Commit Graph

44 Commits

Author SHA1 Message Date
Andreas Steffen ee26c537d7 support of xfrm marks for IKEv2 2010-07-02 23:46:09 +02:00
Andreas Steffen 8143f10914 introduced xauth_identity keyword 2010-05-15 10:18:29 +02:00
Reto Buerki 2b26a9c30d Add reqid keyword to config connection section. 2010-05-04 14:38:34 +02:00
Andreas Steffen 61e48488d9 final fix for cloning and deleting sourceip strings 2010-05-02 15:55:46 +02:00
Martin Willi 667b73721a Added left-/rightikeport ipsec.conf options to use custom IKE ports 2010-02-26 11:44:33 +01:00
Martin Willi 8015c91cb9 Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs 2010-01-27 16:05:11 +01:00
Andreas Steffen 93e2377c7f allow ECP DH groups in pfsgroup definition 2009-11-24 14:35:25 +01:00
Andreas Steffen 270bb348e3 pluto now supports SQL-based virtual IP pools 2009-10-14 14:30:14 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Tobias Brunner ca41aa0602 Added keywords for the new lifetime limits to starter. 2009-09-01 12:53:44 +02:00
Tobias Brunner 9c7faa8618 Added parser for unsigned long long ints to starter. 2009-09-01 12:53:44 +02:00
Andreas Steffen 10c13ed264 fixed dereferencing bug caused by bool type redefinition 2009-08-02 16:58:32 +02:00
Tobias Brunner 5533a88936 properly convert boolean flags when parsing ipsec.conf 2009-05-07 17:43:16 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Andreas Steffen 3d7a244b54 conversion from 8 spaces to 4 spaces per tab 2009-04-19 19:16:09 +00:00
Andreas Steffen 67411e66c3 port the libstrongswan memory allocation methods to pluto 2009-04-17 07:11:29 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Martin Willi 822901061b ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Andreas Steffen a50818ed46 plutostderrlog parameter now declares a stderr redirection file 2008-05-12 10:05:49 +00:00
Andreas Steffen 9a6d9f10e2 support of plutostderrlog keyword 2008-05-11 07:59:00 +00:00
Andreas Steffen 937eb2db00 fixed memory corruption problem in starter 2008-04-27 10:49:31 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
additionally supports a "keep" value to keep the old IKE_SA
2008-04-14 13:23:24 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen 496e76cbdf added RCSID 2007-10-08 19:57:54 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
2007-08-29 12:11:25 +00:00
Andreas Steffen e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Andreas Steffen 2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen d0f55e236d support of right|leftallowany flag 2007-06-18 17:51:45 +00:00
Andreas Steffen 4841189b72 implementation of strictcrlpolicy=ifuri 2007-04-20 11:12:08 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Andreas Steffen 15b050c945 added XAUTH support 2006-12-05 23:13:02 +00:00
Andreas Steffen 0e4d1d05ad added 'modeconfig=pull|push' and 'left|rightnatip' keywords 2006-10-25 08:40:34 +00:00
Martin Willi 107936f55a added charondebug config parameter to set debug level at startup 2006-10-18 11:46:57 +00:00
Martin Willi 65cf07ac1d - applied patch from andreas
- added charonstart option to config
  - new ikev2 tests for UML
2006-05-06 07:09:45 +00:00
Martin Willi 1029d84d23 2006-04-28 10:51:19 +00:00