aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* libipsec: Properly support CAMELLIA in CTR modeTobias Brunner2015-10-301-0/+1
* ikev2: Fix size of key material for CAMELLIA-CTRTobias Brunner2015-10-301-0/+1
* libipsec: Fix crypter lookup for AES-CTRTobias Brunner2015-10-301-1/+12
* ike-mobike: Send retransmits to the current local and remote addressesTobias Brunner2015-10-301-1/+5
* Merge branch 'ikev1-cache-informational'Tobias Brunner2015-10-301-15/+81
|\
| * ikev1: Handle queued INFORMATIONAL message after receiving the last AM requestTobias Brunner2015-10-301-0/+16
| * ikev1: Queue INFORMATIONAL request if AM is not complete yetTobias Brunner2015-10-301-6/+13
| * ikev1: Handle queued TRANSACTION messages only after processing repliesTobias Brunner2015-10-301-1/+2
| * ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yetTobias Brunner2015-10-301-17/+27
| * ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM mes...Tobias Brunner2015-10-301-0/+32
|/
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-302-9/+15
* Fix typo in error handling for sigwaitinfo() in charon-systemd and charon-tkmTobias Brunner2015-10-292-2/+2
* random: Properly handle errors when reading from /dev/[u]randomTobias Brunner2015-10-291-0/+1
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Prevent deadlock when checking for duplicate IKEv1 SAsTobias Brunner2015-10-291-0/+16
* Replace usages of sigwait(3) with sigwaitinfo(2)Tobias Brunner2015-10-299-36/+31
* testing: Actually send an uncompressed packet in the ipv6/rw-compress-ikev2 s...Tobias Brunner2015-10-061-1/+2
* updown: Add rules to allow IP6IP6 traffic used for uncompressed small packetsTobias Brunner2015-09-211-0/+31
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
* shunt-manager: Don't install policies in case of an address family or IP prot...Tobias Brunner2015-09-161-0/+20
* openssl: Explicitly include openssl/bn.hTobias Brunner2015-09-165-0/+5
* unit-tests: Add a test to verify that there is no partial matching of RDNsTobias Brunner2015-09-091-0/+1
* scepclient: Remove copyright and license from man pageTobias Brunner2015-09-091-9/+0
* include: Add linux/socket.hTobias Brunner2015-09-072-1/+22
* Version bump to 5.3.35.3.3Andreas Steffen2015-09-062-1/+8
* testing: added ikev2/alg-chacha20poly1305 scenarioAndreas Steffen2015-09-019-0/+106
* testing: update to Linux 4.2 kernelAndreas Steffen2015-09-013-4/+4471
* Version bump to 5.3.3rc25.3.3rc2Andreas Steffen2015-09-011-1/+1
* imv-os: Add some useful usage output to the pacman utilityTobias Brunner2015-08-311-2/+8
* kernel-netlink: Properly set port mask for ICMP type/code if only set on one ...Tobias Brunner2015-08-311-7/+8
* kernel-pfkey: Properly encode ICMP type/code if only set on one sideTobias Brunner2015-08-311-34/+20
* testing: Updated environment variable documentation in updown scriptsTobias Brunner2015-08-3114-14/+126
* libimcv: Updated Android.mk fileTobias Brunner2015-08-311-2/+5
* NEWS: Added additional newsTobias Brunner2015-08-281-13/+33
* eap-radius: Fix creation of host_t objects based on Framed-IPv6-Address attri...Tobias Brunner2015-08-281-1/+1
* conf: Add documentation for new osx-attr optionTobias Brunner2015-08-282-0/+4
* pki: Add new type options to --issue command usage outputTobias Brunner2015-08-271-2/+2
* conf: Fix declaration of default values for imc-hcd optionsTobias Brunner2015-08-271-5/+5
* starter: Remove documentation for starter.load optionTobias Brunner2015-08-271-3/+0
* eap-ttls: Limit maximum length of tunneled EAP packet to EAP-TTLS packetTobias Brunner2015-08-271-1/+8
* trap-manager: Cleanup local address in error casesTobias Brunner2015-08-271-0/+2
* imv-os: Properly free strings for invalid input in pacmanTobias Brunner2015-08-271-0/+11
* ha: Close control FIFO if it is not validTobias Brunner2015-08-271-0/+4
* swanctl: Correctly build man page in out-of-tree builds from the repositoryTobias Brunner2015-08-271-1/+1
* Fixed some typos, courtesy of codespellTobias Brunner2015-08-273-3/+3
* Fix some Doxygen issuesTobias Brunner2015-08-277-8/+11
* unit-tests: Additional test cases to increase coverageTobias Brunner2015-08-272-9/+611
* traffic-selector: Use calc_netbits() in RFC 3779 constructorTobias Brunner2015-08-271-2/+1
* ike: Fix half-open count for initiating SAs when initially checked inTobias Brunner2015-08-271-0/+6
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-276-19/+45