aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins
Commit message (Collapse)AuthorAgeFilesLines
* Use child_updown hook in updown plugin, fixes doubled invocation of down scriptMartin Willi2010-02-031-47/+17
|
* Some whitespace and code cleanups concerning the mediation extension.Tobias Brunner2010-02-021-4/+1
|
* Added a ipsec.conf "inactivity" option to configure inactivity timeout for ↵Martin Willi2010-01-271-1/+2
| | | | CHILD_SAs
* Made inactivity_timeout a per CHILD_SA config optionMartin Willi2010-01-276-7/+7
|
* Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentationMartin Willi2010-01-193-9/+22
|
* Support TLS client authentication Extended Key Usage in x509 generationMartin Willi2010-01-141-2/+3
|
* EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacksMartin Willi2010-01-071-1/+1
|
* make error message about missing MD4 hasher more explicitAndreas Steffen2009-12-301-1/+1
|
* Adapted the load_tester kernel-interface to the changes introduced in 6ec949e02.Tobias Brunner2009-12-231-2/+3
|
* Whitespace cleanup.Tobias Brunner2009-12-232-33/+33
|
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-2311-40/+52
|
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-2317-17/+17
|
* Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵Tobias Brunner2009-12-2317-17/+17
| | | | primitives (and utils/mutex.h is now threading.h).
* verify RFC3779 IP address blocks along X.509 certificate trust chainAndreas Steffen2009-12-231-8/+33
|
* fixed updown plugin for mixed IPv4/IPv6 tunnelsAndreas Steffen2009-12-171-2/+8
|
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-173-10/+24
|
* provide attributes from SQL databaseAndreas Steffen2009-12-162-0/+12
|
* Install v6 routes via outgoing interface for nowMartin Willi2009-12-141-18/+7
|
* some code optimizationsAndreas Steffen2009-12-091-34/+37
|
* Support "_" and "-" variants of NetworkManager pkg-config packagesMartin Willi2009-12-081-1/+4
|
* Remove generated config.h.in from source treeMartin Willi2009-12-082-116/+1
|
* The attribute manager was moved from daemon_t to libstrongswan.Tobias Brunner2009-12-071-4/+4
|
* Do not install invalid 0.0.0.0 DNS serversMartin Willi2009-12-011-9/+14
|
* Verify EAP-SIM/AKA AT_MAC before processing any attributesMartin Willi2009-11-304-36/+24
|
* SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the ↵Martin Willi2009-11-304-6/+4
| | | | response
* Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ↵Martin Willi2009-11-261-3/+11
| | | | header
* Use full algorithm name for SHA384/512 HMACsMartin Willi2009-11-261-2/+2
|
* Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keywordMartin Willi2009-11-261-1/+1
|
* Install SHA256_128 auth algorithm with specified 128 bit truncationMartin Willi2009-11-261-1/+25
|
* Added support for IPv6 source route installationMartin Willi2009-11-262-17/+44
|
* put identities in single quotesAndreas Steffen2009-11-251-2/+2
|
* Use status_t return value for get_quintuplet() dummy implementationsMartin Willi2009-11-203-3/+3
|
* attr plugin supports any custom attribute type having a v4/v6 IP under the ↵Martin Willi2009-11-171-4/+82
| | | | charon.plugins.attr namespace
* Give plugins more control of which configuration attributes to request, and ↵Martin Willi2009-11-174-5/+108
| | | | pass received attributes back to the requesting handler
* Build libsimaka with libtool, as we require a PIC-enabled versionMartin Willi2009-11-122-2/+2
|
* Support variable RES length in AKA quintupletsMartin Willi2009-11-1212-22/+28
|
* Ported pseudonym/reauth functionality to EAP-AKAMartin Willi2009-11-124-66/+564
|
* Passing other as NULL should not always result in a match if me matchesMartin Willi2009-11-121-2/+2
|
* Use new identity constructor in EAP-SIMMartin Willi2009-11-122-42/+18
|
* Moved card/provider enumeration to SIM manager, providing wrapped functions ↵Martin Willi2009-11-124-266/+24
| | | | for both SIM and AKA plugins
* Added option to disable identity requests completely (old behavior)Martin Willi2009-11-122-13/+17
|
* Fixed replacing existing reauthentication dataMartin Willi2009-11-121-6/+6
|
* Initiate full authentication if reauthentication identity is unknownMartin Willi2009-11-121-1/+6
|
* Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, ↵Martin Willi2009-11-1216-375/+1199
| | | | usable by any SIM/AKA backend
* eap-sim-file plugin supports volatile in-memory storage of fast ↵Martin Willi2009-11-122-25/+199
| | | | reauthentication data
* Initial support for fast reauthentication in EAP-SIMMartin Willi2009-11-122-31/+422
|
* EAP-SIM/AKA crypto helper supports key derivation for fast reauthenticationMartin Willi2009-11-122-4/+8
|
* Fallback to permanent identity request if pseudonym mapping failedMartin Willi2009-11-122-63/+119
|
* Query triplet/quintuplet functions with permanent identity only,Martin Willi2009-11-124-79/+61
| | | | extended sim_provider with a is_pseudonym() function.
* eap-sim-file plugin can store pseudonym information volatile in memoryMartin Willi2009-11-124-5/+225
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-04 05:56:50 +0000