c7f76958d7
authby=pubkey is now the default authentication
2009-06-19 10:41:38 +02:00
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
e4838d02b3
set the default of plutostart/charonstart according to ./configure options
2009-03-24 15:02:12 +00:00
4a6b84a934
reintegrated eap-radius branch into trunk
2009-03-24 10:24:58 +00:00
91480aa9fb
added eap=mschapv2 to ipsec.conf.5
2009-02-19 22:12:04 +00:00
356bbeca7d
added eap=gtc option to ipsec.conf man page
2009-01-14 03:29:59 +00:00
a46173dfb4
nat_traversal in manpage corrected
2008-12-10 17:45:44 +00:00
84bec926a3
added type=transport_proxy and installpolicy=yes|no to man page
2008-11-13 06:29:53 +00:00
7827997346
also respect the mobike=no setting as responder
2008-09-30 12:36:58 +00:00
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
6d58c2be9a
cosmetics
2008-07-15 13:09:09 +00:00
0ef961b878
added pfsgroup to ipsec.conf.5 man page
2008-07-15 13:07:27 +00:00
0fc1fc0ec8
forgot about alphabetical order
2008-05-12 12:46:30 +00:00
2637c30c69
added description of plutostderrlog parameter to ipsec.conf.5 man page
2008-05-12 11:36:59 +00:00
3444390241
supporting multiple comma seperated subnets in left/rightsubnet definition
...
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
6439267a8c
support for hash and URL encoded certificate payloads in charon
2008-04-18 11:24:45 +00:00
b360e3933d
respecting ipsec.conf cachecrls= option
2008-04-17 15:01:57 +00:00
0644ebd3de
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
...
additionally supports a "keep" value to keep the old IKE_SA
2008-04-14 13:23:24 +00:00
b010310517
updated rightsourceip parameter in man page
2008-04-14 08:27:05 +00:00
5df92bba51
changed force_encap to forceencaps
2008-04-08 12:53:36 +00:00
e74bc8e51d
changed external interface to the mediation extension.
2008-03-27 12:31:35 +00:00
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
496e76cbdf
added RCSID
2007-10-08 19:57:54 +00:00
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
9dae1bed00
implemented IKEv2 force_encap connection parameter
...
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
8c4339bdd2
added mobike option to man page
2007-09-02 11:44:32 +00:00
eea626ed25
describe eap option in ipsec.conf.5 man page
2007-07-04 05:42:58 +00:00
dd0ee786db
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
2007-07-03 09:33:02 +00:00
c2bc2b2782
alphabetical order
2007-06-27 21:49:09 +00:00
e0e7ef070d
separated pluto, charon, and klips setup config section parameters
2007-06-27 15:42:11 +00:00
487fe29ee3
added lefthostaccess and leftprotoport parameters
2007-06-27 14:03:56 +00:00
7900ab1b7a
update ipsec.conf man page
2007-06-27 13:29:36 +00:00
532137e70f
fixed man page
2007-05-25 07:19:49 +00:00
8e79d8d3de
updated man-page for left/rightsourceip
2007-05-25 07:15:18 +00:00
b7ade11b16
updated man page: proposals using PFS
2007-04-19 14:22:53 +00:00
9b45443dc2
updated NEWS, TODO and man page
2007-03-20 08:59:03 +00:00
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
532f2347dc
first try to update ipsec.conf manual
2006-12-19 08:32:25 +00:00
6fe03b0af0
implemented reauthentication using the new reauth=yes|no parameter
2006-12-19 07:30:07 +00:00
107936f55a
added charondebug config parameter to set debug level at startup
2006-10-18 11:46:57 +00:00
a655f5c09c
reuse reqid when a ROUTED child_sa gets INSTALLED
...
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
2006-09-05 14:07:25 +00:00
3572b3b689
- updated ipsec.conf manual to reflect actual state of
...
keyexchange-parameter
2006-05-23 10:53:44 +00:00
fea5e716c4
- added missing ipsec.conf ipsec.conf.5
...
- existing ipsec.conf won't get overwritten anymore
2006-05-19 08:59:19 +00:00
Andreas Steffen