Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 788e512d58 added ikev1/ip-pool scenario Andreas Steffen 2012-06-28 14:37:04 +02:00
• f39a2f275e merged xauth-id-rsa and xauth-rsa-config scenarios Andreas Steffen 2012-06-28 14:23:47 +02:00
• bbbffac3ab Defined a macro to replace strerror(3) with calls to thread-safe wrapper Tobias Brunner 2012-06-28 12:13:05 +02:00
• 2a59527659 Thread-safe wrapper around strerror(3)/strerror_r(3) added Tobias Brunner 2012-06-27 18:42:25 +02:00
• 0f018a7324 Show some uname() info in "ipsec statusall" Martin Willi 2012-06-28 11:56:40 +02:00
• b8e17eb36f Show some uname() info during charon startup Martin Willi 2012-06-28 11:56:15 +02:00
• 8cad9ed42c charon automatically removes virtual interfaces Andreas Steffen 2012-06-28 09:30:24 +02:00
• bd858af851 libcharon also requires kernel interfaces and a socket implementation Tobias Brunner 2012-06-27 12:14:16 +02:00
• 271377905d Defer quick mode initiation if we expect a mode config request Martin Willi 2012-06-26 10:36:49 +02:00
• 8ff45cfd99 Queue a mode config task as responder if we need a virtual IP Martin Willi 2012-06-26 10:35:24 +02:00
• c2a391746c Add basic support for XAuth responder authentication Martin Willi 2012-06-14 16:13:10 +02:00
• a9aa75b90e Map XAuth responder authentication methods between IKEv1 and IKEv2 Martin Willi 2012-06-14 16:08:28 +02:00
• dc6d259635 Show remote EAP/XAuth identity in "statusall" on a separate line Martin Willi 2012-06-27 11:40:53 +02:00
• 8122ae8cd8 gcrypt: Register SHA1 first as HASH_PREFERRED depends on it Tobias Brunner 2012-06-27 11:30:55 +02:00
• aa54ecef44 Use static plugin features in libcharon to define essential dependencies Tobias Brunner 2012-06-27 11:27:36 +02:00
• ec3b332bf8 Use static plugin features in charon-nm Tobias Brunner 2012-06-25 18:58:53 +02:00
• 5def45b890 Ignore a received %any virtual IP for installation Martin Willi 2012-06-26 18:00:40 +02:00
• f102c5f341 Mask the configured mark value to ensure it is in range Tobias Brunner 2012-06-26 12:50:58 +02:00
• 66e12b926e Some updates in ipsec.conf(5) for 5.0.0 Tobias Brunner 2012-06-26 12:39:53 +02:00
• 92250a48a9 Added MAC wrappers to Android.mk Tobias Brunner 2012-06-26 07:58:04 +02:00
• 9866c26c5b Also build charon's IKEv1 implementation on Android Tobias Brunner 2012-06-22 13:33:38 +02:00
• 43d01ab2f6 Build nonce plugin on Android Tobias Brunner 2012-06-22 13:32:07 +02:00
• 8497c5d147 Missing source file added to libcharon's Android.mk Tobias Brunner 2012-06-22 13:31:14 +02:00
• 67307ad724 scepclient: Added support to build it on Android Tobias Brunner 2012-06-14 18:35:58 +02:00
• 197dbf5f72 Added support for the curl plugin on Android Tobias Brunner 2012-06-14 18:20:35 +02:00
• 63afd833b9 Avoid SIGSEGV during shutdown if charon is not started as root Tobias Brunner 2012-06-25 19:00:00 +02:00
• f97c269e0c NEWS about thread pool updates added Tobias Brunner 2012-06-25 18:01:23 +02:00
• e0efd7c121 Make rescheduling a job more predictable Tobias Brunner 2012-06-21 10:10:25 +02:00
• 26d77eb3e6 Centralized thread cancellation in processor_t Tobias Brunner 2012-06-19 13:29:09 +02:00
• 7fec83af28 Give processor_t more control over the lifecycle of a job Tobias Brunner 2012-06-19 10:45:17 +02:00
• 18d21a57df Added a method to plugin_loader_t to add 'static' plugin features Tobias Brunner 2012-06-20 11:47:58 +02:00
• e07122436c Make sure that all features of critical plugins are loaded Tobias Brunner 2012-06-20 11:34:46 +02:00
