| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| | * | | | | After IKEv1 reauthentication, reinstall VIP routes after migrating CHILD_SAs | Martin Willi | 2013-02-20 | 1 | -0/+4 |
| | * | | | | When detecting a duplicate IKEv1 SA, adopt children, as it might be a rekeying | Martin Willi | 2013-02-20 | 1 | -0/+21 |
| * | | | | | Merge branch 'vip-shunts' | Martin Willi | 2013-03-01 | 2 | -15/+19 |
| |\ \ \ \ \ |
|
| | * | | | | | Install a route for shunt policies | Martin Willi | 2013-02-20 | 1 | -5/+13 |
| | * | | | | | Include local address for Unity Split-Exclude shunt policies | Martin Willi | 2013-02-20 | 1 | -10/+5 |
| | |/ / / / |
|
| * | | | | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 19 | -118/+199 |
| |\ \ \ \ \ |
|
| | * | | | | | Don't reject OPAQUE ports while verifying traffic selector substructure | Martin Willi | 2013-02-21 | 1 | -1/+5 |
| | * | | | | | Document ipsec.conf leftprotoport extensions in manpage | Martin Willi | 2013-02-21 | 1 | -0/+8 |
| | * | | | | | Optionally support port ranges in leftprotoport | Martin Willi | 2013-02-21 | 1 | -4/+20 |
| | * | | | | | Support %opaque keyword in leftprotoport for "opaque" ports | Martin Willi | 2013-02-21 | 1 | -0/+5 |
| | * | | | | | Pass complete port range over stroke interface for more flexibility | Martin Willi | 2013-02-21 | 7 | -24/+21 |
| | * | | | | | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 11 | -36/+46 |
| | * | | | | | Print OPAQUE traffic selectors as what they are, not as port range | Martin Willi | 2013-02-21 | 1 | -0/+4 |
| | * | | | | | Support "opaque" ports in traffic selector subset calculation | Martin Willi | 2013-02-21 | 1 | -6/+32 |
| | * | | | | | Slightly refactor traffic_selector_t.get_subset() | Martin Willi | 2013-02-21 | 1 | -61/+68 |
| | * | | | | | Migrate remaining traffic selector methods to METHOD macro | Martin Willi | 2013-02-21 | 1 | -19/+18 |
| | | |/ / /
| |/| | | |
|
| * | | | | | When running with an unprivileged user, initialize supplementary groups | Martin Willi | 2013-03-01 | 2 | -2/+38 |
| * | | | | | Without MOBIKE, update remote host only if it is behind NAT | Martin Willi | 2013-03-01 | 1 | -2/+3 |
| * | | | | | Merge branch 'ikev1-mm-retransmits' | Martin Willi | 2013-03-01 | 4 | -45/+55 |
| |\ \ \ \ \ |
|
| | * | | | | | For IKEv1 Main Mode, use message hash to detect early retransmissions | Martin Willi | 2013-02-25 | 1 | -10/+23 |
| | * | | | | | Move initial message dropping to task manager | Martin Willi | 2013-02-25 | 3 | -19/+27 |
| | * | | | | | Use INIT macro to initialize IKE_SA manager entries | Martin Willi | 2013-02-25 | 1 | -17/+6 |
| * | | | | | | Merge branch 'tfc-notify' | Martin Willi | 2013-03-01 | 6 | -2/+68 |
| |\ \ \ \ \ \ |
|
| | * | | | | | | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support it | Martin Willi | 2013-03-01 | 1 | -0/+9 |
| | * | | | | | | Indicate support for processing ESPv3 TFC padding in Netlink IPsec backend | Martin Willi | 2013-03-01 | 1 | -1/+7 |
| | * | | | | | | Introduce "features" for the kernel backends returning kernel capabilities | Martin Willi | 2013-03-01 | 4 | -1/+52 |
| | | |/ / / /
| |/| | | | |
|
| * | | | | | | testing: Add a script to easily connect to a host via SSH | Tobias Brunner | 2013-02-28 | 1 | -0/+20 |
| * | | | | | | openssl: Provide AES-GCM implementation | Tobias Brunner | 2013-02-28 | 4 | -1/+312 |
| * | | | | | | Fix cleanup in crypto_tester if AEAD implementation fails | Tobias Brunner | 2013-02-28 | 1 | -1/+4 |
| * | | | | | | Order of arguments in Doxygen comment fixed | Tobias Brunner | 2013-02-28 | 2 | -2/+2 |
| * | | | | | | Fix auth_cfg_t.clone() for single-valued auth rules | Tobias Brunner | 2013-02-28 | 1 | -10/+11 |
| * | | | | | | Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACT | Tobias Brunner | 2013-02-28 | 1 | -0/+1 |
| | |_|_|_|/
|/| | | | |
|
| * | | | | | Use SIGUSR2 for SIG_CANCEL on Android | Tobias Brunner | 2013-02-26 | 1 | -0/+4 |
| * | | | | | Android.mk updated to latest Makefiles | Tobias Brunner | 2013-02-26 | 3 | -1/+3 |
| | |/ / /
|/| | | |
|
| * | | | | Check kvm command existence in start-testing | Reto Buerki | 2013-02-22 | 1 | -1/+1 |
| * | | | | openssl: Disable PKCS#7/CMS when building against OpenSSL < 0.9.8g | Tobias Brunner | 2013-02-20 | 2 | -1/+5 |
| | |/ /
|/| | |
|
| * | | | version bump to 5.0.3dr25.0.3dr2 | Andreas Steffen | 2013-02-19 | 2 | -1/+5 |
| * | | | treat IF-M and IF-TNCCS remediation instructions/parameters in an equal way | Andreas Steffen | 2013-02-19 | 4 | -107/+204 |
| * | | | Merge branch 'dnssec' | Tobias Brunner | 2013-02-19 | 103 | -7/+3723 |
| |\ \ \ |
|
| | * | | | NEWS about ipseckey and unbound plugins added | Tobias Brunner | 2013-02-19 | 1 | -0/+9 |
| | * | | | Added ikev2/rw-dnssec scenario | Andreas Steffen | 2013-02-19 | 21 | -0/+301 |
| | * | | | Added ikev2/net2net-dnssec scenario | Andreas Steffen | 2013-02-19 | 17 | -0/+220 |
| | * | | | Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org... | Andreas Steffen | 2013-02-19 | 23 | -2/+378 |
| | * | | | Build unbound and ipseckey plugins on KVM image | Andreas Steffen | 2013-02-19 | 2 | -2/+4 |
| | * | | | Streamlined log messages in ipseckey plugin | Andreas Steffen | 2013-02-19 | 2 | -58/+30 |
| | * | | | Encode RSA public keys in RFC 3110 DNSKEY format | Andreas Steffen | 2013-02-19 | 8 | -3/+155 |
| | * | | | Moved configuration from resolver manager to unbound plugin | Andreas Steffen | 2013-02-19 | 7 | -52/+47 |
| | * | | | ipseckey: Report IPSECKEYs with invalid DNSSEC security state | Reto Guadagnini | 2013-02-19 | 1 | -2/+12 |
| | * | | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf | Reto Guadagnini | 2013-02-19 | 2 | -3/+19 |
| | * | | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRs | Reto Guadagnini | 2013-02-19 | 9 | -0/+863 |
