Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | child-cfg: Optionally set mark on inbound SA | Tobias Brunner | 2017-11-02 | 1 | -0/+3 |
| | |||||
* | child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256 | Tobias Brunner | 2017-05-26 | 1 | -0/+3 |
| | | | | | | | | The correct truncation is 128-bit but some implementations insist on using 96-bit truncation. With strongSwan this can be negotiated using an algorithm identifier from a private range. But this doesn't work with third-party implementations. This adds an option to use 96-bit truncation even if the official identifier is used. | ||||
* | child-cfg: Add flag to enable hardware offload | Tobias Brunner | 2017-05-23 | 1 | -0/+3 |
| | |||||
* | child-cfg: Use flags for boolean options | Tobias Brunner | 2017-05-23 | 1 | -47/+29 |
| | | | | Makes it potentially easier to add new flags. | ||||
* | child-cfg: Add setting that controls whether outbound FWD policies are installed | Tobias Brunner | 2016-09-28 | 1 | -0/+10 |
| | |||||
* | child-cfg: Add option to prefer supplied proposals over locally configured ones | Tobias Brunner | 2016-06-17 | 1 | -1/+3 |
| | |||||
* | vici list-conns sends reauthentication and rekeying time information | Andreas Steffen | 2016-05-04 | 1 | -1/+2 |
| | |||||
* | Implemented IPsec policies restricted to given network interface | Andreas Steffen | 2016-04-09 | 1 | -0/+9 |
| | |||||
* | Support manually-set IPsec policy priorities | Andreas Steffen | 2016-04-09 | 1 | -0/+10 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -37/+43 |
| | |||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -7/+7 |
| | |||||
* | child-cfg: Add equals() method | Tobias Brunner | 2016-03-08 | 1 | -1/+9 |
| | |||||
* | child-cfg: Store connection specific replay window on CHILD_SA config | Martin Willi | 2014-06-17 | 1 | -0/+14 |
| | |||||
* | child-cfg: Allow passing NULL as proposal to add_proposal() | Martin Willi | 2014-05-16 | 1 | -3/+3 |
| | | | | Making the API consistent to the one of ike_cfg. | ||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -5/+5 |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
* | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 1 | -2/+2 |
| | |||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -2/+2 |
| | | | | Mostly found by 'codespell'. | ||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+9 |
| | |||||
* | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -6/+15 |
| | | | | field and ipsec up %startall command | ||||
* | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 1 | -17/+0 |
| | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | ||||
* | Moved kernel interface to libhydra. | Tobias Brunner | 2010-09-02 | 1 | -32/+4 |
| | |||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -2/+3 |
| | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -1/+22 |
| | |||||
* | Add reqid field and getter function to child_cfg_t. | Reto Buerki | 2010-05-04 | 1 | -2/+10 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+310 |