Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• ffbca197c1 fixed dpd=hold when using virtual IPs Martin Willi 2007-06-29 08:03:32 +00:00
• 8ba7d34253 removed accidently checked in debbuging code Martin Willi 2007-06-29 07:40:04 +00:00
• cea6634fde MobIKE requires iptables to open udp/4500 Andreas Steffen 2007-06-28 21:33:51 +00:00
• b9212e5a93 MobIKE requires iptables to open udp/4500 Andreas Steffen 2007-06-28 21:33:13 +00:00
• c532d6460d fixed IKE_SA reestablishment after DPD using port 500 Martin Willi 2007-06-28 15:24:24 +00:00
• c2bc2b2782 alphabetical order Andreas Steffen 2007-06-27 21:49:09 +00:00
• e0e7ef070d separated pluto, charon, and klips setup config section parameters Andreas Steffen 2007-06-27 15:42:11 +00:00
• 6a39bc4061 added passthrough scenario Andreas Steffen 2007-06-27 14:25:15 +00:00
• 487fe29ee3 added lefthostaccess and leftprotoport parameters Andreas Steffen 2007-06-27 14:03:56 +00:00
• 1fbdab8507 right=%<fqdn> wildcard added Andreas Steffen 2007-06-27 13:31:16 +00:00
• 7900ab1b7a update ipsec.conf man page Andreas Steffen 2007-06-27 13:29:36 +00:00
• c4c916f90a add starter.8 man page to distribution Andreas Steffen 2007-06-27 13:29:20 +00:00
• fc2d1c420f further mobike improvements, regarding to NAT-T Martin Willi 2007-06-27 13:10:55 +00:00
• 6fa8bd61c1 cosmetics Andreas Steffen 2007-06-27 10:04:02 +00:00
• 2f153a2263 recognize wildcard keyingtries=%forever Andreas Steffen 2007-06-27 08:11:22 +00:00
• a80521d13e recognize wildcards right=%group and keyingtries=%forever Andreas Steffen 2007-06-27 08:11:08 +00:00
• cae8f3e9b6 updated copyright statement Andreas Steffen 2007-06-27 07:36:44 +00:00
• 31302718ff fixed distro and copyright information Andreas Steffen 2007-06-27 07:25:19 +00:00
• 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) Martin Willi 2007-06-26 13:04:13 +00:00
• 361712fe37 use of the right=%<fqdn> wildcard Andreas Steffen 2007-06-26 10:46:30 +00:00
• 4cb9d7a758 further fixed for mobike roaming Martin Willi 2007-06-25 13:26:02 +00:00
• 3f946e1c90 support of right=%<FQDN> wildcard Andreas Steffen 2007-06-25 11:28:39 +00:00
• e6a22d8728 discarded unused functions Andreas Steffen 2007-06-25 09:06:13 +00:00
• 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors Andreas Steffen 2007-06-25 07:10:23 +00:00
• 17d92e9732 further MOBIKE stuff: kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! Martin Willi 2007-06-21 15:25:28 +00:00
• c25ef47702 added MOBIKE rfc Martin Willi 2007-06-20 10:12:11 +00:00
• 078ce348ae IKEv1 rightallowany flag introduced Andreas Steffen 2007-06-20 09:46:54 +00:00
• cbbb71c4ac don't modify des/3des input key anymore Martin Willi 2007-06-19 07:56:28 +00:00
• 6835280041 fixed virtua IP: adding virtual IP to interface address list cache directly corrected debug targets Martin Willi 2007-06-19 06:20:33 +00:00
• 280f6b1ab2 set nexthop to him when instantiating rightallowyes template with leftnexthop == right Andreas Steffen 2007-06-18 20:07:47 +00:00
• d0f55e236d support of right|leftallowany flag Andreas Steffen 2007-06-18 17:51:45 +00:00
• 571bca865b added dynamic DNS scenarios Andreas Steffen 2007-06-18 17:50:54 +00:00
• 3b04350ab2 added extensions management to IKE_SA fixed NATD payload (port) when using route lookup Martin Willi 2007-06-18 10:32:01 +00:00
