1797 Commits

Author SHA1 Message Date
Andreas Steffen
0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen
01a08cb2e7 output crl uri as a printable string instead of a binary blob 2007-07-04 13:36:41 +00:00
Andreas Steffen
ed0d8e8008 added entrustVersInfo OID 2007-07-04 12:11:38 +00:00
Martin Willi
fa1bd44f23 ignoring unkown crl/ocsp uris 2007-07-04 12:00:33 +00:00
Martin Willi
1b8da84913 using correct nexthop for inserted route 2007-07-04 09:10:13 +00:00
Martin Willi
29100db902 changed mobike behavior to NOT use additional responder addresses until we have path discovery 2007-07-04 07:26:34 +00:00
Martin Willi
419201c15d fixed responder initiated CHILD_SA rekeying when using virtual IPs 2007-07-04 06:27:33 +00:00
Andreas Steffen
eea626ed25 describe eap option in ipsec.conf.5 man page 2007-07-04 05:42:58 +00:00
Andreas Steffen
ae4388dca0 cosmetics 2007-07-04 05:42:09 +00:00
Andreas Steffen
4f22a3e339 removed the ipsec.conf version number 2007-07-04 05:41:51 +00:00
Martin Willi
7b8bae9941 fixed firewall script invocation when interface is not available anymore 2007-07-03 13:49:29 +00:00
Andreas Steffen
959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen
3ba90600f2 recognize strongswan-2.8.6 VID 2007-07-03 13:06:27 +00:00
Andreas Steffen
a0a0bdd727 starter bug fix and pkcs11initargs patch by Robert Varga 2007-07-03 12:51:29 +00:00
Martin Willi
3bc62fe70e improved MOBIKE:
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
2007-07-03 12:32:38 +00:00
Andreas Steffen
dd0ee786db support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:33:02 +00:00
Andreas Steffen
e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Martin Willi
4979e85871 added message ID to message log 2007-07-03 09:00:16 +00:00
Martin Willi
cba7ba7f9d show kind of notify contained in messages in log 2007-07-03 08:50:14 +00:00
Andreas Steffen
bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00
Andreas Steffen
561f88e306 fixed typo 2007-07-02 20:10:26 +00:00
Andreas Steffen
066518270f cosmetics 2007-07-02 17:56:04 +00:00
Andreas Steffen
fdd32ee6e5 fix of the bug fix, courtesy of Robert Varga 2007-07-02 17:48:30 +00:00
Andreas Steffen
2f806bd866 bug fix courtesy of Robert Varga 2007-07-02 17:42:16 +00:00
Martin Willi
e3606f2ba1 updated documentation files 2007-07-02 12:55:43 +00:00
Martin Willi
3d928c9ffd fixed mobike address update from and to NAT 2007-07-02 12:55:07 +00:00
Andreas Steffen
c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Martin Willi
face844a87 proper update of IPsec SA when roaming a host-to-host tunnel
roaming of IPsec SAs using virtual IPs
2007-07-02 09:49:22 +00:00
Martin Willi
530dd57c6a fixed memleak 2007-07-02 08:33:15 +00:00
Martin Willi
0d30da5dfd updated charons architecture description 2007-06-29 09:21:28 +00:00
Martin Willi
ffbca197c1 fixed dpd=hold when using virtual IPs 2007-06-29 08:03:32 +00:00
Martin Willi
8ba7d34253 removed accidently checked in debbuging code 2007-06-29 07:40:04 +00:00
Andreas Steffen
cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen
b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Martin Willi
c532d6460d fixed IKE_SA reestablishment after DPD using port 500 2007-06-28 15:24:24 +00:00
Andreas Steffen
c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen
e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen
6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen
487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00
Andreas Steffen
1fbdab8507 right=%<fqdn> wildcard added 2007-06-27 13:31:16 +00:00
Andreas Steffen
7900ab1b7a update ipsec.conf man page 2007-06-27 13:29:36 +00:00
Andreas Steffen
c4c916f90a add starter.8 man page to distribution 2007-06-27 13:29:20 +00:00
Martin Willi
fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Andreas Steffen
6fa8bd61c1 cosmetics 2007-06-27 10:04:02 +00:00
Andreas Steffen
2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen
a80521d13e recognize wildcards right=%group and keyingtries=%forever 2007-06-27 08:11:08 +00:00
Andreas Steffen
cae8f3e9b6 updated copyright statement 2007-06-27 07:36:44 +00:00
Andreas Steffen
31302718ff fixed distro and copyright information 2007-06-27 07:25:19 +00:00
Martin Willi
2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Andreas Steffen
361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00