aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-2011-34/+28
| * libipsec: Remove unused src/dst_ts parameters from ipsec_sa_mgr_t.add_sa()Martin Willi2015-02-206-18/+7
| * kernel-pfkey: Don't update during add_sa(), but delete SPI allocation stateMartin Willi2015-02-201-7/+18
| * kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-2011-56/+43
| * libipsec: Remove unused reqid parameter from ipsec_sa_mgr_t.get_spi()Martin Willi2015-02-194-9/+6
|/
* libtls: Don't send TLS close notifies in EAP after application succeedsMartin Willi2015-02-193-3/+38
* ha: Perform child rekeying outside of CHILD_SA enumeratorThomas Egerer2015-02-191-7/+22
* mem-pool: Document reassign_online optionTobias Brunner2015-02-121-0/+4
* man: Document IKEv2 fragmentation in ipsec.conf(5)Tobias Brunner2015-02-101-4/+5
* configure: Load SQL backends after crypto pluginsTobias Brunner2015-02-101-2/+2
* stroke: Double the stroke message string buffer sizeMartin Willi2015-02-061-1/+1
* starter: Fail sending stroke message if a string exceeds the buffer sizeMartin Willi2015-02-061-1/+13
* x509: Fix public key reference leak if authority key identifier does not matchMartin Willi2015-02-061-10/+12
* vici: Fix ruby gem author emailMartin Willi2015-01-221-1/+1
* trusted_enumerate requires an additional argumentAndreas Steffen2015-01-211-1/+1
* vici: Fix README example encoding element type values, off by oneMartin Willi2015-01-211-10/+10
* libtls: Check for CHANGE_CIPHER_SPEC type only if upper layer returns NEED_MOREMartin Willi2015-01-121-6/+5
* starter: Fix mark_out.mask in starter_cmp_conn()Maks Naumov2015-01-121-1/+1
* _updown: Remove obsolete man pagesTobias Brunner2015-01-054-33/+0
* Updated RFC3779 certificates5.2.2Andreas Steffen2014-12-2832-309/+440
* Version bump to 5.2.2Andreas Steffen2014-12-231-1/+1
* unit-tests: Adapted to coverity fixesAndreas Steffen2014-12-232-12/+27
* Fixed bad bit shift and sign extension errorsAndreas Steffen2014-12-234-10/+34
* bliss: Remove unnecessary cast to doubleTobias Brunner2014-12-231-1/+1
* bliss: Log type if unsupportedTobias Brunner2014-12-231-1/+1
* bliss: Make sure sampler exists after checking for it earlierTobias Brunner2014-12-231-2/+2
* pts: Do not override status with SUCCESS if length is invalidTobias Brunner2014-12-231-1/+2
* NEWS: Added info about CVE-2014-9221Tobias Brunner2014-12-231-0/+8
* ikev2: Only touch the DH object if we have a matching proposalTobias Brunner2014-12-231-11/+17
* crypto: Define MODP_CUSTOM outside of IKE DH rangeTobias Brunner2014-12-239-14/+17
* pki: Document correct output formats for --pkcs12 --exportTobias Brunner2014-12-191-2/+2
* pki: Properly clean up if output format for --pkcs12 is wrongTobias Brunner2014-12-191-0/+2
* kernel-netlink: Add missing documentation for two optionsTobias Brunner2014-12-191-0/+6
* Merge branch 'osx-app'Martin Willi2014-12-1834-21/+4742
|\
| * osx: Update the README with App related bitsMartin Willi2014-12-171-9/+15
| * osx: Initial import of the Objective-C App graphical user interfaceMartin Willi2014-12-1727-9/+4681
| * apple: Redefine some additional clashing Mach typesMartin Willi2014-12-164-3/+13
| * kernel-pfroute: If a new interface appears, slightly delay address enumerationMartin Willi2014-12-161-0/+9
| * charon-xpc: Add a work-around to trigger IP address add events after bootMartin Willi2014-12-161-0/+24
|/
* mgf1: Use correct Doxygen groupsTobias Brunner2014-12-152-4/+4
* bliss: Fix Doxygen commentsTobias Brunner2014-12-152-6/+6
* Fixed some typos, courtesy of codespellTobias Brunner2014-12-153-4/+4
* kernel-pfkey: Fix replay window size on FreeBSD and Mac OS XTobias Brunner2014-12-151-0/+6
* Updated BLISS CA certificate in ikev2/rw-ntru-bliss scenario5.2.2rc1Andreas Steffen2014-12-123-0/+0
* Also initialize s_signAndreas Steffen2014-12-121-1/+1
* pem: Handle BER indefinite length encoding as binary ASN.1Martin Willi2014-12-121-1/+24
* pki: Add command to export certificates and keys from PKCS#12 containersTobias Brunner2014-12-122-9/+112
* pki: Reformat PKCS#12 output and add an index for each certificate/keyTobias Brunner2014-12-122-14/+17
* pki: Add simple PKCS#12 display commandTobias Brunner2014-12-125-1/+204
* pki: Load hmac plugin which is required to decrypt PKCS#12 containersTobias Brunner2014-12-121-1/+1