Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | implemented ike_rekey()/child_rekey() bus hooks | Martin Willi | 2009-07-09 | 2 | -0/+12 | |
| | ||||||
* | defer MOBIKE update if we have no route to the peer | Martin Willi | 2009-07-02 | 2 | -0/+42 | |
| | ||||||
* | use rwlock instead of a mutex in trap_manager, avoids possible deadlock | Martin Willi | 2009-06-16 | 1 | -18/+18 | |
| | ||||||
* | reset IKE_SA on bus after checkout/checkin of replacement SA | Martin Willi | 2009-06-16 | 1 | -2/+4 | |
| | ||||||
* | include TSi/TSr of triggering packet in acquire | Martin Willi | 2009-05-20 | 9 | -19/+55 | |
| | ||||||
* | properly terminate EAP authentication if EAP method fails | Martin Willi | 2009-05-20 | 1 | -1/+5 | |
| | ||||||
* | simplified SPI allocation after refactorings | Martin Willi | 2009-05-14 | 1 | -19/+4 | |
| | ||||||
* | fixed cleanup of traffic selector lists | Martin Willi | 2009-05-12 | 1 | -2/+2 | |
| | ||||||
* | do not destroy packet twice if message generation failed | Martin Willi | 2009-05-12 | 1 | -0/+1 | |
| | ||||||
* | properly end CERT_PRE task after detecting the final authentication round | Martin Willi | 2009-05-12 | 1 | -27/+41 | |
| | ||||||
* | do not report a CHILD_SA rekey time if rekeying disabled | Martin Willi | 2009-05-12 | 1 | -2/+10 | |
| | ||||||
* | fixed configuration payload type as responder | Martin Willi | 2009-05-11 | 1 | -1/+1 | |
| | ||||||
* | never send a CERT payload in EAP | Martin Willi | 2009-05-11 | 1 | -13/+13 | |
| | ||||||
* | Fixed EAP authentication regression | Martin Willi | 2009-05-11 | 5 | -42/+76 | |
| | | | | | Use correct nonce/init message again for EAP AUTH payload sent from responder to initiator. | |||||
* | fixed memleak | Martin Willi | 2009-05-11 | 1 | -0/+1 | |
| | ||||||
* | drop acquires we already have a pending connection attempt | Martin Willi | 2009-05-08 | 1 | -14/+90 | |
| | ||||||
* | initiate trapped CHILD_SAs with same reqid | Martin Willi | 2009-05-08 | 6 | -30/+25 | |
| | ||||||
* | removed $Id$ from new template generated files | Martin Willi | 2009-05-08 | 2 | -4/+0 | |
| | ||||||
* | removed obsolete route/unroute code from ike_sa/controller | Martin Willi | 2009-05-08 | 2 | -254/+6 | |
| | ||||||
* | make use of the new trap-manager | Martin Willi | 2009-05-08 | 1 | -2/+3 | |
| | ||||||
* | added a trap-manager to handle routed policies outside of IKE_SAs | Martin Willi | 2009-05-08 | 2 | -0/+379 | |
| | ||||||
* | instanciate new tasks only if none queued | Martin Willi | 2009-05-07 | 1 | -124/+125 | |
| | ||||||
* | properly delete IKE_SA if IKE_SA_INIT processing failed | Martin Willi | 2009-05-07 | 1 | -0/+5 | |
| | ||||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 63 | -126/+0 | |
| | ||||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 13 | -44/+44 | |
| | | | | | important change for developers: %Y replaces %D to print identities! | |||||
* | added support for AES counter mode in ESP | Martin Willi | 2009-04-27 | 1 | -2/+3 | |
| | | | | proposal keywords: aes128ctr aes192ctr aes256ctr | |||||
* | attribute_manager supports attribute_handler's to handle configuration ↵ | Martin Willi | 2009-04-24 | 3 | -374/+141 | |
| | | | | | | | | attributes via plugins moved resolv.conf editing to a separate plugin (resolv_conf) extended attribute_provider interface to hand out arbitrary attributes moved strongswan.conf based dns/nbns configuration to a plugin (attr) | |||||
* | schedule_job uses seconds to support time values larger than 49 days | Martin Willi | 2009-04-21 | 7 | -27/+21 | |
| | | | | added schedule_job_ms for ms resolution events | |||||
* | dump CHILD_SA keys in loglevel 4 | Martin Willi | 2009-04-21 | 1 | -0/+10 | |
| | ||||||
* | fixed IKE_SA rekeying collisions | Martin Willi | 2009-04-20 | 1 | -6/+19 | |
| | ||||||
* | do not adopt already initiated tasks after rekeying | Martin Willi | 2009-04-20 | 1 | -9/+0 | |
| | ||||||
* | fixing IKE_SA rekeying if charon.ikesa_table_size > 1 | Tobias Brunner | 2009-04-17 | 2 | -7/+20 | |
| | ||||||
* | missed strcaseeq added | Tobias Brunner | 2009-04-17 | 1 | -1/+1 | |
| | ||||||
* | moved strcaseeq() macro from constants.h to utils.h | Andreas Steffen | 2009-04-17 | 1 | -1/+1 | |
| | ||||||
* | merged multi-auth branch back into trunk | Martin Willi | 2009-04-14 | 30 | -1562/+1872 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2009-03-26 | 1 | -1/+1 | |
| | ||||||
* | output peer ID in duplicate deletion log entry | Andreas Steffen | 2009-03-26 | 1 | -2/+2 | |
| | ||||||
* | set port for NATD hash calculation in the "include-all" case | Martin Willi | 2009-03-26 | 1 | -0/+4 | |
| | ||||||
* | updated Doxyfile | Martin Willi | 2009-03-24 | 32 | -35/+33 | |
| | | | | | | properly close all doxygen groups fixed remaining doxygen warnings | |||||
* | reintegrated eap-radius branch into trunk | Martin Willi | 2009-03-24 | 3 | -3/+7 | |
| | ||||||
* | fallback to family specific %any(6) if kernel lookup fails | Martin Willi | 2009-03-16 | 1 | -0/+6 | |
| | ||||||
* | printf hooks refactored to increase portability (i.e. support for platforms ↵ | Tobias Brunner | 2009-03-12 | 1 | -2/+1 | |
| | | | | without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). | |||||
* | adding plugin for EAP-MS-CHAPv2 | Tobias Brunner | 2009-02-18 | 2 | -1/+4 | |
| | ||||||
* | configuration of NBNS server assignment via strongswan.conf | Andreas Steffen | 2009-02-13 | 1 | -3/+68 | |
| | ||||||
* | configuration of DNS server assignment via strongswan.conf | Andreas Steffen | 2009-02-12 | 1 | -6/+29 | |
| | ||||||
* | changed [4856] to dynamically choose traffic selector family | Martin Willi | 2009-02-11 | 1 | -14/+8 | |
| | ||||||
* | send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH ↵ | Martin Willi | 2009-02-10 | 1 | -0/+6 | |
| | | | | mismatches | |||||
* | free unneeded retransmission packet when exchange completes | Martin Willi | 2009-02-09 | 1 | -1/+2 | |
| | ||||||
* | proper initialization and disposal of keying material | Andreas Steffen | 2009-01-15 | 1 | -1/+3 | |
| | ||||||
* | fixed ESP NULL encryption | Andreas Steffen | 2009-01-15 | 1 | -3/+3 | |
| |