aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/stroke
Commit message (Expand)AuthorAgeFilesLines
* stroke: Load general PKCS#8 private keysAndreas Steffen2016-12-172-3/+9
* Save both base and delta CRLs to diskAndreas Steffen2016-10-111-1/+5
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-112-2/+6
* xof: Defined Extended Output FunctionsAndreas Steffen2016-07-291-0/+9
* stroke: Permanently store PINs in credential setTobias Brunner2016-06-061-12/+35
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-24/+29
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-31/+36
* Use standard unsigned integer typesAndreas Steffen2016-03-245-27/+27
* stroke: Correctly print IKE SPIs stored in network orderTobias Brunner2016-03-041-2/+4
* auth-cfg: Make IKE signature schemes configurableTobias Brunner2016-03-041-3/+4
* libhydra: Remove empty unused libraryTobias Brunner2016-03-031-1/+0
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-033-7/+3
* utils: Add enum name for pseudo log group 'any'Tobias Brunner2016-02-051-10/+3
* stroke: List DH groups for CHILD_SA proposalsTobias Brunner2015-12-211-23/+19
* Apply pubkey and signature constraints in vici pluginAndreas Steffen2015-12-171-114/+2
* Refactored certificate management for the vici and stroke interfaces5.4.0dr1Andreas Steffen2015-12-121-128/+29
* Standardized printing of certificate informationAndreas Steffen2015-12-111-445/+68
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-3/+3
* stroke: Make down-nb actually non-blockingTobias Brunner2015-11-091-31/+40
* Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemesAndreas Steffen2015-11-061-3/+3
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-271-1/+1
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-211-2/+2
* stroke: Allow %any as local addressTobias Brunner2015-08-211-3/+7
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-33/+46
* stroke: Change how CA certificates are storedTobias Brunner2015-08-205-58/+285
* stroke: Combine CA certificate load methodsTobias Brunner2015-08-201-82/+74
* stroke: Atomically replace CA and AA certificates when reloading themTobias Brunner2015-08-201-34/+45
* stroke: Properly parse bliss key strength in public key constraintTobias Brunner2015-03-251-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-1/+2
* stroke: Use %u to print stats returned by mallinfo(3)Tobias Brunner2015-03-131-1/+1
* stroke: Enable BLISS-based public key constraintsTobias Brunner2015-03-041-4/+19
* stroke: Support public key constraints for EAP methodsMartin Willi2015-03-031-1/+8
* stroke: Serve ca section CA certificates directly, not over central CA setMartin Willi2015-03-033-5/+85
* stroke: Purge existing CA/AA certificates during rereadMartin Willi2015-03-031-0/+4
* stroke: Use separate credential sets for CA/AA certificatesMartin Willi2015-03-031-3/+21
* stroke: Refactor load_certdir functionMartin Willi2015-03-031-108/+158
* mem-pool: Pass the remote IKE address, to re-acquire() an address during reauthMartin Willi2015-02-201-6/+7
* attribute-handler: Pass full IKE_SA to handler backendsMartin Willi2015-02-201-2/+1
* attribute-provider: Pass full IKE_SA to provider backendsMartin Willi2015-02-201-5/+9
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-5/+8
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-201-3/+3
* controller: Use the CHILD_SA unique_id to terminate CHILD_SAsMartin Willi2015-02-201-1/+1
* stroke: List CHILD_SA unique ID as the primary identifier, but print reqid, tooMartin Willi2015-02-201-5/+6
* Implemented full BLISS support for IKEv2 public key authentication and the pk...Andreas Steffen2014-11-292-5/+19
* stroke: Add support for address range definitions of in-memory poolsTobias Brunner2014-10-301-7/+33
* stroke: Allow specifying the ipsec.secrets location in strongswan.confShea Levy2014-10-021-2/+10
* stroke: Don't log unspecified options of conn and ca sectionsTobias Brunner2014-06-301-37/+50
* starter: Add a replay_window connection optionMartin Willi2014-06-171-0/+4
* plugins: Don't link with -rdynamic on WindowsMartin Willi2014-06-041-1/+1
* ike: Add an additional but separate AEAD proposal to CHILD configMartin Willi2014-05-161-0/+1