aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/config
Commit message (Expand)AuthorAgeFilesLines
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
* proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4
* Doxygen fixesTobias Brunner2013-10-151-1/+1
* proposal: Strip redundant integrity algos for ESP proposals onlyMartin Willi2013-10-111-16/+19
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-042-46/+211
* ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addrMartin Willi2013-09-043-25/+12
* backends: use ike_cfg host matching functionsMartin Willi2013-09-041-38/+7
* ike-cfg: add methods to match a host against configured local/remote addressesMartin Willi2013-09-042-0/+62
* ike-cfg: add a method to resolve local/remote hosts with portMartin Willi2013-09-042-0/+30
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-042-4/+26
* proposal: correctly enumerate registered AEADs to build default IKE proposalMartin Willi2013-07-191-6/+22
* Fix various API doc issues and typosTobias Brunner2013-07-182-7/+7
* proposal: use array to store proposal listMartin Willi2013-07-171-25/+18
* proposal: use a single list to store all transformsMartin Willi2013-07-171-308/+174
* Raise an alert if the responding peer narrowed traffic selectorsMartin Willi2013-06-191-7/+24
* Use subset matching instead of is_contained_in() to select a child_cfgMartin Willi2013-06-131-4/+8
* Add a DSCP configuration value to IKE configsMartin Willi2013-02-062-2/+23
* Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-122-5/+19
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-242-3/+27
* Include 'aggressive' when comparing peer_cfg_t objectsTobias Brunner2012-11-071-0/+1
* proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove allTobias Brunner2012-10-243-6/+15
* Moved data structures to new collections subfolderTobias Brunner2012-10-247-7/+7
* Moved host_t and host_resolver_t to a new networking subfolderTobias Brunner2012-10-243-3/+3
* Only add an implicit PRF based on the MAC alg if no PRF given in proposalMartin Willi2012-10-241-38/+38
* Remove peer_cfg IKE version matching, as it is done in ike_cfg matchingMartin Willi2012-10-241-22/+3
* Respect IKE version while selecting an ike_cfg as responderMartin Willi2012-10-242-11/+34
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-242-11/+4
* Add IKE version information to ike_cfg_tMartin Willi2012-10-242-2/+24
* Move ike_version_t definition from peer_cfg_t to ike_cfg_tMartin Willi2012-10-244-24/+24
* Make sure we propose a dynamic TS if we don't have hosts to derive a TS fromTobias Brunner2012-09-211-10/+8
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-184-48/+55
* Added possibility to register custom proposal keywordsTobias Brunner2012-09-131-2/+2
* Removed len argument from proposal_get_token()Tobias Brunner2012-09-131-24/+23
* Ensure traffic selectors are dynamic before calling set_address() when derivi...Tobias Brunner2012-09-121-2/+2
* Add uniqueids=never to ignore INITIAL_CONTACT notifiesTobias Brunner2012-09-101-3/+5
* Merge branch 'multi-vip'Martin Willi2012-08-312-35/+94
|\
| * Support multiple address pools configured on a peer_cfgMartin Willi2012-08-302-15/+46
| * Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-302-22/+50
* | Log configured IKE_SA proposals as initiatorTobias Brunner2012-08-241-0/+2
* | Log configured CHILD_SA proposals as initiatorTobias Brunner2012-08-241-0/+2
|/
* Add DH group 15 (MODP-3072) to IKE proposalAdrian-Ken Rueegsegger2012-08-061-0/+1
* Pass opaque data to printf hooks and print_in_hook()Martin Willi2012-07-132-15/+15
* implemented the right|leftallowany featureAndreas Steffen2012-06-083-40/+75
* Added support for IKEv1 IPComp proposals in proposal substructure.Tobias Brunner2012-05-242-1/+3
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-172-4/+27
* Merge branch 'ikev1'Martin Willi2012-05-024-59/+126
|\
| * Added an aggressive mode peer_cfg optionMartin Willi2012-03-202-6/+27
| * Fix ike_version_t enum namesMartin Willi2012-03-201-1/+1
| * Separated libcharon/sa directory with ikev1 and ikev2 subfoldersMartin Willi2012-03-201-2/+0
| * Pass IKE version to peer config enumerator, filter configsMartin Willi2012-03-203-19/+44