| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Use subset matching instead of is_contained_in() to select a child_cfg | Martin Willi | 2013-06-13 | 1 | -4/+8 | |
| | | | | | | | | If one selector has a wider IP range than the other, but the other has a wider port/protocol selector than the first one, none is completely contained in the other. The check for a match using is_contained_in() therefore would fail. Using get_subset() can handle such cases, fixing configuration selection. | |||||
| * | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 2 | -2/+23 | |
| | | ||||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 2 | -5/+19 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 2 | -3/+27 | |
| | | ||||||
| * | Include 'aggressive' when comparing peer_cfg_t objects | Tobias Brunner | 2012-11-07 | 1 | -0/+1 | |
| | | ||||||
| * | proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove all | Tobias Brunner | 2012-10-24 | 3 | -6/+15 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 7 | -7/+7 | |
| | | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 3 | -3/+3 | |
| | | ||||||
| * | Only add an implicit PRF based on the MAC alg if no PRF given in proposal | Martin Willi | 2012-10-24 | 1 | -38/+38 | |
| | | ||||||
| * | Remove peer_cfg IKE version matching, as it is done in ike_cfg matching | Martin Willi | 2012-10-24 | 1 | -22/+3 | |
| | | ||||||
| * | Respect IKE version while selecting an ike_cfg as responder | Martin Willi | 2012-10-24 | 2 | -11/+34 | |
| | | ||||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 2 | -11/+4 | |
| | | ||||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 2 | -2/+24 | |
| | | ||||||
| * | Move ike_version_t definition from peer_cfg_t to ike_cfg_t | Martin Willi | 2012-10-24 | 4 | -24/+24 | |
| | | ||||||
| * | Make sure we propose a dynamic TS if we don't have hosts to derive a TS from | Tobias Brunner | 2012-09-21 | 1 | -10/+8 | |
| | | | | | 7ee37114 removed this behavior. | |||||
| * | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 4 | -48/+55 | |
| | | ||||||
| * | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+2 | |
| | | | | | Keyword lookup and registration are handled via the new lib->proposal object. | |||||
| * | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -24/+23 | |
| | | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | |||||
| * | Ensure traffic selectors are dynamic before calling set_address() when ↵ | Tobias Brunner | 2012-09-12 | 1 | -2/+2 | |
| | | | | | deriving them | |||||
| * | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 1 | -3/+5 | |
| | | | | | | | With uniqueids=no the daemon still deletes any existing IKE_SA with the same peer if an INITIAL_CONTACT notify is received. With this new option it also ignores these notifies. | |||||
| * | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 2 | -35/+94 | |
| |\ | | | | | | | | | | | | | Brings support for multiple virtual IPs and multiple pools in left/rigthsourceip definitions. Also introduces the new left/rightdns options to configure requested DNS server address family and respond with multiple connection specific servers. | |||||
| | * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 2 | -15/+46 | |
| | | | ||||||
| | * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 2 | -22/+50 | |
| | | | ||||||
| * | | Log configured IKE_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
| | | | ||||||
| * | | Log configured CHILD_SA proposals as initiator | Tobias Brunner | 2012-08-24 | 1 | -0/+2 | |
| |/ | ||||||
| * | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 | |
| | | ||||||
| * | Pass opaque data to printf hooks and print_in_hook() | Martin Willi | 2012-07-13 | 2 | -15/+15 | |
| | | ||||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 3 | -40/+75 | |
| | | ||||||
| * | Added support for IKEv1 IPComp proposals in proposal substructure. | Tobias Brunner | 2012-05-24 | 2 | -1/+3 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -4/+27 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 4 | -59/+126 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 2 | -6/+27 | |
| | | | ||||||
| | * | Fix ike_version_t enum names | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -2/+0 | |
| | | | ||||||
| | * | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 3 | -19/+44 | |
| | | | ||||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | ||||||
| | * | Fixed SIGSEGV when logging peer config matches. | Tobias Brunner | 2012-03-20 | 1 | -2/+3 | |
| | | | ||||||
| | * | Log peer cfg enumeration externally for flexibility | Martin Willi | 2012-03-20 | 1 | -3/+0 | |
| | | | ||||||
| | * | Accept NULL identities passed to peer config enumeration | Martin Willi | 2012-03-20 | 1 | -9/+9 | |
| | | | ||||||
| | * | Added a get_rekey/reauth_time() jitter parameter to get time without ↵ | Martin Willi | 2012-03-20 | 2 | -8/+10 | |
| | | | | | | | | | randomization | |||||
| | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 2 | -17/+38 | |
| | | | | | | | | | Replaced all those magic numbers. | |||||
| * | | Make AES-CMAC actually usable for IKEv2. | Tobias Brunner | 2012-04-04 | 1 | -0/+5 | |
| |/ | ||||||
| * | Added additional debug info to peer config matching | Martin Willi | 2011-10-11 | 1 | -0/+8 | |
| | | ||||||
| * | Migrated peer_cfg_t to INIT/METHOD macros. | Tobias Brunner | 2011-08-03 | 2 | -173/+122 | |
| | | ||||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 4 | -10/+10 | |
| | | | | | Mostly found by 'codespell'. | |||||
| * | Replaced more complex iterator usages. | Tobias Brunner | 2011-07-06 | 1 | -10/+10 | |
| | | ||||||
| * | Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string | Martin Willi | 2011-04-20 | 1 | -4/+10 | |
| | | ||||||
| * | Added proposal keywords for ESN support | Martin Willi | 2011-04-20 | 2 | -18/+0 | |
| | | ||||||
| * | Filter out non-matching ike_cfg in backend manager, so backends don't have to | Martin Willi | 2011-02-03 | 1 | -0/+10 | |
| | | ||||||
| * | Added a null-safe strdup variant | Martin Willi | 2011-01-05 | 2 | -2/+2 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |