aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* Improved debugging log in SIM triplet lookupMartin Willi2009-10-141-3/+4
|
* move SQL-based pool functionality to new attr-sql libstrongswan pluginAndreas Steffen2009-10-135-1196/+3
|
* moved attribute_manager to libstrongswanAndreas Steffen2009-10-1323-623/+34
|
* Fixed assignment of get_triplet() dummy implementationMartin Willi2009-10-131-1/+1
|
* INTERNAL_IP6_NETMASK needed for ModeConfigAndreas Steffen2009-10-122-3/+4
|
* Merged SIM/USIM manager/card/provider, avoids code duplicationMartin Willi2009-10-1216-340/+129
|
* Added ${shlibs:Depends} dependency to Debian packageMartin Willi2009-10-122-4/+5
|
* Added .gitignore for NM Debian package buildMartin Willi2009-10-123-0/+9
|
* Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all pluginsMartin Willi2009-10-121-4/+1
|
* Stroke plugin interprets NULL identities as ID_ANY in shared key lookupMartin Willi2009-10-121-3/+9
|
* SIM card interface takes IMSI as parameter (same as in USIM)Martin Willi2009-10-097-87/+44
|
* Fixed USIM parameter descriptionMartin Willi2009-10-091-1/+1
|
* Do not use monotonic time for AKA sequence numbers, it has an undefined ↵Martin Willi2009-10-091-6/+4
| | | | starting point
* Use constants instead of sizeof(), sizeof() does not work for function argumentsMartin Willi2009-10-094-71/+76
|
* Calculate missing CK/IK values in USIMMartin Willi2009-10-091-0/+3
|
* Link 3gpp2 EAP-AKA plugin to libgmpMartin Willi2009-10-092-1/+1
|
* Separated 3gpp2 USIM card and provider functionalityMartin Willi2009-10-097-845/+435
|
* Ported AKA functions to 3gpp2 pluginMartin Willi2009-10-093-1/+437
|
* Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in ↵Martin Willi2009-10-0910-0/+539
| | | | software
* Implemented a manager for USIM cards/providers very similar to the SIM managerMartin Willi2009-10-095-0/+294
|
* Reenabled acq_expires SA timer using rekey timeoutMartin Willi2009-10-071-1/+1
| | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted.
* Catch CHILD_SA state changes during acquireMartin Willi2009-10-071-17/+45
| | | | | If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors, we have to reset the pending state in the trap manager.
* streamlined output from get_validity()Andreas Steffen2009-10-061-2/+2
|
* delete group attributes after useAndreas Steffen2009-10-051-0/+1
|
* stroke_list outputs group attributesAndreas Steffen2009-10-051-0/+7
|
* ipsec pki --issue suports --flag authServer optionAndreas Steffen2009-10-051-2/+5
|
* Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word readsMartin Willi2009-10-051-67/+101
|
* Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word readsMartin Willi2009-10-051-99/+108
|
* Do not increase the invalid-KE/Cookie retry counter for additional keyingtry ↵Martin Willi2009-09-241-1/+3
| | | | attempts
* Do not create a replacement IKE_SA if we have CHILD_SAs to route onlyMartin Willi2009-09-241-8/+7
|
* Using the correct type for ME_ENDPOINT payloads in connectivity checks.Tobias Brunner2009-09-241-1/+2
|
* certificate subject DNs are in double quotesAndreas Steffen2009-09-231-5/+5
|
* streamlining of credential loading debug outputAndreas Steffen2009-09-231-6/+6
|
* Fixed a crash in source address lookupMartin Willi2009-09-231-8/+11
|
* Define ME for all charon pluginsMartin Willi2009-09-231-1/+0
|
* Correctly handle --enable-mediation optionMartin Willi2009-09-231-0/+1
|
* Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemonMartin Willi2009-09-222-0/+4
|
* shortened file loading debug outputAndreas Steffen2009-09-221-23/+22
|
* Fixed encoding of hash-and-url cert payloadMartin Willi2009-09-221-13/+13
|
* Do not assign SIM version to a volatile buffer on stackMartin Willi2009-09-221-15/+11
|
* Credential backends use has_fingerprint() methods to select keys/certificatesMartin Willi2009-09-214-24/+7
|
* Correctly serve certificates if CERT_ANY requestedMartin Willi2009-09-211-1/+1
|
* Enforce a local address of the same family as remote addressMartin Willi2009-09-211-2/+8
|
* Return certificates of requested kind onlyMartin Willi2009-09-211-58/+4
|
* delete resolv_conf_* filesAndreas Steffen2009-09-204-352/+0
|
* resolv_conf plugin renamed to resolveAndreas Steffen2009-09-2011-16/+367
|
* Use helper functions to handle (non-)skippable attributesMartin Willi2009-09-181-42/+46
|
* Clients can handle AKA-Identity requests by sending the full identityMartin Willi2009-09-181-0/+80
|
* nm uses the distributions trusted root CAs if none is explicitly specifiedMartin Willi2009-09-185-59/+191
|
* get_private() in listcacerts requires a valid auth cfgMartin Willi2009-09-171-1/+5
|