index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
charon
Commit message (
Collapse
)
Author
Age
Files
Lines
...
*
Added strongswan.conf options to configure retransmission timeouts
Martin Willi
2010-01-11
2
-5
/
+28
|
*
log EAP-only authentication proposal
Andreas Steffen
2010-01-11
1
-3
/
+5
|
*
EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks
Martin Willi
2010-01-07
1
-1
/
+1
|
*
Support EAP-only authentication for mutual and key deriving EAP methods
Martin Willi
2010-01-07
5
-31
/
+96
|
*
Indicate and dected support for EAP-only authentication
Martin Willi
2010-01-07
2
-7
/
+28
|
*
Match to private use algorithms only if we know we are talking to strongSwan
Martin Willi
2010-01-07
8
-22
/
+41
|
*
Interpret private use BEET mode notify only if we know we are talking to ↵
Martin Willi
2010-01-07
1
-1
/
+9
|
|
|
|
strongSwan
*
Add an option to send a vendor ID, allows us to properly support private ↵
Martin Willi
2010-01-07
9
-8
/
+205
|
|
|
|
extensions
*
make error message about missing MD4 hasher more explicit
Andreas Steffen
2009-12-30
1
-1
/
+1
|
*
differentiate EAP method initialization errors
Andreas Steffen
2009-12-30
1
-12
/
+18
|
*
enforce RFC 3779 address constraints on traffic selectors
Andreas Steffen
2009-12-25
1
-0
/
+61
|
*
Adapted the load_tester kernel-interface to the changes introduced in 6ec949e02.
Tobias Brunner
2009-12-23
1
-2
/
+3
|
*
Added some IPv6 tweaks for Android.
Tobias Brunner
2009-12-23
1
-1
/
+11
|
|
|
|
|
Android 1.6 does not yet support the Advanced Sockets API for IPv6 as defined in RFC 3542. Also, in6addr_any is missing.
*
Semicolon removed.
Tobias Brunner
2009-12-23
1
-1
/
+1
|
*
According to the man page (and the header files in Android) prctl takes a ↵
Tobias Brunner
2009-12-23
1
-1
/
+2
|
|
|
|
total of 5 arguments.
*
Cache queue locking in credential manager corrected.
Tobias Brunner
2009-12-23
1
-2
/
+13
|
*
Join worker threads when destroying the processor.
Tobias Brunner
2009-12-23
1
-10
/
+24
|
*
Callback job refactored and fixed.
Tobias Brunner
2009-12-23
2
-47
/
+106
|
*
Whitespace cleanup.
Tobias Brunner
2009-12-23
2
-33
/
+33
|
*
Using the thread wrapper in charon, libstrongswan and their plugins.
Tobias Brunner
2009-12-23
24
-159
/
+145
|
*
Check if libpthread is required or not.
Tobias Brunner
2009-12-23
1
-1
/
+1
|
*
Separated the public interfaces of the threading primitives.
Tobias Brunner
2009-12-23
31
-32
/
+33
|
*
Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵
Tobias Brunner
2009-12-23
31
-31
/
+31
|
|
|
|
primitives (and utils/mutex.h is now threading.h).
*
verify RFC3779 IP address blocks along X.509 certificate trust chain
Andreas Steffen
2009-12-23
2
-8
/
+91
|
*
moved traffic_selectors from charon to libstrongswan
Andreas Steffen
2009-12-20
11
-1171
/
+9
|
*
fixed updown plugin for mixed IPv4/IPv6 tunnels
Andreas Steffen
2009-12-17
1
-2
/
+8
|
*
Fixed BEET mode by installing SAs with negotiated address in traffic selector
Martin Willi
2009-12-17
10
-26
/
+67
|
*
provide attributes from SQL database
Andreas Steffen
2009-12-16
3
-2
/
+16
|
*
Install v6 routes via outgoing interface for now
Martin Willi
2009-12-14
1
-18
/
+7
|
*
some code optimizations
Andreas Steffen
2009-12-09
1
-34
/
+37
|
*
Support "_" and "-" variants of NetworkManager pkg-config packages
Martin Willi
2009-12-08
1
-1
/
+4
|
*
Remove generated config.h.in from source tree
Martin Willi
2009-12-08
2
-116
/
+1
|
*
The attribute manager was moved from daemon_t to libstrongswan.
Tobias Brunner
2009-12-07
1
-4
/
+4
|
*
Do not execute the callback job if it has been cancelled since registration
Martin Willi
2009-12-03
1
-2
/
+8
|
*
Cleanup library if daemon initialization fails
Martin Willi
2009-12-03
1
-0
/
+2
|
*
Do not install invalid 0.0.0.0 DNS servers
Martin Willi
2009-12-01
1
-9
/
+14
|
*
Prefer EAP-Identity for provider attribute/address lookup
Martin Willi
2009-12-01
1
-4
/
+37
|
*
Save EAP-Identity on auth config
Martin Willi
2009-12-01
1
-3
/
+26
|
*
Store completed authentication rounds permanently on IKE_SA, with flush option
Martin Willi
2009-12-01
6
-50
/
+110
|
*
Removed obsolete and unused [gs]et_eap_identity() methods
Martin Willi
2009-11-30
2
-42
/
+0
|
*
Do not propose transport mode as initiator if connection is NATed
Martin Willi
2009-11-30
1
-0
/
+6
|
*
Verify EAP-SIM/AKA AT_MAC before processing any attributes
Martin Willi
2009-11-30
4
-36
/
+24
|
*
SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the ↵
Martin Willi
2009-11-30
4
-6
/
+4
|
|
|
|
response
*
Extended SIM manager by hooks, currently featuring attribute and key hooks
Martin Willi
2009-11-30
2
-1
/
+134
|
*
Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA
Martin Willi
2009-11-30
2
-0
/
+19
|
*
Handle NOT_SUPPORTED or other errors properly in get_quintuplet
Martin Willi
2009-11-30
1
-4
/
+10
|
*
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ↵
Martin Willi
2009-11-26
1
-3
/
+11
|
|
|
|
header
*
Use full algorithm name for SHA384/512 HMACs
Martin Willi
2009-11-26
1
-2
/
+2
|
*
Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword
Martin Willi
2009-11-26
2
-1
/
+2
|
*
Install SHA256_128 auth algorithm with specified 128 bit truncation
Martin Willi
2009-11-26
1
-1
/
+25
|
[prev]
[next]