Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fixed public key construction from PKCS#11 private key | Martin Willi | 2010-12-23 | 1 | -3/+3 | |
| | ||||||
* | eliminated whitespace | Andreas Steffen | 2010-12-21 | 1 | -1/+1 | |
| | ||||||
* | Migrated child_create_t to INIT/METHOD macros | Andreas Steffen | 2010-12-21 | 1 | -83/+55 | |
| | ||||||
* | Added NEWS for af-alg plugin | Martin Willi | 2010-12-20 | 1 | -0/+4 | |
| | ||||||
* | Probe for supported AF_ALG algorithms, register dynamically | Martin Willi | 2010-12-20 | 10 | -161/+212 | |
| | ||||||
* | Register algorithms with dependencies only if dependency available | Martin Willi | 2010-12-20 | 6 | -64/+133 | |
| | ||||||
* | Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish) | Martin Willi | 2010-12-20 | 2 | -0/+18 | |
| | ||||||
* | Implemented PRFs using AF_ALG | Martin Willi | 2010-12-20 | 4 | -0/+253 | |
| | ||||||
* | Use the AF_ALG wrapper in hasher, crypter and signer | Martin Willi | 2010-12-20 | 3 | -278/+39 | |
| | ||||||
* | Use a generic AF_ALG wrapper for common operations | Martin Willi | 2010-12-20 | 3 | -0/+312 | |
| | ||||||
* | Implemented crypter on top of AF_ALG | Martin Willi | 2010-12-20 | 4 | -1/+362 | |
| | ||||||
* | Implemented signer interface using AF_ALG | Martin Willi | 2010-12-20 | 4 | -1/+334 | |
| | ||||||
* | Implemented hasher based on AF_ALG | Martin Willi | 2010-12-20 | 4 | -2/+285 | |
| | ||||||
* | Added Linux AF_ALG header | Martin Willi | 2010-12-20 | 1 | -0/+40 | |
| | ||||||
* | Added plugin stub for AF_ALG | Martin Willi | 2010-12-20 | 5 | -0/+123 | |
| | ||||||
* | Added NEWS about TFC padding | Martin Willi | 2010-12-20 | 1 | -1/+5 | |
| | ||||||
* | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 9 | -2/+32 | |
| | ||||||
* | Do not use TFC padding if peer does not support ESPv3 | Martin Willi | 2010-12-20 | 3 | -11/+31 | |
| | ||||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 12 | -12/+36 | |
| | ||||||
* | Implemented Traffic Flow Confidentiality padding in kernel_interface | Martin Willi | 2010-12-20 | 8 | -13/+35 | |
| | ||||||
* | version bump to 4.5.1dr4 | Andreas Steffen | 2010-12-19 | 1 | -1/+1 | |
| | ||||||
* | cast enumerated algorithm type as int | Andreas Steffen | 2010-12-18 | 1 | -3/+4 | |
| | ||||||
* | updated NEWS with new ipsec listalgs feature | Andreas Steffen | 2010-12-18 | 1 | -0/+3 | |
| | ||||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 30 | -406/+593 | |
| | ||||||
* | Added news about changes regarding strongswan.conf. | Tobias Brunner | 2010-12-17 | 1 | -0/+12 | |
| | ||||||
* | Moved "Reading values" section, typo fixed. | Tobias Brunner | 2010-12-17 | 1 | -8/+8 | |
| | ||||||
* | version bump to 4.5.1dr3 | Andreas Steffen | 2010-12-15 | 1 | -1/+1 | |
| | ||||||
* | Install selectors on transport mode IPsec SAs. | Jiri Bohac | 2010-12-13 | 2 | -1/+2 | |
| | | | | | | | | | | | | | | | | This fixes several test cases in IKEv2_Self_Test (part of the IPv6 Ready Logo Program) which is required for USGv6 certification, namely: - IKEv2.EN.I.1.1.7.1, IKEv2.EN.I.1.1.7.1: Narrowing the range of members of the set of traffic selectors - IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selector When traffic selectors of a triggered SA are narrowed by the responder, the installed policy and the broader trap policy share the same reqid. Without selectors on the IPsec SA packets matching the trap policy, but not the narrowed policy, would incorrectly be handled by that IPsec SA. Since only one selector can be specified per IPsec SA, there is currently no solution for tunnel mode SAs. | |||||
* | increase sleep time in mediation scenarios | Andreas Steffen | 2010-12-12 | 2 | -2/+2 | |
| | ||||||
* | fixed bug in mem_cred.c:add_crl() | Andreas Steffen | 2010-12-12 | 1 | -1/+1 | |
| | ||||||
* | reverted Connection ID to capital letters | Andreas Steffen | 2010-12-12 | 1 | -2/+2 | |
| | ||||||
* | fixed a bug in enum_from_name() function | Andreas Steffen | 2010-12-12 | 1 | -1/+1 | |
| | ||||||
* | reorganized ikev2/rw-eap-tnc scenarios | Andreas Steffen | 2010-12-12 | 123 | -40/+79 | |
| | ||||||
* | added the ikev2/rw-eap-tnc-20 scenario | Andreas Steffen | 2010-12-12 | 19 | -0/+225 | |
| | ||||||
* | NEWS for the 4.5.1dr2 release | Andreas Steffen | 2010-12-12 | 1 | -0/+11 | |
| | ||||||
* | some more cosmetics | Andreas Steffen | 2010-12-12 | 1 | -9/+9 | |
| | ||||||
* | final cosmetics in PB-TNC debug output | Andreas Steffen | 2010-12-12 | 2 | -31/+30 | |
| | ||||||
* | implemented PB-TNC message parsing checks | Andreas Steffen | 2010-12-12 | 25 | -605/+1195 | |
| | ||||||
* | some code optimizations | Andreas Steffen | 2010-12-11 | 1 | -42/+67 | |
| | ||||||
* | support handshake retry requests | Andreas Steffen | 2010-12-10 | 1 | -0/+15 | |
| | ||||||
* | the PB-TNC protocol is working | Andreas Steffen | 2010-12-10 | 2 | -15/+50 | |
| | ||||||
* | refactored message handling | Andreas Steffen | 2010-12-10 | 1 | -147/+194 | |
| | ||||||
* | do not accept results and recommendation messages from clients | Andreas Steffen | 2010-12-10 | 1 | -10/+29 | |
| | ||||||
* | defined some additional Private Enterprise Numbers | Andreas Steffen | 2010-12-10 | 1 | -2/+6 | |
| | ||||||
* | define pb_tnc_state_machine_t object | Andreas Steffen | 2010-12-10 | 6 | -229/+401 | |
| | ||||||
* | debug cosmetics | Andreas Steffen | 2010-12-10 | 2 | -13/+21 | |
| | ||||||
* | Renamed purgex509/crl to purgecerts/crls to be consistent with list commands | Martin Willi | 2010-12-10 | 6 | -17/+17 | |
| | ||||||
* | implemented handling of received PB-TNC messages | Andreas Steffen | 2010-12-10 | 2 | -14/+179 | |
| | ||||||
* | Added options to flush CRLs/X509 certs from the cert cache | Martin Willi | 2010-12-10 | 6 | -2/+26 | |
| | ||||||
* | refactored PB-TNC state machine in receive direction | Andreas Steffen | 2010-12-09 | 1 | -83/+90 | |
| |