aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/config
Commit message (Expand)AuthorAgeFilesLines
* proposal: Remove MODP-1024 from default IKE proposalTobias Brunner2017-11-081-2/+2
* proposal: Remove MD5 from default IKE proposalTobias Brunner2017-11-081-2/+5
* proposal: Remove deprecated algorithms from default ESP and AH proposalsTobias Brunner2017-11-081-4/+0
* child-cfg: Optionally set mark on inbound SATobias Brunner2017-11-021-0/+3
* ike-cfg: Fix memory leak when checking for configured addressTobias Brunner2017-08-291-0/+1
* peer-cfg: Use an rwlock instead of a mutex to safely access child-cfgsTobias Brunner2017-07-271-15/+15
* ike-cfg: Fix memory leak when matching against rangesTobias Brunner2017-05-291-1/+1
* linked-list: Change return value of find_first() and signature of its callbackTobias Brunner2017-05-261-3/+6
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-262-31/+39
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-7/+15
* child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256Tobias Brunner2017-05-261-0/+3
* child-cfg: Add flag to enable hardware offloadTobias Brunner2017-05-231-0/+3
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-232-120/+47
* Add an option to announce support for IKE fragmentation but not sending fragm...Tobias Brunner2017-05-231-3/+5
* child-cfg: Always apply hosts to traffic selectors if proposing transport modeTobias Brunner2017-02-271-14/+19
* ike-cfg: Add helper function to determine if a given IP address was configuredTobias Brunner2017-02-172-2/+46
* peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-162-14/+14
* proposal: Copy SPI and proposal number from correct proposal in select()Tobias Brunner2017-02-064-7/+22
* proposal: Remove RFC 5114 MODP DH groups from default proposalMartin Willi2016-11-151-2/+4
* proposal: Add curve25519 and curve448 to default proposalTobias Brunner2016-11-141-0/+2
* peer-cfg: Fix memory leak when replacing child configsTobias Brunner2016-11-111-0/+1
* Fixed some typos, courtesy of codespellTobias Brunner2016-10-141-1/+1
* proposal: Correctly add AES-GMAC for AH proposalsTobias Brunner2016-10-051-0/+41
* proposal: Enforce separate proposals for AEAD and classic encryption algorithmsTobias Brunner2016-10-051-16/+22
* proposal: Make sure there is a PRF defined in IKE proposalsTobias Brunner2016-10-051-14/+34
* proposal: Make DH groups mandatory in IKE proposals parsed from stringsTobias Brunner2016-10-051-4/+11
* child-cfg: Add setting that controls whether outbound FWD policies are installedTobias Brunner2016-09-282-0/+24
* Created newhope plugin implementing the New Hope key exchange algorithmAndreas Steffen2016-08-101-0/+1
* child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-172-18/+33
* ike-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-172-27/+43
* proposal: Remove MODP_NONE from IKE proposals parsed from stringsTobias Brunner2016-06-171-0/+10
* proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-171-6/+14
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-043-4/+9
* proposal: Remove some weaker and rarely used DH groups from the default proposalTobias Brunner2016-05-041-3/+5
* Implemented IPsec policies restricted to given network interfaceAndreas Steffen2016-04-092-6/+27
* Support manually-set IPsec policy prioritiesAndreas Steffen2016-04-092-0/+25
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-092-72/+72
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-092-76/+62
* Use standard unsigned integer typesAndreas Steffen2016-03-248-84/+84
* peer-cfg: Add method to atomically replace child configsTobias Brunner2016-03-082-2/+128
* ike-cfg: Use new method to compare proposal lists in equals()Tobias Brunner2016-03-081-20/+4
* peer-cfg: Use new method to compare linked lists in equals()Tobias Brunner2016-03-081-36/+3
* child-cfg: Add equals() methodTobias Brunner2016-03-082-2/+62
* peer-cfg: Set DPD timeout to at least DPD delayTobias Brunner2016-02-011-0/+4
* 128 bit default security strength for IKE and ESP algorithmsAndreas Steffen2015-12-171-40/+140
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-1/+1
* Fix some Doxygen issuesTobias Brunner2015-08-271-3/+3
* ike-cfg: Add helper function to determine address family of IP addressesTobias Brunner2015-07-272-1/+59
* proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algori...Tobias Brunner2014-10-311-0/+2
* ike-cfg: Use host_create_from_range() helperTobias Brunner2014-10-301-16/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-21 18:25:49 +0000