tteras/strongswan - tteras' strongSwan tree

	Commit message (Expand)	Author	Age	Files	Lines
*	payload: Use common prefixes for all payload type identifiers	Martin Willi	2014-06-04	1	-11/+11
*	ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SA	Martin Willi	2014-04-17	1	-0/+6
*	ikev2: Fix reauthentication if peer assigns a different virtual IP	Tobias Brunner	2014-04-15	1	-1/+1
*	libcharon: Use lib->ns instead of charon->name	Tobias Brunner	2014-02-12	1	-2/+2
*	ikev2: Allocate SPI with the protocol of the first/negotiated proposal	Martin Willi	2013-10-11	1	-2/+16
*	child-sa: replace get_traffic_selectors() with create_ts_enumerator()	Martin Willi	2013-07-17	1	-18/+16
*	ikev2: use protocol of selected proposal to delete a failed CHILD_SA	Martin Willi	2013-06-20	1	-2/+2
*	ikev2: properly fall back to tunnel mode if transport/BEET mode not configured	Martin Willi	2013-06-19	1	-2/+8
*	ikev2: support transport mode over NAT	Martin Willi	2013-06-19	1	-36/+150
*	kernel-interface: add an exchange initiator parameter to add_sa()	Martin Willi	2013-06-11	1	-8/+8
*	ikev2: if installing a CHILD_SA as initiator fails, notify the responder	Martin Willi	2013-06-11	1	-2/+36
*	Allow IPComp on NATed connections, both for IKEv1 and IKEv2	Martin Willi	2013-06-11	1	-7/+0
*	Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSEN	Martin Willi	2013-05-06	1	-0/+20
*	Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support it	Martin Willi	2013-03-01	1	-0/+9
*	Fixed some typos, courtesy of codespell	Tobias Brunner	2012-12-20	1	-1/+1
*	Raise an alert if IKE SA is kept	Adrian-Ken Rueegsegger	2012-12-20	1	-0/+1
*	Raise an alert if kernel policy installation fails	Martin Willi	2012-12-19	1	-0/+2
*	Raise an alert if kernel SA installation fails	Martin Willi	2012-12-19	1	-0/+2
*	Raise an alert on traffic selector mismatch	Martin Willi	2012-12-19	1	-0/+2
*	Raise an alert if CHILD_SA proposals mismatch	Martin Willi	2012-12-19	1	-0/+2
*	Derive a dynamic TS to multiple virtual IPs	Martin Willi	2012-09-18	1	-39/+61
*	Don't use host address for dynamic TS in IKEv2 if a virtual IP was expected	Martin Willi	2012-09-11	1	-1/+33
*	Add a responder narrow() hook to change TS in the kernel, but not on the wire	Martin Willi	2012-09-11	1	-1/+26
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-47/+40
*	Nonce: Let get_nonce, allocate_nonce return boolean	Reto Buerki	2012-07-16	1	-1/+7
*	Try to rekey without KE exchange if peer returns INVALID_KE_PAYLOAD(NONE)	Martin Willi	2012-06-08	1	-1/+8
*	As responder, enforce the same configuration while rekeying CHILD_SAs	Martin Willi	2012-06-06	1	-1/+9
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	1	-9/+9
*	Use name from initialization to access settings in libcharon.	Tobias Brunner	2012-05-03	1	-2/+2
*	Separated libcharon/sa directory with ikev1 and ikev2 subfolders	Martin Willi	2012-03-20	1	-0/+1333