| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter | Martin Willi | 2010-07-26 | 1 | -2/+2 |
| | | |||||
| * | Added log statement if peer requests EAP, but current config does not allow it | Martin Willi | 2010-07-21 | 1 | -0/+1 |
| | | |||||
| * | Support different encoding types in certificate.get_encoding() | Martin Willi | 2010-07-13 | 1 | -1/+6 |
| | | |||||
| * | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 1 | -1/+1 |
| | | | | | encoding | ||||
| * | Moved X509 ipAddrBlock checking to the addrblock plugin | Martin Willi | 2010-07-13 | 1 | -60/+0 |
| | | |||||
| * | Added a hook to narrow traffic selectors for CHILD_SAs | Martin Willi | 2010-07-13 | 1 | -5/+38 |
| | | |||||
| * | Moved credential manager to libstrongswan | Martin Willi | 2010-07-13 | 9 | -115/+15 |
| | | |||||
| * | Added support for named attribute groups | Heiko Hund | 2010-07-09 | 1 | -1/+1 |
| | | | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes. | ||||
| * | Print identity to a lease address on the same line for simpler greping | Martin Willi | 2010-07-08 | 1 | -1/+1 |
| | | |||||
| * | Use the responder side configured EAP-Identity directly, if given | Martin Willi | 2010-07-05 | 1 | -7/+16 |
| | | |||||
| * | Copy EAP specific attributes to auth config only | Martin Willi | 2010-07-05 | 2 | -8/+10 |
| | | |||||
| * | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -34/+48 |
| | | |||||
| * | Recreate IKE_SA_INIT related tasks only if they have completed | Martin Willi | 2010-06-30 | 1 | -11/+35 |
| | | |||||
| * | Use enumerator for queued_tasks migration to avoid infinite loop | Thomas Egerer | 2010-06-30 | 1 | -3/+5 |
| | | |||||
| * | Correct check of traffic selectors before destruction | Thomas Egerer | 2010-06-29 | 1 | -2/+2 |
| | | |||||
| * | Migrate queued_tasks tasks, to avoid dangling pointers | Thomas Egerer | 2010-06-29 | 1 | -0/+7 |
| | | |||||
| * | Add extra information in debug output for IKE_SA check{out, in} | Thomas Egerer | 2010-06-07 | 2 | -10/+27 |
| | | | | | | | | This output helps tracing checkout and checkin of IKE_SAs when there is more than one IKE_SAs with the same name. I also added the type of in-air-exchange to the debug output issued by the task_manager in case a task initiation is delayed, came in handy for me. | ||||
| * | Flush auth configs, create new keymat during SA reset | Martin Willi | 2010-06-07 | 1 | -12/+16 |
| | | |||||
| * | Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH | Martin Willi | 2010-06-07 | 1 | -0/+11 |
| | | |||||
| * | Reacquire keymat from new IKE_SA during task migration | Martin Willi | 2010-06-07 | 1 | -0/+1 |
| | | |||||
| * | Wrap task enumerator in ike_sa | Martin Willi | 2010-06-07 | 2 | -1/+16 |
| | | |||||
| * | Migrated ike_sa_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -407/+239 |
| | | |||||
| * | Added support for task enumeration in task_manager_t | Martin Willi | 2010-06-07 | 2 | -0/+38 |
| | | |||||
| * | Migrated task_manager_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -65/+45 |
| | | |||||
| * | Disable close action for a redundant CHILD_SA resulting from a rekey collision | Martin Willi | 2010-06-02 | 1 | -0/+5 |
| | | | | | | | | | If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset. | ||||
| * | Use wrapped getters for close/dpd action | Martin Willi | 2010-06-02 | 2 | -8/+10 |
| | | |||||
| * | Wrap getters for dpd/close action into CHILD_SA, allows us to override them | Martin Willi | 2010-06-02 | 2 | -0/+76 |
| | | |||||
| * | Do not install trap policy if remote host is %any. | Tobias Brunner | 2010-05-28 | 1 | -1/+1 |
| | | |||||
| * | Handle collisions between rekey and the following delete properly | Martin Willi | 2010-05-18 | 1 | -27/+63 |
| | | |||||
| * | Use reqid from connection config if present. | Reto Buerki | 2010-05-04 | 1 | -2/+6 |
| | | |||||
| * | Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no ↵ | Martin Willi | 2010-04-21 | 1 | -5/+5 |
| | | | | | DH group | ||||
| * | manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE state | Martin Willi | 2010-04-07 | 1 | -1/+1 |
| | | |||||
| * | Invoke updown hook if IKE_SA delete is enforced in deleting state | Martin Willi | 2010-04-06 | 1 | -0/+1 |
| | | |||||
| * | Release virtual IPs with the same identity as we acquired it | Martin Willi | 2010-03-25 | 3 | -36/+44 |
| | | |||||
| * | Changed all usages of lib->attributes to hydra->attributes. | Tobias Brunner | 2010-03-24 | 3 | -8/+11 |
| | | |||||
| * | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 68 | -0/+24284 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |