Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | kernel-interface: query SAD for last use time if SPD query didn't yield one | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | ||||||
* | Use the GEN silent rule when generating files with sed | Martin Willi | 2013-05-06 | 1 | -0/+1 | |
| | ||||||
* | New Android release after adding AES-GCM, IPv6-in-IPv4 and using kernel-netlink | Tobias Brunner | 2013-05-03 | 1 | -2/+2 | |
| | | | | | | | | libipsec now supports AES-GCM, IPv6 tunnels over IPv4 are supported, native x86 libraries are built (requires a new Vstr build script). Also, the existing kernel-netlink plugin now provides the kernel-net implementation, which should be more stable in case multiple interfaces are up and have IP addresses installed on them. | |||||
* | android: Use stronger ESP proposal including AES-GCM | Tobias Brunner | 2013-05-03 | 1 | -0/+6 | |
| | ||||||
* | android: Remove unused methods on NetworkManager/network_manager_t | Tobias Brunner | 2013-05-03 | 3 | -177/+1 | |
| | ||||||
* | android: Ignore interface 'lo' | Tobias Brunner | 2013-05-03 | 1 | -2/+4 | |
| | | | | | Android adds a default route via 'lo' if no connectivity is available causing charon to send packets via lo and triggering DPD. | |||||
* | android: Repurpose android-net to simply handle connectivity events | Tobias Brunner | 2013-05-03 | 3 | -59/+34 | |
| | | | | | | Using the events by NetworkManager/ConnectivityManager to trigger roam events instead of the events generated by the kernel-netlink plugin the noise level is much lower. | |||||
* | android: Replace android-net plugin with kernel-netlink | Tobias Brunner | 2013-05-03 | 2 | -3/+8 | |
| | | | | | Virtual IPs are not handled by the kernel-netlink plugin and tun devices are ignored. | |||||
* | android: Set strongswan.conf options before initializing other libraries | Tobias Brunner | 2013-05-03 | 1 | -36/+44 | |
| | ||||||
* | android: No need to disable CMS explicitly | Tobias Brunner | 2013-03-20 | 1 | -1/+0 | |
| | | | | The version check introduced with 0d237763 should take care of it. | |||||
* | android: Build native libraries also for x86 | Tobias Brunner | 2013-03-20 | 3 | -2/+5 | |
| | | | | Requires an updated build script for Vstr. | |||||
* | android: Remove/filter header files from LOCAL_SRC_FILES | Tobias Brunner | 2013-03-20 | 1 | -10/+10 | |
| | | | | This avoids huge warnings when building the native code. | |||||
* | android: Request and install an IPv6 DNS server | Tobias Brunner | 2013-03-20 | 2 | -9/+17 | |
| | ||||||
* | android: Also request a virtual IPv6 address and propose IPv6 TS | Tobias Brunner | 2013-03-20 | 3 | -23/+25 | |
| | | | | | This allows IPv6 over IPv4 but falls back nicely if we don't get a virtual IPv6 (or IPv4) address. | |||||
* | kernel_ipsec_t.query_sa() additionally returns the number of processed packets | Martin Willi | 2013-03-14 | 1 | -1/+2 | |
| | ||||||
* | New Android release after adding translations and Cert/EAP authentication | Tobias Brunner | 2013-03-07 | 1 | -3/+3 | |
| | | | | | Also fixed a race condition during reauthentication and a freeze that might happen while disconnecting. | |||||
* | android: Add support for combined certificate and EAP authentication | Tobias Brunner | 2013-03-07 | 7 | -34/+63 | |
| | | | | | | This uses RFC 4739 multiple authentication rounds to first authenticate the client with a certificate followed by an EAP authentication round with username and password. | |||||
* | Fixed Doxygen comments after scanning complete src directory | Tobias Brunner | 2013-03-02 | 4 | -4/+4 | |
| | ||||||
* | android: Mitigate race condition on reauthentication | Tobias Brunner | 2013-03-01 | 1 | -0/+4 | |
