aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-203-19/+92
| * child-sa-manager: Add a global manager storing CHILD_SA relationsMartin Willi2015-02-206-1/+432
| * child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-2013-74/+126
| * child-sa: Introduce a unique CHILD_SA identifierMartin Willi2015-02-202-0/+24
| * child-sa: Delegate reqid allocation to the kernel interfaceMartin Willi2015-02-201-15/+46
| * kernel-interface: Add reqid allocation and release functionsMartin Willi2015-02-202-1/+329
| * traffic-selector: Add a hash() methodMartin Willi2015-02-202-0/+20
| * child-sa: Sort traffic selectors after adding CHILD_SA policiesMartin Willi2015-02-201-0/+3
| * unit-tests: Add an initial set of traffic selector unit testsMartin Willi2015-02-203-0/+281
| * traffic-selector: Add a compare function to sort traffic selectorsMartin Willi2015-02-202-34/+86
| * child-sa: Remove the obsolete update logicMartin Willi2015-02-201-6/+1
| * kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-2011-34/+28
| * libipsec: Remove unused src/dst_ts parameters from ipsec_sa_mgr_t.add_sa()Martin Willi2015-02-206-18/+7
| * kernel-pfkey: Don't update during add_sa(), but delete SPI allocation stateMartin Willi2015-02-201-7/+18
| * kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-2011-56/+43
| * libipsec: Remove unused reqid parameter from ipsec_sa_mgr_t.get_spi()Martin Willi2015-02-194-9/+6
|/
* libtls: Don't send TLS close notifies in EAP after application succeedsMartin Willi2015-02-193-3/+38
* ha: Perform child rekeying outside of CHILD_SA enumeratorThomas Egerer2015-02-191-7/+22
* mem-pool: Document reassign_online optionTobias Brunner2015-02-121-0/+4
* man: Document IKEv2 fragmentation in ipsec.conf(5)Tobias Brunner2015-02-101-4/+5
* configure: Load SQL backends after crypto pluginsTobias Brunner2015-02-101-2/+2
* stroke: Double the stroke message string buffer sizeMartin Willi2015-02-061-1/+1
* starter: Fail sending stroke message if a string exceeds the buffer sizeMartin Willi2015-02-061-1/+13
* x509: Fix public key reference leak if authority key identifier does not matchMartin Willi2015-02-061-10/+12
* vici: Fix ruby gem author emailMartin Willi2015-01-221-1/+1
* trusted_enumerate requires an additional argumentAndreas Steffen2015-01-211-1/+1
* vici: Fix README example encoding element type values, off by oneMartin Willi2015-01-211-10/+10
* libtls: Check for CHANGE_CIPHER_SPEC type only if upper layer returns NEED_MOREMartin Willi2015-01-121-6/+5
* starter: Fix mark_out.mask in starter_cmp_conn()Maks Naumov2015-01-121-1/+1
* _updown: Remove obsolete man pagesTobias Brunner2015-01-054-33/+0
* Updated RFC3779 certificates5.2.2Andreas Steffen2014-12-2832-309/+440
* Version bump to 5.2.2Andreas Steffen2014-12-231-1/+1
* unit-tests: Adapted to coverity fixesAndreas Steffen2014-12-232-12/+27
* Fixed bad bit shift and sign extension errorsAndreas Steffen2014-12-234-10/+34
* bliss: Remove unnecessary cast to doubleTobias Brunner2014-12-231-1/+1
* bliss: Log type if unsupportedTobias Brunner2014-12-231-1/+1
* bliss: Make sure sampler exists after checking for it earlierTobias Brunner2014-12-231-2/+2
* pts: Do not override status with SUCCESS if length is invalidTobias Brunner2014-12-231-1/+2
* NEWS: Added info about CVE-2014-9221Tobias Brunner2014-12-231-0/+8
* ikev2: Only touch the DH object if we have a matching proposalTobias Brunner2014-12-231-11/+17
* crypto: Define MODP_CUSTOM outside of IKE DH rangeTobias Brunner2014-12-239-14/+17
* pki: Document correct output formats for --pkcs12 --exportTobias Brunner2014-12-191-2/+2
* pki: Properly clean up if output format for --pkcs12 is wrongTobias Brunner2014-12-191-0/+2
* kernel-netlink: Add missing documentation for two optionsTobias Brunner2014-12-191-0/+6
* Merge branch 'osx-app'Martin Willi2014-12-1834-21/+4742
|\
| * osx: Update the README with App related bitsMartin Willi2014-12-171-9/+15
| * osx: Initial import of the Objective-C App graphical user interfaceMartin Willi2014-12-1727-9/+4681
| * apple: Redefine some additional clashing Mach typesMartin Willi2014-12-164-3/+13
| * kernel-pfroute: If a new interface appears, slightly delay address enumerationMartin Willi2014-12-161-0/+9
| * charon-xpc: Add a work-around to trigger IP address add events after bootMartin Willi2014-12-161-0/+24
|/