Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 4c0124a0a2 Accept follow-up fragments with a TLS message length Martin Willi 2010-01-25 10:42:44 +01:00
• 40e384ea01 Added dummy/identity implementations of the different TLS record layers Martin Willi 2010-01-22 17:24:17 +01:00
• dcbbeb2d09 Pass TLS records to newly introduced TLS stack Martin Willi 2010-01-22 15:35:29 +01:00
• f7f63c52e1 Added some TLS constants Martin Willi 2010-01-21 15:11:38 +01:00
• b173819e5d (De-)fragment EAP-TLS packets, pass TLS records to upper layer Martin Willi 2010-01-21 14:39:39 +01:00
• 2107953804 Added EAP-TLS plugin stub Martin Willi 2010-01-11 14:21:58 +01:00
• 86a73f16ab Do not touch child from collision if peer deleted it Thomas Egerer 2010-08-02 16:46:29 +02:00
• 45e962edef substitute obsolete function calls(bzero/index) Waldemar Brodkorb 2010-08-01 21:20:15 +02:00
• 50fb724ddd delete tarball files Andreas Steffen 2010-07-30 22:27:41 +02:00
• b599b80013 version bump to 4.4.2 Andreas Steffen 2010-07-30 22:26:14 +02:00
• 63163cc340 The va_list trick does not seem to be portable, revert dots-in-section fix Martin Willi 2010-07-30 10:57:59 +02:00
• 5d2e159b41 Fix segfault on 'ipsec stroke up ]' command Thomas Egerer 2010-07-29 13:03:01 +02:00
• 8f50d06c35 Fixed settings lookup if the section/key contains dots Martin Willi 2010-07-29 12:00:21 +02:00
• c5c921bfa3 Added NEWS for snprintf() fixes Martin Willi 2010-07-28 11:06:49 +02:00
• b8aeaea80c Fix use of snprintf() in pluto subjectAltName enumeration Martin Willi 2010-06-18 09:15:45 +02:00
• c118559afe Fix use of snprintf() in IETF attributes to string conversion Martin Willi 2010-06-18 09:18:49 +02:00
• 018543f3a8 Fix use of snprintf() in identification DN to ASCII conversion Martin Willi 2010-06-18 09:18:27 +02:00
• c8bd06c7cf More NEWS for HA functionality Martin Willi 2010-07-28 10:49:58 +02:00
• 98d0343870 Implemented a HA enabled in-memory address pool Martin Willi 2010-07-28 09:51:41 +02:00
• 7455ab063f Added a function to segmentate a generic integer Martin Willi 2010-07-28 09:43:53 +02:00
• ff7b0dd289 added NETMAP rules for the reverse direction Andreas Steffen 2010-07-27 21:16:44 +02:00
• c100dd6b5f fixed description of ikev2/net2net-same-nets scenario Andreas Steffen 2010-07-27 20:49:48 +02:00
• c03b64a4ac Reserving does not work, as our pools do not support acquiring arbitrary addresses Martin Willi 2010-07-27 12:05:39 +02:00
• 45c992474c Mem pool does not support multiple leases for an identity Martin Willi 2010-07-27 09:54:27 +02:00
• 7eeb687d59 Flush any remaining cache state if an IKE_SA goes down Martin Willi 2010-07-27 09:18:06 +02:00
• 1c1f132abe Added NEWS related to HA functionality Martin Willi 2010-07-26 15:17:19 +02:00
• fa4f71c819 Synchronize EAP-Identity of remote peer Martin Willi 2010-07-26 15:10:54 +02:00
• d1384080b3 Reserve virtual IP of passive IKE_SAs in the local pool Martin Willi 2010-07-26 15:01:24 +02:00
• 65d15aff73 Added strongswan.conf options for HA heartbeat Martin Willi 2010-07-26 14:30:19 +02:00
• 08e266a119 Log CHILD_SA segment responsibility Martin Willi 2010-07-26 13:49:35 +02:00
• 3e6736f67e Pass initiator parameter to distinguish between original and exchange initiator Martin Willi 2010-07-26 12:07:38 +02:00
• b2e447e24a Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter Martin Willi 2010-07-26 12:05:04 +02:00
• aa334daa9b Use a sync message cache to resynchronize IKE_SAs without rekeying Martin Willi 2010-07-22 18:54:35 +02:00
• 2031002d42 Log received HA message types Martin Willi 2010-07-22 15:56:11 +02:00
