aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* testing: List BLIS certs in swanctl/rw-newhope-bliss scenarioAndreas Steffen2017-03-273-3/+3
* kernel-netlink: Avoid O(n^2) copy operations when concatenating Netlink respo...Jiri Horky2017-03-271-7/+13
* libtls: Replace expired certificates for unit testsTobias Brunner2017-03-241-68/+66
* pki: Actually make the default key type KEY_ANY for --selfTobias Brunner2017-03-241-1/+1
* addrblock: Narrow selectors when rekeying a CHILD_SA as original responderMartin Willi2017-03-241-0/+1
* conf: Document recommended lower limit for SPIsTobias Brunner2017-03-231-0/+4
* travis: aikpub2 was removed, no need to disable it anymoreTobias Brunner2017-03-231-1/+1
* conf: Remove snippet for aikpub2Tobias Brunner2017-03-232-3/+0
* travis: Build Windows-specific pluginsTobias Brunner2017-03-231-1/+7
* kernel-wfp: Don't redefine IPPROTO_IP* if already definedTobias Brunner2017-03-231-0/+4
* pki: Cast length derived from pointer arithmetic to intTobias Brunner2017-03-231-1/+1
* vici: Don't fall back to uninstalling traps if a matching shunt was foundTobias Brunner2017-03-231-3/+7
* configure: Fix test for libunwindTobias Brunner2017-03-231-1/+1
* Fixed some typos, courtesy of codespellTobias Brunner2017-03-238-9/+9
* swanctl: Reformulate IKEv1 selector restriction, describe problems with TS na...Noel Kuntze2017-03-231-3/+10
* swanctl: Mention including files when referring to strongswan.conf(5)Tobias Brunner2017-03-231-1/+2
* man: Describe the tunneling of several subnets with IKEv1 in more detailNoel Kuntze2017-03-231-1/+3
* man: Add note about modeconfig having to matchNoel Kuntze2017-03-231-0/+1
* Version bump to 5.2.2rc15.5.2rc1Andreas Steffen2017-03-212-3/+3
* testing: Updated OCSP certificate for carolAndreas Steffen2017-03-2113-448/+200
* Allow x25519 as an alias of the curve25519 KE algorithmAndreas Steffen2017-03-2084-171/+172
* Reference Edwards-curve signature RFCsAndreas Steffen2017-03-203-17/+19
* The tpm plugin offers random number generationAndreas Steffen2017-03-209-3/+211
* vici: Document how we pronounce the vici protocol and pluginMartin Willi2017-03-201-3/+3
* swanctl: Describe what happens when a FQDN is specified in local|remote_addrsTobias Brunner2017-03-201-0/+6
* man: Describe what happens when a FQDN is specified in left or rightNoel Kuntze2017-03-201-0/+5
* ikev1: First do PSK lookups based on identities then fallback to IPsTobias Brunner2017-03-201-36/+34
* testing: Fix URL for kernel sourcesTobias Brunner2017-03-201-1/+1
* ike-sa-manager: Remove superfluous assignmentThomas Egerer2017-03-161-4/+0
* ike: Log remote IP when deleting half-open IKE_SAsTobias Brunner2017-03-151-1/+2
* coverage: Exclude test suites and /usr from coverage reportTobias Brunner2017-03-151-1/+1
* travis: Create coverage report via codecov.ioTobias Brunner2017-03-153-3/+17
* Version bump to 5.5.2dr75.5.2dr7Andreas Steffen2017-03-062-2/+2
* aikpub2: Removed aikpub2 toolAndreas Steffen2017-03-065-335/+2
* pki: Add key object handle of smartcard or TPM private key as an argument to ...Andreas Steffen2017-03-062-5/+25
* utils: chunk_from_hex() skips optional 0x prefixAndreas Steffen2017-03-062-11/+18
* pki: Edited keyid parameter use in various pki man pages and usage outputsAndreas Steffen2017-03-0612-19/+34
* quick-mode: Correctly prepare NAT-OA payloads as responderTobias Brunner2017-03-061-8/+13
* Version bump to 5.5.2dr65.5.2dr6Andreas Steffen2017-03-033-3/+5
* Add keyid of smartcard or TPM private key as an argument to pki --reqAndreas Steffen2017-03-021-2/+15
* testing: load-testconfig script loads config from source dirTobias Brunner2017-03-022-67/+109
* libipsec: Enforce a minimum of 256 for SPIsTobias Brunner2017-03-021-3/+4
* libipsec: Fix min/max SPITobias Brunner2017-03-021-2/+2
* controller: Don't listen for CHILD_SA state changes when terminating IKE_SAsTobias Brunner2017-03-021-1/+0
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-025-8/+46
* settings: Add support for hex integers (0x prefix) via get_int()Tobias Brunner2017-03-021-1/+6
* libipsec: Log a packet's ports and protocol in case of a policy mismatchTobias Brunner2017-03-021-5/+7
* host: Don't log port if it is zeroTobias Brunner2017-03-022-6/+6
* libipsec: Match IPsec policies against ports of processed packetsTobias Brunner2017-03-021-1/+21
* NEWS: Mention the new addrblock featuresMartin Willi2017-03-021-0/+6