tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	starter: (De-)Initialize logging when forking.	Tobias Brunner	2012-06-05	1	-0/+2
\|
*	starter: Close open file descriptors when forking daemons.	Tobias Brunner	2012-06-04	2	-0/+2
\|
*	starter: Changed signal handling now that starter is multi-threaded.	Tobias Brunner	2012-06-04	2	-15/+57
\|
*	Mark CHILD_SAs used for trap policies to uninstall them properly.	Tobias Brunner	2012-06-04	1	-6/+13
\| \| \| \| \| \| \|	If the installation failed the state is not CHILD_ROUTED which means the wrong priority is used to uninstall the policies. This is a problem for kernel interfaces that keep track of installed policies as now the proper policy is not found (if the priority is considered).
*	NEWS for 4.6.4 added.	Tobias Brunner	2012-05-31	1	-0/+10
\|
*	Fixed return values of several functions (e.g. return FALSE for pointer types).	Tobias Brunner	2012-05-31	8	-10/+10
\|
*	Fix boolean return value if an empty RSA signature is detected in gmp plugin	Martin Willi	2012-05-31	1	-1/+1
\| \| \| \|	Fixes CVE-2012-2388.
*	Avoid queueing more than one retry initiate job.	Tobias Brunner	2012-05-30	3	-4/+35
\|
*	Retry IKE_SA initiation if DNS resolution failed.	Tobias Brunner	2012-05-30	2	-4/+43
\| \| \| \| \|	This is disabled by default and can be enabled with the charon.retry_initiate_interval option in strongswan.conf.
*	Job added to re-initiate an IKE_SA.	Tobias Brunner	2012-05-30	3	-0/+144
\|
*	added nonce plugin to gcrypt scenarios	Andreas Steffen	2012-05-30	20	-20/+20
\|
*	upgraded ipv6 scenarios to 5.0.0	Andreas Steffen	2012-05-29	121	-282/+737
\|
*	Fix MOBIKE address update if responder address changed.	Tobias Brunner	2012-05-25	1	-2/+2
\| \| \| \| \|	Use the source address of the current MOBIKE message as peer address instead of assuming the address cached on the IKE_SA is still valid.
*	Resolve hosts before reauthenticating due to address change.	Tobias Brunner	2012-05-25	1	-0/+2
\|
*	Don't queue delete_ike_sa job when setting IKE_DELETING.	Tobias Brunner	2012-05-25	2	-9/+1
\| \| \| \| \|	This avoids deleting IKE_SAs during reauthentication (without trying to reestablish them).
*	During reauthentication reestablish IKE_SA even if deleting the old one fails.	Tobias Brunner	2012-05-25	1	-0/+6
\|
*	Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish.	Tobias Brunner	2012-05-25	2	-115/+77
\|
*	Fixed route lookup in case MOBIKE is not enabled.	Tobias Brunner	2012-05-25	1	-3/+9
\|
*	enable xauth-eap plugin in UML scenarios	Andreas Steffen	2012-05-25	2	-0/+6
\|
*	added nonce plugin in default host configurations	Andreas Steffen	2012-05-25	7	-7/+7
\|
*	upgraded ike scenarios to 5.0.0	Andreas Steffen	2012-05-25	13	-54/+74
\|
*	added IKEv1 IPCOMP pluto-charon interoperability scenarios	Andreas Steffen	2012-05-25	23	-0/+273
\|
*	Added encapsulation mode transform attribute to IPComp proposal.	Tobias Brunner	2012-05-25	3	-5/+10
\|
*	upgraded ikev1/compress to 5.0.0	Andreas Steffen	2012-05-24	9	-0/+93
\|
*	Updated ipsec.conf(5) to reflect changes to IPComp support.	Tobias Brunner	2012-05-24	1	-4/+2
\|
*	Add an additional proposal without IPComp to SA payload.	Tobias Brunner	2012-05-24	1	-17/+15
\|
*	Added log message if peer does not accept/provide IPComp proposal.	Tobias Brunner	2012-05-24	1	-2/+12
\|
*	Added support to negotiate IPComp during Quick Mode.	Tobias Brunner	2012-05-24	1	-11/+91
\|
*	Added support for IKEv1 IPComp proposals in SA payload.	Tobias Brunner	2012-05-24	5	-14/+98
\|
*	Added support for IKEv1 IPComp proposals in proposal substructure.	Tobias Brunner	2012-05-24	4	-10/+129
\|
*	Fix memleak during Quick Mode in case no SPI can be allocated from kernel.	Tobias Brunner	2012-05-24	1	-8/+8
\|
*	Properly filter IKEv1 proposals consisting of multiple proposal payloads.	Tobias Brunner	2012-05-24	1	-9/+15
\| \| \| \| \| \| \|	Since a proposal_t object is created for each transform contained in the proposal payload, it does not work to simply remove the last proposal_t object added to the list (there may be several other extracted from the previous proposal payload).
*	Fixed check for loaded plugins with feature types that are not compared exactly.	Tobias Brunner	2012-05-24	1	-25/+13
\| \| \| \| \|	Previously e.g. RNGs with weaker strength would have overwritten stronger ones.
*	get_match() method added to hashtable_t.	Tobias Brunner	2012-05-24	2	-5/+34
\|
*	added ikev1/xauth-rsa-eap-md5-radius scenario	Andreas Steffen	2012-05-24	18	-0/+392
\|
*	Use a hashtable to check for already loaded plugin features.	Tobias Brunner	2012-05-23	1	-20/+37
\|
*	Hash function for plugin features added.	Tobias Brunner	2012-05-23	2	-0/+68
\|
*	load nonce plugin	Andreas Steffen	2012-05-23	494	-496/+496
\|
*	added ikev1 pluto-charon interoperability scenarios	Andreas Steffen	2012-05-23	508	-0/+6797
\|
*	upgraded ikev1 scenarios to 5.0.0	Andreas Steffen	2012-05-23	974	-13037/+1478
\|
*	Apply IDir before deriving keys as aggressive initiator	Martin Willi	2012-05-23	1	-4/+4
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Check if we actually have an initiating packet to free while processing ↵	Martin Willi	2012-05-23	1	-1/+1
\| \| \| \|	responses
*	list IKEv1 Aggressive Mode in ipsec statusall	Andreas Steffen	2012-05-23	1	-2/+9
\|
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	4	-24/+85
\|
*	Cancel pending retransmits when flushing active task queue	Martin Willi	2012-05-21	1	-0/+4
\|
*	Cancel active quick mode task when receiving INFORMATIONAL error	Martin Willi	2012-05-21	1	-0/+30
\|
*	Flush task queues explicitly, not implicitly if task returns ALREADY_DONE	Martin Willi	2012-05-21	6	-12/+20
\|
*	Wrap task managers flush_queue() in IKE_SA	Martin Willi	2012-05-21	2	-0/+14
\|
*	Make task managers flush_queue() method public	Martin Willi	2012-05-21	3	-20/+62
\|