aboutsummaryrefslogtreecommitdiffstats
path: root/conf
Commit message (Expand)AuthorAgeFilesLines
* eap-aka-3gpp: Add plugin that implements 3GPP MILENAGE algorithm in softwareTobias Brunner2017-07-054-2/+9
* child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAsTobias Brunner2017-05-231-0/+10
* kernel-netlink: Use total retransmit timeout as acquire timeoutTobias Brunner2017-05-231-3/+3
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-232-1/+18
* socket-default: Add an option to force the sending interface via IP_PKTINFOMartin Willi2017-05-231-0/+6
* attr-sql: Make release of online leases during startup optionalTobias Brunner2017-05-191-0/+4
* conf: Document recommended lower limit for SPIsTobias Brunner2017-03-231-0/+4
* conf: Remove snippet for aikpub2Tobias Brunner2017-03-232-3/+0
* The tpm plugin offers random number generationAndreas Steffen2017-03-202-0/+3
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-021-0/+6
* addrblock: Support an optional non-strict mode accepting certs without addrblockMartin Willi2017-03-022-0/+9
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-171-0/+10
* revocation: More accurately describe the flags to disable OCSP/CRL validationTobias Brunner2017-02-151-2/+2
* bypass-lan: Allow ignoring or only considering subnets of specific interfacesTobias Brunner2017-02-082-0/+9
* pkcs11: Fix documentation of load_certs optionTobias Brunner2017-02-061-2/+8
* kernel-netlink: Allow change of Netlink socket receive buffer sizeThomas Egerer2017-01-251-0/+17
* revocation: OCSP and/or CRL fetching can be disabledAndreas Steffen2016-12-302-0/+8
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-111-0/+6
* nm: Make global CA directory configurableTobias Brunner2016-10-042-0/+4
* ike: Set default IKE fragment size to 1280Tobias Brunner2016-10-041-4/+5
* kernel-netlink: Support configuring XFRM policy hashing thresholdsTobias Brunner2016-09-301-0/+29
* conf: Extend description of charon.plugins.kernel-netlink.xfrm_acq_expiresTobias Brunner2016-08-291-5/+9
* conf: aikpub2.opt added to Makefile.amAndreas Steffen2016-08-251-0/+1
* libtpmtss: Implemented TSS2 quote() methodAndreas Steffen2016-06-261-0/+3
* libimcv: migrate pts to tpm_tssAndreas Steffen2016-06-221-0/+3
* Created libtpmtss library handling access to v1.2 and v2.0 TPMsAndreas Steffen2016-06-222-2/+2
* aikpub2: Convert TSS 2.0 AIK public key blob into PKCS#1 formatAndreas Steffen2016-06-221-0/+2
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-171-0/+5
* p-cscf: Make sending requests configurable and disable it by defaultTobias Brunner2016-03-102-0/+12
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-041-0/+3
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-0/+8
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-1/+1
* conf: Add support for escaping dots in section/option namesTobias Brunner2015-12-041-15/+27
* eap-radius: Add ability to configure RADIUS retransmission behaviorThom Troy2015-11-171-1/+12
* file-logger: Add option to print milliseconds within the current second after...Tobias Brunner2015-11-091-0/+4
* libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()Tobias Brunner2015-11-091-2/+2
* plugin-loader: Optionally use RTLD_NOW with dlopen()Tobias Brunner2015-11-091-0/+4
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-0/+4
* conf: Add documentation for new osx-attr optionTobias Brunner2015-08-282-0/+4
* conf: Fix declaration of default values for imc-hcd optionsTobias Brunner2015-08-271-5/+5
* starter: Remove documentation for starter.load optionTobias Brunner2015-08-271-3/+0
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-0/+5
* Added imc-hcd attributes to strongswan.confAndreas Steffen2015-08-183-0/+75
* conf: Clarify resolution for two time settingsTobias Brunner2015-08-102-4/+4
* eap-radius: Change trigger for Accounting Start messages for IKEv1Tobias Brunner2015-08-061-1/+1
* kernel-netlink: Use PAGE_SIZE as default size for the netlink receive bufferTobias Brunner2015-08-041-1/+1
* kernel-netlink: Make buffer size for received Netlink messages configurableTobias Brunner2015-05-211-0/+3
* imv_policy_manager: Added capability to execute an allow or block shell comma...Andreas Steffen2015-04-262-0/+14
* Added PB-TNC test options to strongswan.conf man pageAndreas Steffen2015-03-271-0/+6
* Fixed strongswan.conf man page entry of imc-attestationAndreas Steffen2015-03-272-18/+18