tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	vici: Don't use a default rand_time larger than half of rekey/reauth_time	Martin Willi	2015-03-03	1	-3/+11
\|
*	vici: If a IKE reauth_time is configured, disable the default rekey_time	Martin Willi	2015-03-03	1	-1/+16
\|
*	controller: Use the CHILD_SA unique_id to terminate CHILD_SAs	Martin Willi	2015-02-20	1	-10/+10
\|
*	vici: Support a replay_window CHILD_SA option	Martin Willi	2014-06-17	1	-0/+16
\|
*	vici: Add Windows support	Martin Willi	2014-06-04	1	-1/+0
\|
*	ike: Add an additional but separate AEAD proposal to CHILD config	Martin Willi	2014-05-16	1	-2/+10
\| \| \| \| \| \| \|	This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
*	ike: Add an additional but separate AEAD proposal to IKE config, if supported	Martin Willi	2014-05-16	1	-10/+25
\|
*	vici: Support the close_action keyword, as we have it documented	Martin Willi	2014-05-14	1	-1/+6
\|
*	vici: Properly filter by CHILD_SA name while undoing start actions	Martin Willi	2014-05-07	1	-2/+5
\|
*	vici: Fallback to socket listening port if no explicit local port specified	Martin Willi	2014-05-07	1	-1/+4
\|
*	vici: Support a "mtu" value for the tfc_padding option	Martin Willi	2014-05-07	1	-2/+16
\|
*	vici: Handle the "trap" action as an alias for "route"	Martin Willi	2014-05-07	1	-0/+1
\|
*	vici: Have an explicit "relaxed" keyword for the default revocation policy	Martin Willi	2014-05-07	1	-1/+5
\|
*	vici: Use a default child rekey time of 1 hour	Martin Willi	2014-05-07	1	-0/+6
\|
*	vici: Use a default IKE rekey time of 4 hours	Martin Willi	2014-05-07	1	-0/+6
\|
*	vici: Support referencing external named pools for peer configs	Martin Willi	2014-05-07	1	-0/+14
\|
*	vici: Actually add configured virtual IPs to peer config	Martin Willi	2014-05-07	1	-0/+5
\|
*	vici: Use a default rand_time of the difference between hard and soft lifetimes	Martin Willi	2014-05-07	1	-0/+26
\|
*	vici: Use a default hard lifetime of 110% of the soft lifetime	Martin Willi	2014-05-07	1	-0/+37
\|
*	vici: Perform specified start_action on connection load, undo it on unload	Martin Willi	2014-05-07	1	-2/+185
\|
*	vici: Support pinning end entity and CA certificates to connections	Martin Willi	2014-05-07	1	-0/+37
\|
*	vici: Support missing groups option in auth config	Martin Willi	2014-05-07	1	-1/+24
\|
*	vici: Add unload-conn and get-conns commands to manage loaded connections	Martin Willi	2014-05-07	1	-0/+62
\|
*	vici: Add backend providing in-memory connections	Martin Willi	2014-05-07	1	-0/+1539