aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* testing: Make strongSwan build recipe more configurableTobias Brunner2014-09-191-4/+13
* swanctl: Document --stats commandTobias Brunner2014-09-191-0/+3
* testing: Update certs and keys in tkm testsReto Buerki2014-09-176-0/+0
* testing: Update x509-ada version to 0.1.1Reto Buerki2014-09-171-1/+1
* ikev2: Don't treat initial messages as MOBIKE exchangesTobias Brunner2014-09-161-6/+9
* ikev1: Don't cache last block of INFORMATIONAL messages as IVTobias Brunner2014-09-121-2/+2
* ikev1: Log IV when encrypting messagesTobias Brunner2014-09-121-0/+1
* ikev1: Skip unusable IPComp proposalsTobias Brunner2014-09-121-1/+1
* ikev1: Properly handle different proposal numbering schemesTobias Brunner2014-09-121-5/+10
* kernel-netlink: Optionally install protocol and ports on transport mode SAsTobias Brunner2014-09-122-6/+27
* Merge branch 'mobike-fixes'Tobias Brunner2014-09-124-28/+167
|\
| * ikev2: Reduce timeout if path probing was enabledTobias Brunner2014-09-121-6/+13
| * ikev2: Defer MOBIKE updates if no path is availableTobias Brunner2014-09-121-7/+14
| * ike-mobike: Allow calling transmit() even when not currently path probingTobias Brunner2014-09-121-5/+17
| * ikev2: Defer path probing if no path is currently availableTobias Brunner2014-09-121-1/+20
| * ike-mobike: Return FALSE in transmit() if no path was availableTobias Brunner2014-09-122-3/+7
| * ikev2: Enable path probing for currently active MOBIKE taskTobias Brunner2014-09-121-0/+18
| * ike-mobike: Add method to enable path probingTobias Brunner2014-09-122-0/+12
| * ike-mobike: Skip peer addresses we can't send packets to when checking pathsTobias Brunner2014-09-121-5/+18
| * ikev2: Skip peer addresses we can't send packets to when looking for valid pathsTobias Brunner2014-09-121-0/+18
| * ikev2: Insert MOBIKE tasks at the front of the queueTobias Brunner2014-09-121-1/+6
| * ikev2: Migrate number of pending MOBIKE updatesTobias Brunner2014-09-121-0/+5
| * ikev2: Properly keep track of pending MOBIKE updatesTobias Brunner2014-09-121-8/+27
|/
* Merge branch 'android-pfs'Tobias Brunner2014-09-123-9/+69
|\
| * android: Reduce CHILD_SA lifetimeTobias Brunner2014-09-121-2/+2
| * android: Add DH groups to ESP proposalsTobias Brunner2014-09-121-2/+12
| * child-cfg: Ignore duplicate proposalsTobias Brunner2014-09-121-0/+11
| * proposal: Fix equals()Tobias Brunner2014-09-121-5/+5
| * android: Reestablish IKE_SA if CHILD_SA rekeying failedTobias Brunner2014-09-121-3/+36
| * android: Report error if CHILD_SA rekeying failsTobias Brunner2014-09-121-0/+6
|/
* kernel-netlink: Add global option to configure MSS-clamping on installed routesTobias Brunner2014-09-122-6/+29
* kernel-netlink: Add global option to set MTU on installed routesTobias Brunner2014-09-122-0/+22
* chunk: Fix Doxygen comments for chunk_internet_checksum[_inc]Tobias Brunner2014-09-111-2/+2
* auth-cfg: Fix crash after several reauthentications with multiple authenticat...Tobias Brunner2014-09-111-1/+1
* array: Adjust negative index before calling remove_head|tail()Tobias Brunner2014-09-111-4/+4
* array: Warn about caveat with array_remove_at() and value based arraysTobias Brunner2014-09-111-0/+5
* asn1: Try to fill the available binary OID buffer if possibleTobias Brunner2014-09-091-11/+24
* unit-tests: Give worker threads time to clean up when testing thread_t.detach()Tobias Brunner2014-09-091-2/+4
* stream-service: Prevent race conditions due to blocking call to destroy()Tobias Brunner2014-09-091-5/+62
* stream-service: Do not accept or re-register when service is terminatedTobias Brunner2014-09-091-2/+10
* stream-service: Restart accepting without blockingTobias Brunner2014-09-091-2/+7
* android: Add support for querying use stats of a CHILD_SATobias Brunner2014-09-091-1/+2
* eap-radius: Forward Cisco and Microsoft specific DNS/NBNS attributesTobias Brunner2014-09-091-0/+50
* ikev1: Make sure proposed IPsec mode matches our ownTobias Brunner2014-09-091-1/+2
* ike: Reset IKE_SA in state CONNECTING instead of reauthenticatingTobias Brunner2014-09-091-0/+8
* asn1: Make sure not to exceed buffer for binary OIDTobias Brunner2014-09-091-1/+1
* kernel-pfroute: Delete interfaces on RTM_IFANNOUNCE/IFAN_DEPARTURE eventsTobias Brunner2014-09-091-0/+38
* ip-packet: Define our own structs to handle TCP/UDP headersTobias Brunner2014-09-091-2/+27
* kernel-pfkey: Report packet counts of IPsec SAsTobias Brunner2014-09-091-2/+2
* swanctl: Document how connections.*.unique affects initiatorsTobias Brunner2014-09-091-0/+5