| | | | | | | | | If the TUN device gets recreated while another thread in handle_plain() has not yet called select(2) but already stored the file descriptor of the old TUN device in its FD set, select() will fail with EBADF. Fixes #301. | |||||
* | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 | |
| | ||||||
* | android: Properly escape apostrophes in Ukrainian translation5.0.2dr4 | Tobias Brunner | 2013-01-14 | 1 | -8/+8 | |
| | ||||||
* | android: Implement kernel_net_t.get_interface via JNI | Tobias Brunner | 2013-01-14 | 4 | -6/+92 | |
| | | | | | | This is now required to properly accept/install a virtual IP address. Fixes #275. | |||||
* | android: Moved chunk_from_byte_array and byte_array_from_chunk helper functions | Tobias Brunner | 2013-01-14 | 2 | -24/+32 | |
| | ||||||
* | android: Set OPENSSL_NO_CMS in Android.mk as it is not set in opensslconf.h ↵ | Tobias Brunner | 2013-01-14 | 1 | -0/+1 | |
| | | | | on Android | |||||
* | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 | |
|\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 | |
| | | ||||||
* | | Fixed some typos in Ukrainian translation | Pavel Kopchyk | 2013-01-09 | 1 | -15/+16 | |
| | | ||||||
* | | Added Russian and Ukrainian strings for Android client | Dmitry Korzhevin | 2012-12-24 | 4 | -0/+252 | |
|/ | ||||||
* | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 1 | -1/+1 | |
| | | | | required | |||||
* | Add an optional kernel-interface parameter to install IPs with a custom prefix | Martin Willi | 2012-11-29 | 1 | -1/+2 | |
| | ||||||
* | New Android release after adding shortcuts and confirmation dialog | Tobias Brunner | 2012-11-21 | 1 | -2/+2 | |
| | | | | Also fixed some Android 4.2 specific issues. | |||||
* | android: Don't allow any backup for now | Tobias Brunner | 2012-11-21 | 1 | -1/+2 | |
| | ||||||
* | android: Properly handle exceptions when loading keys/certificates | Tobias Brunner | 2012-11-21 | 1 | -3/+3 | |
| | ||||||
* | android: Use the same tag string for all dialogs in MainActivity | Tobias Brunner | 2012-11-21 | 1 | -6/+5 | |
| | ||||||
* | android: Hide previous dialogs when handling a new connection attempt | Tobias Brunner | 2012-11-21 | 1 | -0/+22 | |
| | ||||||
* | android: Show confirmation dialog when starting a profile while already ↵ | Tobias Brunner | 2012-11-21 | 4 | -9/+127 | |
| | | | | connected | |||||
* | android: Add the ability to create shortcuts to specific VPN profiles | Tobias Brunner | 2012-11-21 | 6 | -0/+93 | |
| | ||||||
* | android: Start a specific VPN profile based on special Intents | Tobias Brunner | 2012-11-21 | 5 | -1/+56 | |
| | ||||||
* | android: Attribute added to display the list of VPN profiles in read-only mode | Tobias Brunner | 2012-11-21 | 2 | -4/+49 | |
| | ||||||
* | android: Show an error if VPN fails due to lock down mode in Android 4.2 | Tobias Brunner | 2012-11-19 | 4 | -1/+14 | |
| | ||||||
* | android: Add error message as argument to "VPN not supported" dialog | Tobias Brunner | 2012-11-19 | 1 | -2/+15 | |
| | ||||||
* | android: Content providers are not exported by default in Android 4.2 | Tobias Brunner | 2012-11-19 | 1 | -1/+2 | |
| | ||||||
* | android: Set target SDK to 17 (Android 4.2) | Tobias Brunner | 2012-11-19 | 1 | -1/+1 | |
| | ||||||
* | android: Private key bug has been fixed with Android 4.2 | Tobias Brunner | 2012-11-19 | 1 | -1/+1 | |
| | ||||||
* | android: Use proper intent-filter for our VpnService | Tobias Brunner | 2012-11-02 | 1 | -1/+1 | |
| | ||||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 6 | -6/+6 | |
| | ||||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | ||||||
* | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 | |
| | ||||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 | |
| |