Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | renamed integrity check to integrity test | Andreas Steffen | 2007-08-29 | 1 | -3/+3 | |
| | ||||||
* | fips_verify_hmac_signature() now returns a boolean status | Andreas Steffen | 2007-08-29 | 1 | -1/+1 | |
| | ||||||
* | changed interface of fips_verify_hmac_signature | Andreas Steffen | 2007-08-29 | 1 | -1/+1 | |
| | ||||||
* | started implementation of libstrongswan code integrity check | Andreas Steffen | 2007-08-29 | 1 | -4/+28 | |
| | ||||||
* | rerouting CHILD_SA if its IKE_SA gets deleted | Martin Willi | 2007-08-27 | 1 | -99/+149 | |
| | ||||||
* | append new attribute certs at the end | Andreas Steffen | 2007-08-14 | 1 | -1/+7 | |
| | ||||||
* | adding attribute certficates to a chained list | Andreas Steffen | 2007-08-14 | 1 | -3/+25 | |
| | ||||||
* | has_rsa_private_key() must also be protected by keys_mutex | Andreas Steffen | 2007-08-10 | 1 | -1/+4 | |
| | ||||||
* | corrected debug output | Andreas Steffen | 2007-08-10 | 1 | -1/+1 | |
| | ||||||
* | ipsec stroke rereadaacerts|rereadacerts supported | Andreas Steffen | 2007-08-10 | 1 | -0/+8 | |
| | ||||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 3 | -10/+59 | |
| | ||||||
* | made linked lists invoke() method consistent to clone_*() and destroy_*() ↵ | Martin Willi | 2007-08-09 | 1 | -1/+1 | |
| | | | | methods | |||||
* | bug fix in linked_list deletion - instead of acerts destroyed certs twice4.1.5 | Andreas Steffen | 2007-08-08 | 1 | -1/+1 | |
| | ||||||
* | implemented listing of attribute certificates | Andreas Steffen | 2007-08-07 | 2 | -3/+49 | |
| | ||||||
* | fixed segfault when sourceip in stroke message is NULL | Martin Willi | 2007-08-06 | 1 | -2/+2 | |
| | ||||||
* | allow starter to initiate connections simultaneously (on auto=start) | Martin Willi | 2007-08-06 | 2 | -4/+19 | |
| | ||||||
* | backports from the p2p-nat-t branch: | Tobias Brunner | 2007-07-19 | 7 | -14/+11 | |
| | | | | | | * double assignment of function ''destroy'' in some jobs * typos | |||||
* | updated XML interface to new schema | Martin Willi | 2007-07-19 | 1 | -79/+267 | |
| | ||||||
* | not touching IKE_SA_INIT from ike_mobike_t anymore | Martin Willi | 2007-07-19 | 1 | -1/+1 | |
| | ||||||
* | fixed compiler warning | Martin Willi | 2007-07-16 | 1 | -3/+3 | |
| | ||||||
* | fixed payload order (Nonce, KE) for IKE_SA_INIT | Martin Willi | 2007-07-16 | 1 | -3/+11 | |
| | ||||||
* | include default route also in src address evaluation | Andreas Steffen | 2007-07-13 | 1 | -4/+4 | |
| | ||||||
* | include default route with missing dst field into route evaluation | Andreas Steffen | 2007-07-13 | 1 | -6/+7 | |
| | ||||||
* | doing route lookup in userspace to ignore routes installed by us | Martin Willi | 2007-07-11 | 1 | -29/+121 | |
| | ||||||
* | using own routing table for installed routes (table 100, prio 100) | Martin Willi | 2007-07-11 | 1 | -1/+51 | |
| | ||||||
* | added first draft of SMP relax-ng schema | Martin Willi | 2007-07-06 | 1 | -0/+225 | |
| | ||||||
* | ignoring unkown crl/ocsp uris | Martin Willi | 2007-07-04 | 1 | -2/+8 | |
| | ||||||
* | using correct nexthop for inserted route | Martin Willi | 2007-07-04 | 1 | -15/+30 | |
| | ||||||
* | changed mobike behavior to NOT use additional responder addresses until we ↵ | Martin Willi | 2007-07-04 | 1 | -95/+3 | |
| | | | | have path discovery | |||||
* | fixed responder initiated CHILD_SA rekeying when using virtual IPs | Martin Willi | 2007-07-04 | 1 | -11/+45 | |
| | ||||||
* | fixed firewall script invocation when interface is not available anymore | Martin Willi | 2007-07-03 | 1 | -17/+28 | |
| | ||||||
* | improved MOBIKE: | Martin Willi | 2007-07-03 | 10 | -88/+254 | |
| | | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation | |||||
* | added message ID to message log | Martin Willi | 2007-07-03 | 1 | -3/+7 | |
| | ||||||
* | show kind of notify contained in messages in log | Martin Willi | 2007-07-03 | 3 | -12/+76 | |
| | ||||||
* | DBG1 level for 'peer supports MOBIKE' debug message | Andreas Steffen | 2007-07-02 | 1 | -1/+1 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2007-07-02 | 1 | -3/+3 | |
| | ||||||
* | fixed mobike address update from and to NAT | Martin Willi | 2007-07-02 | 2 | -34/+20 | |
| | ||||||
* | proper update of IPsec SA when roaming a host-to-host tunnel | Martin Willi | 2007-07-02 | 5 | -92/+155 | |
| | | | | roaming of IPsec SAs using virtual IPs | |||||
* | updated charons architecture description | Martin Willi | 2007-06-29 | 1 | -41/+64 | |
| | ||||||
* | fixed dpd=hold when using virtual IPs | Martin Willi | 2007-06-29 | 2 | -10/+25 | |
| | ||||||
* | removed accidently checked in debbuging code | Martin Willi | 2007-06-29 | 1 | -2/+0 | |
| | ||||||
* | fixed IKE_SA reestablishment after DPD using port 500 | Martin Willi | 2007-06-28 | 1 | -65/+71 | |
| | ||||||
* | further mobike improvements, regarding to NAT-T | Martin Willi | 2007-06-27 | 9 | -70/+83 | |
| | ||||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 8 | -303/+250 | |
| | ||||||
* | further fixed for mobike roaming | Martin Willi | 2007-06-25 | 8 | -40/+153 | |
| | ||||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 22 | -366/+1125 | |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | |||||
* | fixed virtua IP: adding virtual IP to interface address list cache directly | Martin Willi | 2007-06-19 | 1 | -16/+30 | |
| | | | | corrected debug targets | |||||
* | added extensions management to IKE_SA | Martin Willi | 2007-06-18 | 3 | -1/+64 | |
| | | | | fixed NATD payload (port) when using route lookup | |||||
* | source address lookup in kernel interface | Martin Willi | 2007-06-18 | 4 | -19/+125 | |
| | | | | | | use it for NAT detection if no source address known from config support for %any...%any connections | |||||
* | support for left=%any change our address dynamically | Martin Willi | 2007-06-18 | 1 | -4/+6 | |
| |