| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Set IKE_SA lifetime based on RADIUS Session-Timeout attribute | Martin Willi | 2012-03-05 | 1 | -0/+26 | |
| | | | ||||||
| * | | Set hard timeouts when setting a lifetime | Martin Willi | 2012-03-05 | 1 | -7/+14 | |
| | | | ||||||
| * | | Fix IKE_SA timeout debug output on 64bit platforms | Martin Willi | 2012-03-05 | 1 | -3/+4 | |
| | | | ||||||
| * | | maemo: New upstream release. | Tobias Brunner | 2012-02-27 | 1 | -0/+6 | |
| | | | ||||||
| * | | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. | Tobias Brunner | 2012-02-27 | 3 | -3/+25 | |
| | | | | | | | | | This requires a Linux kernel >= 2.6.33. | |||||
| * | | Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attribute | Martin Willi | 2012-02-24 | 1 | -1/+9 | |
| | | | ||||||
| * | | Refactored construction of RADIUS accounting messages | Martin Willi | 2012-02-24 | 1 | -23/+21 | |
| | | | ||||||
| * | | Include port numbers in Calling-Station-Id, too | Martin Willi | 2012-02-24 | 1 | -2/+2 | |
| | | | ||||||
| * | | Use large enough buffers for IPv6 addresses in Calling-Station-Id | Martin Willi | 2012-02-24 | 1 | -2/+2 | |
| | | | ||||||
| * | | Send client external address as Calling-Station-Id in RADIUS accounting | Martin Willi | 2012-02-24 | 1 | -6/+11 | |
| | | | ||||||
| * | | added missing x character | Andreas Steffen | 2012-02-21 | 1 | -1/+1 | |
| | | | ||||||
| * | | handle case where subject = NULL but keyid is set4.6.2 | Andreas Steffen | 2012-02-20 | 1 | -1/+2 | |
| | | | ||||||
| * | | libtnccs is required by the eap_tnc plugin | Andreas Steffen | 2012-02-20 | 1 | -1/+1 | |
| | | | ||||||
| * | | charon does not depend on libtncif any more but tnc_tnccs does | Andreas Steffen | 2012-02-20 | 1 | -1/+1 | |
| | | | ||||||
| * | | build libstrongswan if libimcv is built | Andreas Steffen | 2012-02-16 | 1 | -1/+1 | |
| | | | ||||||
| * | | version bump to 4.6.2 | Andreas Steffen | 2012-02-16 | 1 | -1/+1 | |
| | | | ||||||
| * | | fixed attest sql query in list_measurements() | Andreas Steffen | 2012-02-15 | 1 | -1/+1 | |
| | | | ||||||
| * | | Compiler warnings fixed. | Tobias Brunner | 2012-02-14 | 2 | -2/+2 | |
| | | | ||||||
| * | | pluto: Print expiry time more properly. | Tobias Brunner | 2012-02-14 | 1 | -2/+3 | |
| | | | ||||||
| * | | pluto: Drop support for legacy PSK format. | Tobias Brunner | 2012-02-08 | 1 | -15/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Any line in ipsec.secrets starting with " or ' was treated as PSK without ID selectors by pluto. This prevented it from supporting DNs like "C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org" as ID selectors. PSKs defined in this legacy format can easily be updated by changing "thisIsASecret" into : PSK "thisIsASecret" | |||||
| * | | completed imc/imv-attestation settings | Andreas Steffen | 2012-02-07 | 1 | -1/+20 | |
| | | | ||||||
| * | | adapted debug output check in openssl-ikev2/rw-eap-tls-only scenario | Andreas Steffen | 2012-02-07 | 1 | -1/+1 | |
| | | | ||||||
| * | | Double check if a cached suite is available, overwrite any old suite state | Martin Willi | 2012-02-07 | 1 | -2/+3 | |
| | | | ||||||
| * | | Some Doxygen fixes. | Tobias Brunner | 2012-02-07 | 3 | -11/+11 | |