• bc6d944705 Added an option to rename the ipsec script during installation Tobias Brunner 2012-06-19 17:12:53 +02:00
• d86cf32b4b Removed -o argument when creating .../ipsec.d with install Tobias Brunner 2012-06-19 17:26:54 +02:00
• 34a80708e2 Updated ipsec script man page after removing pluto Tobias Brunner 2012-06-19 16:09:50 +02:00
• 738b9121cb Use mac_t and PRF and signer wrappers in cmac plugin Tobias Brunner 2012-06-25 13:00:57 +02:00
• 83cb52b044 Use mac_t and PRF and signer wrappers in xcbc plugin Tobias Brunner 2012-06-25 12:50:55 +02:00
• c4a3c9672a Make the hmac_t interface a generic interface for message authentication codes Tobias Brunner 2012-06-25 11:37:04 +02:00
• 228d096e42 Simplified creation of PRFs and signers in openssl and hmac plugins Tobias Brunner 2012-06-22 11:30:46 +02:00
• 01850f5d55 Function to convert PRFs to hash algorithms added Tobias Brunner 2012-06-22 11:28:43 +02:00
• 903093d439 hasher_algorithm_from_integrity() optionally returns truncation length Tobias Brunner 2012-06-22 11:28:10 +02:00
• 73d032e412 Use simple wrappers for HMAC based PRF and signer in openssl plugin Tobias Brunner 2012-06-22 10:52:20 +02:00
• 63420c6e13 Use simple wrappers for HMAC based PRF and signer in hmac plugin Tobias Brunner 2012-06-22 10:38:37 +02:00
• 57ff4be874 Simple wrappers for HMAC based prf_t and signer_t implementations added Tobias Brunner 2012-06-22 09:39:09 +02:00
• 8391c1d0b1 Refactored OpenSSL based HMAC implementation Tobias Brunner 2012-06-21 13:10:26 +02:00
• 54081897cf Adding OpenSSL HMAC signer functions to openssl plugin Aleksandr Grinberg 2012-06-20 13:46:21 -07:00
• 0504b0a09f Adding OpenSSL HMAC pseudo random functions to openssl plugin Aleksandr Grinberg 2012-06-20 13:43:47 -07:00
• 4faece7b1e Adding OpenSSL random number functions to openssl plugin Aleksandr Grinberg 2012-06-20 13:39:37 -07:00
• 7beb31aae4 Fixed IPv6 source address lookup Tobias Brunner 2012-06-18 12:01:10 +02:00
• 5d476b4266 updated default configuration of UML hosts to 5.0.0 Andreas Steffen 2012-06-25 13:04:55 +02:00
• c38d6905a2 added charon.cisco_unity to strongswan.conf.5 man page Andreas Steffen 2012-06-25 11:47:40 +02:00
• 554a697a84 support Cisco Unity VID Andreas Steffen 2012-06-25 11:00:12 +02:00
• 720ba902c5 Enable xauth-generic by default but don't build it if IKEv1 is disabled Tobias Brunner 2012-06-25 11:07:49 +02:00
• 2e4c807bf3 Remove CREDITS from distribution Tobias Brunner 2012-06-25 11:07:35 +02:00
• 20bda203f9 The AUTHORS file is required by automake Tobias Brunner 2012-06-25 10:59:27 +02:00
• d50b9be571 LICENSE file updated Tobias Brunner 2012-06-21 18:14:43 +02:00
• c236f19e50 ldaphost and ldapbase ca section keywords are deprecated Tobias Brunner 2012-06-21 18:04:18 +02:00
• 693805cc98 Removed pluto-specifics from ipsec script Tobias Brunner 2012-06-21 17:58:59 +02:00
• f5a3b95a39 README file cleaned up and updated Tobias Brunner 2012-06-21 17:55:08 +02:00
• 0ba1ddaa24 Enforce uniqueids=keep based on XAuth identity Martin Willi 2012-06-14 15:25:11 +02:00
• f145ea29e0 Don't send XAUTH_OK if a hook prevents SA to establish Martin Willi 2012-06-14 15:23:57 +02:00
• 0c32b9c62f Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes Martin Willi 2012-06-14 15:08:37 +02:00
• dd1381e7d3 Show EAP/XAuth identity in "ipsec status", if available Martin Willi 2012-06-14 15:07:44 +02:00
• 0fbfcf2a3a Use XAuth/EAP remote identity for uniqueness check Martin Willi 2012-06-14 14:47:40 +02:00
• de5e8fb4e0 Add missing XAuth name variable when complaining about missing XAuth backend Martin Willi 2012-06-25 10:09:27 +02:00
