| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Don't complain about multiple TS in IKEv1, as it supported with Unity | Martin Willi | 2012-09-18 | 1 | -5/+0 |
* | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 1 | -23/+28 |
* | Use the vararg list constructor in quick mode task | Martin Willi | 2012-09-18 | 1 | -16/+8 |
* | Change traffic selectors during Quick Mode in case of a NAT in transport mode | Tobias Brunner | 2012-09-14 | 1 | -9/+19 |
* | Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty | Martin Willi | 2012-09-11 | 1 | -29/+14 |
* | Don't use host address for dynamic TS in IKEv1 if a virtual IP was expected | Martin Willi | 2012-09-11 | 1 | -40/+57 |
* | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -20/+6 |
* | Add a responder narrow() hook to change TS in the kernel, but not on the wire | Martin Willi | 2012-09-11 | 1 | -2/+20 |
* | Trigger ike_updown event caused by retransmits only after reestablish() has b... | Tobias Brunner | 2012-09-06 | 1 | -5/+1 |
* | Clear virtual IPs before storing assigned ones on the IKE_SA | Tobias Brunner | 2012-09-05 | 1 | -0/+4 |
* | In mode_config, destroy temporary pool list instead of the virtual IP list twice | Martin Willi | 2012-09-05 | 1 | -1/+1 |
* | Merge branch 'multi-vip' | Martin Willi | 2012-08-31 | 7 | -62/+199 |
|\ |
|
| * | Request and acquire multiple virtual IPs in IKEv1 Mode Config | Martin Willi | 2012-08-30 | 1 | -47/+61 |
| * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 1 | -2/+9 |
| * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 1 | -11/+35 |
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 6 | -6/+45 |
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 7 | -28/+81 |
* | | Fall back to local address as IKEv1 identity if nothing else is configured | Tobias Brunner | 2012-08-24 | 1 | -2/+14 |
|/ |
|
* | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 1 | -1/+2 |
|\ |
|
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 |
| * | Make the UDP ports charon listens for packets on (and uses as source ports) c... | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
* | | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 |
|/ |
|
* | Remove queued IKEv1 message before processing it | Martin Willi | 2012-08-08 | 1 | -3/+5 |
* | Block XAuth transaction on established IKE_SAs, but allow Mode Config | Martin Willi | 2012-08-03 | 1 | -1/+1 |
* | Lookup IKEv1 PSK even if the peer identity is not known | Martin Willi | 2012-07-31 | 1 | -1/+1 |
* | Implement late peer config switching after XAuth authentication | Martin Willi | 2012-07-26 | 1 | -15/+80 |
* | Check if XAuth round complies to configured authentication round | Martin Willi | 2012-07-26 | 1 | -7/+18 |
* | Merge auth config items added from XAuth backends to IKE_SA | Martin Willi | 2012-07-26 | 1 | -0/+1 |
* | Refactored error handling in keymat_v1_t | Martin Willi | 2012-07-16 | 1 | -25/+27 |
* | Cleaned up memory management and return values for encryption payload | Martin Willi | 2012-07-16 | 1 | -1/+4 |
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 2 | -8/+31 |
* | Add a return value to keymat_v1_t.{get,update,confirm}_iv | Martin Willi | 2012-07-16 | 2 | -13/+31 |
* | Add a return value to crypter_t.set_key() | Martin Willi | 2012-07-16 | 1 | -3/+6 |
* | Add a return value to crypter_t.decrypt() | Martin Willi | 2012-07-16 | 1 | -2/+1 |
* | Add a return value to crypter_t.encrypt | Martin Willi | 2012-07-16 | 1 | -2/+1 |
* | Check rng return value when generating IKEv1 message IDs | Tobias Brunner | 2012-07-16 | 1 | -8/+20 |
* | Check rng return value when generating fake NAT detection payloads | Tobias Brunner | 2012-07-16 | 1 | -2/+3 |
* | Nonce: Let get_nonce, allocate_nonce return boolean | Reto Buerki | 2012-07-16 | 2 | -2/+12 |
* | Add a return value to prf_t.set_key() | Martin Willi | 2012-07-16 | 1 | -10/+25 |
* | Add a return value to prf_t.allocate_bytes() | Martin Willi | 2012-07-16 | 1 | -11/+45 |
* | Use a bool return value in keymat_v1_t.get_hash_phase2() | Martin Willi | 2012-07-16 | 2 | -27/+27 |
* | Add a return value to keymat_v1_t.get_hash() | Martin Willi | 2012-07-16 | 4 | -17/+35 |
* | Add a return value to prf_t.get_bytes() | Martin Willi | 2012-07-16 | 1 | -9/+19 |
* | prf_plus_create() can return NULL on failure | Martin Willi | 2012-07-16 | 1 | -0/+10 |
* | Add a return value to prf_plus_t.allocate_bytes() | Martin Willi | 2012-07-16 | 1 | -4/+14 |
* | Add a return value to aead_t.set_key() | Martin Willi | 2012-07-16 | 1 | -1/+2 |
* | Add a return value to aead_t.encrypt() | Martin Willi | 2012-07-16 | 1 | -1/+2 |
* | Send cert request based on peers configured authentication class | Martin Willi | 2012-07-10 | 1 | -3/+30 |
* | Don't send CERTREQs when initiating aggressive mode PSK | Martin Willi | 2012-07-09 | 1 | -0/+4 |
* | As a responder, don't start a TRANSACTION request if we expect one from the i... | Martin Willi | 2012-06-29 | 2 | -2/+4 |