Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• b119f89a4e fixed chunk_increment, fixes reuse of already assigned addresses Martin Willi 2008-06-30 12:33:38 +00:00
• 7da767f773 sqlite plugin requires libsqlite3 => 3.3.1 to share connections use recursive locking if libsqlite3 < 3.5.0 Martin Willi 2008-06-30 11:06:18 +00:00
• aafe8ced39 added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA Martin Willi 2008-06-30 08:45:11 +00:00
• 9d1f86cf1a added sql/rw-eap-aka-rsa scenario Andreas Steffen 2008-06-30 07:24:55 +00:00
• 1b7db64f6f configure plugin path in scripts Andreas Steffen 2008-06-29 14:43:50 +00:00
• 39b7780df9 created scripts/Makefile.am Andreas Steffen 2008-06-29 13:57:00 +00:00
• 125aaf1ab1 log received vendor id as a hex value Andreas Steffen 2008-06-27 17:11:54 +00:00
• dc04f16e26 corrected vendor_id_payload diagram Andreas Steffen 2008-06-27 15:22:27 +00:00
• 9de95037a0 corrected some NEWS entries Andreas Steffen 2008-06-26 13:50:54 +00:00
• f234c83612 corrected description of openssl/ike-alg-ecp-high scenario Andreas Steffen 2008-06-26 13:49:48 +00:00
• 615611afc1 version bump to 4.2.5 Andreas Steffen 2008-06-26 09:59:55 +00:00
• 6567648616 check migration of ESP sequence numbers in MOBIKE scenarios Andreas Steffen 2008-06-26 09:46:23 +00:00
• e25bedb722 use ip xfrm with the detailed -s option Andreas Steffen 2008-06-26 09:41:22 +00:00
• c66a1b757f ike/kernel protocol identifier conversion functions Martin Willi 2008-06-26 08:59:39 +00:00
• e0bb4dbbfe mention ESP sequence number updates Andreas Steffen 2008-06-26 08:44:59 +00:00
• 854a2e1760 fixed ifndef typo for MYSQL_DATA_TRUNCATED check Martin Willi 2008-06-26 07:31:52 +00:00
• 236083cb56 fixed plugin loader destruction Martin Willi 2008-06-25 14:53:49 +00:00
• 1b7d2e31a6 enabling support for hardware accelerators in OpenSSL Tobias Brunner 2008-06-25 12:39:32 +00:00
• 7e8af02626 flushing task_manager on shutdown while IKE_SA is usable Martin Willi 2008-06-25 11:40:50 +00:00
• 73a8eed31c updated NEWS for the imminent 4.2.4 release Andreas Steffen 2008-06-25 08:41:16 +00:00
• be33d1a51b merging the ESP sequence numbers of an SA in update_sa (fixing #52) Tobias Brunner 2008-06-24 15:35:09 +00:00
• fae6e24dad reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version Martin Willi 2008-06-24 14:30:14 +00:00
• a02bc1dbea updated location of auth_class_t Martin Willi 2008-06-24 13:36:10 +00:00
• eec675bf8c enumerating loaded plugins in "ipsec statusall" Martin Willi 2008-06-24 12:49:04 +00:00
• ad4d3f81c1 changed ipsec.secrets keyword EC to ECDSA Tobias Brunner 2008-06-24 06:57:47 +00:00
• 7c8eff1eaa cosmetics Andreas Steffen 2008-06-23 09:08:49 +00:00
• 857ba3574b fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active Martin Willi 2008-06-23 08:53:37 +00:00
• 417421048c fixed medsrv mysql scheme Martin Willi 2008-06-23 08:30:57 +00:00
• e9ab669bc2 resolving hosts before route Martin Willi 2008-06-23 08:30:35 +00:00
• 7f6d8d5172 set version to 4.2.4 Andreas Steffen 2008-06-22 18:08:37 +00:00
• 63265f0e58 generate CRL for strongSwan EC Root CA Andreas Steffen 2008-06-22 17:56:42 +00:00
• 0d12006def support of ECDSA signatures for all certificate types Andreas Steffen 2008-06-22 17:41:07 +00:00
• 3af698fa4d added openssl/ecdsa-certs scenario Andreas Steffen 2008-06-22 16:54:45 +00:00
• 1bd02e864c added strongSwan EC Root CA Andreas Steffen 2008-06-22 16:41:00 +00:00
• 867aae5d76 remove ikev2/nat-pf scenario Andreas Steffen 2008-06-22 11:41:49 +00:00
