tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Use the AAA Identity for EAP authentication, if given	Martin Willi	2010-08-31	1	-0/+5
\|
*	Port floating patch partially reversed.	Tobias Brunner	2010-08-30	2	-12/+8
\| \| \| \| \| \|	If MOBIKE is enabled, we do have to switch to port 4500 with the IKE_AUTH request, that is, before we know whether the other peer actually supports MOBIKE or not.
*	Slightly refactored port floating.	Tobias Brunner	2010-08-30	3	-35/+16
\| \| \| \|	In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
*	Migrated delete_payload to INIT/METHOD macros, replaced iterator	Martin Willi	2010-08-25	1	-9/+8
\|
*	Check if colliding rekey actually created an IKE_INIT	Thomas Egerer	2010-08-25	1	-37/+42
\| \| \| \| \| \|	In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-6/+8
\|
*	fix error-type range in parsing of NOTIFY payloads	Jiri Bohac	2010-08-06	1	-1/+1
\|
*	Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA ↵	Tobias Brunner	2010-08-04	1	-3/+2
\| \| \| \|	allocated an ID.
*	Do not touch child from collision if peer deleted it	Thomas Egerer	2010-08-03	1	-3/+24
\|
*	Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter	Martin Willi	2010-07-26	1	-2/+2
\|
*	Added log statement if peer requests EAP, but current config does not allow it	Martin Willi	2010-07-21	1	-0/+1
\|
*	Support different encoding types in certificate.get_encoding()	Martin Willi	2010-07-13	1	-1/+6
\|
*	Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵	Martin Willi	2010-07-13	1	-1/+1
\| \| \| \|	encoding
*	Moved X509 ipAddrBlock checking to the addrblock plugin	Martin Willi	2010-07-13	1	-60/+0
\|
*	Added a hook to narrow traffic selectors for CHILD_SAs	Martin Willi	2010-07-13	1	-5/+38
\|
*	Moved credential manager to libstrongswan	Martin Willi	2010-07-13	2	-8/+7
\|
*	Added support for named attribute groups	Heiko Hund	2010-07-09	1	-1/+1
\| \| \| \| \| \|	Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
*	Print identity to a lease address on the same line for simpler greping	Martin Willi	2010-07-08	1	-1/+1
\|
*	Copy EAP specific attributes to auth config only	Martin Willi	2010-07-05	1	-1/+10
\|
*	Correct check of traffic selectors before destruction	Thomas Egerer	2010-06-29	1	-2/+2
\|
*	Reacquire keymat from new IKE_SA during task migration	Martin Willi	2010-06-07	1	-0/+1
\|
*	Disable close action for a redundant CHILD_SA resulting from a rekey collision	Martin Willi	2010-06-02	1	-0/+5
\| \| \| \| \| \| \| \|	If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset.
*	Use wrapped getters for close/dpd action	Martin Willi	2010-06-02	1	-1/+3
\|
*	Handle collisions between rekey and the following delete properly	Martin Willi	2010-05-18	1	-27/+63
\|
*	Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no ↵	Martin Willi	2010-04-21	1	-5/+5
\| \| \| \|	DH group
*	Release virtual IPs with the same identity as we acquired it	Martin Willi	2010-03-25	1	-33/+1
\|
*	Changed all usages of lib->attributes to hydra->attributes.	Tobias Brunner	2010-03-24	1	-5/+6
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	36	-0/+9579