| Commit message (Expand) | Author | Age | Files | Lines |
* | Change the log for CRLs with no data (exists but no certs revoked) to a warni... | Chris Buechler | 2015-07-25 | 1 | -1/+1 |
* | Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d... | Chris Buechler | 2015-07-25 | 1 | -1/+3 |
* | Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 ! | Chris Buechler | 2015-07-23 | 1 | -2/+3 |
* | Remove "auto", it's just a synonym for IKEv2. Ticket #4873 | Chris Buechler | 2015-07-23 | 1 | -3/+1 |
* | include vpn.inc so IPsec CRL reload works. require_once filter.inc in | Chris Buechler | 2015-07-23 | 1 | -0/+1 |
* | make the IPsec bypass LAN from LAN subnet to LAN subnet rather than from | Chris Buechler | 2015-07-22 | 1 | -1/+1 |
* | Add IPsec advanced option for strict CRL checking | Chris Buechler | 2015-07-22 | 1 | -0/+4 |
* | write out built-in CRLs for strongswan | Chris Buechler | 2015-07-22 | 1 | -2/+18 |
* | Fixes for IPSec ASN1.DN, ticket #4792 | Renato Botelho | 2015-07-17 | 1 | -7/+17 |
* | Add leftid and rightid value between double quotes on ipsec config when type ... | Renato Botelho | 2015-07-16 | 1 | -0/+8 |
* | Fix issue_ip_type var name spelling | Phil Davis | 2015-07-12 | 1 | -6/+6 |
* | Fix keyid identifers, and go back to using %any in ipsec.secrets as in previo... | Chris Buechler | 2015-07-03 | 1 | -2/+4 |
* | rereadall is not enough here, restore reload call to make sure everything wor... | Renato Botelho | 2015-06-23 | 1 | -0/+1 |
* | Replace ipsec rereadsecrets + reload by single rereadall, that will re-read a... | Renato Botelho | 2015-06-23 | 1 | -2/+1 |
* | Instead of sending USR1, just call ipsec reload. And before it, call ipsec re... | Renato Botelho | 2015-06-23 | 1 | -1/+2 |
* | Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will ... | Renato Botelho | 2015-06-23 | 1 | -8/+0 |
* | Add a workaround for ticket #4785: | Renato Botelho | 2015-06-23 | 1 | -4/+17 |
* | Use $myid in ipsec.secrets. Ticket #4785 | Chris Buechler | 2015-06-22 | 1 | -2/+2 |
* | Specify $myid rather than %any here, otherwise user manager and mobile PSKs w... | Chris Buechler | 2015-06-21 | 1 | -3/+4 |
* | Code spacing | Phil Davis | 2015-06-15 | 1 | -6/+7 |
* | Fixes #4537 On 32bit platform do not enable direct dispatch on IPsec since it... | Ermal LUÇI | 2015-06-10 | 1 | -0/+3 |
* | Code style bits and pieces from etc | Phil Davis | 2015-05-31 | 1 | -11/+10 |
* | Merge pull request #1649 from baxeno/master | Ermal LUÇI | 2015-05-19 | 1 | -1/+10 |
|\ |
|
| * | ipsec: added ecc brainpool to vpn_ipsec_convert_to_modp() | Bruno Thomsen | 2015-05-13 | 1 | -0/+9 |
| * | bugfix: ipsec: nist ecp521 elliptic curve support | Bruno Thomsen | 2015-05-12 | 1 | -1/+1 |
* | | Remove artifacts from latin1 to utf8 conversions | Jose Luis Duran | 2015-05-16 | 1 | -1/+1 |
|/ |
|
* | comment out trailing } on these ifs also. | Chris Buechler | 2015-04-30 | 1 | -2/+2 |
* | Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 ... | Ermal LUÇI | 2015-04-30 | 1 | -4/+4 |
* | Revert "Use a dirty hack to make IKEv1 with multiple phase2 to work correctly... | Ermal LUÇI | 2015-04-30 | 1 | -3/+0 |
* | Revert "Provide a description for the dirty hack to not come back scratching.... | Ermal LUÇI | 2015-04-30 | 1 | -5/+0 |
* | Provide a description for the dirty hack to not come back scratching.... on it | Ermal LUÇI | 2015-04-24 | 1 | -0/+5 |
* | Use a dirty hack to make IKEv1 with multiple phase2 to work correctly with on... | Ermal LUÇI | 2015-04-24 | 1 | -0/+3 |
* | Is better to send the signal to starter rather than to charon directly. Start... | Ermal LUÇI | 2015-04-24 | 1 | -4/+3 |
* | This was meant to remove duplicates here, even though charon will do by itsel... | Ermal LUÇI | 2015-04-23 | 1 | -1/+1 |
* | Allow to configure new modes for phase1 according to RFC 5903 by manually mer... | Ermal LUÇI | 2015-04-20 | 1 | -0/+9 |
* | Implement make bofre break feature avaliable on strongswan 5.3.0 useful for I... | Ermal LUÇI | 2015-04-18 | 1 | -0/+6 |
* | Merge pull request #1612 from ibauersachs/ipsec-mobile-eap-radius | Ermal LUÇI | 2015-04-16 | 1 | -1/+36 |
|\ |
|
| * | Add support for EAP-RADIUS to IKEv2 Mobile Clients | Ingo Bauersachs | 2015-04-15 | 1 | -1/+36 |
* | | Always do a filter reload in vpn_ipsec_configure to ensure the ruleset is | Chris Buechler | 2015-04-16 | 1 | -2/+3 |
|/ |
|
* | Fix up Ticket #4504 implementation. Match config style with other areas. Use ... | Chris Buechler | 2015-04-04 | 1 | -6/+6 |
* | fix type. Ticket #4504 | Chris Buechler | 2015-04-04 | 1 | -1/+1 |
* | Fixes #4504 Provide a newline to generate proper config | Ermal LUÇI | 2015-04-03 | 1 | -0/+1 |
* | Fixes #4504 Allow the bypass policy for LAN to be enabled and prevent traffic... | Ermal LUÇI | 2015-04-03 | 1 | -0/+19 |
* | Only use mobile clients PFS config with mobile ph2ent. Ticket #4538 | Chris Buechler | 2015-04-03 | 1 | -1/+1 |
* | enable ike_name for daemon facility as well, to add connection identifiers to... | Chris Buechler | 2015-04-02 | 1 | -0/+1 |
* | Fix IPsec Advanced Settings uniqueids. It was neither set in strongswan confi... | benny | 2015-03-31 | 1 | -2/+1 |
* | If we bail not being able to find the P1 source, log an error. | Chris Buechler | 2015-03-12 | 1 | -0/+1 |
* | Move libstrongswan-unity.so when Unity plugin is disabled so it can't modify ... | Chris Buechler | 2015-03-11 | 1 | -0/+9 |
* | Need global $ipsec_idhandling here. | Chris Buechler | 2015-03-10 | 1 | -1/+1 |
* | Don't enable interfaces_use by default. Add checkbox to enable on Advanced | Chris Buechler | 2015-03-10 | 1 | -2/+6 |