aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* pki: Declare correct section in pki --issue man pageTobias Brunner2014-01-241-1/+1
* NEWS: Add unit testing improvementsMartin Willi2014-01-241-0/+5
* ike: Restart inactivity counter after doing a CHILD_SA rekeyMartin Willi2014-01-232-3/+6
* child-sa: Add a getter for CHILD_SA install timeMartin Willi2014-01-232-0/+20
* Merge branch 'pam-session'Martin Willi2014-01-237-10/+276
|\
| * NEWS: Introduce PAM session managementMartin Willi2014-01-231-0/+3
| * man: Document xauth-pam session optionMartin Willi2014-01-231-0/+3
| * xauth-pam: Open/close a PAM session for each connected clientAndrea Bonomi2014-01-234-9/+265
| * xauth-pam: Sanitize XAuth attributes before passing them to PAMMartin Willi2014-01-231-1/+5
|/
* Merge branch 'vendor-ids'Martin Willi2014-01-231-16/+63
|\
| * ikev2: Add Cisco FRAGMENTATION vendor IDMartin Willi2014-01-231-0/+2
| * ikev2: Add Cisco Copyright vendor IDMartin Willi2014-01-231-0/+2
| * ikev2: Add Cisco Delete Reason vendor IDMartin Willi2014-01-231-0/+2
| * ikev2: Use a more dynamic vendor ID database, as we use with IKEv1Martin Willi2014-01-231-16/+57
|/
* Merge branch 'chunk-mmap'Martin Willi2014-01-2321-270/+475
|\
| * libpts: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-29/+5
| * tnccs: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-232-27/+6
| * pem: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-29/+6
| * stroke: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-30/+6
| * radattr: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-40/+8
| * libfast: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-29/+10
| * integrity-checker: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-31/+6
| * chunk: Externalize error reporting in chunk_write()Martin Willi2014-01-236-30/+52
| * chunk: Provide a fallback chunk_map() if mmap is not availableMartin Willi2014-01-232-2/+47
| * chunk: Use dynamically allocated buffer in chunk_from_fd()Martin Willi2014-01-2310-25/+183
| * chunk: Add functions to map file contents to a chunkMartin Willi2014-01-233-1/+149
|/
* Merge branch 'unity-fixes'Tobias Brunner2014-01-232-34/+54
|\
| * unity: Send all traffic selectors in a single UNITY_SPLIT_INCLUDE attributeTobias Brunner2014-01-231-35/+47
| * unity: Change local TS to 0.0.0.0/0 as responderTobias Brunner2014-01-231-4/+7
| * unity: Send UNITY_SPLIT_INCLUDE attributes with proper paddingTobias Brunner2014-01-231-11/+16
|/
* Merge branch 'ipcomp'Tobias Brunner2014-01-2341-11/+522
|\
| * testing: Add ikev2/host2host-transport-nat scenarioTobias Brunner2014-01-239-0/+146
| * testing: Add ipv6/rw-compress-ikev2 scenarioTobias Brunner2014-01-239-0/+125
| * testing: Add ikev2/compress-nat scenarioTobias Brunner2014-01-2312-0/+187
| * testing: Enable firewall for ikev2/compress scenarioTobias Brunner2014-01-238-7/+14
| * kernel-netlink: Set selector on transport mode IPComp SAsTobias Brunner2014-01-231-1/+1
| * kernel-netlink: Selectively add selector on SAs that use IPCompTobias Brunner2014-01-231-1/+7
| * updown: Increase buffer size for script and environment variablesTobias Brunner2014-01-231-1/+1
| * updown: Allow IPIP traffic if IPComp was negotiatedTobias Brunner2014-01-231-0/+31
| * updown: Add PLUTO_IPCOMP to indicate if IPComp was negotiatedTobias Brunner2014-01-232-1/+10
|/
* curl: Replace spaces in URIs with %20Tobias Brunner2014-01-231-3/+14
* utils: Add strreplace functionTobias Brunner2014-01-233-2/+155
* stroke: Ensure the buffer of strings in a stroke_msg_t is null-terminatedTobias Brunner2014-01-231-2/+5
* stroke: Add an option to prevent log level changes via stroke socketTobias Brunner2014-01-232-2/+18
* pki: Make sure no command registers too many optionsTobias Brunner2014-01-232-4/+11
* pki: Increase MAX_COMMANDS to cover all currently available commandsTobias Brunner2014-01-231-2/+2
* pki: Print a warning if MAX_COMMANDS is too lowTobias Brunner2014-01-231-0/+7
* pki: Properly use ?: when defining option arraysTobias Brunner2014-01-231-2/+2
* configure: Add -Wno-format-security to default CFLAGSTobias Brunner2014-01-231-1/+1
* agent: Keep CAP_DAC_OVERRIDE to connect to ssh-agent socketTobias Brunner2014-01-234-14/+10