aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins
Commit message (Expand)AuthorAgeFilesLines
* Use child_updown hook in updown plugin, fixes doubled invocation of down scriptMartin Willi2010-02-031-47/+17
* Some whitespace and code cleanups concerning the mediation extension.Tobias Brunner2010-02-021-4/+1
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for CH...Martin Willi2010-01-271-1/+2
* Made inactivity_timeout a per CHILD_SA config optionMartin Willi2010-01-276-7/+7
* Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentationMartin Willi2010-01-193-9/+22
* Support TLS client authentication Extended Key Usage in x509 generationMartin Willi2010-01-141-2/+3
* EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacksMartin Willi2010-01-071-1/+1
* make error message about missing MD4 hasher more explicitAndreas Steffen2009-12-301-1/+1
* Adapted the load_tester kernel-interface to the changes introduced in 6ec949e02.Tobias Brunner2009-12-231-2/+3
* Whitespace cleanup.Tobias Brunner2009-12-232-33/+33
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-2311-40/+52
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-2317-17/+17
* Moved mutex.c to a separate folder in order to cleanly wrap other threading p...Tobias Brunner2009-12-2317-17/+17
* verify RFC3779 IP address blocks along X.509 certificate trust chainAndreas Steffen2009-12-231-8/+33
* fixed updown plugin for mixed IPv4/IPv6 tunnelsAndreas Steffen2009-12-171-2/+8
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-173-10/+24
* provide attributes from SQL databaseAndreas Steffen2009-12-162-0/+12
* Install v6 routes via outgoing interface for nowMartin Willi2009-12-141-18/+7
* some code optimizationsAndreas Steffen2009-12-091-34/+37
* Support "_" and "-" variants of NetworkManager pkg-config packagesMartin Willi2009-12-081-1/+4
* Remove generated config.h.in from source treeMartin Willi2009-12-082-116/+1
* The attribute manager was moved from daemon_t to libstrongswan.Tobias Brunner2009-12-071-4/+4
* Do not install invalid 0.0.0.0 DNS serversMartin Willi2009-12-011-9/+14
* Verify EAP-SIM/AKA AT_MAC before processing any attributesMartin Willi2009-11-304-36/+24
* SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the re...Martin Willi2009-11-304-6/+4
* Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ...Martin Willi2009-11-261-3/+11
* Use full algorithm name for SHA384/512 HMACsMartin Willi2009-11-261-2/+2
* Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keywordMartin Willi2009-11-261-1/+1
* Install SHA256_128 auth algorithm with specified 128 bit truncationMartin Willi2009-11-261-1/+25
* Added support for IPv6 source route installationMartin Willi2009-11-262-17/+44
* put identities in single quotesAndreas Steffen2009-11-251-2/+2
* Use status_t return value for get_quintuplet() dummy implementationsMartin Willi2009-11-203-3/+3
* attr plugin supports any custom attribute type having a v4/v6 IP under the ch...Martin Willi2009-11-171-4/+82
* Give plugins more control of which configuration attributes to request, and p...Martin Willi2009-11-174-5/+108
* Build libsimaka with libtool, as we require a PIC-enabled versionMartin Willi2009-11-122-2/+2
* Support variable RES length in AKA quintupletsMartin Willi2009-11-1212-22/+28
* Ported pseudonym/reauth functionality to EAP-AKAMartin Willi2009-11-124-66/+564
* Passing other as NULL should not always result in a match if me matchesMartin Willi2009-11-121-2/+2
* Use new identity constructor in EAP-SIMMartin Willi2009-11-122-42/+18
* Moved card/provider enumeration to SIM manager, providing wrapped functions f...Martin Willi2009-11-124-266/+24
* Added option to disable identity requests completely (old behavior)Martin Willi2009-11-122-13/+17
* Fixed replacing existing reauthentication dataMartin Willi2009-11-121-6/+6
* Initiate full authentication if reauthentication identity is unknownMartin Willi2009-11-121-1/+6
* Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, u...Martin Willi2009-11-1216-375/+1199
* eap-sim-file plugin supports volatile in-memory storage of fast reauthenticat...Martin Willi2009-11-122-25/+199
* Initial support for fast reauthentication in EAP-SIMMartin Willi2009-11-122-31/+422
* EAP-SIM/AKA crypto helper supports key derivation for fast reauthenticationMartin Willi2009-11-122-4/+8
* Fallback to permanent identity request if pseudonym mapping failedMartin Willi2009-11-122-63/+119
* Query triplet/quintuplet functions with permanent identity only,Martin Willi2009-11-124-79/+61
* eap-sim-file plugin can store pseudonym information volatile in memoryMartin Willi2009-11-124-5/+225