• 7068410b6f source address lookup in kernel interface use it for NAT detection if no source address known from config support for %any...%any connections Martin Willi 2007-06-18 07:25:58 +00:00
• 209c2e9049 support for left=%any change our address dynamically Martin Willi 2007-06-18 05:57:59 +00:00
• ca68a75eaf increased receive buffer to handle more interfaces Martin Willi 2007-06-18 05:56:18 +00:00
• 174c9e18c1 eliminated nexthop Andreas Steffen 2007-06-17 15:29:49 +00:00
• 2dc0366994 fixed typo Andreas Steffen 2007-06-16 20:22:05 +00:00
• 0c8e0615aa recognize strongswan-2.8.5 VID Andreas Steffen 2007-06-16 20:21:14 +00:00
• 08a8f4496f implemented more flexible iterator hook API kernel interface handles interface changes and updates address list Martin Willi 2007-06-15 13:23:18 +00:00
• 02b3ec0a10 implemented address change notification (for MOBIKE) implemented up to date address list cache to list interfaces Martin Willi 2007-06-14 15:16:15 +00:00
• fede28be8b fixed memleak when initiating to %any Martin Willi 2007-06-14 08:44:19 +00:00
• 04f4e82d53 added missing files to the last commit Martin Willi 2007-06-14 08:17:23 +00:00
• 26424f03c3 proper reauthentication: IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool Martin Willi 2007-06-14 08:13:05 +00:00
• eda454a261 case insensitive identification_t.equals() for FQDN and RFC822ADDR Martin Willi 2007-06-14 07:02:01 +00:00
• 424e0c467e ported interfaces to new threading functions (incomplete) Martin Willi 2007-06-11 14:24:32 +00:00
• 5e564f2bff added setsid() to properly detach from console Martin Willi 2007-06-11 12:21:12 +00:00
• 432b298e40 documentation fixes and updates Martin Willi 2007-06-11 12:11:41 +00:00
• 9fe1a1ca76 introduced callback_job: simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere Martin Willi 2007-06-11 10:57:19 +00:00
• aca0317d92 removed all nexthop statements Andreas Steffen 2007-06-10 18:52:14 +00:00
• 9cc7a29786 disabling leak detective at runtime by setting LEAK_DETECTIVE_DISABLE env var Martin Willi 2007-06-08 07:21:03 +00:00
• b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 Andreas Steffen 2007-06-08 07:11:06 +00:00
• ed1813ff6f added x as a wildcard for number of tests Andreas Steffen 2007-06-08 07:10:00 +00:00
• 0b455e2e7b pass eroutes now need explicit routes Andreas Steffen 2007-06-08 07:06:10 +00:00
• b7af55ac87 no need for left|rightnexthop parameter any more Andreas Steffen 2007-06-08 07:03:14 +00:00
• 7a1f49c314 do not delete existing routes with NETKEY Andreas Steffen 2007-06-08 07:01:17 +00:00
• e93c68ba0d _updown inserts routes only if a sourceip is defined Andreas Steffen 2007-06-06 13:37:43 +00:00
• ef01451916 insert route only in case of sourceip Andreas Steffen 2007-06-06 13:30:27 +00:00
• 9bac1d6640 do not print nexthop in ipsec status[all] Andreas Steffen 2007-06-06 13:16:48 +00:00
• 8e481be97a included patch from Rene Mayrhofer to respect DESTDIR in make install Martin Willi 2007-06-06 05:55:18 +00:00
• d0a6ed9a3c version bump to 4.1.4 Andreas Steffen 2007-05-26 19:07:39 +00:00
• b5463662d2 version bump to 4.1.4 Andreas Steffen 2007-05-26 19:05:34 +00:00
• ad8c6c60dc moved assignment of CERT_UNKNOWN Andreas Steffen 2007-05-25 14:04:39 +00:00
• 2b34eafbc0 changed exceeded to reached Andreas Steffen 2007-05-25 11:42:00 +00:00
• 3f9834a491 log trust pathlen Andreas Steffen 2007-05-25 11:41:06 +00:00
• 3367fa8b74 fixed html output Andreas Steffen 2007-05-25 11:33:49 +00:00
