| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
This currently has no effect: We don't include AEAD algorithms in the default
ESP proposal, as we don't know if it is supported by the backend. But as we
hopefully get an algorithm query mechanism on kernel interfaces some day, we
add the appropriate functionality nonetheless.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This allows the server to use a different IKE identity as long as the
configured hostname is contained in the certificate.
|
| |
|
|
|
|
| |
This avoids all the deprecated warnings when using OpenSSL functins.
|
|
|
|
| |
This seems to be not required anymore with the LLVM 5 toolchain.
|
| |
|
| |
|
|
|
|
| |
We now have our own printf backend and use it instead of Vstr.
|
| |
|
|
|
|
|
|
|
| |
Replace the allowany semantic by a more powerful subnet and IP range matching.
Multiple addresses, DNS names, subnets and ranges can be specified in a comma
separated list. Initiators ignore the ranges/subnets, responders match
configurations against all addresses, ranges and subnets.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Partially based on an old patch by Adrian-Ken Rueegsegger.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|