Commit Graph

9 Commits

Author SHA1 Message Date
Martin Willi ee61471113 implemented RFC4478 (repeated authentication)
changed %V printf handler to take a time delta, %#V now takes two arguments
2007-11-20 12:06:40 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation
fixed bugs in force_encap code
2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Andreas Steffen 15a9d460c0 peer_cfg now knows about group memberships 2007-09-13 15:33:17 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
2007-08-29 12:11:25 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side:
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Martin Willi 1dad08b035 fixed DPD delay in peer_cfg 2007-04-12 06:20:42 +00:00
Martin Willi e0fe765152 restructured file layout
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00