aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* | | | | | Fix auth_cfg_t.clone() for single-valued auth rulesTobias Brunner2013-02-281-10/+11
* | | | | | Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACTTobias Brunner2013-02-281-0/+1
| |_|_|_|/ |/| | | |
* | | | | Use SIGUSR2 for SIG_CANCEL on AndroidTobias Brunner2013-02-261-0/+4
* | | | | Android.mk updated to latest MakefilesTobias Brunner2013-02-263-1/+3
| |/ / / |/| | |
* | | | Check kvm command existence in start-testingReto Buerki2013-02-221-1/+1
* | | | openssl: Disable PKCS#7/CMS when building against OpenSSL < 0.9.8gTobias Brunner2013-02-202-1/+5
| |/ / |/| |
* | | version bump to 5.0.3dr25.0.3dr2Andreas Steffen2013-02-192-1/+5
* | | treat IF-M and IF-TNCCS remediation instructions/parameters in an equal wayAndreas Steffen2013-02-194-107/+204
* | | Merge branch 'dnssec'Tobias Brunner2013-02-19103-7/+3723
|\ \ \
| * | | NEWS about ipseckey and unbound plugins addedTobias Brunner2013-02-191-0/+9
| * | | Added ikev2/rw-dnssec scenarioAndreas Steffen2013-02-1921-0/+301
| * | | Added ikev2/net2net-dnssec scenarioAndreas Steffen2013-02-1917-0/+220
| * | | Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org...Andreas Steffen2013-02-1923-2/+378
| * | | Build unbound and ipseckey plugins on KVM imageAndreas Steffen2013-02-192-2/+4
| * | | Streamlined log messages in ipseckey pluginAndreas Steffen2013-02-192-58/+30
| * | | Encode RSA public keys in RFC 3110 DNSKEY formatAndreas Steffen2013-02-198-3/+155
| * | | Moved configuration from resolver manager to unbound pluginAndreas Steffen2013-02-197-52/+47
| * | | ipseckey: Report IPSECKEYs with invalid DNSSEC security stateReto Guadagnini2013-02-191-2/+12
| * | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-192-3/+19
| * | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRsReto Guadagnini2013-02-199-0/+863
| * | | Implemented the resolver test script "dnssec"Reto Guadagnini2013-02-193-1/+130
| * | | unbound: Implementation of query method of unbound_resolver_tReto Guadagnini2013-02-192-7/+64
| * | | unbound: Implemented resolver_response_t as unbound_response_tReto Guadagnini2013-02-193-1/+316
| * | | Implemented rr_set_t interfaceReto Guadagnini2013-02-193-1/+113
| * | | unbound: Implemented rr_t as unbound_rr_tReto Guadagnini2013-02-193-1/+215
| * | | Added unbound plugin implementing the resolver interface using libunboundReto Guadagnini2013-02-197-0/+245
| * | | Added manager for DNS resolversReto Guadagnini2013-02-195-1/+181
| * | | Added interface for DNS resolversReto Guadagnini2013-02-196-0/+548
|/ / /
* | | added missing return statementAndreas Steffen2013-02-191-0/+1
* | | Fix encoding of issuerAndSubject while handling SCEP pending stateMartin Willi2013-02-191-1/+1
* | | reject PB-Experimental messages with NOSKIP flag setAndreas Steffen2013-02-191-0/+7
* | | added parameter descriptionsAndreas Steffen2013-02-191-1/+8
* | | removed superfluous debug outputAndreas Steffen2013-02-152-4/+0
* | | Add a timeout to clean up PDP RADIUS connectionsMartin Willi2013-02-141-0/+51
* | | Keep the PDP connections lock while accessing its objectsMartin Willi2013-02-143-7/+34
* | | Add locking to TNC-PDP connectionsMartin Willi2013-02-141-7/+23
* | | Add IF-M message subtype getter to IMC/IMV messagesMartin Willi2013-02-144-1/+28
* | | Use a generic constructor to create PA-TNC error attributesMartin Willi2013-02-141-62/+32
* | | Add a global return_success() method implementationMartin Willi2013-02-143-8/+15
* | | Add a convenience method to check pen_type_t for vendor and typeMartin Willi2013-02-141-0/+14
* | | Add a comparison function for pen_type_tMartin Willi2013-02-141-0/+12
* | | Whitespace and comment cleanups in pen.[ch]Martin Willi2013-02-142-20/+28
* | | resolve dependency on libtlsAndreas Steffen2013-02-141-0/+1
* | | Merge branch 'ike-dscp'Martin Willi2013-02-1427-68/+242
|\ \ \
| * | | Add ikedscp documentation to ipsec.conf.5Martin Willi2013-02-061-0/+5
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-067-4/+23
| * | | Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
| * | | Add a DSCP configuration value to IKE configsMartin Willi2013-02-0614-25/+41
| * | | Set DSCP values when sending IP packets in socket-defaultMartin Willi2013-02-061-1/+65
| * | | Don't send a packet in default socket if family is not IPv4 nor IPv6Martin Willi2013-02-061-12/+18