tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Use mac_t and PRF and signer wrappers in cmac plugin	Tobias Brunner	2012-06-25	8	-443/+82
\|
*	Use mac_t and PRF and signer wrappers in xcbc plugin	Tobias Brunner	2012-06-25	8	-452/+91
\|
*	Make the hmac_t interface a generic interface for message authentication codes	Tobias Brunner	2012-06-25	11	-132/+131
\|
*	Simplified creation of PRFs and signers in openssl and hmac plugins	Tobias Brunner	2012-06-25	2	-136/+10
\|
*	Function to convert PRFs to hash algorithms added	Tobias Brunner	2012-06-25	2	-0/+39
\|
*	hasher_algorithm_from_integrity() optionally returns truncation length	Tobias Brunner	2012-06-25	3	-7/+45
\|
*	Use simple wrappers for HMAC based PRF and signer in openssl plugin	Tobias Brunner	2012-06-25	8	-562/+132
\|
*	Use simple wrappers for HMAC based PRF and signer in hmac plugin	Tobias Brunner	2012-06-25	8	-524/+127
\|
*	Simple wrappers for HMAC based prf_t and signer_t implementations added	Tobias Brunner	2012-06-25	6	-0/+395
\|
*	Refactored OpenSSL based HMAC implementation	Tobias Brunner	2012-06-25	5	-173/+382
\|
*	Adding OpenSSL HMAC signer functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+322
\|
*	Adding OpenSSL HMAC pseudo random functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+245
\|
*	Adding OpenSSL random number functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+159
\|
*	Fixed IPv6 source address lookup	Tobias Brunner	2012-06-25	1	-5/+43
\| \| \| \| \| \| \| \| \| \| \| \| \|	Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET.
*	updated default configuration of UML hosts to 5.0.0	Andreas Steffen	2012-06-25	14	-72/+19
\|
*	added charon.cisco_unity to strongswan.conf.5 man page	Andreas Steffen	2012-06-25	1	-0/+3
\|
*	support Cisco Unity VID	Andreas Steffen	2012-06-25	2	-3/+11
\|
*	Enable xauth-generic by default but don't build it if IKEv1 is disabled	Tobias Brunner	2012-06-25	1	-1/+5
\|
*	Remove CREDITS from distribution	Tobias Brunner	2012-06-25	1	-1/+1
\|
*	The AUTHORS file is required by automake	Tobias Brunner	2012-06-25	1	-0/+0
\|
*	LICENSE file updated	Tobias Brunner	2012-06-25	1	-21/+8
\|
*	ldaphost and ldapbase ca section keywords are deprecated	Tobias Brunner	2012-06-25	4	-8/+2
\|
*	Removed pluto-specifics from ipsec script	Tobias Brunner	2012-06-25	1	-75/+1
\|
*	README file cleaned up and updated	Tobias Brunner	2012-06-25	1	-2117/+481
\|
*	Enforce uniqueids=keep based on XAuth identity	Martin Willi	2012-06-25	1	-0/+6
\|
*	Don't send XAUTH_OK if a hook prevents SA to establish	Martin Willi	2012-06-25	1	-4/+14
\|
*	Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes	Martin Willi	2012-06-25	2	-28/+28
\|
*	Show EAP/XAuth identity in "ipsec status", if available	Martin Willi	2012-06-25	1	-1/+1
\|
*	Use XAuth/EAP remote identity for uniqueness check	Martin Willi	2012-06-25	3	-4/+6
\|
*	Add missing XAuth name variable when complaining about missing XAuth backend	Martin Willi	2012-06-25	1	-1/+1
\|
*	removed AUTHORS and CREDITS	Andreas Steffen	2012-06-25	2	-110/+0
\|
*	some copyright additions	Andreas Steffen	2012-06-23	1	-5/+8
\|
*	update copyright	Andreas Steffen	2012-06-23	1	-6/+4
\|
*	version bump to 5.0.0	Andreas Steffen	2012-06-23	1	-1/+1
\|
*	Fix SIGSEGV if kernel install fails during Quick Mode as responder.	Tobias Brunner	2012-06-22	1	-4/+8
\|
*	adapted description to IKEv2	Andreas Steffen	2012-06-22	3	-6/+5
\|
*	Fixed compile error because of charon->name in certexpire plugin.	Tobias Brunner	2012-06-21	1	-0/+1
\|
*	fixed typo	Andreas Steffen	2012-06-20	1	-1/+1
\|
*	added ipv6/rw-ip6-in-ip4-ikev1 scenario	Andreas Steffen	2012-06-20	19	-0/+504
\|
*	added ipv6/rw-ip6-in-ip4-ikev2 scenario	Andreas Steffen	2012-06-20	14	-0/+440
\|
*	Select requested virtual IP family based on remote TS, if no local TS available	Martin Willi	2012-06-20	1	-1/+12
\|
*	upgraded UML options to 5.0.0	Andreas Steffen	2012-06-19	2	-8/+9
\|
*	Doxygen fix in PKCS#7 wrapper	Tobias Brunner	2012-06-19	1	-1/+1
\|
*	sleep one second more	Andreas Steffen	2012-06-19	1	-1/+1
\|
*	use socket-default in scenario	Andreas Steffen	2012-06-19	2	-2/+2
\|
*	added ikev1/xauth-id-rsa-hybrid scenario	Andreas Steffen	2012-06-18	14	-0/+174
\|
*	added ikev1/xauth-id-rsa-aggressive scenario	Andreas Steffen	2012-06-18	14	-0/+180
\|
*	added secret as valid authby argument	Andreas Steffen	2012-06-18	1	-1/+1
\|
*	rsasig is not recognized as authentication method	Andreas Steffen	2012-06-18	11	-22/+22
\|
*	enable potentially unsafe aggressive mode	Andreas Steffen	2012-06-18	1	-0/+2
\|