aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins
Commit message (Expand)AuthorAgeFilesLines
...
* Use exact mask when calling umask(2)Tobias Brunner2013-10-292-2/+2
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
* Fixed some typosTobias Brunner2013-10-291-1/+1
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
* updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-171-2/+23
* stroke: Reuse reqids of established CHILD_SAs when routing connectionsTobias Brunner2013-10-171-1/+45
* Doxygen fixesTobias Brunner2013-10-151-2/+1
* eap-radius: Forward RAT_FRAMED_IP_NETMASK as INTERNAL_IP4_NETMASKTobias Brunner2013-10-111-0/+5
* eap-radius: Forward UNITY_SPLIT_INCLUDE or UNITY_LOCAL_LAN attributesTobias Brunner2013-10-111-0/+93
* eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributesTobias Brunner2013-10-111-3/+25
* dnscert: Add DNS CERT support for pubkey authenticationRuslan N. Marchenko2013-10-117-0/+821
* ipseckey: Properly handle failure to create a certificateTobias Brunner2013-10-111-33/+28
* ipseckey: Refactor creation of certificate enumeratorTobias Brunner2013-10-111-86/+81
* ipseckey: Depend on plugin features to create public key and certificate objectsTobias Brunner2013-10-111-0/+2
* kernel-libipsec: Don't ignore policies of type != POLICY_IPSECTobias Brunner2013-10-111-5/+0
* kernel-libipsec: Add an option to allow remote TS to match the IKE peerTobias Brunner2013-10-111-2/+9
* socket-default: Allow setting firewall mark on outbound packetsTobias Brunner2013-10-111-0/+18
* sql: Don't use MyISAM engine and set collation/charset for all tablesTobias Brunner2013-10-111-26/+25
* kernel-libipsec: Support ESPv3 TFC paddingMartin Willi2013-10-111-1/+1
* kernel-libipsec: Support query_sa() to report usage statisticsMartin Willi2013-10-111-1/+2
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-112-2/+2
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-112-2/+2
* updown: Add a PLUTO_PROTO variable set to 'ah' or 'esp'Martin Willi2013-10-111-0/+2
* stroke: List proposals in statusall without leading '/' in AH SAsMartin Willi2013-10-111-1/+7
* stroke: Configure proposal with AH protocol if 'ah' option setMartin Willi2013-10-112-11/+16
* Keep a copy of the tnccs instance for PT-TLS handoverAndreas Steffen2013-10-091-2/+16
* xauth-pam: Make trimming of email addresses optional5.1.1dr4Tobias Brunner2013-10-041-4/+9
* eap-radius: Increase buffer for attributes sent in RADIUS accounting messagesTobias Brunner2013-09-271-1/+1
* load-tester: Fix crash if private key was not loaded successfullyTobias Brunner2013-09-241-1/+1
* Implemented TCG/PB-PDP_Referral messageAndreas Steffen2013-09-171-0/+12
* stroke: don't remove a matching peer config if used by other child configsMartin Willi2013-09-131-4/+3
* sockets: Initialize the whole ancillary data buffer not only the actual structTobias Brunner2013-09-102-4/+4
* Fixed double free causing swapped ends to crash5.1.1dr3Andreas Steffen2013-09-071-1/+0
* load-tester: support extended traffic selector syntax, as in leftsubnetMartin Willi2013-09-041-13/+168
* load-tester: add an option to test transport/beet connectionsMartin Willi2013-09-041-1/+21
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-049-54/+85
* ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addrMartin Willi2013-09-043-7/+5
* stroke: ignore a leftsourceip if a rightsourceip is given as wellMartin Willi2013-09-041-1/+7
* stroke: re-enable modeconfig keywordMartin Willi2013-09-041-1/+1
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-048-10/+11
* xauth-generic: honor requested XAuth credential types as a clientMartin Willi2013-09-031-16/+51
* eap-radius: support XAuth configuration profiles, defining multiple XAuth roundsMartin Willi2013-09-031-22/+157
* xauth: add a configuration string option to be passed to XAuth instancesMartin Willi2013-09-0311-13/+27
* Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp pluginAndreas Steffen2013-08-261-76/+95
* stroke: stop enumerating IKE_SAs in statusall if output stream gets closedMartin Willi2013-08-231-1/+1
* Process PB-TNC batches received via PT-TLS asynchronouslyAndreas Steffen2013-08-191-4/+1
* Show host address of peer connecting to PT-TLS socketAndreas Steffen2013-08-151-1/+7
* enabled SASL PLAIN authenticationAndreas Steffen2013-08-151-2/+2
* PT-TLS connection is properly terminatedAndreas Steffen2013-08-151-3/+2
* moved tnc_imv plugin to libtnccs thanks to recommendation callback functionAndreas Steffen2013-08-1512-1887/+79