aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/stroke
Commit message (Expand)AuthorAgeFilesLines
* counters: Move IKE event counter collection from stroke to a separate pluginTobias Brunner2017-11-085-387/+47
* stroke: Don't load configs with invalid proposalsTobias Brunner2017-07-051-7/+20
* linked-list: Change return value of find_first() and signature of its callbackTobias Brunner2017-05-262-10/+8
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-264-82/+105
* stroke: Make 96-bit truncation for SHA-256 configurableTobias Brunner2017-05-262-1/+3
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-232-5/+5
* peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-161-21/+2
* stroke: Use peer name as namespace for shunt policiesTobias Brunner2017-02-161-2/+18
* shunt-manager: Add an optional namespace for each shuntTobias Brunner2017-02-162-3/+3
* stroke: Default to %dynamic if no valid TS are specified in left|rightsubnetTobias Brunner2017-01-251-57/+44
* stroke: Load general PKCS#8 private keysAndreas Steffen2016-12-172-3/+9
* Save both base and delta CRLs to diskAndreas Steffen2016-10-111-1/+5
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-112-2/+6
* xof: Defined Extended Output FunctionsAndreas Steffen2016-07-291-0/+9
* stroke: Permanently store PINs in credential setTobias Brunner2016-06-061-12/+35
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-24/+29
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-31/+36
* Use standard unsigned integer typesAndreas Steffen2016-03-245-27/+27
* stroke: Correctly print IKE SPIs stored in network orderTobias Brunner2016-03-041-2/+4
* auth-cfg: Make IKE signature schemes configurableTobias Brunner2016-03-041-3/+4
* libhydra: Remove empty unused libraryTobias Brunner2016-03-031-1/+0
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-033-7/+3
* utils: Add enum name for pseudo log group 'any'Tobias Brunner2016-02-051-10/+3
* stroke: List DH groups for CHILD_SA proposalsTobias Brunner2015-12-211-23/+19
* Apply pubkey and signature constraints in vici pluginAndreas Steffen2015-12-171-114/+2
* Refactored certificate management for the vici and stroke interfaces5.4.0dr1Andreas Steffen2015-12-121-128/+29
* Standardized printing of certificate informationAndreas Steffen2015-12-111-445/+68
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-3/+3
* stroke: Make down-nb actually non-blockingTobias Brunner2015-11-091-31/+40
* Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemesAndreas Steffen2015-11-061-3/+3
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-271-1/+1
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-211-2/+2
* stroke: Allow %any as local addressTobias Brunner2015-08-211-3/+7
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-33/+46
* stroke: Change how CA certificates are storedTobias Brunner2015-08-205-58/+285
* stroke: Combine CA certificate load methodsTobias Brunner2015-08-201-82/+74
* stroke: Atomically replace CA and AA certificates when reloading themTobias Brunner2015-08-201-34/+45
* stroke: Properly parse bliss key strength in public key constraintTobias Brunner2015-03-251-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-1/+2
* stroke: Use %u to print stats returned by mallinfo(3)Tobias Brunner2015-03-131-1/+1
* stroke: Enable BLISS-based public key constraintsTobias Brunner2015-03-041-4/+19
* stroke: Support public key constraints for EAP methodsMartin Willi2015-03-031-1/+8
* stroke: Serve ca section CA certificates directly, not over central CA setMartin Willi2015-03-033-5/+85
* stroke: Purge existing CA/AA certificates during rereadMartin Willi2015-03-031-0/+4
* stroke: Use separate credential sets for CA/AA certificatesMartin Willi2015-03-031-3/+21
* stroke: Refactor load_certdir functionMartin Willi2015-03-031-108/+158
* mem-pool: Pass the remote IKE address, to re-acquire() an address during reauthMartin Willi2015-02-201-6/+7
* attribute-handler: Pass full IKE_SA to handler backendsMartin Willi2015-02-201-2/+1
* attribute-provider: Pass full IKE_SA to provider backendsMartin Willi2015-02-201-5/+9
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-5/+8