aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config
Commit message (Expand)AuthorAgeFilesLines
...
* added host match prio to debugging outputMartin Willi2008-07-011-7/+8
* peer_cfg lookup takes peer addresses into accountMartin Willi2008-07-012-81/+101
* show authentication method in ipsec statusallAndreas Steffen2008-06-301-3/+3
* added %P printf handler for poposal_tMartin Willi2008-06-124-65/+171
* make config_auth_method_t backward compatible to existing sql templatesAndreas Steffen2008-06-101-3/+3
* ECDSA with OpenSSLTobias Brunner2008-06-102-12/+42
* DNS resolving of ike_cfg hosts dynamically on demandMartin Willi2008-06-063-29/+42
* log received DH groups and PRFs if no common proposal is foundAndreas Steffen2008-05-221-3/+23
* added the ECP groups from RFC 5114Tobias Brunner2008-05-221-0/+8
* added ECDH with OpenSSL (see RFC 4753)Tobias Brunner2008-05-221-0/+12
* list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosenAndreas Steffen2008-05-201-2/+23
* fixed a bug introduced in [3973]Tobias Brunner2008-05-191-2/+4
* ccm and gcm icv_sizes are accepted both in bits and octetsAndreas Steffen2008-05-171-7/+13
* Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) i...Tobias Brunner2008-05-161-9/+114
* IPComp for IKEv2Tobias Brunner2008-05-082-3/+56
* renamed PRF_AES128_CBC to PRF_AES128_XCBCMartin Willi2008-05-081-2/+2
* returning reference pointer on get_ref()Martin Willi2008-05-066-29/+19
* implemented XCBC algorithms (signer, prf) for IKE on top of a crypterMartin Willi2008-04-301-1/+3
* fixed peer config equality checkMartin Willi2008-04-181-1/+2
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-142-2/+44
* added close_action as a seperate config option to dpd_actionMartin Willi2008-04-142-13/+36
* using dpd actions to enforce connection stateMartin Willi2008-04-114-75/+66
* implementation of an CFG attribute framework, currently supporting virtual IPsMartin Willi2008-04-095-52/+316
* fixed two other memory leaksTobias Brunner2008-04-032-6/+2
* mediation extension adapted to the naming convention of the current version o...Tobias Brunner2008-03-262-31/+31
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-269-147/+349
* fixed peer_cfg lookup when omitting IDrMartin Willi2008-03-191-0/+5
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-1321-3218/+577
* implemented Expanded EAP types to support vendor specific methodsMartin Willi2007-12-133-4/+19
* implemented RFC4478 (repeated authentication)Martin Willi2007-11-203-63/+90
* search : delimiter in ipsec.secrets entries from the rearAndreas Steffen2007-11-161-1/+3
* fixed sqlite_backend compilation to respect changes from [3238]Martin Willi2007-10-041-1/+1
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-032-2/+104
* fixed sqlite database pathMartin Willi2007-10-021-2/+2
* improved debugging code for traffic selector processingMartin Willi2007-10-021-7/+15
* moved force_encap to ike_config, enables responder to enforce udp encapsulationMartin Willi2007-10-015-30/+32
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-013-4/+29
* return argument has type size_tAndreas Steffen2007-09-181-1/+1
* prototype implemementation of an sqlite configuration backendMartin Willi2007-09-186-0/+441
* peer_cfg now knows about group membershipsAndreas Steffen2007-09-133-11/+49
* check hash algorithms used in signaturesAndreas Steffen2007-09-111-1/+1
* removed rsa_private_key clone() functionAndreas Steffen2007-09-111-1/+1
* replaced get_rsa_private_key() by rsa_signature() in order restrict the distr...Andreas Steffen2007-09-111-28/+44
* overwrite storage used for shared secrets with pseudo-random bytes before rel...Andreas Steffen2007-09-101-27/+26
* added mobike=yes|no connection optionMartin Willi2007-08-292-3/+27
* append new attribute certs at the endAndreas Steffen2007-08-141-1/+7
* adding attribute certficates to a chained listAndreas Steffen2007-08-141-3/+25
* has_rsa_private_key() must also be protected by keys_mutexAndreas Steffen2007-08-101-1/+4
* support of ipsec rereadsecrets for strokeAndreas Steffen2007-08-101-9/+54
* bug fix in linked_list deletion - instead of acerts destroyed certs twice4.1.5Andreas Steffen2007-08-081-1/+1