aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* Merge branch 'android-eap-tls'Tobias Brunner2014-11-0614-87/+101
|\
| * android: Use %any as AAA identity, but disable EAP-only authenticationTobias Brunner2014-11-061-5/+3
| * android: Add support for signature schemes used by EAP-TLSTobias Brunner2014-11-061-19/+34
| * android: Allow enumeration of untrusted certificatesTobias Brunner2014-11-061-1/+1
| * android: Handle EAP-TLS in Android serviceTobias Brunner2014-11-061-6/+19
| * android: Enable EAP-TLS plugin in the appTobias Brunner2014-11-061-1/+1
| * android: Add EAP-TLS VPN type to the GUITobias Brunner2014-11-066-1/+7
| * android: Change how features of VPN types are stored and checkedTobias Brunner2014-11-065-59/+41
|/
* testing: Update tkm/multiple-clients/evaltest.datReto Buerki2014-10-311-2/+1
* charon-tkm: Properly reset CC context in listenerReto Buerki2014-10-311-7/+13
* charon-tkm: Add missing comma to enumReto Buerki2014-10-311-1/+1
* proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algori...Tobias Brunner2014-10-311-0/+2
* Merge branch 'mem-pool-range'Tobias Brunner2014-10-3016-42/+590
|\
| * host: Ignore spaces around - when parsing rangesTobias Brunner2014-10-303-9/+23
| * ike-cfg: Use host_create_from_range() helperTobias Brunner2014-10-301-16/+1
| * vici: Add support for address range definitions of poolsTobias Brunner2014-10-302-9/+39
| * stroke: Add support for address range definitions of in-memory poolsTobias Brunner2014-10-302-8/+36
| * host: Add function to create two hosts from a range definitionTobias Brunner2014-10-303-0/+124
| * mem-pool: Add basic unit testsTobias Brunner2014-10-303-0/+233
| * libhydra: Add test runnerTobias Brunner2014-10-306-0/+92
| * mem-pool: Correctly ignore first and last addresses of subnets and adjust sizeTobias Brunner2014-10-301-7/+49
|/
* ikev1: Don't inherit children if INITITAL_CONTACT was seenThomas Egerer2014-10-301-1/+4
* ikev1: Send INITIAL_CONTACT notify in Main ModeThomas Egerer2014-10-301-0/+28
* Merge branch 'policy-constraints'Martin Willi2014-10-308-53/+1255
|\
| * pki: Print and document the name constraint type for DNS or email constraintsMartin Willi2014-10-303-6/+46
| * constraints: Add permitted/excludedNameConstraints checkMartin Willi2014-10-303-0/+400
| * constraints: Use a more specific FQDN/email name constraint matchingMartin Willi2014-10-301-22/+73
| * constraints: Add requireExplicitPolicy testsMartin Willi2014-10-301-0/+44
| * constraints: Add inhibitAnyPolicy testsMartin Willi2014-10-301-0/+44
| * constraints: Add inhibitPolicyMapping testsMartin Willi2014-10-301-4/+83
| * constraints: Don't reject certificates with invalid certificate policiesMartin Willi2014-10-301-25/+97
| * constraints: Add certificate policy and policy mapping unit testsMartin Willi2014-10-303-0/+472
|/
* Merge branch 'id-type-prefix'Martin Willi2014-10-306-57/+212
|\
| * NEWS: Mention identity prefixesMartin Willi2014-10-301-0/+9
| * swanctl: Document identity type prefixesMartin Willi2014-10-301-3/+18
| * man: Document identification type prefixes in ipsec.conf(5)Martin Willi2014-10-301-2/+27
| * identification: Support custom types in string constructor prefixesMartin Willi2014-10-303-0/+48
| * identification: Support prefixes in string constructors for an explicit typeMartin Willi2014-10-303-0/+58
| * unit-tests: Re-align identification_create_from_string() unit test table dataMartin Willi2014-10-301-52/+52
|/
* threading: Support rwlock try_write_lock() on WindowsMartin Willi2014-10-301-2/+0
* threading: Add a more explicit rwlock try_write_lock() testingMartin Willi2014-10-301-0/+44
* message: Include encrypted fragment payload in payload (order) rulesTobias Brunner2014-10-291-0/+12
* cert-cache: Prevent that a cached issuer is freed too earlyTobias Brunner2014-10-241-7/+10
* unit-tests: Fix internet checksum tests on big-endian systemsTobias Brunner2014-10-231-4/+9
* chunk: Fix internet checksum calculation on big-endian systemsTobias Brunner2014-10-231-1/+1
* updown: Explicitly pass caller PATH to updown scriptMartin Willi2014-10-221-0/+1
* ip-packet: Fix length in IPv6 header of generated packetsTobias Brunner2014-10-201-1/+1
* Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario5.2.1Andreas Steffen2014-10-182-2/+2
* Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenarioAndreas Steffen2014-10-184-2/+6
* Version bump to 5.2.1Andreas Steffen2014-10-181-3/+3