• f2eebed2a3 Add enum names for HA message types Martin Willi 2010-07-22 15:55:08 +02:00
• 51217527e6 Delay resynchronization request until starter has loaded the configurations Martin Willi 2010-07-22 13:52:18 +00:00
• 2cbc48ecab Replaces in_segment() by a more generic get_segment() function Martin Willi 2010-07-22 14:38:05 +02:00
• ad2488fcdf Use distinct message types for HA message ID updates Martin Willi 2010-07-22 13:20:18 +02:00
• 00c1bd0606 Migrated ha plugin to INIT/METHOD macros Martin Willi 2010-07-22 11:42:22 +02:00
• c74c4c2a20 added net2net-same-nets Andreas Steffen 2010-07-25 11:56:33 +02:00
• fe2434cfd7 Added NEWS for the eap-simaka-sql plugin Martin Willi 2010-07-23 16:02:28 +02:00
• b59340a2c3 NEWS cosmetics Andreas Steffen 2010-07-21 21:43:43 +02:00
• e87b78c6ad Multiple RADIUS server NEWS Martin Willi 2010-07-21 17:27:06 +02:00
• ce7967c50c Implemented support for multiple RADIUS servers Martin Willi 2010-07-21 17:06:00 +02:00
• 58d2ef6e14 Migrated eap-radius plugin to INIT/METHOD macros Martin Willi 2010-07-21 09:15:32 +02:00
• 5b6c220d13 Added log statement if peer requests EAP, but current config does not allow it Martin Willi 2010-07-21 14:55:51 +02:00
• e93f452825 remove the private updown scripts after use Andreas Steffen 2010-07-17 23:25:15 +02:00
• 15fd135564 minor fixes in the ikev2/rw-mark-in-out scenarios Andreas Steffen 2010-07-17 17:36:04 +02:00
• b22bb9f21c updated NEWS Andreas Steffen 2010-07-17 17:25:01 +02:00
• f5baa5c4cf some reformulations Andreas Steffen 2010-07-17 17:19:26 +02:00
• d2d7ed9227 the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script Andreas Steffen 2010-07-17 16:32:47 +02:00
• 16c97c8e59 documented the new PLUTO environment variables available in the updown script Andreas Steffen 2010-07-17 13:41:40 +02:00
• ae0e3b03b7 in a ESP_IN_UDP situation make UDP port available in the updown script Andreas Steffen 2010-07-17 13:27:19 +02:00
• 34e93c0280 fix html error in scenario description Andreas Steffen 2010-07-17 13:09:28 +02:00
• 14665981a5 make xfrm marks available in the updown scripts Andreas Steffen 2010-07-17 13:08:50 +02:00
• ff090f8781 check for mark changes in ipsec update Andreas Steffen 2010-07-17 09:13:48 +02:00
• cde633d632 all x509 based sql scenarios require the revocation plugin Andreas Steffen 2010-07-15 23:19:52 +02:00
• c349a68b2e all x509 based pfkey scenarios require the revocation plugin Andreas Steffen 2010-07-15 23:17:37 +02:00
• f5731b4579 all x509 based p2pnat scenarios require the revocation plugin Andreas Steffen 2010-07-15 23:07:12 +02:00
• 295d9cc313 all x509 based ipv6/*-ikev2 scenarios require the revocation plugin Andreas Steffen 2010-07-15 23:02:17 +02:00
• 84fe65bd43 all x509 based ike scenarios require the revocation plugin Andreas Steffen 2010-07-15 22:40:20 +02:00
• 001787b3eb all x509 based openssl-ikev2 scenarios require the revocation plugin Andreas Steffen 2010-07-15 22:33:05 +02:00
• 6c2bd2a7d8 all x509 based gcrypt-ikev2 scenarios require the revocation plugin Andreas Steffen 2010-07-15 22:03:16 +02:00
• 2cf4d34f2f all x509 based ikev2 scenarios require the revocation plugin Andreas Steffen 2010-07-15 21:39:01 +02:00
• afe5d482db ikev2/net2net-psk-dscp does not need certificate support Andreas Steffen 2010-07-15 21:37:45 +02:00
• a3527c39dd add revocation plugin to ikev2/rw-cert scenario Andreas Steffen 2010-07-15 20:03:04 +02:00
• 3de510ca43 Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option Andreas Steffen 2010-07-15 06:29:26 +02:00
