tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Migrate all enumerators to venumerate() interface change	Tobias Brunner	2017-05-26	1	-2/+6
\|
*	dnscert: Properly free enumerated certificates	Tobias Brunner	2016-09-20	1	-8/+11
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	2	-5/+5
\|
*	libhydra: Remove empty unused library	Tobias Brunner	2016-03-03	1	-1/+0
\|
*	plugins: Don't link with -rdynamic on Windows	Martin Willi	2014-06-04	1	-1/+1
\|
*	libcharon: Use lib->ns instead of charon->name	Tobias Brunner	2014-02-12	1	-1/+1
\|
*	Doxygen fixes	Tobias Brunner	2013-10-15	1	-2/+1
\|
*	dnscert: Add DNS CERT support for pubkey authentication	Ruslan N. Marchenko	2013-10-11	7	-0/+821
	Add DNSSEC protected CERT RR delivered certificate authentication. The new dnscert plugin is based on the ipseckey plugin and relies on the existing PEM decoder as well as x509 and PGP parsers. As such the plugin expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads. The plugin is targeted to improve interoperability with Racoon, which supports this type of authentication, ignoring in-stream certificates and using only DNS provided certificates for FQDN IDs.