aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * vici: List namespace/peer-cfg name with policies and allow filteringTobias Brunner2017-02-162-13/+33
| * swanctl: Pass optional connection name to --initiate/install/uninstallTobias Brunner2017-02-162-5/+22
| * vici: Explicitly use peer name when uninstalling trap and shunt policiesTobias Brunner2017-02-163-10/+40
| * stroke: Use peer name as namespace for shunt policiesTobias Brunner2017-02-162-3/+20
| * shunt-manager: Add an optional namespace for each shuntTobias Brunner2017-02-1610-41/+90
| * vici: Add support for NT Hash secretsTobias Brunner2017-02-163-1/+29
| * vici: Add support for IPv6 Transport Proxy ModeTobias Brunner2017-02-163-17/+44
| * vici: Add support for certificate policiesTobias Brunner2017-02-163-0/+24
| * vici: Add missing dscp setting for IKE_SAsTobias Brunner2017-02-162-5/+47
| * swanctl: Automatically unload removed shared keysTobias Brunner2017-02-161-15/+49
| * vici: Add possibility to remove shared keys by a unique identifierTobias Brunner2017-02-162-5/+76
| * mem-cred: Add methods to add/remove shared keys with unique identifiersTobias Brunner2017-02-162-6/+107
| * swanctl: Automatically unload removed private keysTobias Brunner2017-02-161-76/+175
| * vici: Add commands to enumerate and remove private keysTobias Brunner2017-02-162-2/+75
| * mem-cred: Add method to remove a private key with a specific fingerprintTobias Brunner2017-02-162-2/+38
| * swanctl: Add possibility to query a specific pool by nameTobias Brunner2017-02-161-3/+11
| * vici: Update get_pools() in Python and Ruby bindingsTobias Brunner2017-02-162-4/+6
| * vici: Add option to query a specific poolTobias Brunner2017-02-162-3/+10
|/
* bypass-lan: Don't use interfaces in policiesTobias Brunner2017-02-161-7/+6
* testing: Fix ALLOWED_HOSTS in strongTNC settings.iniTobias Brunner2017-02-162-2/+2
* testing: Fix swanctl/ocsp-disabled scenario after changing the log messagesTobias Brunner2017-02-161-2/+2
* revocation: More accurately describe the flags to disable OCSP/CRL validationTobias Brunner2017-02-152-10/+9
* child-sa: Do not install mark on inbound kernel SAEyal Birger2017-02-141-4/+1
* unit-tests: Allow default test timeout to be configured via compile optionThomas Egerer2017-02-141-0/+2
* tkm: Fix get_auth_octets() signatureTobias Brunner2017-02-131-1/+2
* kernel-netlink: Use RTA_SRC to specify route source in kernel-based lookupsMartin Willi2017-02-131-1/+8
* kernel-netlink: Use kernel-based route lookup if we do not install routesMartin Willi2017-02-131-1/+11
* swanctl: List CHILD_SA marks, if setMartin Willi2017-02-131-0/+18
* vici: Include the Netfilter marks in listed CHILD_SAsMartin Willi2017-02-132-0/+19
* vici: Explicitly set the Python encoding typeMartin Willi2017-02-131-4/+4
* Merge branch 'mid-sync'Tobias Brunner2017-02-0815-7/+1016
|\
| * unit-tests: Add test cases for MID sync exchangesTobias Brunner2017-02-083-0/+537
| * ikev2: Ignore IKEV2_MESSAGE_ID_SYNC notifies if extension is disabledTobias Brunner2017-02-082-10/+37
| * ikev2: Don't increase expected MID after handling MID sync messageTobias Brunner2017-02-082-3/+4
| * ikev2: Don't cache response to MID sync requestTobias Brunner2017-02-081-1/+11
| * ikev2: Accept INFORMATIONAL messages with MID 0 if used to sync MIDsTobias Brunner2017-02-081-3/+42
| * ikev2: Negotiate support for IKE message ID synchronisation during IKE_AUTHTobias Brunner2017-02-082-0/+12
| * ikev2: Add task to handle IKEV2_MESSAGE_ID_SYNC notifies as responderTobias Brunner2017-02-087-0/+343
| * ike: Publish getter for the current message ID on IKE_SATobias Brunner2017-02-082-1/+19
| * ike: Add getter for the current message ID to task managerTobias Brunner2017-02-083-1/+23
|/
* Merge branch 'bypass-lan'Tobias Brunner2017-02-0814-0/+907
|\
| * kernel-pfroute: Implement enumeration of local subnetsTobias Brunner2017-02-081-0/+194
| * bypass-lan: Allow ignoring or only considering subnets of specific interfacesTobias Brunner2017-02-085-6/+102
| * bypass-lan: Configure interface on bypass policyTobias Brunner2017-02-081-1/+6
| * kernel-netlink: Return interface name in local subnet enumeratorTobias Brunner2017-02-081-5/+15
| * kernel-interface: Add interface name to local subnet enumeratorTobias Brunner2017-02-084-4/+10
| * bypass-lan: Add plugin that installs bypass policies for locally attached sub...Tobias Brunner2017-02-087-0/+437
| * kernel-netlink: Implement enumerator for local subnetsTobias Brunner2017-02-081-0/+130
| * kernel-interface: Add method to enumerate locally attached subnetsTobias Brunner2017-02-083-0/+29
|/
* kernel-pfkey: Use the same priority range for trap and regular policiesTobias Brunner2017-02-081-15/+15
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-11 13:08:48 +0000