tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Migrate all enumerators to venumerate() interface change	Tobias Brunner	2017-05-26	1	-2/+7
\|
*	peer-cfg: Use struct to pass data to constructor	Tobias Brunner	2016-04-09	1	-3/+10
\|
*	child-cfg: Use struct to pass data to constructor	Tobias Brunner	2016-04-09	1	-6/+7
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-1/+1
\|
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-0/+1
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-0/+1
\|
*	ike: support multiple addresses, ranges and subnets in IKE address config	Martin Willi	2013-09-04	1	-2/+2
\| \| \| \| \| \| \|	Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
*	peer-cfg: add a pull/push mode option to use with mode config	Martin Willi	2013-09-04	1	-2/+2
\|
*	Reuse reqid for trap policies installed for dpd\|closeaction=hold	Tobias Brunner	2013-07-01	1	-1/+1
\|
*	Add a DSCP configuration value to IKE configs	Martin Willi	2013-02-06	1	-2/+1
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-1/+1
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	1	-1/+1
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	1	-1/+1
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	1	-1/+1
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-1/+1
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-1/+1
\|
*	Replaced usages of CHARON_*_PORT with calls to get_port().	Tobias Brunner	2012-08-08	1	-1/+2
\|
*	Make the UDP ports charon listens for packets on (and uses as source ports) ↵	Tobias Brunner	2012-08-08	1	-1/+1
\| \| \| \|	configurable.
*	implemented the right\|leftallowany feature	Andreas Steffen	2012-06-08	1	-2/+2
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+1
\|
*	Added an aggressive mode peer_cfg option	Martin Willi	2012-03-20	1	-1/+1
\|
*	Use enum to define IKE version on peer_cfg_t.	Tobias Brunner	2012-03-20	1	-1/+1
\| \| \| \|	Replaced all those magic numbers.
*	Added a TFC padding option to child_cfg	Martin Willi	2010-12-20	1	-1/+1
\|
*	start and route connections defined in an SQL database via start_action ↵	Andreas Steffen	2010-11-28	1	-2/+2
\| \| \| \|	field and ipsec up %startall command
*	Migrated ha plugin to INIT/METHOD macros	Martin Willi	2010-07-26	1	-39/+30
\|
*	Moved credential manager to libstrongswan	Martin Willi	2010-07-13	1	-2/+2
\|
*	configuration of different marks for inbound and outbound direction	Andreas Steffen	2010-07-09	1	-1/+2
\|
*	support of xfrm marks for IKEv2	Andreas Steffen	2010-07-02	1	-2/+2
\|
*	Add reqid field and getter function to child_cfg_t.	Reto Buerki	2010-05-04	1	-1/+1
\|
*	Updated HA plugin to new APIs	Martin Willi	2010-04-07	1	-2/+3
\|
*	Moved ha plugin to libcharon	Martin Willi	2010-04-07	1	-0/+297