Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove ipsec-tools scripts (they're now in ipsec-tools itself.) | Bill Nottingham | 2011-06-20 | 1 | -279/+0 |
| | |||||
* | Don't use a full path when killing racoon, so it works in MLS policy (#567295) | Bill Nottingham | 2010-06-04 | 1 | -1/+1 |
| | |||||
* | Eliminate bunch of unnecessary stat calls and command invocations. | Ville Skyttä | 2010-01-12 | 1 | -1/+1 |
| | |||||
* | Use $() instead of `` for process expansion. | Bill Nottingham | 2009-07-30 | 1 | -4/+4 |
| | | | | Adapted from <victor.lowther@gmail.com>. | ||||
* | Allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>) | Bill Nottingham | 2009-03-20 | 1 | -18/+55 |
| | |||||
* | fix fix | Bill Nottingham | 2007-08-10 | 1 | -1/+1 |
| | |||||
* | add support for overriding IKE dh group (#251506, <stijn.tintel@x-tend.be>) | Bill Nottingham | 2007-08-09 | 1 | -3/+4 |
| | |||||
* | allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>) | Bill Nottingham | 2007-04-16 | 1 | -2/+10 |
| | |||||
* | Add a way to manually manage racoon.conf, e.g. to handle separate tunnels with | Miloslav Trmac | 2006-11-15 | 1 | -4/+6 |
| | | | | a shared peer endpoint (#159343) | ||||
* | pass path to '.' always (#206035) | Bill Nottingham | 2006-09-11 | 1 | -1/+1 |
| | |||||
* | - Add ESP authentication support (last part of #168972, based on a patch by | Miloslav Trmac | 2006-07-09 | 1 | -26/+28 |
| | | | | | Aleksandar Milivojevic <alex@milivojevic.org>) - Beautify up handle_keys() a bit. | ||||
* | Don't use an obsolete peers_certfile syntax (part of #168972, patch by | Miloslav Trmac | 2006-07-08 | 1 | -1/+1 |
| | | | | Aleksandar Milivojevic <alex@milivojevic.org>) | ||||
* | - Allow disabling AH or ESP with authomatic keying (part of #168972, based on | Miloslav Trmac | 2006-07-08 | 1 | -33/+9 |
| | | | | | | a patch by Aleksandar Milivojevic <alex@milivojevic.org>). - Merge updated documentation in ifup-ipsec to sysconfig.txt, remove the non-canonical copy in ifup-ipsec. | ||||
* | Eliminate as much duplicated code as possible (part of #168972, based on a | Miloslav Trmac | 2006-07-08 | 1 | -98/+44 |
| | | | | | patch by Aleksandar Milivojevic <alex@milivojevic.org>) Avoid unnecessary differences between ifup-ipsec and ifdown-ipsec | ||||
* | Move $SRC initialization before first use | Miloslav Trmac | 2006-07-08 | 1 | -5/+4 |
| | |||||
* | Prevent IPsec tunelling of local traffic when tunnel subnets overlap (#150862) | Miloslav Trmac | 2006-07-08 | 1 | -7/+19 |
| | |||||
* | * ifup-ipsec: | Miloslav Trmac | 2006-05-16 | 1 | -9/+13 |
| | | | | | | | | - Fix key handling when AH or ESP is not used (#166257, patch by Tarhon-Onu Victor <mituc@iasi.rdsnet.ro>) - Allow manual tunnel mode without using AH or ESP * ifdown-ipsec: - Fix syntax errors in manual mode when AH or ESP is not used | ||||
* | handle non-ascii keys (#150552) | Bill Nottingham | 2005-03-30 | 1 | -24/+34 |
| | |||||
* | set proper route (#140654, #146169) | Bill Nottingham | 2005-03-28 | 1 | -2/+4 |
| | |||||
* | don't do fwd policies explicitly; let setkey handle it | Bill Nottingham | 2005-03-11 | 1 | -12/+0 |
| | |||||
* | add fwd policies (#145507) | Bill Nottingham | 2005-01-19 | 1 | -0/+12 |
| | |||||
* | racoon's parser got fixed, oops. | Bill Nottingham | 2004-04-13 | 1 | -3/+2 |
| | |||||
* | allow for no AH SPI (#116922, <felipe_alfaro@linuxmail.org>) | Bill Nottingham | 2004-03-16 | 1 | -4/+4 |
| | |||||
* | fix typo | Bill Nottingham | 2003-09-26 | 1 | -1/+1 |
| | |||||
* | for tunneling, add a route for the tunneled net through the other host | Bill Nottingham | 2003-09-12 | 1 | -0/+4 |
| | |||||
* | more ipsec fixes (#104227, <harald@redhat.com>) | Bill Nottingham | 2003-09-11 | 1 | -4/+4 |
| | |||||
* | ipv6 fixes - detect automatic keying better, fix variable names for | Bill Nottingham | 2003-09-11 | 1 | -8/+9 |
| | | | | tunneling | ||||
* | typo (#103781) | Bill Nottingham | 2003-09-04 | 1 | -1/+1 |
| | |||||
* | always add info to /etc/racoon/racoon.confr7-26 | Bill Nottingham | 2003-07-03 | 1 | -6/+9 |
| | |||||
* | make setkey be quiet | Bill Nottingham | 2003-07-03 | 1 | -4/+4 |
| | |||||
* | remove -x | Bill Nottingham | 2003-07-03 | 1 | -1/+1 |
| | |||||
* | mention that type is required | Bill Nottingham | 2003-07-03 | 1 | -0/+1 |
| | |||||
* | - nuke RSA support, since we're not doing it right now | Bill Nottingham | 2003-07-03 | 1 | -19/+8 |
| | | | | | - switch md5 -> sha1 - clarify some docs | ||||
* | fix quoting of peer certfile | Bill Nottingham | 2003-07-03 | 1 | -1/+1 |
| | |||||
* | that ';' is important. damned if i know why, i think the parser is buggy. | Bill Nottingham | 2003-07-02 | 1 | -2/+3 |
| | | | | fix quoting of include files. | ||||
* | first batch of automatic keying fixes. notably, I can't type. | Bill Nottingham | 2003-07-02 | 1 | -18/+23 |
| | |||||
* | some fixes. i love shell quoting | Bill Nottingham | 2003-07-02 | 1 | -20/+28 |
| | |||||
* | name SPIs something other than 1234 | Bill Nottingham | 2003-07-02 | 1 | -9/+9 |
| | |||||
* | automatic keying support. not yet tested, either. | Bill Nottingham | 2003-07-02 | 1 | -8/+144 |
| | |||||
* | allow different in/out encryption protocols, too | Bill Nottingham | 2003-07-01 | 1 | -8/+8 |
| | |||||
* | allow using only AH or ESP, don't require both | Bill Nottingham | 2003-07-01 | 1 | -16/+37 |
| | | | | allow incoming/outgoing keys to be different | ||||
* | well, fix parsing | Bill Nottingham | 2003-07-01 | 1 | -1/+1 |
| | |||||
* | initial stuff. may not work. may not even parse. | Bill Nottingham | 2003-07-01 | 1 | -0/+112 |