• 83b957107f Revert "Warn about manual plugin load directives for pluto/charon" Martin Willi 2010-07-14 07:15:56 +02:00
• fccf00576f activate --enable-addrblock configure option in UML scenarios Andreas Steffen 2010-07-13 21:04:20 +02:00
• 5c46726d0d Warn about manual plugin load directives for pluto/charon Martin Willi 2010-07-13 14:43:45 +02:00
• 15d9904406 Remove plugin load directives from default strongswan.conf Martin Willi 2010-07-13 14:28:11 +02:00
• 7f3a946874 Added NEWS about --signcrl and PEM support in pki utility Martin Willi 2010-07-13 14:18:19 +02:00
• b5b95c75de Added pki PEM encoding support for certificates, CRLs and PKCS10 requests Martin Willi 2010-07-13 14:14:39 +02:00
• e3b987f79b Added support for Certificate, CRL and PKCS10 encoding to PEM plugin Martin Willi 2010-07-13 13:53:33 +02:00
• 0406eeaacb Support different encoding types in certificate.get_encoding() Martin Willi 2010-07-13 13:34:04 +02:00
• da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding Martin Willi 2010-07-13 11:28:04 +02:00
• 24d327ab4d Moved keys/key_encoding.[ch] to cred_encoding.[ch] Martin Willi 2010-07-13 11:01:08 +02:00
• e1c51fd859 Fixed doxygen group of cert_validator interface Martin Willi 2010-07-13 10:42:02 +02:00
• e9448cfc2f Added NEWS for revocation/addrblock plugin Martin Willi 2010-07-13 09:34:57 +02:00
• f90d465ce2 Added addrblock plugin to RFC3779 test cases Martin Willi 2010-07-13 09:29:57 +02:00
• 1f457546c1 Added revocation plugin to ikev2 crl/ocsp test cases Martin Willi 2010-07-13 09:28:44 +02:00
• e57a29c731 Moved X509 ipAddrBlock checking to the addrblock plugin Martin Willi 2010-07-13 09:19:39 +02:00
• be715344c2 Added a hook to narrow traffic selectors for CHILD_SAs Martin Willi 2010-07-13 08:39:19 +02:00
• 88fa56b1ad Moved bus_t to METHOD/INIT macros Martin Willi 2010-07-12 16:25:56 +02:00
• 1c8c924610 Moved addrblock plugin to libcharon Martin Willi 2010-07-12 15:57:25 +02:00
• c2e5cee413 Moved CRL/OCSP checking to a dedicated plugin called revocation Martin Willi 2010-07-05 15:26:35 +02:00
• c1f9dad672 Made some useful methods in the credential manager public Martin Willi 2010-07-05 15:24:19 +02:00
• 5f9e62c54f Moved X509 addrBlock validation to a separate addrblock plugin Martin Willi 2010-07-05 14:36:05 +02:00
• 2feb16f5dd Added a certificate validation hook to the credential manager Martin Willi 2010-07-05 14:21:09 +02:00
• c3a9bef08e Migrated credential manager to INIT/METHOD macros Martin Willi 2010-07-05 12:51:17 +02:00
• 2ccc02a4fd Moved credential manager to libstrongswan Martin Willi 2010-07-05 11:54:25 +02:00
• 2ca7db1337 Move pathlen constraint checking to X509 specific checks Martin Willi 2010-07-05 09:36:30 +02:00
• 5db798c8e0 Charon uses a generic trunstchain length limit, not only for X509 certificates Martin Willi 2010-07-02 10:29:36 +02:00
• 01bb70e4ad Combined the OCSP/CRL options to a signle Online check option Martin Willi 2010-07-02 09:58:59 +02:00
• d5f29da3d2 added mark, mark_in, and mark_out to the ipsec.conf.5 man page Andreas Steffen 2010-07-13 09:15:53 +02:00
• c1918dc28f we need some ordering Andreas Steffen 2010-07-12 22:44:27 +02:00
• c13a4b4030 changed ordering of statusattr output Andreas Steffen 2010-07-12 22:38:18 +02:00
• bb021fbbc9 updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes Andreas Steffen 2010-07-12 20:54:40 +02:00
• 1cecc6a6ef fixed alignment of caption Andreas Steffen 2010-07-12 20:48:14 +02:00
• ab635e029e updated SQL templates to support attribute pool and identity parameters Andreas Steffen 2010-07-12 20:28:24 +02:00