index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
Lines
*
testing: attr-sql is a charon plugin
5.4.0dr8
Andreas Steffen
2016-03-05
11
-42
/
+10
*
testing: Added swanctl/rw-psk-ikev1 scenario
Andreas Steffen
2016-03-05
11
-0
/
+271
*
testing: Include IKE port information in evaltests
Andreas Steffen
2016-03-05
68
-238
/
+221
*
Version bump to 5.4.0dr8
Andreas Steffen
2016-03-04
1
-1
/
+1
*
ike-sa-manager: Log some additional details like SPIs when checking out SAs
Tobias Brunner
2016-03-04
1
-7
/
+16
*
smp: Correctly return IKE SPIs stored in network order
Tobias Brunner
2016-03-04
1
-4
/
+4
*
vici: Correctly return IKE SPIs stored in network order
Tobias Brunner
2016-03-04
1
-2
/
+4
*
stroke: Correctly print IKE SPIs stored in network order
Tobias Brunner
2016-03-04
1
-2
/
+4
*
byteorder: Simplify htoun64/untoh64 functions
Tobias Brunner
2016-03-04
1
-27
/
+0
*
byteorder: Always define be64toh/htobe64 macros
Tobias Brunner
2016-03-04
1
-20
/
+30
*
Merge branch 'ike-sig-contraints'
Tobias Brunner
2016-03-04
12
-90
/
+316
|
\
|
*
NEWS: Add note about IKEv2 signature scheme constraints
Tobias Brunner
2016-03-04
1
-0
/
+4
|
*
swanctl: Document signature scheme constraints
Tobias Brunner
2016-03-04
1
-1
/
+30
|
*
vici: Add support for pubkey constraints with EAP-TLS
Tobias Brunner
2016-03-04
1
-0
/
+8
|
*
auth-cfg: Make IKE signature schemes configurable
Tobias Brunner
2016-03-04
8
-46
/
+203
|
*
ikev2: Always store signature scheme in auth-cfg
Tobias Brunner
2016-03-04
1
-12
/
+1
|
*
ikev2: Diversify signature scheme rule
Thomas Egerer
2016-03-04
4
-33
/
+72
|
/
*
NEWS: Document RFC 5685 support
Tobias Brunner
2016-03-04
1
-0
/
+6
*
Merge branch 'ike-redirect'
Tobias Brunner
2016-03-04
50
-122
/
+2168
|
\
|
*
ike-init: Verify REDIRECT notify before processing IKE_SA_INIT message
Tobias Brunner
2016-03-04
1
-7
/
+51
|
*
ikev2: Allow tasks to verify request messages before processing them
Tobias Brunner
2016-03-04
1
-4
/
+47
|
*
ikev2: Allow tasks to verify response messages before processing them
Tobias Brunner
2016-03-04
1
-1
/
+27
|
*
task: Add optional pre_process() method
Tobias Brunner
2016-03-04
1
-1
/
+13
|
*
testing: Add ikev2/redirect-active scenario
Tobias Brunner
2016-03-04
20
-0
/
+322
|
*
ike-init: Ignore notifies related to redirects during rekeying
Tobias Brunner
2016-03-04
1
-3
/
+13
|
*
ike-sa: Add limit for the number of redirects within a defined time period
Tobias Brunner
2016-03-04
2
-0
/
+54
|
*
ike-sa: Reauthenticate to the same addresses we currently use
Tobias Brunner
2016-03-04
1
-2
/
+5
|
*
vici: Don't redirect all SAs if no selectors are given
Tobias Brunner
2016-03-04
1
-1
/
+1
|
*
vici: Match subnets and ranges against peer IP in redirect command
Tobias Brunner
2016-03-04
3
-13
/
+43
|
*
vici: Match identity with wildcards against remote ID in redirect command
Tobias Brunner
2016-03-04
3
-6
/
+10
|
*
swanctl: Add --redirect command
Tobias Brunner
2016-03-04
4
-1
/
+138
|
*
vici: Add redirect command
Tobias Brunner
2016-03-04
5
-0
/
+150
|
*
redirect-job: Add job to redirect an active IKE_SA
Tobias Brunner
2016-03-04
4
-0
/
+159
|
*
ike-sa: Add redirect() method to actively redirect an IKE_SA
Tobias Brunner
2016-03-04
2
-0
/
+50
|
*
ike-redirect: Add task to redirect active IKE_SAs
Tobias Brunner
2016-03-04
7
-0
/
+220
|
*
ike-auth: Handle REDIRECT notifies during IKE_AUTH
Tobias Brunner
2016-03-04
1
-22
/
+44
|
*
ike-sa: Handle redirect requests for established SAs as reestablishment
Tobias Brunner
2016-03-04
1
-82
/
+174
|
*
ike-auth: Send REDIRECT notify during IKE_AUTH if requested by providers
Tobias Brunner
2016-03-04
1
-27
/
+51
|
*
ike-config: Do not assign attributes for redirected IKE_SAs
Tobias Brunner
2016-03-04
1
-0
/
+5
|
*
child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTH
Tobias Brunner
2016-03-04
1
-0
/
+4
|
*
ike-sa: Add a condition to mark redirected IKE_SAs
Tobias Brunner
2016-03-04
1
-0
/
+5
|
*
ike-init: Handle REDIRECTED_FROM similar to REDIRECT_SUPPORTED as server
Tobias Brunner
2016-03-04
1
-0
/
+17
|
*
ike-init: Send REDIRECTED_FROM instead of REDIRECT_SUPPORTED if appropriate
Tobias Brunner
2016-03-04
1
-1
/
+19
|
*
ike-sa: Keep track of the address of the gateway that redirected us
Tobias Brunner
2016-03-04
2
-1
/
+27
|
*
ikev2: Add option to disable following redirects as client
Tobias Brunner
2016-03-04
3
-1
/
+23
|
*
ikev2: Handle REDIRECT notifies during IKE_SA_INIT
Tobias Brunner
2016-03-04
3
-0
/
+64
|
*
ike-init: Send REDIRECT notify during IKE_SA_INIT if requested by providers
Tobias Brunner
2016-03-04
1
-0
/
+17
|
*
redirect-manager: Add helper function to create and parse REDIRECT notify data
Tobias Brunner
2016-03-04
2
-11
/
+162
|
*
redirect-manager: Verify type of returned gateway ID
Tobias Brunner
2016-03-04
1
-1
/
+12
|
*
ike-init: Send REDIRECT_SUPPORTED as initiator
Tobias Brunner
2016-03-04
1
-0
/
+5
[next]