tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	peer-cfg: Use struct to pass data to constructor	Tobias Brunner	2016-04-09	1	-6/+24
\|
*	child-cfg: Use struct to pass data to constructor	Tobias Brunner	2016-04-09	1	-5/+15
\|
*	sql: Also do a reversed ID match	Tobias Brunner	2015-08-17	1	-2/+9
\| \| \| \| \| \| \|	This is required for the case where IDr is not sent (i.e. is %any). The backend manager does the same. Fixes #1044.
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-0/+1
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-0/+1
\|
*	ike: support multiple addresses, ranges and subnets in IKE address config	Martin Willi	2013-09-04	1	-4/+2
\| \| \| \| \| \| \|	Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
*	peer-cfg: add a pull/push mode option to use with mode config	Martin Willi	2013-09-04	1	-1/+1
\|
*	Add a DSCP configuration value to IKE configs	Martin Willi	2013-02-06	1	-2/+1
\|
*	Added an option that allows to force IKEv1 fragmentation	Tobias Brunner	2013-01-12	1	-1/+2
\|
*	Use a connection specific option to en-/disable IKEv1 fragmentation	Tobias Brunner	2012-12-24	1	-1/+1
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	1	-1/+1
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	1	-2/+3
\|
*	Handle comma separated pools as multiple pool names in SQL plugin	Martin Willi	2012-08-30	1	-1/+9
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-1/+5
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-1/+5
\|
*	Replaced usages of CHARON_*_PORT with calls to get_port().	Tobias Brunner	2012-08-08	1	-1/+1
\|
*	Make the UDP ports charon listens for packets on (and uses as source ports) ↵	Tobias Brunner	2012-08-08	1	-1/+1
\| \| \| \|	configurable.
*	implemented the right\|leftallowany feature	Andreas Steffen	2012-06-08	1	-1/+2
\|
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-1/+1
\|
*	Added an aggressive mode peer_cfg option	Martin Willi	2012-03-20	1	-1/+1
\|
*	Use enum to define IKE version on peer_cfg_t.	Tobias Brunner	2012-03-20	1	-1/+1
\| \| \| \|	Replaced all those magic numbers.
*	Added a TFC padding option to child_cfg	Martin Willi	2010-12-20	1	-1/+1
\|
*	stupid typo	Andreas Steffen	2010-12-05	1	-1/+1
\|
*	support of reqid field in SQL database	Andreas Steffen	2010-12-05	1	-6/+7
\|
*	check for malformed IKE and ESP proposals	Andreas Steffen	2010-12-01	1	-0/+10
\|
*	Migrated sql_config_t to INIT/METHOD macros	Andreas Steffen	2010-11-30	1	-26/+20
\|
*	renamed algorithm to proposal	Andreas Steffen	2010-11-30	1	-10/+11
\|
*	store IKE and ESP proposals in SQL database	Andreas Steffen	2010-11-30	1	-16/+78
\|
*	start and route connections defined in an SQL database via start_action ↵	Andreas Steffen	2010-11-28	1	-8/+9
\| \| \| \|	field and ipsec up %startall command
*	configuration of different marks for inbound and outbound direction	Andreas Steffen	2010-07-09	1	-1/+1
\|
*	support of xfrm marks for IKEv2	Andreas Steffen	2010-07-02	1	-1/+1
\|
*	Add reqid field and getter function to child_cfg_t.	Reto Buerki	2010-05-04	1	-1/+1
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	1	-0/+535