• 41e16cf4cf libfreeswan kernel header problem fixed Andreas Steffen 2007-05-25 11:17:16 +00:00
• 89eeedc243 included a certificate label in the is_trusted() method Andreas Steffen 2007-05-25 11:10:35 +00:00
• 998ca0ea9c updated NEWS for 4.1.3 Martin Willi 2007-05-25 11:06:03 +00:00
• 60b44bbe62 stop dave in posttest.dat Andreas Steffen 2007-05-25 09:29:10 +00:00
• 0bc543f1dc multi-level-ca-strict scenario added Andreas Steffen 2007-05-25 09:23:24 +00:00
• 238b92d632 virtual-ip-override scenario added Andreas Steffen 2007-05-25 09:22:42 +00:00
• 845cfa025b stop iptables on dave Andreas Steffen 2007-05-25 09:22:08 +00:00
• f44dbc639b DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor Andreas Steffen 2007-05-25 08:29:35 +00:00
• 13b872ebd2 set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification Andreas Steffen 2007-05-25 08:21:27 +00:00
• f2566a3bac x509_t* argument in get_issuer() method is not constant any more because a short cut to the ca might be set Andreas Steffen 2007-05-25 08:17:29 +00:00
• fc92116296 fixed virtual-ip scenario Andreas Steffen 2007-05-25 07:28:00 +00:00
• ea7f3e1bca version bump to 4.1.3 Andreas Steffen 2007-05-25 07:27:33 +00:00
• 64bf6e564b added parsing of charging and group attributes Andreas Steffen 2007-05-25 07:26:33 +00:00
• babb69109f version bump to 4.1.3 Andreas Steffen 2007-05-25 07:25:38 +00:00
• 532137e70f fixed man page Martin Willi 2007-05-25 07:19:49 +00:00
• 8e79d8d3de updated man-page for left/rightsourceip Martin Willi 2007-05-25 07:15:18 +00:00
• 1f2a0f8098 removed paranoid module checking Martin Willi 2007-05-25 05:45:41 +00:00
• 1fa9bdc4fb added compatibility names (pluto) for sha2 algorithms (sha2_256, ...) Martin Willi 2007-05-25 05:44:53 +00:00
• 8c06e9c0ed added #define LDAP_DEPRECATED in order to use old ldap_init() function Andreas Steffen 2007-05-24 12:09:48 +00:00
• 3e4eac0b63 removed unneeded libdes files speed.c and des_opts.c Andreas Steffen 2007-05-24 12:08:44 +00:00
• 0749196612 cecho changes in UML scripts Andreas Steffen 2007-05-23 22:24:47 +00:00
• c502b1b4c6 added virtual-ip scenario Andreas Steffen 2007-05-23 21:41:05 +00:00
• 02ee40ad6a defined ietfAttr_t type and its destroy function Andreas Steffen 2007-05-23 19:43:24 +00:00
• 8fbac48e26 removed old FreeS/WAN cvs revision entries Andreas Steffen 2007-05-23 19:27:48 +00:00
• 2911f4ee37 added #include <linux/types.h> required by 2.6.21 linux headers Andreas Steffen 2007-05-23 19:27:02 +00:00
• 76042f8471 proper thread cancellation when using the charon->interfaces Martin Willi 2007-05-23 09:08:13 +00:00
• 0f6b068259 fixed crash when using 0.0.0.0/0 subnets Martin Willi 2007-05-23 06:33:22 +00:00
• b1450b48a0 removed misleading warning when rekeying Martin Willi 2007-05-23 06:32:41 +00:00
• 16878f6823 support for virtual IP definition on client side: if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. Martin Willi 2007-05-22 13:49:31 +00:00
• a06c068191 fixed memleak Martin Willi 2007-05-22 09:38:42 +00:00
• 905438735a using local address as gateway in installed routes Martin Willi 2007-05-22 07:47:16 +00:00
• 3eb9630071 support of left|rightgroups parameter Andreas Steffen 2007-05-20 15:38:36 +00:00
• 9a590819a2 reduced crl validity of research and sales ca to 15 days Andreas Steffen 2007-05-19 19:47:24 +00:00
• 3388e7674d fixed nextUpdate and until behaviour in the non-strict case Andreas Steffen 2007-05-19 19:46:13 +00:00