tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-0/+2
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-0/+1
\|
*	ike: support multiple addresses, ranges and subnets in IKE address config	Martin Willi	2013-09-04	1	-2/+2
\| \| \| \| \| \| \|	Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
*	peer-cfg: add a pull/push mode option to use with mode config	Martin Willi	2013-09-04	1	-2/+2
\|
*	Merge branch 'opaque-ports'	Martin Willi	2013-03-01	1	-2/+2
\|\ \| \| \| \| \| \| \| \|	Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
\| *	Use a complete port range in traffic_selector_create_from_{subnet,cidr}	Martin Willi	2013-02-21	1	-2/+2
\| \|
* \|	Add a DSCP configuration value to IKE configs	Martin Willi	2013-02-06	1	-1/+1
\|/
*	Add the ability to use a named pool for conftest configs	Tobias Brunner	2013-01-21	1	-1/+6
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-1/+2
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	1	-1/+1
\|
*	Fixed reading of configs in conftest utility	Tobias Brunner	2012-12-13	1	-4/+4
\|
*	Make use of new CIDR string ts constructor where appropriate	Martin Willi	2012-10-24	1	-8/+4
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	1	-1/+1
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	1	-1/+1
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-1/+1
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-1/+1
\|
*	implemented the right\|leftallowany feature	Andreas Steffen	2012-06-08	1	-2/+2
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+1
\|
*	Added an aggressive mode peer_cfg option	Martin Willi	2012-03-20	1	-1/+1
\|
*	Use enum to define IKE version on peer_cfg_t.	Tobias Brunner	2012-03-20	1	-1/+1
\| \| \| \|	Replaced all those magic numbers.
*	Added a cert_policy option to conftest configurations	Martin Willi	2011-01-05	1	-1/+6
\|
*	Added tfc_padding option, changes signature to master changes	Martin Willi	2011-01-05	1	-1/+5
\|
*	Added key strength constraints support to conftest	Martin Willi	2011-01-05	1	-0/+11
\|
*	Fixed transport mode configuration option	Martin Willi	2011-01-05	1	-3/+7
\|
*	Disable MOBIKE in conftesting, as it changes port floating behavior	Martin Willi	2011-01-05	1	-1/+1
\|
*	Added IKE options to configure source/destination ports	Martin Willi	2011-01-05	1	-2/+4
\|
*	Added IKE config option to fake NAT situations	Martin Willi	2011-01-05	1	-1/+2
\|
*	Load test and suite specific connection configurations	Martin Willi	2011-01-05	1	-0/+316