aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config
Commit message (Expand)AuthorAgeFilesLines
* creating default IKE proposals dynamically using algorithm enumeration APIMartin Willi2008-08-281-22/+107
* ported parts of two-sim branchMartin Willi2008-08-222-91/+1
* display protoport in dynamic/32 traffic selectorsAndreas Steffen2008-07-211-11/+12
* ipsec statusall displays dpd optionsAndreas Steffen2008-07-021-3/+3
* logging peer addresses in peer_cfg lookupMartin Willi2008-07-011-1/+2
* added host match prio to debugging outputMartin Willi2008-07-011-7/+8
* peer_cfg lookup takes peer addresses into accountMartin Willi2008-07-012-81/+101
* show authentication method in ipsec statusallAndreas Steffen2008-06-301-3/+3
* added %P printf handler for poposal_tMartin Willi2008-06-124-65/+171
* make config_auth_method_t backward compatible to existing sql templatesAndreas Steffen2008-06-101-3/+3
* ECDSA with OpenSSLTobias Brunner2008-06-102-12/+42
* DNS resolving of ike_cfg hosts dynamically on demandMartin Willi2008-06-063-29/+42
* log received DH groups and PRFs if no common proposal is foundAndreas Steffen2008-05-221-3/+23
* added the ECP groups from RFC 5114Tobias Brunner2008-05-221-0/+8
* added ECDH with OpenSSL (see RFC 4753)Tobias Brunner2008-05-221-0/+12
* list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosenAndreas Steffen2008-05-201-2/+23
* fixed a bug introduced in [3973]Tobias Brunner2008-05-191-2/+4
* ccm and gcm icv_sizes are accepted both in bits and octetsAndreas Steffen2008-05-171-7/+13
* Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) i...Tobias Brunner2008-05-161-9/+114
* IPComp for IKEv2Tobias Brunner2008-05-082-3/+56
* renamed PRF_AES128_CBC to PRF_AES128_XCBCMartin Willi2008-05-081-2/+2
* returning reference pointer on get_ref()Martin Willi2008-05-066-29/+19
* implemented XCBC algorithms (signer, prf) for IKE on top of a crypterMartin Willi2008-04-301-1/+3
* fixed peer config equality checkMartin Willi2008-04-181-1/+2
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-142-2/+44
* added close_action as a seperate config option to dpd_actionMartin Willi2008-04-142-13/+36
* using dpd actions to enforce connection stateMartin Willi2008-04-114-75/+66
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-095-52/+316
* fixed two other memory leaksTobias Brunner2008-04-032-6/+2
* mediation extension adapted to the naming convention of the current version o...Tobias Brunner2008-03-262-31/+31
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-269-147/+349
* fixed peer_cfg lookup when omitting IDrMartin Willi2008-03-191-0/+5
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-1321-3218/+577
* implemented Expanded EAP types to support vendor specific methodsMartin Willi2007-12-133-4/+19
* implemented RFC4478 (repeated authentication)Martin Willi2007-11-203-63/+90
* search : delimiter in ipsec.secrets entries from the rearAndreas Steffen2007-11-161-1/+3
* fixed sqlite_backend compilation to respect changes from [3238]Martin Willi2007-10-041-1/+1
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-032-2/+104
* fixed sqlite database pathMartin Willi2007-10-021-2/+2
* improved debugging code for traffic selector processingMartin Willi2007-10-021-7/+15
* moved force_encap to ike_config, enables responder to enforce udp encapsulationMartin Willi2007-10-015-30/+32
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-013-4/+29
* return argument has type size_tAndreas Steffen2007-09-181-1/+1
* prototype implemementation of an sqlite configuration backendMartin Willi2007-09-186-0/+441
* peer_cfg now knows about group membershipsAndreas Steffen2007-09-133-11/+49
* check hash algorithms used in signaturesAndreas Steffen2007-09-111-1/+1
* removed rsa_private_key clone() functionAndreas Steffen2007-09-111-1/+1
* replaced get_rsa_private_key() by rsa_signature() in order restrict the distr...Andreas Steffen2007-09-111-28/+44
* overwrite storage used for shared secrets with pseudo-random bytes before rel...Andreas Steffen2007-09-101-27/+26
* added mobike=yes|no connection optionMartin Willi2007-08-292-3/+27