• f84180bb89 removed AUTHORS and CREDITS Andreas Steffen 2012-06-25 08:45:10 +02:00
• a7b8e380dc some copyright additions Andreas Steffen 2012-06-23 12:09:29 +02:00
• e398dfb4c3 update copyright Andreas Steffen 2012-06-23 11:57:42 +02:00
• 83c75fd10f version bump to 5.0.0 Andreas Steffen 2012-06-23 11:32:54 +02:00
• e91157a4b6 Fix SIGSEGV if kernel install fails during Quick Mode as responder. Tobias Brunner 2012-06-07 14:59:20 +02:00
• fc16296391 adapted description to IKEv2 Andreas Steffen 2012-06-22 09:53:25 +02:00
• aa8898bc45 Fixed compile error because of charon->name in certexpire plugin. Tobias Brunner 2012-06-21 13:59:18 +02:00
• bf577b6714 fixed typo Andreas Steffen 2012-06-20 11:15:09 +02:00
• 0802b8359e added ipv6/rw-ip6-in-ip4-ikev1 scenario Andreas Steffen 2012-06-20 11:13:20 +02:00
• 36988a0a37 added ipv6/rw-ip6-in-ip4-ikev2 scenario Andreas Steffen 2012-06-20 11:03:51 +02:00
• e2dd114f37 Select requested virtual IP family based on remote TS, if no local TS available Martin Willi 2012-06-20 10:01:05 +02:00
• f2fc138e8e upgraded UML options to 5.0.0 Andreas Steffen 2012-06-19 19:34:26 +02:00
• 5d227c79a9 Doxygen fix in PKCS#7 wrapper Tobias Brunner 2012-06-19 13:32:24 +02:00
• 87f8ff168b sleep one second more Andreas Steffen 2012-06-19 06:18:05 +02:00
• e4012ae386 use socket-default in scenario Andreas Steffen 2012-06-19 06:17:37 +02:00
• bc60bb8bf4 added ikev1/xauth-id-rsa-hybrid scenario Andreas Steffen 2012-06-18 22:51:50 +02:00
• 771a66c6a0 added ikev1/xauth-id-rsa-aggressive scenario Andreas Steffen 2012-06-18 22:30:26 +02:00
• 2045a9d36d added secret as valid authby argument Andreas Steffen 2012-06-18 22:11:18 +02:00
• 8b8f5c6141 rsasig is not recognized as authentication method Andreas Steffen 2012-06-18 22:03:36 +02:00
• 49d18a8e06 enable potentially unsafe aggressive mode Andreas Steffen 2012-06-18 21:34:48 +02:00
• 7a892288fb change ikev1/xauth scenarios to modern notation Andreas Steffen 2012-06-18 21:22:01 +02:00
• 6d3702ed61 testing: List IPv6 routing table in IPv6 test cases. Tobias Brunner 2012-06-15 15:19:23 +02:00
• 5c1332bf7c NLM_F_DUMP includes NLM_F_ROOT. Tobias Brunner 2012-06-15 12:50:30 +02:00
• 8ec51f83e5 Don't create roam jobs based on cached/cloned routes. Tobias Brunner 2012-06-15 12:27:26 +02:00
• 9896b6bd58 Don't compare ports when comparing cached routes. Tobias Brunner 2012-06-15 11:43:21 +02:00
• 31bcaf604a starter: Fixed parsing of %defaultroute. Tobias Brunner 2012-06-15 10:32:15 +02:00
• af518b450e Adopt children as XAuth initiator (which is IKE responder) Martin Willi 2012-06-14 14:46:48 +02:00
• 794cdbc53f Added 5.0 NEWS about IKEv1 in charon Martin Willi 2012-06-14 10:57:29 +02:00
• e36497700c Print the kind of *Swan during starter startup Martin Willi 2012-06-13 12:18:25 +02:00
• 137035cc78 Show what kind of *Swan we run in "ipsec status" Martin Willi 2012-06-13 12:11:55 +02:00
• b31a56f128 Require a scary option to respond to Aggressive Mode PSK requests Martin Willi 2012-06-13 09:32:28 +02:00
• e49f18f74d thanks to narrowing treat right|leftsubnetwithin as synonyms for right|leftsubnet Andreas Steffen 2012-06-14 07:55:12 +02:00
• daa857029f removed plutostart parameter Andreas Steffen 2012-06-13 21:19:05 +02:00
• dd38e9fc83 scepclient: Fixed Makefile after removing enable-smartcard configure option. Tobias Brunner 2012-06-13 15:08:14 +02:00
• f7cbc0fafe Use proper defines for IPV6_PKTINFO on Mac OS X Lion and newer. Tobias Brunner 2012-06-13 15:02:10 +02:00