• 11f7d0f9fa check for selected IKE proposal Andreas Steffen 2008-06-22 11:26:37 +00:00
• bc997f6583 display selected IKE proposal in ipsec statusall Andreas Steffen 2008-06-22 11:24:33 +00:00
• ff8d906b07 removed ikev2/nat-double-snat scenario Andreas Steffen 2008-06-21 13:45:54 +00:00
• c7fa158852 used ipsec pool --leases --filter option in evaltest.dat Andreas Steffen 2008-06-21 13:31:54 +00:00
• 635ee1bf7d adapted evaltest.dat to modified RSA signature debug output Andreas Steffen 2008-06-21 13:30:24 +00:00
• fa97d9104f added strongswan.conf with plugin list Andreas Steffen 2008-06-21 13:24:49 +00:00
• 9d3cb1afb3 test ipsec pool --del option Andreas Steffen 2008-06-21 13:19:58 +00:00
• 949b9664a5 adapted evaltest.dat to modified RSA signature debug output Andreas Steffen 2008-06-21 13:19:13 +00:00
• 5b0362ade9 public key operations using the OpenSSL library require the pubkey plugin Andreas Steffen 2008-06-21 13:16:17 +00:00
• 51f69943fc added missing medsrv script.js to dist Martin Willi 2008-06-20 08:47:06 +00:00
• a47e16a508 including sys/queue.h to support TAILQ_LAST() macro Martin Willi 2008-06-20 08:17:03 +00:00
• 9bbb794afc shipping own linux/types.h for introduced __be32 in linux/xfrm.h Martin Willi 2008-06-20 08:15:38 +00:00
• 29727a4447 compatibility fix for other shells than bash >= 3.1 Martin Willi 2008-06-20 07:56:01 +00:00
• 1345ebad0f removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions Martin Willi 2008-06-20 07:37:55 +00:00
• bb1383183c support in smp for terminate-by-name Martin Willi 2008-06-20 07:14:35 +00:00
• 364fca2cee fixed identation Martin Willi 2008-06-19 11:50:13 +00:00
• 252015f017 medcli initiates "active" connections on startup Martin Willi 2008-06-19 11:09:48 +00:00
• a5b8e6976b medcli plugin writes connection status to database Martin Willi 2008-06-19 08:46:34 +00:00
• cc7d8dca38 fixed UCI default proposals Martin Willi 2008-06-18 13:32:23 +00:00
• fdacb2f181 support for more config options in UCI plugin Martin Willi 2008-06-18 08:50:32 +00:00
• 61c4638646 first simple prototype of a UCI configuration plugin for OpenWRT Martin Willi 2008-06-17 14:17:51 +00:00
• 285152b33d do not use self-installed route for IKE if routing table is 0 Martin Willi 2008-06-17 08:04:12 +00:00
• 9e9d3ddc12 scepclient requires libcrypto to build Martin Willi 2008-06-16 07:10:48 +00:00
• eab63e8476 fixed matches() check for RFC822/FQDN without wildcards Martin Willi 2008-06-13 15:10:01 +00:00
• 1726ca1027 implemented identification_t.match() case insensitive for RFC822/FQDN Martin Willi 2008-06-12 14:17:37 +00:00
• 035930fc4a added %P printf handler for poposal_t added some proposal selection debugging code Martin Willi 2008-06-12 11:42:19 +00:00
• 9529fb6836 added mediation server web frontend updated charons medsrv plugin to updated database scheme Martin Willi 2008-06-11 14:13:24 +00:00
• 697678979e passing controller arguments to filter, not controller itself Martin Willi 2008-06-11 14:11:01 +00:00
• 66860d3b8f loading PEM encoded public keys Martin Willi 2008-06-11 14:10:02 +00:00
• d1ebd5de22 reduced default debug hook verbosity Martin Willi 2008-06-11 14:09:46 +00:00
• 63608c9fc6 fixed compile error of medsrv plugin Martin Willi 2008-06-11 07:45:25 +00:00
• e484f7f3dd fixed resolving numerical IPv6 addresses in host_create_from_dns() Martin Willi 2008-06-11 07:44:23 +00:00
• d35effa89b fixed resolving numerical addresses in host_create_from_dns() Martin Willi 2008-06-11 07:31:24 +00:00
