summaryrefslogtreecommitdiffstats
path: root/etc/inc/vpn.inc
Commit message (Expand)AuthorAgeFilesLines
* Drop support for jail platformRenato Botelho2015-07-311-10/+0
* Change the log for CRLs with no data (exists but no certs revoked) to a warni...Chris Buechler2015-07-251-1/+1
* Add 'any' option for peer ID, for mobile IPsec scenarios where you can't or d...Chris Buechler2015-07-251-1/+3
* Only omit rightid for PSK mobile types. Flip the logic here as the 2_1 !Chris Buechler2015-07-231-2/+3
* Remove "auto", it's just a synonym for IKEv2. Ticket #4873Chris Buechler2015-07-231-3/+1
* include vpn.inc so IPsec CRL reload works. require_once filter.inc inChris Buechler2015-07-231-0/+1
* make the IPsec bypass LAN from LAN subnet to LAN subnet rather than fromChris Buechler2015-07-221-1/+1
* Add IPsec advanced option for strict CRL checkingChris Buechler2015-07-221-0/+4
* write out built-in CRLs for strongswanChris Buechler2015-07-221-2/+18
* Fixes for IPSec ASN1.DN, ticket #4792Renato Botelho2015-07-171-7/+17
* Add leftid and rightid value between double quotes on ipsec config when type ...Renato Botelho2015-07-161-0/+8
* Fix issue_ip_type var name spellingPhil Davis2015-07-121-6/+6
* Fix keyid identifers, and go back to using %any in ipsec.secrets as in previo...Chris Buechler2015-07-031-2/+4
* rereadall is not enough here, restore reload call to make sure everything wor...Renato Botelho2015-06-231-0/+1
* Replace ipsec rereadsecrets + reload by single rereadall, that will re-read a...Renato Botelho2015-06-231-2/+1
* Instead of sending USR1, just call ipsec reload. And before it, call ipsec re...Renato Botelho2015-06-231-1/+2
* Partially revert 019ee2bc8c, this workaround is not necessary. Real fix will ...Renato Botelho2015-06-231-8/+0
* Add a workaround for ticket #4785:Renato Botelho2015-06-231-4/+17
* Use $myid in ipsec.secrets. Ticket #4785Chris Buechler2015-06-221-2/+2
* Specify $myid rather than %any here, otherwise user manager and mobile PSKs w...Chris Buechler2015-06-211-3/+4
* Code spacingPhil Davis2015-06-151-6/+7
* Fixes #4537 On 32bit platform do not enable direct dispatch on IPsec since it...Ermal LUÇI2015-06-101-0/+3
* Code style bits and pieces from etcPhil Davis2015-05-311-11/+10
* Merge pull request #1649 from baxeno/masterErmal LUÇI2015-05-191-1/+10
|\
| * ipsec: added ecc brainpool to vpn_ipsec_convert_to_modp()Bruno Thomsen2015-05-131-0/+9
| * bugfix: ipsec: nist ecp521 elliptic curve supportBruno Thomsen2015-05-121-1/+1
* | Remove artifacts from latin1 to utf8 conversionsJose Luis Duran2015-05-161-1/+1
|/
* comment out trailing } on these ifs also.Chris Buechler2015-04-301-2/+2
* Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 ...Ermal LUÇI2015-04-301-4/+4
* Revert "Use a dirty hack to make IKEv1 with multiple phase2 to work correctly...Ermal LUÇI2015-04-301-3/+0
* Revert "Provide a description for the dirty hack to not come back scratching....Ermal LUÇI2015-04-301-5/+0
* Provide a description for the dirty hack to not come back scratching.... on itErmal LUÇI2015-04-241-0/+5
* Use a dirty hack to make IKEv1 with multiple phase2 to work correctly with on...Ermal LUÇI2015-04-241-0/+3
* Is better to send the signal to starter rather than to charon directly. Start...Ermal LUÇI2015-04-241-4/+3
* This was meant to remove duplicates here, even though charon will do by itsel...Ermal LUÇI2015-04-231-1/+1
* Allow to configure new modes for phase1 according to RFC 5903 by manually mer...Ermal LUÇI2015-04-201-0/+9
* Implement make bofre break feature avaliable on strongswan 5.3.0 useful for I...Ermal LUÇI2015-04-181-0/+6
* Merge pull request #1612 from ibauersachs/ipsec-mobile-eap-radiusErmal LUÇI2015-04-161-1/+36
|\
| * Add support for EAP-RADIUS to IKEv2 Mobile ClientsIngo Bauersachs2015-04-151-1/+36
* | Always do a filter reload in vpn_ipsec_configure to ensure the ruleset isChris Buechler2015-04-161-2/+3
|/
* Fix up Ticket #4504 implementation. Match config style with other areas. Use ...Chris Buechler2015-04-041-6/+6
* fix type. Ticket #4504Chris Buechler2015-04-041-1/+1
* Fixes #4504 Provide a newline to generate proper configErmal LUÇI2015-04-031-0/+1
* Fixes #4504 Allow the bypass policy for LAN to be enabled and prevent traffic...Ermal LUÇI2015-04-031-0/+19
* Only use mobile clients PFS config with mobile ph2ent. Ticket #4538Chris Buechler2015-04-031-1/+1
* enable ike_name for daemon facility as well, to add connection identifiers to...Chris Buechler2015-04-021-0/+1
* Fix IPsec Advanced Settings uniqueids. It was neither set in strongswan confi...benny2015-03-311-2/+1
* If we bail not being able to find the P1 source, log an error.Chris Buechler2015-03-121-0/+1
* Move libstrongswan-unity.so when Unity plugin is disabled so it can't modify ...Chris Buechler2015-03-111-0/+9
* Need global $ipsec_idhandling here.Chris Buechler2015-03-101-1/+1
OpenPOWER on IntegriCloud