aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * Implemented IPsec policies restricted to given network interfaceAndreas Steffen2016-04-098-14/+66
| * Support manually-set IPsec policy prioritiesAndreas Steffen2016-04-098-22/+84
| * peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-0916-200/+266
| * child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-0916-366/+362
| * kernel-pfkey: Prefer policies with reqid over those withoutTobias Brunner2016-04-091-1/+7
| * kernel-pfkey: Only install templates for regular IPsec policies with reqidTobias Brunner2016-04-091-32/+35
| * testing: Add swanctl/net2net-gw scenarioTobias Brunner2016-04-0911-0/+204
| * shunt-manager: Install "outbound" FWD policyTobias Brunner2016-04-091-2/+8
| * kernel-netlink: Prefer policies with reqid over those withoutTobias Brunner2016-04-091-1/+7
| * kernel-netlink: Only associate templates with inbound FWD policiesTobias Brunner2016-04-091-1/+1
| * child-sa: Install "outbound" FWD policyTobias Brunner2016-04-091-0/+16
| * kernel-netlink: Associate routes with IN policies instead of FWD policiesTobias Brunner2016-04-091-21/+21
| * kernel: Use structs to pass information to the kernel-ipsec interfaceTobias Brunner2016-04-0912-983/+1140
|/
* testing: List conntrack table on sun in ikev2/host2host-transport-connmark sc...Tobias Brunner2016-04-061-0/+1
* testing: Version bump to 5.4.0Tobias Brunner2016-04-061-1/+1
* testing: Disable leak detective when generating CRLsTobias Brunner2016-04-061-0/+4
* pkcs11: Skip zero-padding of r and s when preparing EC signatureTobias Brunner2016-04-051-3/+9
* chunk: Skip all leading zero bytes in chunk_skip_zero() not just the firstTobias Brunner2016-04-042-14/+18
* string: Gracefully handle NULL in str*eq() macrosTobias Brunner2016-04-042-4/+82
* byteorder: Explicitly check for htoXeXX macrosTobias Brunner2016-03-311-3/+18
* vici: Fix documentation of some dictionary keys of two request messagesCameron McCord2016-03-311-3/+3
* proposal: Use standard integer types for static keywordsTobias Brunner2016-03-311-2/+2
* utils: Remove nonsensical typedefs for standard uint typesTobias Brunner2016-03-311-13/+0
* Use u_int32_t legacy type in blowfish header fileAndreas Steffen2016-03-241-1/+1
* Use standard unsigned integer typesAndreas Steffen2016-03-24584-3430/+3430
* updown: Get value for PLUTO_MARK_{IN,OUT} from CHILD_SAShota Fukumori2016-03-231-2/+2
* connmark: Explicitly include xt_mark.h for older kernelsTobias Brunner2016-03-231-0/+1
* android: Enable 64-bit ABIsTobias Brunner2016-03-231-1/+1
* android: Enable build against API level 21Tobias Brunner2016-03-233-2/+17
* libcharon: Add missing header file to Android.mkTobias Brunner2016-03-231-0/+1
* testing: Updated updown scripts in libipsec scenarios to latest versionTobias Brunner2016-03-2311-0/+341
* ike-sa-manager: Avoid memory leak if IKE_SAs get checked in after flush() was...Tobias Brunner2016-03-231-23/+38
* ha: Delete cache entry inside the locked mutexThomas Egerer2016-03-231-0/+2
* swanctl: Fix documented directory name for remote pubkeysTobias Brunner2016-03-221-1/+1
* Version bump to 5.4.05.4.0Andreas Steffen2016-03-221-1/+1
* kernel-netlink: Fix lookup of next hops for destinations with prefixTobias Brunner2016-03-211-1/+2
* imc-os: Terminate buffer after fread(3) call to make Coverity happyTobias Brunner2016-03-111-1/+1
* imc-os: Correctly check return value of ftell(2)Tobias Brunner2016-03-111-1/+9
* Fix some Doxygen issuesTobias Brunner2016-03-113-9/+9
* Updated NEWS5.4.0rc1Andreas Steffen2016-03-111-0/+8
* man: Updated default proposals in ipsec.conf(5)Tobias Brunner2016-03-111-4/+4
* identification: Make `written` signed to fix error checking when printing rangesTobias Brunner2016-03-111-3/+3
* vici: Don't hold write lock while running or undoing start actionsTobias Brunner2016-03-111-27/+63
* Initialize ts variableAndreas Steffen2016-03-111-1/+1
* forecast: Compare the complete rules when deleting themTobias Brunner2016-03-101-1/+4
* connmark: Don't restore CONNMARK for packets that already have a mark setTobias Brunner2016-03-101-2/+17
* connmark: Compare the complete rules when deleting themTobias Brunner2016-03-101-1/+4
* Merge branch 'subnet-identities'Andreas Steffen2016-03-109-114/+626
|\
| * Support of IP address ranges in traffic selectorsAndreas Steffen2016-03-102-7/+27
| * Updated swanctl/rw-psk-ikev1 scenarioAndreas Steffen2016-03-105-28/+36