aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/config
Commit message (Collapse)AuthorAgeFilesLines
...
| * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-201-0/+2
| |
| * Fixed SIGSEGV when logging peer config matches.Tobias Brunner2012-03-201-2/+3
| |
| * Log peer cfg enumeration externally for flexibilityMartin Willi2012-03-201-3/+0
| |
| * Accept NULL identities passed to peer config enumerationMartin Willi2012-03-201-9/+9
| |
| * Added a get_rekey/reauth_time() jitter parameter to get time without ↵Martin Willi2012-03-202-8/+10
| | | | | | | | randomization
| * Use enum to define IKE version on peer_cfg_t.Tobias Brunner2012-03-202-17/+38
| | | | | | | | Replaced all those magic numbers.
* | Make AES-CMAC actually usable for IKEv2.Tobias Brunner2012-04-041-0/+5
|/
* Added additional debug info to peer config matchingMartin Willi2011-10-111-0/+8
|
* Migrated peer_cfg_t to INIT/METHOD macros.Tobias Brunner2011-08-032-173/+122
|
* Fixed common misspellings.Tobias Brunner2011-07-204-10/+10
| | | | Mostly found by 'codespell'.
* Replaced more complex iterator usages.Tobias Brunner2011-07-061-10/+10
|
* Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in stringMartin Willi2011-04-201-4/+10
|
* Added proposal keywords for ESN supportMartin Willi2011-04-202-18/+0
|
* Filter out non-matching ike_cfg in backend manager, so backends don't have toMartin Willi2011-02-031-0/+10
|
* Added a null-safe strdup variantMartin Willi2011-01-052-2/+2
|
* Added a TFC padding option to child_cfgMartin Willi2010-12-202-2/+24
|
* trace back crypto algorithms to the plugins that registered themAndreas Steffen2010-12-181-4/+5
|
* check for malformed IKE and ESP proposalsAndreas Steffen2010-12-011-0/+1
|
* start and route connections defined in an SQL database via start_action ↵Andreas Steffen2010-11-282-9/+30
| | | | field and ipsec up %startall command
* Migrated child_cfg_t to INIT/METHOD macrosAndreas Steffen2010-11-261-145/+89
|
* Migrated backend_manager_t to INIT/METHOD macrosAndreas Steffen2010-11-251-37/+27
|
* Store proposal number in proposal_t to reuse it in the selected proposalMartin Willi2010-10-282-6/+29
| | | | | According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply.
* Migrated proposal_t to INIT/METHOD macrosMartin Willi2010-10-281-80/+54
|
* Moved ipsec_transform_t to kernel_ipsec.h in libhydra.Tobias Brunner2010-09-022-26/+0
| | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
* Moved kernel interface to libhydra.Tobias Brunner2010-09-021-32/+4
|
* Include CCM/GCM algorithms in IKEv2 proposals, if supportedMartin Willi2010-08-191-9/+10
|
* Make function to test if an encryption algorithm is an AEAD alg publicMartin Willi2010-08-191-24/+2
|
* Support Camellia XCBC algorithms in proposalMartin Willi2010-08-131-0/+3
|
* Added Camellia, AES-CTR to default IKE proposal, if supportedMartin Willi2010-08-131-2/+6
|
* Moved credential manager to libstrongswanMartin Willi2010-07-133-989/+1
|
* Group membership constraint is fulfilled if subject is member in one of the ↵Martin Willi2010-07-092-8/+20
| | | | groups
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-092-9/+15
|
* Use the group constraint in a more generic fashion, not only for attribute ↵Martin Willi2010-07-052-15/+22
| | | | certificates
* support of xfrm marks for IKEv2Andreas Steffen2010-07-022-3/+58
|
* Explicitly include stdint.h for UINT64_MAX.Tobias Brunner2010-06-151-0/+2
| | | | This is required on FreeBSD 8.
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-042-3/+26
|
* Added support for DH groups 22, 23 and 24, patch contributed by Joy LattenMartin Willi2010-04-191-0/+3
|
* Moving charon to libcharon.Tobias Brunner2010-03-1913-0/+5156