• 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates Andreas Steffen 2008-06-10 20:31:53 +00:00
• ddedf511bb fixed compile error in smp plugin Martin Willi 2008-06-10 11:29:46 +00:00
• a57e0580f6 refactoring Tobias Brunner 2008-06-10 09:19:18 +00:00
• ea0823dffd ECDSA with OpenSSL Tobias Brunner 2008-06-10 09:08:27 +00:00
• 2904403e96 parsing of subjectPublicKeyInfo of x509 certificates extracted Tobias Brunner 2008-06-10 09:00:42 +00:00
• a8ed846be7 added strongswan.conf option "routing_table" and "routing_table_prio" Martin Willi 2008-06-10 07:51:21 +00:00
• 80205e2fbc oids for elliptic curves Tobias Brunner 2008-06-10 07:37:32 +00:00
• 468d45e68b making the parsing of parameters of a subjectAlgorithmIdentifier optional Tobias Brunner 2008-06-10 07:36:44 +00:00
• 208b3baf10 fixed "enabled" value key word more debugging for settings parser Martin Willi 2008-06-10 07:14:34 +00:00
• 5dcda9e25b added strongswan.conf option to disable route installation Martin Willi 2008-06-10 06:58:39 +00:00
• 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand Martin Willi 2008-06-06 15:05:54 +00:00
• 1e9c46f13d configure option for updown firewall scripts Martin Willi 2008-06-06 08:24:39 +00:00
• 915e04b2dd extended leak detective white list for OpenSSL Martin Willi 2008-06-06 08:13:11 +00:00
• e581a31d6a link against openssl crypto library only Martin Willi 2008-06-06 08:04:42 +00:00
• 1e5522ffd7 convert comma-separated RDNs into slash-separated OpenSSL --subject format Andreas Steffen 2008-06-05 19:28:08 +00:00
• 6649a3ca80 fixed --utc parsing position support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1 changed order of --leases columns Martin Willi 2008-06-05 13:56:10 +00:00
• 179dd12c3a added statistics functions and input validation checks to ipsec pool Andreas Steffen 2008-06-05 12:17:08 +00:00
• 4fa74562ae fixed UTC identitation implement filtering in --leases Martin Willi 2008-06-05 08:52:27 +00:00
• 0f7aecf402 fixed NULL string mysql parameter Martin Willi 2008-06-05 08:24:55 +00:00
• da4ad32547 moved copying of tables.sql after the strongswan installation Andreas Steffen 2008-06-05 07:25:27 +00:00
• 89c87995e2 cosmetics in size field of ipsec pool --status command Andreas Steffen 2008-06-04 22:20:19 +00:00
• 011b1cca94 do not roam IKE_SA in created or deleting state Martin Willi 2008-06-04 14:31:06 +00:00
• 2ba1f9e761 added pool statistics (size, online, lease count, with usage ratio) Martin Willi 2008-06-04 14:01:44 +00:00
• f3e11fc478 some input validation checks for --add and --resize --purge keeps an entry for each address to allow their reallaction Martin Willi 2008-06-04 13:18:55 +00:00
• f13e23754f tolerating chown failures on installation, required to build some packages Martin Willi 2008-06-04 12:09:24 +00:00
• 9fa66e8bbf removed unused variable Martin Willi 2008-06-03 12:14:02 +00:00
• 0ebc87f73e added missing strongswan.conf Andreas Steffen 2008-05-31 08:56:13 +00:00
• 76340368a6 divided ipsec.sql into tables.sql and data.sql Andreas Steffen 2008-05-31 08:53:48 +00:00
• fe46d8da37 added missing TCPDUMPHOST alice Andreas Steffen 2008-05-29 08:58:49 +00:00
• 5785683afe added two Elliptic Curve DH Group scenarios using the openssl library Andreas Steffen 2008-05-29 08:28:20 +00:00
• 0655fe4fd8 CIRCLEQ patch submitted by Jay Pfeifer Andreas Steffen 2008-05-29 07:49:47 +00:00
• 0caf2b936e added missing comma in enumeration Andreas Steffen 2008-05-29 06:55:03 +00:00