strongSwan

15.07.2019

07:43 strongSwan Revision bca7571b: proposal: Run gperf with --output-file instead of output redirection

proposal: Run gperf with --output-file instead of output redirection
When missing gperf, the redirection generates a...

05.04.2019

16:44 strongSwan Wiki edit: RouteBasedVPN (#8)

Document policy match limitation with XFRM interfaces

16:35 strongSwan Wiki edit: RouteBasedVPN (#7)

Add a note for the VRF use case with XFRM interfaces

13.02.2019

14:27 strongSwan Feature #2845: Support virtual XFRM interfaces added in 4.19

> I pushed some patches to the _2845-xfrmi_ branch. [...]
> I also did some tests, with the following findings:
...

13.12.2018

09:03 strongSwan Feature #2845: Support virtual XFRM interfaces added in 4.19

I have some plans to add XFRM interfaces support to strongSwan. No code and no schedule yet, though.
I guess the t...

31.08.2018

16:57 strongSwan Revision 39bc4377: init: Reload configurations/credentials as well during systemctl reload

init: Reload configurations/credentials as well during systemctl reload

12:26 strongSwan Revision 902dc29f: child-sa: Use SA matching mark as SA set mark if the latter is %same

child-sa: Use SA matching mark as SA set mark if the latter is %same
For inbound processing, it can be rather useful...

12:26 strongSwan Revision ebd2d387: ipsec-types: Restrict the use of %unique and other keywords when parsing marks

ipsec-types: Restrict the use of %unique and other keywords when parsing marks
%unique (and the upcoming %same key) ...

12:26 strongSwan Revision b9aacf9a: vici: Document kernel requirements for set_mark_in/set_mark_out options

vici: Document kernel requirements for set_mark_in/set_mark_out options

29.08.2018

11:28 strongSwan Revision 8dbc2ff1: child-sa: Use SA matching mark as SA set mark if the latter is %same

child-sa: Use SA matching mark as SA set mark if the latter is %same
For inbound processing, it can be rather useful...