| Commit message (Expand) | Author | Age | Files | Lines |
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 68 | -24284/+0 |
* | Check if we are not using a vendor EAP method in EAP_IDENTITY comparison. | Martin Willi | 2010-03-03 | 1 | -1/+1 |
* | Process ike_vendor task before ike_init, fixes support for private algs in IKE | Martin Willi | 2010-02-26 | 2 | -5/+5 |
* | Use message instead of attributes in hook | Martin Willi | 2010-02-26 | 2 | -31/+23 |
* | Use src/dst ports as configured in ike_cfg | Martin Willi | 2010-02-26 | 4 | -16/+41 |
* | Invoke missing message() hook for incoming responses | Martin Willi | 2010-02-17 | 1 | -0/+1 |
* | Adding support for AES GMAC (RFC4543). | Tobias Brunner | 2010-02-12 | 1 | -4/+5 |
* | Do not build own authentication data before we've verified others, we need th...4.3.6 | Martin Willi | 2010-02-09 | 1 | -28/+33 |
* | Some whitespace and code cleanups concerning the mediation extension. | Tobias Brunner | 2010-02-02 | 1 | -2/+2 |
* | Made inactivity_timeout a per CHILD_SA config option | Martin Willi | 2010-01-27 | 1 | -7/+7 |
* | Support for closing CHILD/IKE_SA if a CHILD_SA is inactive. | Martin Willi | 2010-01-12 | 1 | -0/+25 |
* | Added strongswan.conf options to configure retransmission timeouts | Martin Willi | 2010-01-11 | 2 | -5/+28 |
* | log EAP-only authentication proposal | Andreas Steffen | 2010-01-11 | 1 | -3/+5 |
* | Support EAP-only authentication for mutual and key deriving EAP methods | Martin Willi | 2010-01-07 | 5 | -31/+96 |
* | Indicate and dected support for EAP-only authentication | Martin Willi | 2010-01-07 | 2 | -7/+28 |
* | Match to private use algorithms only if we know we are talking to strongSwan | Martin Willi | 2010-01-07 | 2 | -3/+8 |
* | Interpret private use BEET mode notify only if we know we are talking to stro... | Martin Willi | 2010-01-07 | 1 | -1/+9 |
* | Add an option to send a vendor ID, allows us to properly support private exte... | Martin Willi | 2010-01-07 | 8 | -8/+204 |
* | differentiate EAP method initialization errors | Andreas Steffen | 2009-12-30 | 1 | -12/+18 |
* | enforce RFC 3779 address constraints on traffic selectors | Andreas Steffen | 2009-12-25 | 1 | -0/+61 |
* | Using the thread wrapper in charon, libstrongswan and their plugins. | Tobias Brunner | 2009-12-23 | 1 | -0/+1 |
* | Separated the public interfaces of the threading primitives. | Tobias Brunner | 2009-12-23 | 5 | -5/+6 |
* | Moved mutex.c to a separate folder in order to cleanly wrap other threading p... | Tobias Brunner | 2009-12-23 | 5 | -5/+5 |
* | Fixed BEET mode by installing SAs with negotiated address in traffic selector | Martin Willi | 2009-12-17 | 3 | -9/+31 |
* | provide attributes from SQL database | Andreas Steffen | 2009-12-16 | 1 | -2/+4 |
* | Prefer EAP-Identity for provider attribute/address lookup | Martin Willi | 2009-12-01 | 1 | -4/+37 |
* | Save EAP-Identity on auth config | Martin Willi | 2009-12-01 | 1 | -3/+26 |
* | Store completed authentication rounds permanently on IKE_SA, with flush option | Martin Willi | 2009-12-01 | 3 | -43/+105 |
* | Removed obsolete and unused [gs]et_eap_identity() methods | Martin Willi | 2009-11-30 | 2 | -42/+0 |
* | Do not propose transport mode as initiator if connection is NATed | Martin Willi | 2009-11-30 | 1 | -0/+6 |
* | Extended SIM manager by hooks, currently featuring attribute and key hooks | Martin Willi | 2009-11-30 | 2 | -1/+134 |
* | Handle NOT_SUPPORTED or other errors properly in get_quintuplet | Martin Willi | 2009-11-30 | 1 | -4/+10 |
* | Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword | Martin Willi | 2009-11-26 | 1 | -0/+1 |
* | Check existing path in mobike probing only if we still have a route | Martin Willi | 2009-11-26 | 2 | -8/+6 |
* | added more debugging in configuration attribute handling | Andreas Steffen | 2009-11-24 | 1 | -0/+4 |
* | Do not recreate existing create_child subtask when retrying with different DH... | Martin Willi | 2009-11-23 | 1 | -2/+5 |
* | Avoid potentially unaligned half-word read | Martin Willi | 2009-11-23 | 1 | -5/+8 |
* | Message stringification supports more detailed EAP payload information | Martin Willi | 2009-11-18 | 2 | -0/+36 |
* | Fixed memleak in attribute handling | Martin Willi | 2009-11-17 | 1 | -0/+1 |
* | Give plugins more control of which configuration attributes to request, and p... | Martin Willi | 2009-11-17 | 3 | -74/+131 |
* | Invoke message hook before generation, allowing plugins to mangle it | Martin Willi | 2009-11-12 | 1 | -3/+2 |
* | Support variable RES length in AKA quintuplets | Martin Willi | 2009-11-12 | 2 | -12/+29 |
* | Ported pseudonym/reauth functionality to EAP-AKA | Martin Willi | 2009-11-12 | 1 | -0/+4 |
* | Use new identity constructor in EAP-SIM | Martin Willi | 2009-11-12 | 1 | -0/+5 |
* | Moved card/provider enumeration to SIM manager, providing wrapped functions f... | Martin Willi | 2009-11-12 | 2 | -22/+503 |
* | Query triplet/quintuplet functions with permanent identity only, | Martin Willi | 2009-11-12 | 1 | -31/+40 |
* | Added missing hasher include | Martin Willi | 2009-11-12 | 1 | -0/+1 |
* | sim_provider_t API gained support for pseudonym/fast reauthentication | Martin Willi | 2009-11-12 | 1 | -16/+46 |
* | sim_card_t API gained support for pseudonym/fast reauthentication | Martin Willi | 2009-11-12 | 1 | -16/+55 |
* | Fixed all doxygen warnings | Martin Willi | 2009-10-22 | 2 | -2/+2 |