tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	ike: support multiple addresses, ranges and subnets in IKE address config	Martin Willi	2013-09-04	1	-2/+2
\| \| \| \| \| \| \|	Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
*	peer-cfg: add a pull/push mode option to use with mode config	Martin Willi	2013-09-04	1	-2/+2
\|
*	Merge branch 'opaque-ports'	Martin Willi	2013-03-01	1	-2/+2
\|\ \| \| \| \| \| \| \| \|	Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
\| *	Use a complete port range in traffic_selector_create_from_{subnet,cidr}	Martin Willi	2013-02-21	1	-2/+2
\| \|
* \|	Add a DSCP configuration value to IKE configs	Martin Willi	2013-02-06	1	-1/+1
\|/
*	Add the ability to use a named pool for conftest configs	Tobias Brunner	2013-01-21	1	-1/+6
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-1/+2
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	1	-1/+1
\|
*	Fixed reading of configs in conftest utility	Tobias Brunner	2012-12-13	1	-4/+4
\|
*	Make use of new CIDR string ts constructor where appropriate	Martin Willi	2012-10-24	1	-8/+4
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	1	-1/+1
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	1	-1/+1
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-1/+1
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-1/+1
\|
*	implemented the right\|leftallowany feature	Andreas Steffen	2012-06-08	1	-2/+2
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+1
\|
*	Added an aggressive mode peer_cfg option	Martin Willi	2012-03-20	1	-1/+1
\|
*	Use enum to define IKE version on peer_cfg_t.	Tobias Brunner	2012-03-20	1	-1/+1
\| \| \| \|	Replaced all those magic numbers.
*	Added a cert_policy option to conftest configurations	Martin Willi	2011-01-05	1	-1/+6
\|
*	Added tfc_padding option, changes signature to master changes	Martin Willi	2011-01-05	1	-1/+5
\|
*	Added key strength constraints support to conftest	Martin Willi	2011-01-05	1	-0/+11
\|
*	Fixed transport mode configuration option	Martin Willi	2011-01-05	1	-3/+7
\|
*	Disable MOBIKE in conftesting, as it changes port floating behavior	Martin Willi	2011-01-05	1	-1/+1
\|
*	Added IKE options to configure source/destination ports	Martin Willi	2011-01-05	1	-2/+4
\|
*	Added IKE config option to fake NAT situations	Martin Willi	2011-01-05	1	-1/+2
\|
*	Load test and suite specific connection configurations	Martin Willi	2011-01-05	1	-0/+316