aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* pluto: --debug-kernel aliasing was not fully complete.Tobias Brunner2011-08-023-1/+3
|
* ha plugin does not need Linux headers anymoreMartin Willi2011-08-021-1/+1
|
* Check for kernel version and use appropriate jhash version in HA pluginMartin Willi2011-08-021-10/+101
|
* jhash.h is not part of the distribution anymore.Tobias Brunner2011-08-021-1/+1
|
* Remove the Linux jhash.h copy, as the implementation changed for 2.6.37Martin Willi2011-08-021-143/+0
| | | | | There are now different version for jhash, use --with-linux-headers targeting the headers of the kernel used with the HA plugin.
* version bump to 4.5.3Andreas Steffen2011-08-011-1/+1
|
* Properly initialize ike_sa_t.Tobias Brunner2011-08-011-1/+1
|
* Properly initialize the UCI plugin.Tobias Brunner2011-08-011-2/+2
|
* Build libtncif on Android.Tobias Brunner2011-07-293-2/+30
|
* File lists in Android.mk files updated.Tobias Brunner2011-07-292-1/+3
|
* Update fallback drop policies if required.Tobias Brunner2011-07-291-2/+20
|
* Allow routing table IDs > 255 when filtering them.Tobias Brunner2011-07-292-3/+11
|
* DUMM: Allow addresses to be configured with net prefix.Tobias Brunner2011-07-293-15/+21
|
* Fixed host_create_from_subnet when no prefix is given.Tobias Brunner2011-07-291-1/+1
|
* Install fallback drop policies for all three directions.Tobias Brunner2011-07-281-65/+66
|
* Install fallback drop policies to avoid transmitting unencrypted packets.Tobias Brunner2011-07-274-0/+25
| | | | | | | During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted.
* Remove policies in kernel interfaces based on their priority.Tobias Brunner2011-07-2710-80/+140
| | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities.
* Added missing include in mysql plugin.Tobias Brunner2011-07-261-0/+1
| | | | This was previously pulled in via linked_list.h->iterator.h->library.h.
* Added tnc, imc, imv debug message groups to man page.Tobias Brunner2011-07-261-1/+10
|
* show correct network topology in shunt-policies scenariosAndreas Steffen2011-07-262-2/+2
|
* Inherit authentication information during IKE_SA rekeyingMartin Willi2011-07-251-0/+16
|
* Added a log message when roam jobs get created.Tobias Brunner2011-07-211-0/+2
|
* Readded docs for some arguments to global functions.Tobias Brunner2011-07-214-11/+17
| | | | Those were overzealously removed in 28623fc5389829858c78c759a214aa5c64ea26c6.
* Fixed sleep command in two test cases.Tobias Brunner2011-07-212-2/+2
|
* Added NEWS about job priorities and IKE_SA_INIT dropping.Tobias Brunner2011-07-211-1/+9
|
* Documentation about job priorities added to man page.Tobias Brunner2011-07-211-1/+159
| | | | Also includes docs about IKE_SA_INIT dropping.
* fixed esn typeAndreas Steffen2011-07-201-2/+2
|
* fixed some more misspellingsAndreas Steffen2011-07-203-6/+6
|
* Fixed common misspellings.Tobias Brunner2011-07-2085-146/+146
| | | | Mostly found by 'codespell'.
* Removed old ikev2bis draft.Tobias Brunner2011-07-201-7224/+0
|
* Added missing load-tester options to man page.Tobias Brunner2011-07-181-0/+18
|
* Count running load-tester threads properly.Tobias Brunner2011-07-181-6/+2
|
* Fix load-tester.shutdown_when_complete option.Tobias Brunner2011-07-181-4/+8
| | | | It didn't work when used together with delete_after_established=yes.
* Fix listener registration in load-tester plugin.Tobias Brunner2011-07-181-3/+2
| | | | This fixes the load-tester.shutdown_when_complete option.
* removed stray codeAndreas Steffen2011-07-181-2/+1
|
* added libimcv.plugins.imv_scanner options to strongswan.confAndreas Steffen2011-07-181-1/+10
|
* added ikev2/net2net-esn scenarioAndreas Steffen2011-07-169-0/+121
|
* added log and status output for ESNAndreas Steffen2011-07-162-1/+12
|
* added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723Andreas Steffen2011-07-152-4/+10
|
* version bump to 4.5.3rc1Andreas Steffen2011-07-141-1/+1
|
* alice is now master in the ha/both-active scenarioAndreas Steffen2011-07-141-6/+6
|
* short form changedAndreas Steffen2011-07-141-2/+2
|
* Fix parentheses in write() to CLUSTERIP control filesMartin Willi2011-07-141-1/+1
|
* shunt manager installs policies with %any hostsAndreas Steffen2011-07-141-3/+6
|
* added HOME_AGENT_ADDRESS CP attribute typeAndreas Steffen2011-07-142-7/+10
|
* fixed typoAndreas Steffen2011-07-142-2/+2
|
* updated IANA IKEv2 Notify Message TypesAndreas Steffen2011-07-142-8/+28
|
* NEWS for the 4.5.3dr8 releaseAndreas Steffen2011-07-141-4/+14
|
* check if violating_ports have been assignedAndreas Steffen2011-07-131-0/+5
|
* support of error_offset in PA-TNC INVALID PARAMETER error messagesAndreas Steffen2011-07-1310-17/+161
|