| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | Check if subset calculation actually yields a TS in Unity narrowing | Martin Willi | 2012-09-18 | 1 | -1/+5 | |
| | | | ||||||
| | * | Request Unity configuration attributes for IKEv1 only | Martin Willi | 2012-09-18 | 1 | -0/+6 | |
| | | | ||||||
| | * | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 9 | -0/+785 | |
| |/ | ||||||
| * | Add a road-warrior test case requesting both an IPv4 and an IPv6 virtual address | Martin Willi | 2012-09-18 | 9 | -0/+95 | |
| | | ||||||
| * | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 8 | -118/+160 | |
| | | ||||||
| * | Use the vararg list constructor in quick mode task | Martin Willi | 2012-09-18 | 1 | -16/+8 | |
| | | ||||||
| * | Add a linked list constructor taking items from a vararg list | Martin Willi | 2012-09-18 | 2 | -2/+33 | |
| | | ||||||
| * | Make stroke user-creds work with XAuth configs | Tobias Brunner | 2012-09-18 | 1 | -9/+18 | |
| | | ||||||
| * | Fix Doxygen comment for proposal_keywords_t | Tobias Brunner | 2012-09-18 | 1 | -1/+1 | |
| | | | | | Two dots seem to mark the end of a list. | |||||
| * | New Android release after fixing IDr problems | Tobias Brunner | 2012-09-18 | 1 | -2/+2 | |
| | | ||||||
| * | Use random ports in NetworkManager backend | Tobias Brunner | 2012-09-18 | 1 | -0/+4 | |
| | | ||||||
| * | Fix equality comparison of auth_cfg_t | Tobias Brunner | 2012-09-18 | 1 | -2/+16 | |
| | | | | | | | | We previously only confirmed that rules contained in the first config are also contained in the second, but since the number of rules does not have to be equal, it might be that the second config contains rules that the first one doesn't. | |||||
| * | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 2 | -0/+22 | |
| | | ||||||
| * | Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend | Tobias Brunner | 2012-09-18 | 1 | -1/+3 | |
| | | ||||||
| * | android: Use AUTH_RULE_IDENTITY_LOOSE | Tobias Brunner | 2012-09-18 | 1 | -0/+1 | |
| | | ||||||
| * | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 3 | -1/+28 | |
| | | | | | | | If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate. | |||||
| * | New Android release after fixing Unicode conversion bug | Tobias Brunner | 2012-09-17 | 1 | -2/+2 | |
| | | ||||||
| * | android: Fix conversion of actual Unicode strings (i.e. bytes!=chars) | Tobias Brunner | 2012-09-17 | 1 | -5/+6 | |
| | | ||||||
| * | Removed the unneeded socket-raw plugin | Tobias Brunner | 2012-09-14 | 10 | -895/+0 | |
| | | ||||||
| * | Change traffic selectors during Quick Mode in case of a NAT in transport mode | Tobias Brunner | 2012-09-14 | 1 | -9/+19 | |
| | | | | | | | | | | Windows 7 sends its internal address as TSi. While we don't support the NAT-T drafts as used by Windows XP it is interesting to note that the client there omits the TSi payload which then would automatically get set to the public IP address of the client. Fixes #220. | |||||
| * | Merge branch 'custom-crypto' | Tobias Brunner | 2012-09-13 | 22 | -86/+574 | |
| |\ | | | | | | | | | | | | | | | This provides plugins with an interface to register keywords for proposals (e.g. when parsing the esp and ike options from ipsec.conf) and the possibility to register identifiers for kernel algorithms. It is based on patches contributed by Nanoteq Pty Ltd. | |||||
| | * | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 5 | -19/+72 | |
| | | | ||||||
| | * | Added possibility to register custom kernel algorithms to kernel interface | Tobias Brunner | 2012-09-13 | 2 | -1/+172 | |
| | | | ||||||
| | * | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 9 | -20/+186 | |
| | | | | | | | | | Keyword lookup and registration are handled via the new lib->proposal object. | |||||
| | * | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 6 | -32/+30 | |
| | | | | | | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | |||||
| | * | Make arguments for enumerator_create_token|directory const | Tobias Brunner | 2012-09-13 | 2 | -7/+10 | |
| | | | ||||||
| | * | Moved proposal_keywords to proposal_keywords_static | Francois ten Krooden | 2012-09-13 | 7 | -34/+131 | |
| |/ | | | | Added new proposal keywords with function to reference the static keywords. | |||||
| * | Option added to enforce a configured destination address for DHCP packets | Tobias Brunner | 2012-09-13 | 2 | -1/+17 | |
| | | ||||||
| * | version bump to 5.0.1rc1 | Andreas Steffen | 2012-09-12 | 1 | -1/+1 | |
| | | ||||||
| * | Allow calls to set_address() for any host-sized TS, not only dynamic ones | Tobias Brunner | 2012-09-12 | 1 | -1/+1 | |
| | | | | | | This fixes CHILD_SA updates (e.g. due to MOBIKE), which were broken since 4cb0783. | |||||
| * | Ensure traffic selectors are dynamic before calling set_address() when ↵ | Tobias Brunner | 2012-09-12 | 1 | -2/+2 | |
| | | | | | deriving them | |||||
| * | Consistently log XFRM mark masks with 0 prefix in kernel-netlink plugin | Tobias Brunner | 2012-09-12 | 1 | -13/+13 | |
| | | ||||||
| * | starter: Added --nolog option to suppress logging in starter itself | Tobias Brunner | 2012-09-12 | 1 | -2/+6 | |
| | | | | | Fixes #224. | |||||
| * | Updates to strongswan.conf(5) man page (added several missing options) | Tobias Brunner | 2012-09-12 | 1 | -39/+82 | |
| | | ||||||
| * | Some updates to ipsec.conf(5) man page | Tobias Brunner | 2012-09-12 | 1 | -49/+70 | |
| | | ||||||
| * | starter: Allow %any also for protocol in left|rightprotoport | Tobias Brunner | 2012-09-12 | 1 | -9/+15 | |
| | | ||||||
| * | Don't allow NULL encryption with PEAP | Martin Willi | 2012-09-12 | 1 | -1/+3 | |
| | | ||||||
| * | Use memmove on overlapping regions, and operate with correct sizeof() | Martin Willi | 2012-09-12 | 1 | -2/+2 | |
| | | ||||||
| * | Whitespace cleanups in tls_eap | Martin Willi | 2012-09-12 | 1 | -6/+6 | |
| | | ||||||
| * | Use uintptr_t in mem pool to avoid compiler warning if sizeof(void*) != ↵ | Martin Willi | 2012-09-12 | 1 | -3/+2 | |
| | | | | | sizeof(int) | |||||
| * | ikev1 hybrid authentication does not need client certificates | Andreas Steffen | 2012-09-12 | 4 | -6/+0 | |
| | | ||||||
| * | corrected topology in ikev2/rw-radius-accounting scenario | Andreas Steffen | 2012-09-12 | 1 | -3/+2 | |
| | | ||||||
| * | added ikev2/rw-eap-dynamic scenario | Andreas Steffen | 2012-09-12 | 16 | -3/+172 | |
| | | ||||||
| * | Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty | Martin Willi | 2012-09-11 | 1 | -29/+14 | |
| | | ||||||
| * | Don't use host address for dynamic TS in IKEv1 if a virtual IP was expected | Martin Willi | 2012-09-11 | 1 | -40/+57 | |
| | | ||||||
| * | Don't use host address for dynamic TS in IKEv2 if a virtual IP was expected | Martin Willi | 2012-09-11 | 1 | -1/+33 | |
| | | ||||||
| * | Don't return a subset for a dynamic TS unless set_address has been called | Martin Willi | 2012-09-11 | 1 | -1/+5 | |
| | | ||||||
| * | Send FAILED_CP_REQUIRED if a configuration payload was expected, but not ↵ | Martin Willi | 2012-09-11 | 1 | -0/+9 | |
| | | | | | received | |||||
| * | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 3 | -83/+180 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 9 | -47/+95 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |