aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* updated for releaseMartin Willi2006-06-151-4/+22
|
* fixed aes code, we support now aes128, aes192, aes256 in IKEMartin Willi2006-06-155-19/+110
|
* added support for "ike" and "esp" keywordsMartin Willi2006-06-1517-97/+374
| | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes
* implemented clean spi allocation behavior when using multiple proposalsMartin Willi2006-06-151-35/+104
|
* fixed logleve(l) keyword typoMartin Willi2006-06-152-47/+34
|
* handling of "rekey=no" parameter addedMartin Willi2006-06-151-5/+18
|
* changed default algorithms to:Martin Willi2006-06-151-2/+2
| | | | | | ike: aes128-sha-modp2048 esp: aes128-sha1, 3des-md5
* added default CRL directory pathAndreas Steffen2006-06-141-0/+7
|
* added strictcrlpolicy command line argumentAndreas Steffen2006-06-141-1/+5
|
* added option parsingAndreas Steffen2006-06-141-11/+59
|
* added local CRLsAndreas Steffen2006-06-142-0/+5
|
* added rekeying parametersAndreas Steffen2006-06-142-0/+12
|
* corrected some descriptionsAndreas Steffen2006-06-131-5/+5
|
* moved RSA key size constraints to definitions.hAndreas Steffen2006-06-132-7/+7
|
* fixed down keywordMartin Willi2006-06-133-4/+5
|
* debug and logging improvementsMartin Willi2006-06-138-16/+43
|
* (no commit message)Martin Willi2006-06-132-135/+145
|
* support for stroke listcerts|listcacerts|listcrls|listallAndreas Steffen2006-06-121-4/+4
|
* support for stroke listcerts|listcacerts|listall and left|rightca=Andreas Steffen2006-06-125-130/+200
|
* gperf creates optimum hash table for stroke keywordsAndreas Steffen2006-06-123-0/+254
|
* using same reqid if a child sa rekeys an existing oneMartin Willi2006-06-127-20/+37
|
* NULL string argument is treated as %anyAndreas Steffen2006-06-121-0/+3
|
* add_certificate() now returns pointer to added certAndreas Steffen2006-06-122-8/+8
|
* cosmeticsAndreas Steffen2006-06-124-101/+101
|
* single tests now start up fasterAndreas Steffen2006-06-121-42/+70
|
* workaround for peers rekeying at the same timeMartin Willi2006-06-1214-20/+107
| | | | | loading lifetime policies from ipsec.conf
* old child_sa gets deleted after rekeyingMartin Willi2006-06-0919-99/+583
| | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time,
* corrected typeAndreas Steffen2006-06-091-1/+1
|
* improved kernel interface loggingMartin Willi2006-06-095-63/+50
|
* fixed clone/destroy behavior when not using CAsMartin Willi2006-06-091-5/+17
|
* specifying keysize in bits, as it is required in IKEv2Martin Willi2006-06-098-142/+171
| | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
* added support for leftsendcert= and left|rightca= parametersAndreas Steffen2006-06-098-30/+114
|
* discard cert if CA basic constraints flag is not set and warn if cert is not ↵Andreas Steffen2006-06-091-5/+16
| | | | valide
* added public methods is_ca() and is_valid()Andreas Steffen2006-06-092-62/+97
|
* changed ASN.1 CONTROL log output to LEVEL2Andreas Steffen2006-06-091-8/+8
|
* cosmeticsAndreas Steffen2006-06-091-1/+1
|
* removed unused MakefileMartin Willi2006-06-091-17/+0
|
* stroke.h requires libstrongswan/types.hAndreas Steffen2006-06-091-0/+1
|
* fixed compile warnings when using -WallMartin Willi2006-06-0825-206/+829
| | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing
* updated INSTALL to conform with autotoolsMartin Willi2006-06-082-127/+156
| | | | added a short HACKING introduction
* further work for rekeying:Martin Willi2006-06-0736-1398/+1392
| | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
* proper leak detective hook for reallocMartin Willi2006-06-071-9/+36
| | | | | excluded pthread_setspecific from leak detective
* fixed a memleakMartin Willi2006-06-071-1/+5
|
* cosmeticsAndreas Steffen2006-06-061-1/+0
|
* ipv6-host2host scenario addedAndreas Steffen2006-06-067-0/+99
|
* created IPv6 environmentAndreas Steffen2006-06-0649-148/+225
|
* job management:Martin Willi2006-05-3131-738/+929
| | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
* - fixed some memleaks/freebugsMartin Willi2006-05-313-9/+6
| | | | | - leak detective works almost usable now (?!)
* - added host2host test for ikev2Martin Willi2006-05-3111-0/+163
|
* - fixed host-host tunnel traffic selection, host-host works nowMartin Willi2006-05-314-8/+30
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-09 11:48:09 +0000