aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * vici: Add support for address range definitions of poolsTobias Brunner2014-10-302-9/+39
| * stroke: Add support for address range definitions of in-memory poolsTobias Brunner2014-10-302-8/+36
| * host: Add function to create two hosts from a range definitionTobias Brunner2014-10-303-0/+124
| * mem-pool: Add basic unit testsTobias Brunner2014-10-303-0/+233
| * libhydra: Add test runnerTobias Brunner2014-10-306-0/+92
| * mem-pool: Correctly ignore first and last addresses of subnets and adjust sizeTobias Brunner2014-10-301-7/+49
|/
* ikev1: Don't inherit children if INITITAL_CONTACT was seenThomas Egerer2014-10-301-1/+4
* ikev1: Send INITIAL_CONTACT notify in Main ModeThomas Egerer2014-10-301-0/+28
* Merge branch 'policy-constraints'Martin Willi2014-10-308-53/+1255
|\
| * pki: Print and document the name constraint type for DNS or email constraintsMartin Willi2014-10-303-6/+46
| * constraints: Add permitted/excludedNameConstraints checkMartin Willi2014-10-303-0/+400
| * constraints: Use a more specific FQDN/email name constraint matchingMartin Willi2014-10-301-22/+73
| * constraints: Add requireExplicitPolicy testsMartin Willi2014-10-301-0/+44
| * constraints: Add inhibitAnyPolicy testsMartin Willi2014-10-301-0/+44
| * constraints: Add inhibitPolicyMapping testsMartin Willi2014-10-301-4/+83
| * constraints: Don't reject certificates with invalid certificate policiesMartin Willi2014-10-301-25/+97
| * constraints: Add certificate policy and policy mapping unit testsMartin Willi2014-10-303-0/+472
|/
* Merge branch 'id-type-prefix'Martin Willi2014-10-306-57/+212
|\
| * NEWS: Mention identity prefixesMartin Willi2014-10-301-0/+9
| * swanctl: Document identity type prefixesMartin Willi2014-10-301-3/+18
| * man: Document identification type prefixes in ipsec.conf(5)Martin Willi2014-10-301-2/+27
| * identification: Support custom types in string constructor prefixesMartin Willi2014-10-303-0/+48
| * identification: Support prefixes in string constructors for an explicit typeMartin Willi2014-10-303-0/+58
| * unit-tests: Re-align identification_create_from_string() unit test table dataMartin Willi2014-10-301-52/+52
|/
* threading: Support rwlock try_write_lock() on WindowsMartin Willi2014-10-301-2/+0
* threading: Add a more explicit rwlock try_write_lock() testingMartin Willi2014-10-301-0/+44
* message: Include encrypted fragment payload in payload (order) rulesTobias Brunner2014-10-291-0/+12
* cert-cache: Prevent that a cached issuer is freed too earlyTobias Brunner2014-10-241-7/+10
* unit-tests: Fix internet checksum tests on big-endian systemsTobias Brunner2014-10-231-4/+9
* chunk: Fix internet checksum calculation on big-endian systemsTobias Brunner2014-10-231-1/+1
* updown: Explicitly pass caller PATH to updown scriptMartin Willi2014-10-221-0/+1
* ip-packet: Fix length in IPv6 header of generated packetsTobias Brunner2014-10-201-1/+1
* Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario5.2.1Andreas Steffen2014-10-182-2/+2
* Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenarioAndreas Steffen2014-10-184-2/+6
* Version bump to 5.2.1Andreas Steffen2014-10-181-3/+3
* Remove unneeded get_count() methodAndreas Steffen2014-10-171-1/+0
* Process TCG/PTS File Measurement attribute incrementallyAndreas Steffen2014-10-171-37/+77
* Exempt TCG/SEG attributes from unsupported case statementAndreas Steffen2014-10-162-4/+11
* Request IF-M segmentation contract for TCG/PTS subtypeAndreas Steffen2014-10-161-0/+27
* tls: Fix an invalid free on CBC encryption failureMartin Willi2014-10-151-1/+0
* tls: Fix a memory leak if AEAD encryption failsMartin Willi2014-10-151-0/+1
* tls: Check all bytes of the padding if they equal the padding lengthMartin Willi2014-10-152-0/+16
* android: Fix PA-TNC construction based on data passed via JNITobias Brunner2014-10-151-3/+2
* libimcv: Add generic constructor for PA-TNC attributesTobias Brunner2014-10-152-0/+51
* backtrace: Fix symbol lookup in dynamic symtab via libbfdTobias Brunner2014-10-141-0/+1
* swid-inventory: Remove unused variable end_of_tagTobias Brunner2014-10-141-6/+2
* swanctl: Fix man page build on FreeBSDTobias Brunner2014-10-141-1/+1
* thread: Test for pending cancellation requests before select()ing on OS XMartin Willi2014-10-141-0/+28
* vici: Return default value for get_int() if message value is empty stringMartin Willi2014-10-142-1/+5
* process: Don't use the shells built-in echo in testsMartin Willi2014-10-141-1/+1