| | | | ||||||
| * | | Fix TLS EAP-MSK derivation, uses different order of randoms than key expansion | Martin Willi | 2012-02-07 | 1 | -0/+1 | |
| | | | ||||||
| * | | Filter TLS suite MAC by HMAC algorithm, as the hash is not necessarily the same | Martin Willi | 2012-02-07 | 1 | -4/+4 | |
| | | | ||||||
| * | | open RADIUS accounting port in firewall | Andreas Steffen | 2012-02-06 | 1 | -0/+4 | |
| | | | ||||||
| * | | added ikev2/rw-radius-accounting scenario | Andreas Steffen | 2012-02-06 | 18 | -0/+406 | |
| | | | ||||||
| * | | Update usage for all children in RADIUS accounting just before sending Stop | Martin Willi | 2012-02-06 | 1 | -1/+12 | |
| | | | ||||||
| * | | Check if ClusterIP directory could be opened before enumerating it | Martin Willi | 2012-02-06 | 1 | -17/+26 | |
| | | | ||||||
| * | | version bump to 4.6.2rc1 | Andreas Steffen | 2012-02-05 | 1 | -1/+1 | |
| | | | ||||||
| * | | ipsec attest adds and deletes key/component pairs | Andreas Steffen | 2012-02-05 | 1 | -4/+21 | |
| | | | ||||||
| * | | check if TNC client has a valid and registered AIK | Andreas Steffen | 2012-02-05 | 5 | -25/+62 | |
| | | | ||||||
| * | | reformulated some NEWS entries | Andreas Steffen | 2012-02-03 | 1 | -4/+6 | |
| | | | ||||||
| * | | added openssl-ikev2/ecdsa-pkcs8 scenario | Andreas Steffen | 2012-02-03 | 23 | -0/+286 | |
| | | | ||||||
| * | | added ikev2/rw-pkcs8 scenario | Andreas Steffen | 2012-02-03 | 18 | -0/+238 | |
| | | | ||||||
| * | | version bump to 4.6.2dr4 | Andreas Steffen | 2012-02-02 | 1 | -1/+1 | |
| | | | ||||||
| * | | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-02-02 | 1 | -6/+8 | |
| | | | ||||||
| * | | Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE state | Martin Willi | 2012-02-02 | 1 | -0/+26 | |
| | | | ||||||
| * | | Moved and clarified NEWS about PKCS#8 plugin. | Tobias Brunner | 2012-02-01 | 1 | -3/+3 | |
| | | | ||||||
| * | | Moved log message for unexpected ASN.1 objects to level 2. | Tobias Brunner | 2012-02-01 | 1 | -1/+1 | |
| | | | | | | | | | This avoids error messages if later builders can successfully decode something. | |||||
| * | | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files. | Tobias Brunner | 2012-02-01 | 3 | -61/+323 | |
| | | | ||||||
| * | | NEWS about pkcs8 plugin added. | Tobias Brunner | 2012-02-01 | 1 | -0/+3 | |
| | | | ||||||
| * | | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes). | Tobias Brunner | 2012-02-01 | 3 | -4/+261 | |
| | | | ||||||
| * | | Added support to parse PKCS#8 encoded ECDSA private keys. | Tobias Brunner | 2012-02-01 | 3 | -12/+28 | |
| | | | ||||||
| * | | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -9/+30 | |
| | | | | | | | | | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8. | |||||
| * | | Add builder part for parameters from algorithmIdentifier. | Tobias Brunner | 2012-02-01 | 2 | -1/+4 | |
| | | | ||||||
| * | | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned. | |||||
| * | | Parse RSA private keys from PKCS#8 encoded blobs. | Tobias Brunner | 2012-02-01 | 4 | -1/+151 | |
| | | | ||||||
| * | | Added PKCS#8 stub plugin. | Tobias Brunner | 2012-02-01 | 5 | -0/+143 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |