index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
Lines
...
|
*
|
|
Load multiple comma seperarated certificates in the leftcert option
Martin Willi
2013-01-18
1
-15
/
+32
|
*
|
|
Make AUTH_RULE_SUBJECT cert multi-valued
Martin Willi
2013-01-18
1
-11
/
+24
*
|
|
|
Merge branch 'systime'
Martin Willi
2013-03-01
9
-10
/
+525
|
\
\
\
\
|
*
|
|
|
systime-fix disables certificate lifetime validation if system time not synced
Martin Willi
2013-02-19
4
-0
/
+326
|
*
|
|
|
Add a stub for systime-fix, a plugin handling certificate lifetimes gracefully
Martin Willi
2013-02-19
5
-0
/
+130
|
*
|
|
|
Add a cert_validator hook allowing plugins to provide custom lifetime checking
Martin Willi
2013-02-19
2
-10
/
+64
|
*
|
|
|
Make cert_validator_t.validate optional to implement
Martin Willi
2013-02-19
2
-0
/
+5
|
|
|
_
|
/
|
|
/
|
|
*
|
|
|
Merge branch 'ikev1-rekeying'
Martin Willi
2013-03-01
2
-0
/
+25
|
\
\
\
\
|
*
|
|
|
After IKEv1 reauthentication, reinstall VIP routes after migrating CHILD_SAs
Martin Willi
2013-02-20
1
-0
/
+4
|
*
|
|
|
When detecting a duplicate IKEv1 SA, adopt children, as it might be a rekeying
Martin Willi
2013-02-20
1
-0
/
+21
*
|
|
|
|
Merge branch 'vip-shunts'
Martin Willi
2013-03-01
2
-15
/
+19
|
\
\
\
\
\
|
*
|
|
|
|
Install a route for shunt policies
Martin Willi
2013-02-20
1
-5
/
+13
|
*
|
|
|
|
Include local address for Unity Split-Exclude shunt policies
Martin Willi
2013-02-20
1
-10
/
+5
|
|
/
/
/
/
*
|
|
|
|
Merge branch 'opaque-ports'
Martin Willi
2013-03-01
19
-118
/
+199
|
\
\
\
\
\
|
*
|
|
|
|
Don't reject OPAQUE ports while verifying traffic selector substructure
Martin Willi
2013-02-21
1
-1
/
+5
|
*
|
|
|
|
Document ipsec.conf leftprotoport extensions in manpage
Martin Willi
2013-02-21
1
-0
/
+8
|
*
|
|
|
|
Optionally support port ranges in leftprotoport
Martin Willi
2013-02-21
1
-4
/
+20
|
*
|
|
|
|
Support %opaque keyword in leftprotoport for "opaque" ports
Martin Willi
2013-02-21
1
-0
/
+5
|
*
|
|
|
|
Pass complete port range over stroke interface for more flexibility
Martin Willi
2013-02-21
7
-24
/
+21
|
*
|
|
|
|
Use a complete port range in traffic_selector_create_from_{subnet,cidr}
Martin Willi
2013-02-21
11
-36
/
+46
|
*
|
|
|
|
Print OPAQUE traffic selectors as what they are, not as port range
Martin Willi
2013-02-21
1
-0
/
+4
|
*
|
|
|
|
Support "opaque" ports in traffic selector subset calculation
Martin Willi
2013-02-21
1
-6
/
+32
|
*
|
|
|
|
Slightly refactor traffic_selector_t.get_subset()
Martin Willi
2013-02-21
1
-61
/
+68
|
*
|
|
|
|
Migrate remaining traffic selector methods to METHOD macro
Martin Willi
2013-02-21
1
-19
/
+18
|
|
|
/
/
/
|
|
/
|
|
|
*
|
|
|
|
When running with an unprivileged user, initialize supplementary groups
Martin Willi
2013-03-01
2
-2
/
+38
*
|
|
|
|
Without MOBIKE, update remote host only if it is behind NAT
Martin Willi
2013-03-01
1
-2
/
+3
*
|
|
|
|
Merge branch 'ikev1-mm-retransmits'
Martin Willi
2013-03-01
4
-45
/
+55
|
\
\
\
\
\
|
*
|
|
|
|
For IKEv1 Main Mode, use message hash to detect early retransmissions
Martin Willi
2013-02-25
1
-10
/
+23
|
*
|
|
|
|
Move initial message dropping to task manager
Martin Willi
2013-02-25
3
-19
/
+27
|
*
|
|
|
|
Use INIT macro to initialize IKE_SA manager entries
Martin Willi
2013-02-25
1
-17
/
+6
*
|
|
|
|
|
Merge branch 'tfc-notify'
Martin Willi
2013-03-01
6
-2
/
+68
|
\
\
\
\
\
\
|
*
|
|
|
|
|
Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support it
Martin Willi
2013-03-01
1
-0
/
+9
|
*
|
|
|
|
|
Indicate support for processing ESPv3 TFC padding in Netlink IPsec backend
Martin Willi
2013-03-01
1
-1
/
+7
|
*
|
|
|
|
|
Introduce "features" for the kernel backends returning kernel capabilities
Martin Willi
2013-03-01
4
-1
/
+52
|
|
|
/
/
/
/
|
|
/
|
|
|
|
*
|
|
|
|
|
testing: Add a script to easily connect to a host via SSH
Tobias Brunner
2013-02-28
1
-0
/
+20
*
|
|
|
|
|
openssl: Provide AES-GCM implementation
Tobias Brunner
2013-02-28
4
-1
/
+312
*
|
|
|
|
|
Fix cleanup in crypto_tester if AEAD implementation fails
Tobias Brunner
2013-02-28
1
-1
/
+4
*
|
|
|
|
|
Order of arguments in Doxygen comment fixed
Tobias Brunner
2013-02-28
2
-2
/
+2
*
|
|
|
|
|
Fix auth_cfg_t.clone() for single-valued auth rules
Tobias Brunner
2013-02-28
1
-10
/
+11
*
|
|
|
|
|
Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACT
Tobias Brunner
2013-02-28
1
-0
/
+1
|
|
_
|
_
|
_
|
/
|
/
|
|
|
|
*
|
|
|
|
Use SIGUSR2 for SIG_CANCEL on Android
Tobias Brunner
2013-02-26
1
-0
/
+4
*
|
|
|
|
Android.mk updated to latest Makefiles
Tobias Brunner
2013-02-26
3
-1
/
+3
|
|
/
/
/
|
/
|
|
|
*
|
|
|
Check kvm command existence in start-testing
Reto Buerki
2013-02-22
1
-1
/
+1
*
|
|
|
openssl: Disable PKCS#7/CMS when building against OpenSSL < 0.9.8g
Tobias Brunner
2013-02-20
2
-1
/
+5
|
|
/
/
|
/
|
|
*
|
|
version bump to 5.0.3dr2
5.0.3dr2
Andreas Steffen
2013-02-19
2
-1
/
+5
*
|
|
treat IF-M and IF-TNCCS remediation instructions/parameters in an equal way
Andreas Steffen
2013-02-19
4
-107
/
+204
*
|
|
Merge branch 'dnssec'
Tobias Brunner
2013-02-19
103
-7
/
+3723
|
\
\
\
|
*
|
|
NEWS about ipseckey and unbound plugins added
Tobias Brunner
2013-02-19
1
-0
/
+9
|
*
|
|
Added ikev2/rw-dnssec scenario
Andreas Steffen
2013-02-19
21
-0
/
+301
|
*
|
|
Added ikev2/net2net-dnssec scenario
Andreas Steffen
2013-02-19
17
-0
/
+220
[prev]
[next]
