Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 2 | -22/+50 | |
| | | ||||||
* | | Log configured IKE_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
| | | ||||||
* | | Log configured CHILD_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
|/ | ||||||
* | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 | |
| | ||||||
* | Pass opaque data to printf hooks and print_in_hook() | Martin Willi | 2012-07-13 | 2 | -15/+15 | |
| | ||||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 3 | -40/+75 | |
| | ||||||
* | Added support for IKEv1 IPComp proposals in proposal substructure. | Tobias Brunner | 2012-05-24 | 2 | -1/+3 | |
| | ||||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -4/+27 | |
| | ||||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 4 | -59/+126 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 2 | -6/+27 | |
| | | ||||||
| * | Fix ike_version_t enum names | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -2/+0 | |
| | | ||||||
| * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 3 | -19/+44 | |
| | | ||||||
| * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | ||||||
| * | Fixed SIGSEGV when logging peer config matches. | Tobias Brunner | 2012-03-20 | 1 | -2/+3 | |
| | | ||||||
| * | Log peer cfg enumeration externally for flexibility | Martin Willi | 2012-03-20 | 1 | -3/+0 | |
| | | ||||||
| * | Accept NULL identities passed to peer config enumeration | Martin Willi | 2012-03-20 | 1 | -9/+9 | |
| | | ||||||
| * | Added a get_rekey/reauth_time() jitter parameter to get time without ↵ | Martin Willi | 2012-03-20 | 2 | -8/+10 | |
| | | | | | | | | randomization | |||||
| * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 2 | -17/+38 | |
| | | | | | | | | Replaced all those magic numbers. | |||||
* | | Make AES-CMAC actually usable for IKEv2. | Tobias Brunner | 2012-04-04 | 1 | -0/+5 | |
|/ | ||||||
* | Added additional debug info to peer config matching | Martin Willi | 2011-10-11 | 1 | -0/+8 | |
| | ||||||
* | Migrated peer_cfg_t to INIT/METHOD macros. | Tobias Brunner | 2011-08-03 | 2 | -173/+122 | |
| | ||||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 4 | -10/+10 | |
| | | | | Mostly found by 'codespell'. | |||||
* | Replaced more complex iterator usages. | Tobias Brunner | 2011-07-06 | 1 | -10/+10 | |
| | ||||||
* | Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string | Martin Willi | 2011-04-20 | 1 | -4/+10 | |
| | ||||||
* | Added proposal keywords for ESN support | Martin Willi | 2011-04-20 | 2 | -18/+0 | |
| | ||||||
* | Filter out non-matching ike_cfg in backend manager, so backends don't have to | Martin Willi | 2011-02-03 | 1 | -0/+10 | |
| | ||||||
* | Added a null-safe strdup variant | Martin Willi | 2011-01-05 | 2 | -2/+2 | |
| | ||||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 2 | -2/+24 | |
| | ||||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 1 | -4/+5 | |
| | ||||||
* | check for malformed IKE and ESP proposals | Andreas Steffen | 2010-12-01 | 1 | -0/+1 | |
| | ||||||
* | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 2 | -9/+30 | |
| | | | | field and ipsec up %startall command | |||||
* | Migrated child_cfg_t to INIT/METHOD macros | Andreas Steffen | 2010-11-26 | 1 | -145/+89 | |
| | ||||||
* | Migrated backend_manager_t to INIT/METHOD macros | Andreas Steffen | 2010-11-25 | 1 | -37/+27 | |
| | ||||||
* | Store proposal number in proposal_t to reuse it in the selected proposal | Martin Willi | 2010-10-28 | 2 | -6/+29 | |
| | | | | | According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply. | |||||
* | Migrated proposal_t to INIT/METHOD macros | Martin Willi | 2010-10-28 | 1 | -80/+54 | |
| | ||||||
* | Moved ipsec_transform_t to kernel_ipsec.h in libhydra. | Tobias Brunner | 2010-09-02 | 2 | -26/+0 | |
| | | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations. | |||||
* | Moved kernel interface to libhydra. | Tobias Brunner | 2010-09-02 | 1 | -32/+4 | |
| | ||||||
* | Include CCM/GCM algorithms in IKEv2 proposals, if supported | Martin Willi | 2010-08-19 | 1 | -9/+10 | |
| | ||||||
* | Make function to test if an encryption algorithm is an AEAD alg public | Martin Willi | 2010-08-19 | 1 | -24/+2 | |
| | ||||||
* | Support Camellia XCBC algorithms in proposal | Martin Willi | 2010-08-13 | 1 | -0/+3 | |
| | ||||||
* | Added Camellia, AES-CTR to default IKE proposal, if supported | Martin Willi | 2010-08-13 | 1 | -2/+6 | |
| | ||||||
* | Moved credential manager to libstrongswan | Martin Willi | 2010-07-13 | 3 | -989/+1 | |
| | ||||||
* | Group membership constraint is fulfilled if subject is member in one of the ↵ | Martin Willi | 2010-07-09 | 2 | -8/+20 | |
| | | | | groups | |||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 2 | -9/+15 | |
| | ||||||
* | Use the group constraint in a more generic fashion, not only for attribute ↵ | Martin Willi | 2010-07-05 | 2 | -15/+22 | |
| | | | | certificates | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 2 | -3/+58 | |
| | ||||||
* | Explicitly include stdint.h for UINT64_MAX. | Tobias Brunner | 2010-06-15 | 1 | -0/+2 | |
| | | | | This is required on FreeBSD 8. | |||||
* | Add reqid field and getter function to child_cfg_t. | Reto Buerki | 2010-05-04 | 2 | -3/+26 | |
| | ||||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 1 | -0/+3 | |
| |