| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | In mode_config, destroy temporary pool list instead of the virtual IP list twice | Martin Willi | 2012-09-05 | 1 | -1/+1 | |
| | | ||||||
| * | Request and acquire multiple virtual IPs in IKEv1 Mode Config | Martin Willi | 2012-08-30 | 1 | -47/+61 | |
| | | ||||||
| * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 1 | -2/+9 | |
| | | ||||||
| * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 1 | -11/+35 | |
| | | ||||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 3 | -5/+12 | |
| | | ||||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 4 | -23/+46 | |
| | | ||||||
| * | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -1/+2 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| | * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | | ||||||
| | * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | | | | | | | configurable. | |||||
| * | | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 | |
| |/ | ||||||
| * | Implement late peer config switching after XAuth authentication | Martin Willi | 2012-07-26 | 1 | -15/+80 | |
| | | | | | | | | If additional authentication constraints, such as group membership, is not fulfilled by an XAuth backend, we search for another peer configuration that fulfills all constraints, including those from phase1. | |||||
| * | Check if XAuth round complies to configured authentication round | Martin Willi | 2012-07-26 | 1 | -7/+18 | |
| | | ||||||
| * | Merge auth config items added from XAuth backends to IKE_SA | Martin Willi | 2012-07-26 | 1 | -0/+1 | |
| | | ||||||
| * | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -3/+17 | |
| | | ||||||
| * | Check rng return value when generating fake NAT detection payloads | Tobias Brunner | 2012-07-16 | 1 | -2/+3 | |
| | | ||||||
| * | Nonce: Let get_nonce, allocate_nonce return boolean | Reto Buerki | 2012-07-16 | 1 | -1/+6 | |
| | | ||||||
| * | Send cert request based on peers configured authentication class | Martin Willi | 2012-07-10 | 1 | -3/+30 | |
| | | ||||||
| * | Don't send CERTREQs when initiating aggressive mode PSK | Martin Willi | 2012-07-09 | 1 | -0/+4 | |
| | | ||||||
| * | As a responder, don't start a TRANSACTION request if we expect one from the ↵ | Martin Willi | 2012-06-29 | 2 | -2/+4 | |
| | | | | | initiator | |||||
| * | Queue a mode config task as responder if we need a virtual IP | Martin Willi | 2012-06-27 | 2 | -4/+16 | |
| | | ||||||
| * | Add basic support for XAuth responder authentication | Martin Willi | 2012-06-27 | 2 | -8/+10 | |
| | | ||||||
| * | support Cisco Unity VID | Andreas Steffen | 2012-06-25 | 1 | -3/+6 | |
| | | ||||||
| * | Enforce uniqueids=keep based on XAuth identity | Martin Willi | 2012-06-25 | 1 | -0/+6 | |
| | | ||||||
| * | Don't send XAUTH_OK if a hook prevents SA to establish | Martin Willi | 2012-06-25 | 1 | -4/+14 | |
| | | ||||||
| * | Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes | Martin Willi | 2012-06-25 | 2 | -28/+28 | |
| | | ||||||
| * | Add missing XAuth name variable when complaining about missing XAuth backend | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | Fix SIGSEGV if kernel install fails during Quick Mode as responder. | Tobias Brunner | 2012-06-22 | 1 | -4/+8 | |
| | | ||||||
| * | Adopt children as XAuth initiator (which is IKE responder) | Martin Willi | 2012-06-14 | 1 | -2/+2 | |
| | | ||||||
| * | Require a scary option to respond to Aggressive Mode PSK requests | Martin Willi | 2012-06-14 | 1 | -0/+17 | |
| | | | | | | | | | While Aggressive Mode PSK is widely used, it is known to be subject to dictionary attacks by passive attackers. We don't complain as initiator to be compatible with existing (insecure) setups, but require a scary strongswan.conf option if someone wants to use it as responder. | |||||
| * | Enforce uniqueness policy in IKEv1 main and aggressive modes | Martin Willi | 2012-06-08 | 2 | -0/+29 | |
| | | ||||||
| * | Use traffic selectors passed to quick mode constructor as initiator | Martin Willi | 2012-06-08 | 1 | -2/+10 | |
| | | ||||||
| * | Added log message if peer does not accept/provide IPComp proposal. | Tobias Brunner | 2012-05-24 | 1 | -2/+12 | |
| | | ||||||
| * | Added support to negotiate IPComp during Quick Mode. | Tobias Brunner | 2012-05-24 | 1 | -11/+91 | |
| | | ||||||
| * | Added support for IKEv1 IPComp proposals in SA payload. | Tobias Brunner | 2012-05-24 | 3 | -6/+6 | |
| | | ||||||
| * | Fix memleak during Quick Mode in case no SPI can be allocated from kernel. | Tobias Brunner | 2012-05-24 | 1 | -8/+8 | |
| | | ||||||
| * | Apply IDir before deriving keys as aggressive initiator | Martin Willi | 2012-05-23 | 1 | -4/+4 | |
| | | ||||||
| * | Switch to alternative peer config in IKEv1 Main and Aggressive Mode. | Tobias Brunner | 2012-05-21 | 2 | -18/+35 | |
| | | ||||||
| * | Cancel active quick mode task when receiving INFORMATIONAL error | Martin Willi | 2012-05-21 | 1 | -0/+30 | |
| | | ||||||
| * | Flush task queues explicitly, not implicitly if task returns ALREADY_DONE | Martin Willi | 2012-05-21 | 4 | -0/+12 | |
| | | ||||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 9 | -0/+0 | |
| | | ||||||
| * | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 13 | -14/+14 | |
| | | | | | tasks etc.). | |||||
| * | Use nonce_gen instead of rng to generate nonces | Adrian-Ken Rueegsegger | 2012-05-18 | 1 | -6/+6 | |
| | | | | | | Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper. | |||||
| * | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 2 | -39/+9 | |
| | | ||||||
| * | allow private algorithms | Andreas Steffen | 2012-05-05 | 2 | -4/+16 | |
| | | ||||||
| * | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 1 | -2/+2 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 2 | -2/+2 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 | |
| | | ||||||
| * | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 | |
| | | ||||||
| * | Reply with received configuration payload identifier in Mode Config | Martin Willi | 2012-03-20 | 1 | -0/+8 | |
| | | ||||||
| * | Implemented handling of UNITY_LOAD_BALANCE as reauthentication. | Tobias Brunner | 2012-03-20 | 1 | -3/+11 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |