summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-01-200.12.44+mendocino2debian/0.12.44+mendocino2mendocinoJohn Southworth
2011-01-20make adjustment so that op mode can deal with new secrets file formatJohn Southworth
2011-01-20Fix problem with vpn secrets file being generatedJohn Southworth
incorrectly.
2010-12-280.12.44+mendocino1debian/0.12.44+mendocino1An-Cheng Huang
2010-12-28new branchAn-Cheng Huang
2010-11-260.12.44debian/0.12.44Stephen Hemminger
2010-11-22Update list of created files in .gitignoreStephen Hemminger
2010-11-22Fix email addressStephen Hemminger
2010-11-22remove deprecated linda overrideStephen Hemminger
2010-09-020.12.43debian/0.12.43An-Cheng Huang
2010-08-170.12.42debian/0.12.42An-Cheng Huang
2010-08-17remove low-level config dir usageAn-Cheng Huang
2010-08-170.12.41debian/0.12.41An-Cheng Huang
2010-08-17update help text to use val_helpAn-Cheng Huang
2010-07-220.12.40debian/0.12.40An-Cheng Huang
2010-07-220.12.39debian/0.12.39An-Cheng Huang
2010-07-22remove unused optionsAn-Cheng Huang
* high-level operations should not access CLI implementation details.
2010-07-210.12.38debian/0.12.38Mohit Mehta
2010-07-21remove verb usage from begining of help stringsMohit Mehta
2010-06-030.12.37debian/0.12.37Mohit Mehta
2010-06-03Fix Bug 5652 set ike/ipsec keying tries to foreverMohit Mehta
2010-05-260.12.36debian/0.12.36Mohit Mehta
2010-05-26add passthrough connection if remote-subnet contains local-subnetMohit Mehta
2010-04-190.12.35debian/0.12.35Mohit Mehta
2010-04-19Fix Bug 5542Mohit Mehta
* add commment for op-mode commands' dependency on config-mode check
2010-03-310.12.34debian/0.12.34Mohit Mehta
2010-03-31Fix Bug 5500 Unable to establish a VPN connection from a remote peer with aMohit Mehta
dynamic peer when using FQDN identifier for remote end * allow remote peer with dynamic IP to connect using Main Mode/PSK
2010-03-300.12.33debian/0.12.33Stephen Hemminger
2010-03-28Fix perl critic warningsStephen Hemminger
Get rid of things deemed undesirable by Perl Best Practices: * Convert to 3 argument open. * Use local file handles
2010-03-19Replace old form (expression) in end: tagStephen Hemminger
Use shell syntax.
2010-03-180.12.32debian/0.12.32Mohit Mehta
2010-03-18Fix Bug 5087 add support to specify PFS group when PFS is enabledMohit Mehta
2010-02-170.12.31debian/0.12.31An-Cheng Huang
2010-02-050.12.30debian/0.12.30Mohit Mehta
2010-02-051. use correct notation to represent private,public networksMohit Mehta
i.e. use vhost:%priv,%no instead of %priv,%no. Previously used notation was never supposed to work. Corrected notation is what we use in l2tp/ipsec as well and is also recommended otherwise. 2. cannot use leftsourceip to add route when right-subnet is not specific is based on generalized private,public networks
2010-01-300.12.29debian/0.12.29Mohit Mehta
2010-01-30Fix Bug 1832 VPN copy-tos Disabling copy-tos field doesn't workMohit Mehta
* remove copy-tos field under 'vpn ipsec'. It's not supposed to work with NETKEY
2010-01-280.12.28debian/0.12.28Mohit Mehta
2010-01-28perltidy vpn-config.plMohit Mehta
2010-01-28remove dead code. we use 'ipsec update' to update changes to connections nowMohit Mehta
2010-01-250.12.27debian/0.12.27Mohit Mehta
2010-01-25add back CLI node for disabling uniqreqidMohit Mehta
2010-01-140.12.26debian/0.12.26Mohit Mehta
2010-01-14bump up ipsec versionMohit Mehta
2010-01-120.12.25debian/0.12.25Mohit Mehta
2010-01-12use leftsourceip to add route to remote subnetMohit Mehta
(cherry picked from commit eb6d27497bab9e82218d8999778f7b4959fd34ea)
2010-01-12Do not start IKEv2 daemon for nowMohit Mehta
(cherry picked from commit 7fab51307ecaf65a7da880f60a97a73bda87e5c7)
2010-01-12* remove extraneous unused codeMohit Mehta
* use @id for identification when it's specified. It can be used even if local-ip is not 0.0.0.0 * extend syntax check for id to allow specifying hostnames * fix ipsec.secrets generation - if specified always use ids for local and remote peer (cherry picked from commit 3e7a4e45af00c11e6009d38fd97c67c2de0fa145)
2010-01-12add comment to identify end of connection descriptionMohit Mehta
(cherry picked from commit cb9ed22ae45d03fa37148273d02cef4a9a179d1d)
2010-01-12no need to maintain state of connections and take state-specific actions forMohit Mehta
each connection when config changes. `ipsec update` in strongswan determines any changes in ipsec.conf and updates the configuration on running daemon (cherry picked from commit 55b703e669e0f792c04d29541d8fe00d2a9d624b)