aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* Version bump to 5.5.2dr55.5.2dr5Andreas Steffen2017-02-233-4/+2528
* Use of TPM 2.0 private keys for signatures via tpm pluginAndreas Steffen2017-02-2210-9/+468
* Implement signatures with private keys bound to TPM 2.0Andreas Steffen2017-02-213-8/+215
* android: New release after fixing potential ANR issueTobias Brunner2017-02-201-2/+2
* android: Send network change events from a separate thread via JNITobias Brunner2017-02-172-4/+68
* ikev1: Respond to DPDs for rekeyed IKE_SAsTobias Brunner2017-02-172-0/+10
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-172-1/+33
* ikev2: Ignore roam events without MOBIKE but static local addressTobias Brunner2017-02-171-0/+10
* ike-cfg: Add helper function to determine if a given IP address was configuredTobias Brunner2017-02-172-2/+46
* Merge branch 'vici-updates'Tobias Brunner2017-02-1639-327/+1968
|\
| * NEWS: VICI updatesTobias Brunner2017-02-161-1/+15
| * vici: Only log messages if there actually is a listenerTobias Brunner2017-02-161-0/+7
| * vici: Let has_event_listeners() actually check if clients are registeredTobias Brunner2017-02-161-2/+4
| * vici: Add support for mediation extensionTobias Brunner2017-02-162-1/+109
| * peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-166-68/+95
| * vici: Include uniqueness policy in list-connsTobias Brunner2017-02-161-0/+2
| * swanctl: Add --rekey commandTobias Brunner2017-02-164-1/+130
| * vici: Add command to initiate SA rekeyingTobias Brunner2017-02-162-2/+118
| * vici: Use unique names for CHILD_SAs in the list-sas commandTobias Brunner2017-02-163-4/+10
| * swanctl: Allow specifying pubkeys directly via 0x/0s prefixTobias Brunner2017-02-161-28/+38
| * vici: Add support to load CA certificates from tokens and paths in authority ...Tobias Brunner2017-02-163-21/+130
| * vici: Add support to load certificates from file pathsTobias Brunner2017-02-162-13/+68
| * vici: Add support to load certificates from tokensTobias Brunner2017-02-162-12/+163
| * swanctl: Add `token` secrets for keys on tokens/smartcardsTobias Brunner2017-02-162-0/+106
| * vici: Add command to load a private key from a tokenTobias Brunner2017-02-162-3/+117
| * vici: List namespace/peer-cfg name with policies and allow filteringTobias Brunner2017-02-162-13/+33
| * swanctl: Pass optional connection name to --initiate/install/uninstallTobias Brunner2017-02-162-5/+22
| * vici: Explicitly use peer name when uninstalling trap and shunt policiesTobias Brunner2017-02-163-10/+40
| * stroke: Use peer name as namespace for shunt policiesTobias Brunner2017-02-162-3/+20
| * shunt-manager: Add an optional namespace for each shuntTobias Brunner2017-02-1610-41/+90
| * vici: Add support for NT Hash secretsTobias Brunner2017-02-163-1/+29
| * vici: Add support for IPv6 Transport Proxy ModeTobias Brunner2017-02-163-17/+44
| * vici: Add support for certificate policiesTobias Brunner2017-02-163-0/+24
| * vici: Add missing dscp setting for IKE_SAsTobias Brunner2017-02-162-5/+47
| * swanctl: Automatically unload removed shared keysTobias Brunner2017-02-161-15/+49
| * vici: Add possibility to remove shared keys by a unique identifierTobias Brunner2017-02-162-5/+76
| * mem-cred: Add methods to add/remove shared keys with unique identifiersTobias Brunner2017-02-162-6/+107
| * swanctl: Automatically unload removed private keysTobias Brunner2017-02-161-76/+175
| * vici: Add commands to enumerate and remove private keysTobias Brunner2017-02-162-2/+75
| * mem-cred: Add method to remove a private key with a specific fingerprintTobias Brunner2017-02-162-2/+38
| * swanctl: Add possibility to query a specific pool by nameTobias Brunner2017-02-161-3/+11
| * vici: Update get_pools() in Python and Ruby bindingsTobias Brunner2017-02-162-4/+6
| * vici: Add option to query a specific poolTobias Brunner2017-02-162-3/+10
|/
* bypass-lan: Don't use interfaces in policiesTobias Brunner2017-02-161-7/+6
* testing: Fix ALLOWED_HOSTS in strongTNC settings.iniTobias Brunner2017-02-162-2/+2
* testing: Fix swanctl/ocsp-disabled scenario after changing the log messagesTobias Brunner2017-02-161-2/+2
* revocation: More accurately describe the flags to disable OCSP/CRL validationTobias Brunner2017-02-152-10/+9
* child-sa: Do not install mark on inbound kernel SAEyal Birger2017-02-141-4/+1
* unit-tests: Allow default test timeout to be configured via compile optionThomas Egerer2017-02-141-0/+2
* tkm: Fix get_auth_octets() signatureTobias Brunner2017-02-131-1/+2