONTACT notifies Tobias Brunner 2012-09-10 17:24:21 +02:00
• c51af950b1 Add random plugin options to strongswan.conf.5 Martin Willi 2012-09-10 17:07:28 +02:00
• 7b68cd9212 Add strongswan.conf runtime options for /dev/[u]random files Martin Willi 2012-09-10 16:47:36 +02:00
• 98521f0821 this is the correct evaltest Andreas Steffen 2012-09-10 15:53:03 +02:00
• 2dd0883fb7 recovered ikev2/ip-two-pools-mixed evaltest Andreas Steffen 2012-09-10 15:46:50 +02:00
• d401bcfe97 adapted ip-pool evaltests Andreas Steffen 2012-09-10 15:41:19 +02:00
• 4065e2504c Use the proper types for comma separated attributes read from strongswan.conf Tobias Brunner 2012-09-10 15:17:17 +02:00
• 383c174a79 Print the name of mem pools instead of the confusing <base>/<size> Tobias Brunner 2012-09-10 12:37:31 +02:00
• 747fd544a7 Properly remove broadcast address from mem pools Tobias Brunner 2012-09-10 11:44:18 +02:00
• 32e30f15cb use base IMC ID if src IMC ID is not supported Andreas Steffen 2012-09-10 00:07:54 +02:00
• 3b51f34040 added libimcv.assessment_result to strongswan.conf man page Andreas Steffen 2012-09-09 23:50:32 +02:00
• a785bb8797 make sending of IETF Assessment Result attributes configurable Andreas Steffen 2012-09-09 23:24:23 +02:00
• 6f93927b6c introduced sending of standard IETF Assessment Result PA-TNC attribute by IMVs Andreas Steffen 2012-09-09 05:13:13 +02:00
• bcf8cdd556 Only initiate an exchange from send_dpd() if a task was actually queued Tobias Brunner 2012-09-07 18:05:22 +02:00
• ccba4f1533 android: New release after adding certificate authentication and reauth fix Tobias Brunner 2012-09-06 14:54:37 +02:00
• 3babde90bb Trigger ike_updown event caused by retransmits only after reestablish() has been called Tobias Brunner 2012-09-05 16:03:20 +02:00
• d7d2a5ec38 android: Properly handle reauthentication initiated by the client Tobias Brunner 2012-09-05 11:36:59 +02:00
• 0326ceda64 android: Create a new VpnService.Builder after VPN has been established Tobias Brunner 2012-09-05 11:36:00 +02:00
• 4dbb193190 Add ike_reestablish() event that is triggered when an IKE_SA is reestablished Tobias Brunner 2012-09-05 11:34:50 +02:00
• 873b63b771 Add a new condition to mark IKE_SAs that are currently being reauthenticated Tobias Brunner 2012-09-06 11:23:11 +02:00
• 4c91845452 starter: Load config again when restarting charon Tobias Brunner 2012-09-05 16:43:34 +02:00
• d2e8f20d94 Clear virtual IPs before storing assigned ones on the IKE_SA Tobias Brunner 2012-09-05 13:16:31 +02:00
• 4c892fe533 In mode_config, destroy temporary pool list instead of the virtual IP list twice Martin Willi 2012-09-05 14:18:52 +02:00
• d1604d0551 Merge branch 'android-client-cert' Tobias Brunner 2012-09-04 13:57:05 +02:00
• c89cc22692 android: Native parts handle ikev2-cert VPN type Tobias Brunner 2012-08-28 17:11:55 +02:00
• 094a059bcf android: android_creds_t can provide a user's private key and certificate Tobias Brunner 2012-08-28 17:05:14 +02:00
• 3aba33868b android: Added JNI method to retrieve user certificate and private key Tobias Brunner 2012-08-28 17:02:53 +02:00
• 38e866c3dd android: Don't show the password dialog if not required Tobias Brunner 2012-08-28 17:01:37 +02:00
• 69f731a9d8 android: Enable pkcs8 plugin Tobias Brunner 2012-08-28 16:45:46 +02:00