aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Implemented key derivation, output record signing and encryptionMartin Willi2010-08-037-39/+485
|
* Derive master secret, create Finished messageMartin Willi2010-08-034-30/+241
|
* Implemented the TLS specific PRF in its TLSv1.0 and TLSv1.2 variantsMartin Willi2010-08-033-0/+263
|
* Implemented sending of Certificate, ClientKeyExchange, CertificateVerify and ↵Martin Willi2010-08-0311-19/+406
| | | | ChangeCipherSpec as peer
* Implemented a tls_writer class to simplify TLS data generationMartin Willi2010-08-037-74/+451
|
* Implemented a tls_reader class to simplify TLS data parsingMartin Willi2010-08-037-120/+419
|
* Process ServerHello(Done), Certificate(Request) messagesMartin Willi2010-08-037-16/+240
|
* Send a ClientHello to start TLS negotiationMartin Willi2010-08-031-1/+86
|
* Added TLS crypto helper, currently supports cipher suite selectionMartin Willi2010-08-038-6/+221
|
* Added support for AUTH_HMAC_SHA2_256_256, used in TLSMartin Willi2010-08-033-3/+9
|
* Added stubs for handshake handling, server and peer variantsMartin Willi2010-08-039-6/+446
|
* Accept follow-up fragments with a TLS message lengthMartin Willi2010-08-031-24/+50
|
* Added dummy/identity implementations of the different TLS record layersMartin Willi2010-08-038-3/+475
|
* Pass TLS records to newly introduced TLS stackMartin Willi2010-08-033-11/+158
|
* Added some TLS constantsMartin Willi2010-08-033-1/+173
|
* (De-)fragment EAP-TLS packets, pass TLS records to upper layerMartin Willi2010-08-031-1/+229
|
* Added EAP-TLS plugin stubMartin Willi2010-08-0311-1/+301
|
* Do not touch child from collision if peer deleted itThomas Egerer2010-08-031-3/+24
|
* substitute obsolete function calls(bzero/index)Waldemar Brodkorb2010-08-012-3/+3
|
* delete tarball filesAndreas Steffen2010-07-304-30/+0
|
* version bump to 4.4.2Andreas Steffen2010-07-307-13/+43
|
* The va_list trick does not seem to be portable, revert dots-in-section fix4.4.1Martin Willi2010-07-301-58/+22
| | | | This reverts commit 8f50d06c354cd31fc295afc5598afff4096b5e77.
* Fix segfault on 'ipsec stroke up ]' commandThomas Egerer2010-07-291-0/+5
|
* Fixed settings lookup if the section/key contains dotsMartin Willi2010-07-291-22/+58
|
* Added NEWS for snprintf() fixesMartin Willi2010-07-281-0/+4
|
* Fix use of snprintf() in pluto subjectAltName enumerationMartin Willi2010-07-281-0/+4
|
* Fix use of snprintf() in IETF attributes to string conversionMartin Willi2010-07-281-2/+11
|
* Fix use of snprintf() in identification DN to ASCII conversionMartin Willi2010-07-281-0/+12
|
* More NEWS for HA functionalityMartin Willi2010-07-281-4/+5
|
* Implemented a HA enabled in-memory address poolMartin Willi2010-07-286-4/+468
|
* Added a function to segmentate a generic integerMartin Willi2010-07-282-18/+48
|
* added NETMAP rules for the reverse directionAndreas Steffen2010-07-273-4/+11
|
* fixed description of ikev2/net2net-same-nets scenarioAndreas Steffen2010-07-271-1/+1
|
* Reserving does not work, as our pools do not support acquiring arbitrary ↵Martin Willi2010-07-271-30/+0
| | | | | | addresses This reverts commit d1384080b3ba74f366eaf8b5f027babca3f5d607.
* Mem pool does not support multiple leases for an identityMartin Willi2010-07-271-2/+11
|
* Flush any remaining cache state if an IKE_SA goes downMartin Willi2010-07-271-2/+2
|
* Added NEWS related to HA functionalityMartin Willi2010-07-261-0/+5
|
* Synchronize EAP-Identity of remote peerMartin Willi2010-07-264-0/+16
|
* Reserve virtual IP of passive IKE_SAs in the local poolMartin Willi2010-07-261-0/+30
|
* Added strongswan.conf options for HA heartbeatMartin Willi2010-07-261-4/+20
|
* Log CHILD_SA segment responsibilityMartin Willi2010-07-269-18/+95
|
* Pass initiator parameter to distinguish between original and exchange initiatorMartin Willi2010-07-264-1/+8
|
* Pass the CREATE_CHILD_SA initiator flag to the child_keys parameterMartin Willi2010-07-265-9/+12
|
* Use a sync message cache to resynchronize IKE_SAs without rekeyingMartin Willi2010-07-2616-169/+594
|
* Log received HA message typesMartin Willi2010-07-261-3/+9
|
* Add enum names for HA message typesMartin Willi2010-07-262-0/+19
|
* Delay resynchronization request until starter has loaded the configurationsMartin Willi2010-07-261-2/+4
|
* Replaces in_segment() by a more generic get_segment() functionMartin Willi2010-07-263-17/+13
|
* Use distinct message types for HA message ID updatesMartin Willi2010-07-264-22/+60
|
* Migrated ha plugin to INIT/METHOD macrosMartin Willi2010-07-2610-257/+202
|