aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-235-6/+75
* kernel-netlink: Try to add new inbound SA if update failsThomas Egerer2017-05-231-3/+12
* kernel-pfkey: Update SA addresses if supported by the kernelTobias Brunner2017-05-231-21/+16
* kernel-pfkey: Use new encap flag on Mac OS X when updating SAsTobias Brunner2017-05-231-1/+1
* receiver: Restrict init limit to half-open SAs as responderThomas Egerer2017-05-231-4/+2
* Merge branch 'hw-offload'Tobias Brunner2017-05-2316-172/+229
|\
| * kernel-netlink: Update hardware offload attribute when SAs are updatedTobias Brunner2017-05-231-11/+37
| * kernel-netlink: Base SA update on correct message in multi-message responseTobias Brunner2017-05-231-7/+7
| * vici: Make hardware offload configurableTobias Brunner2017-05-232-0/+15
| * child-sa: Optionally enable hardware offload for CHILD_SAsTobias Brunner2017-05-231-0/+1
| * child-cfg: Add flag to enable hardware offloadTobias Brunner2017-05-231-0/+3
| * child-cfg: Use flags for boolean optionsTobias Brunner2017-05-2312-153/+129
| * kernel-netlink: Enable hardware offloading if configured for an SATobias Brunner2017-05-231-0/+25
| * kernel-ipsec: Add flag to enable hardware offloading for an IPsec SATobias Brunner2017-05-231-0/+2
| * include: Update xfrm.h to include hardware offloading extensionsTobias Brunner2017-05-231-1/+10
|/
* kernel-netlink: Directly handle Netlink messages if thread pool is emptyTobias Brunner2017-05-231-1/+2
* socket-default: Add an option to force the sending interface via IP_PKTINFOMartin Willi2017-05-232-7/+54
* Add an option to announce support for IKE fragmentation but not sending fragm...Tobias Brunner2017-05-236-16/+34
* swanctl: Use returned key ID to track loaded private keysTobias Brunner2017-05-231-13/+6
* vici: Return key ID from load-key commandTobias Brunner2017-05-232-4/+13
* credential-manager: Prefer local over global setsAdrian-Ken Rueegsegger2017-05-231-7/+7
* ikev1: Send NAT-D payloads after HASH payloads in Aggressive Mode requestsTobias Brunner2017-05-191-1/+1
* ike-sa-manager: Improve scalability of IKE_SA count checkingThomas Egerer2017-05-191-19/+10
* tun-device: Use next free TUN device on FreeBSDTobias Brunner2017-05-191-3/+18
* tun-device: TUN devices are not supported on iOSTobias Brunner2017-05-191-1/+10
* attr-sql: Make release of online leases during startup optionalTobias Brunner2017-05-192-8/+16
* charon-nm: Fix typo to actually use random NAT-T portTobias Brunner2017-05-191-1/+1
* af-alg: Fix crypt() definition conflictBaruch Siach2017-05-151-2/+2
* Version bump to 5.3.3dr25.5.3dr2Andreas Steffen2017-05-083-4/+2579
* x509: Evaluate return codes of parsing functionsAndreas Steffen2017-05-084-52/+149
* nm: Explicitly prevent the smartcard PIN from being storedRaphael Geissert2017-05-081-0/+2
* nm: IKE/ESP proposal customization supportDefunct2017-05-082-0/+202
* charon-nm: IKE/ESP proposal customization supportDefunct2017-05-081-5/+59
* Version bump to 5.5.3dr15.5.3dr1Andreas Steffen2017-04-263-3/+9
* configure: Include curve25519 in the pki default plugin listMartin Willi2017-04-261-1/+1
* testing: Created swanctl/rw-eap-aka-sql-rsa scenarioAndreas Steffen2017-04-2613-0/+187
* testing: Created ikev2/rw-eap-aka-sql-rsa scenarioAndreas Steffen2017-04-2615-0/+163
* eap-simaka-sql: Fixed database column from use to usedAndreas Steffen2017-04-261-4/+7
* pki: Reset variable so error handling works properlyTobias Brunner2017-04-191-0/+1
* vici: Fix type error exception in Python bindingsodi792017-04-191-1/+1
* Version bump to 5.5.25.5.2Andreas Steffen2017-03-272-3/+3
* testing: List BLIS certs in swanctl/rw-newhope-bliss scenarioAndreas Steffen2017-03-273-3/+3
* kernel-netlink: Avoid O(n^2) copy operations when concatenating Netlink respo...Jiri Horky2017-03-271-7/+13
* libtls: Replace expired certificates for unit testsTobias Brunner2017-03-241-68/+66
* pki: Actually make the default key type KEY_ANY for --selfTobias Brunner2017-03-241-1/+1
* addrblock: Narrow selectors when rekeying a CHILD_SA as original responderMartin Willi2017-03-241-0/+1
* conf: Document recommended lower limit for SPIsTobias Brunner2017-03-231-0/+4
* travis: aikpub2 was removed, no need to disable it anymoreTobias Brunner2017-03-231-1/+1
* conf: Remove snippet for aikpub2Tobias Brunner2017-03-232-3/+0
* travis: Build Windows-specific pluginsTobias Brunner2017-03-231-1/+7