tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-0/+1
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-0/+1
\|
*	nm: Fix NULL-pointer dereference when handling TUN device failure	Tobias Brunner	2014-04-09	1	-1/+0
\|
*	charon-nm: No additional secrets are required once a password has been entered	Tobias Brunner	2014-03-18	1	-0/+4
\| \| \| \| \| \| \|	Recent versions of NM will call need_secrets() as long as it returns TRUE, but then fail as the number of calls is limited by an assert. Fixes #547.
*	nm: Handle PSK option in NM backend	Tobias Brunner	2013-11-27	1	-4/+12
\|
*	ike: support multiple addresses, ranges and subnets in IKE address config	Martin Willi	2013-09-04	1	-2/+2
\| \| \| \| \| \| \|	Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
*	peer-cfg: add a pull/push mode option to use with mode config	Martin Willi	2013-09-04	1	-1/+1
\|
*	charon-nm: Prevent NM from changing the default route	Tobias Brunner	2013-03-19	1	-0/+8
\| \| \| \| \| \|	This is not required as we install our own (narrow) route(s) in our own routing table. This should allow split tunneling if configured on the gateway.
*	charon-nm: Use VIP (if any) as local address	Tobias Brunner	2013-03-19	1	-1/+10
\| \| \| \|	NM will install this address on the provided device.
*	charon-nm: Pass a dummy TUN device to NetworkManager	Tobias Brunner	2013-03-19	1	-5/+37
\| \| \| \| \| \|	NetworkManager modifies the addresses etc. on this interface so using "lo" is not optimal. With the dummy interface NM is free to do its thing.
*	Add a DSCP configuration value to IKE configs	Martin Willi	2013-02-06	1	-2/+1
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-1/+2
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	1	-1/+1
\|
*	Moved host_t and host_resolver_t to a new networking subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	1	-1/+1
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	1	-1/+1
\|
*	Make streq() and strcaseeq() static inline functions so they can be used as ↵	Tobias Brunner	2012-09-21	1	-1/+1
\| \| \| \|	callbacks
*	Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend	Tobias Brunner	2012-09-18	1	-1/+3
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-1/+1
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-1/+4
\|
*	Replaced usages of CHARON_*_PORT with calls to get_port().	Tobias Brunner	2012-08-08	1	-1/+2
\|
*	Make the UDP ports charon listens for packets on (and uses as source ports) ↵	Tobias Brunner	2012-08-08	1	-1/+1
\| \| \| \|	configurable.
*	Pass "lo" as faked tundev to NM, as it now needs a valid interface since 0.9	Martin Willi	2012-06-29	1	-3/+4
\|
*	implemented the right\|leftallowany feature	Andreas Steffen	2012-06-08	1	-2/+2
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+2
\|
*	Integrate nm plugin directly in charon-nm.	Tobias Brunner	2012-05-03	1	-0/+712