Martin Willi
|
66d4745f8e
|
ported patch to final 2.6.26 release, including UML Makefile fixes
|
2008-07-15 14:41:12 +00:00 |
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
Martin Willi
|
ef3f717bfe
|
reverted [4125],[4166], reimplemented the proper way
|
2008-07-11 08:54:56 +00:00 |
Martin Willi
|
6b5d95919c
|
setting ike_sa on bus in checkout_new
|
2008-07-11 08:47:18 +00:00 |
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
Martin Willi
|
e7991a2eef
|
do a route lookup to allow routing of left=%any connections
|
2008-07-09 14:16:19 +00:00 |
Martin Willi
|
6c652e6b55
|
added /usr/local/[s]bin to uml exec path
|
2008-07-09 12:39:11 +00:00 |
Martin Willi
|
ddf944be3e
|
loading ruby scripts specified at command line
|
2008-07-09 12:18:06 +00:00 |
Martin Willi
|
a9c46ace99
|
ruby bindings/fixes for template loading
|
2008-07-09 11:43:48 +00:00 |
Martin Willi
|
ee70c94835
|
passing a block to guest.exec() processes output lines
|
2008-07-09 10:51:10 +00:00 |
Martin Willi
|
bf44108019
|
uml "exec" writes stdout/stderr back to mconsole
guest->exec() accepts a callback for output
sligtly refactored mconsole.c
|
2008-07-08 14:58:20 +00:00 |
Martin Willi
|
02a6083633
|
guest interface/address management using hackish mconsole exec patch, ruby bindings
|
2008-07-07 14:56:04 +00:00 |
Martin Willi
|
36beca7cef
|
disconnecting interfaces properly on bridge destruction
|
2008-07-05 09:32:55 +00:00 |
Martin Willi
|
c4d72bdb01
|
throwing proper exeptions on errors, correct return values
mixin enumerable in classes/objects with .each
|
2008-07-04 16:42:54 +00:00 |
Martin Willi
|
ca275ae2ca
|
prototype of irdumm - interactive ruby shell for dumm
|
2008-07-04 14:21:41 +00:00 |
Martin Willi
|
4302d4f012
|
some stability improvements
|
2008-07-04 06:58:04 +00:00 |
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
Martin Willi
|
4a231f1a2e
|
changed medcli settings keys
|
2008-07-02 09:02:38 +00:00 |
Martin Willi
|
d932435e18
|
sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2
|
2008-07-02 08:31:48 +00:00 |
Martin Willi
|
11e855179e
|
using token enumerator to parser plugin list
|
2008-07-02 08:19:43 +00:00 |
Martin Willi
|
5848e473e8
|
fixed another compiler warning
|
2008-07-02 08:16:43 +00:00 |
Martin Willi
|
fca4d3ee03
|
implementation of a simple "token enumerator"
|
2008-07-02 08:09:07 +00:00 |
Martin Willi
|
2f2b99282a
|
fixed compiler warning
updated svn:ignore property
|
2008-07-02 08:05:51 +00:00 |
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
Andreas Steffen
|
8997db6a99
|
added ikev2/ip-two-pools-db scenario
|
2008-07-01 15:16:28 +00:00 |
Martin Willi
|
ab89517218
|
fixed medsrv database uri key
|
2008-07-01 13:57:47 +00:00 |
Andreas Steffen
|
556e426fd8
|
renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP
|
2008-07-01 13:47:26 +00:00 |
Martin Willi
|
131064995a
|
added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip
|
2008-07-01 12:48:56 +00:00 |
Martin Willi
|
d01783dba4
|
logging peer addresses in peer_cfg lookup
|
2008-07-01 11:10:37 +00:00 |
Martin Willi
|
9eeaa25f5d
|
added host match prio to debugging output
|
2008-07-01 11:01:27 +00:00 |
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
Martin Willi
|
866ba8e0b6
|
strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails
|
2008-07-01 07:54:09 +00:00 |
Martin Willi
|
fe5d7c43be
|
whitelisting leaks of ENGINE_load_builtin_engines
|
2008-07-01 07:53:03 +00:00 |
Martin Willi
|
d510eaea47
|
sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found
|
2008-07-01 06:36:52 +00:00 |
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
Martin Willi
|
b119f89a4e
|
fixed chunk_increment, fixes reuse of already assigned addresses
|
2008-06-30 12:33:38 +00:00 |
Martin Willi
|
7da767f773
|
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
use recursive locking if libsqlite3 < 3.5.0
|
2008-06-30 11:06:18 +00:00 |
Martin Willi
|
aafe8ced39
|
added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA
|
2008-06-30 08:45:11 +00:00 |
Andreas Steffen
|
9d1f86cf1a
|
added sql/rw-eap-aka-rsa scenario
|
2008-06-30 07:24:55 +00:00 |
Andreas Steffen
|
1b7db64f6f
|
configure plugin path in scripts
|
2008-06-29 14:43:50 +00:00 |
Andreas Steffen
|
39b7780df9
|
created scripts/Makefile.am
|
2008-06-29 13:57:00 +00:00 |
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
Andreas Steffen
|
dc04f16e26
|
corrected vendor_id_payload diagram
|
2008-06-27 15:22:27 +00:00 |