e376d75f96
some NEWS
2008-09-04 14:52:33 +00:00
0c6a489046
fixed some translations/encoding
2008-09-04 13:51:35 +00:00
f0e8a8f7f3
an initial German translation for NM plugin
2008-09-04 13:39:37 +00:00
3876c44175
updated debian build to extended nm plugin
2008-09-04 11:55:31 +00:00
82840e6c92
reduced nm verbosity
2008-09-04 10:35:20 +00:00
aff26a62c3
implemented NetworkManager certificate/private key authentication using ssh-agent
2008-09-04 08:40:37 +00:00
994ed35312
added a configure option to select charon binary
2008-09-04 08:37:31 +00:00
6af6f88a79
agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent
2008-09-04 08:35:11 +00:00
60055b7e1c
charon.keep_alive = 0 disables the sending of NAT keep alives
2008-09-03 19:00:08 +00:00
3dfecde4c0
configure NAT keep alive interval using the charon.keep_alive key
2008-09-03 18:49:06 +00:00
6283b1f1f8
typos
2008-09-03 07:44:46 +00:00
703791715b
handle INFORMATIONAL exchanges with NATD payloads in mobike task
2008-09-02 14:02:40 +00:00
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
46eb41644d
ported openac to credential factory changes
2008-09-02 11:01:05 +00:00
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
4da0116d78
OIDs used by strongSwan
2008-09-01 11:38:03 +00:00
1a4d27c854
added thread_analysis tool
2008-09-01 11:19:07 +00:00
eb3e27059b
use libcap for capability dropping
...
optional, must be enabled --with-capabilities=libcap
will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
8fa6f2dc66
streamlined ipsec listalgs output
2008-08-29 05:35:09 +00:00
e609b1cda2
capability API to allow plugin-controlled capability set
2008-08-28 16:27:48 +00:00
dc98e50153
cosmetics
2008-08-28 11:15:01 +00:00
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
f1b014b9a3
separated sha1_prf implementation from sha1_hasher
2008-08-28 10:57:24 +00:00
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
8bbc7ca710
* allow to load templates from arbitrary places
...
* changed implementation of guest?/iface?
2008-08-28 08:05:07 +00:00
6c20579a43
mkdir_p: utility function to create a directory and all required parent directories
2008-08-28 07:47:55 +00:00
018ae7c1aa
build scripts for ubuntu NetworkManager packages
2008-08-27 13:51:05 +00:00
ee210ca353
check user account validity after PAM authentication
2008-08-27 13:48:54 +00:00
a9bb69c8a8
version bump to 4.2.7
2008-08-27 12:01:57 +00:00
609166f49f
additional NEWS for 4.2.6
2008-08-27 08:39:09 +00:00
ca4f63383c
* guest#running?
...
* guest?, iface? (also Guest.include? resp. guest.include?)
* easy accessors for guests and ifaces (Guest.sun instead of Guest["sun"] and guest.eth0 instead of guest["eth0"])
* if a block is given for iface#add or iface#del then the change is only temporary while executing the block and gets reverted afterwards
2008-08-27 07:35:20 +00:00
9f9d6ece39
my changes for the 4.2.6 release
2008-08-27 07:19:40 +00:00
2c6dced953
added ikev2/rw-eap-aka-identity scenario
2008-08-26 20:02:58 +00:00
a44d02627f
cosmetics
2008-08-26 19:54:47 +00:00
41dc6b56b0
ipsec statusall lists eap_type and eap_identity
2008-08-26 19:45:44 +00:00
a625146517
enable-eap-identity in UML scenarios
2008-08-26 19:17:14 +00:00
281dd55891
using strongSwan, not NetworkManager version number
2008-08-26 14:27:53 +00:00
be49236373
fixing charon path for now for ubuntu package
2008-08-26 14:27:12 +00:00
d9fc51387d
added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenarios
2008-08-26 05:34:33 +00:00
919019b3cd
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
2008-08-26 05:15:34 +00:00
bafb220857
adapted sql/rw-eap-aka-rsa scenario to new EAP identity type
2008-08-25 13:52:26 +00:00
3c87e92695
list CA restrictions in ipsec statusall
2008-08-25 12:35:18 +00:00
f6ecd44fc6
added NM gnome plugin to distribution
2008-08-25 08:21:51 +00:00
c1ee908e4c
removed generated Makefile.in.in from svn
2008-08-25 08:15:57 +00:00
a88aae3df6
enforce DN of configured gateway certificate
2008-08-25 07:50:21 +00:00
7945c90adb
new EAP-Identity handling uses ID_EAP in plugins
2008-08-25 07:49:48 +00:00
1a109c9fc6
disabled PSK option until we have a way to enforce strong secrets
2008-08-25 07:48:11 +00:00
1995f79f10
use username part of RFC822 IDs for PAM authentication
2008-08-25 07:47:16 +00:00
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
7c112a12c0
run guests with some niceness
2008-08-22 08:37:15 +00:00
Martin Willi