tteras/strongswan - tteras' strongSwan tree

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Revert "child-sa: Remove the obsolete update logic"	Martin Willi	2015-03-09	1	-1/+6
*	ikev2: Move code in pubkey authenticator's build() method into separate funct...	Tobias Brunner	2015-03-09	1	-85/+123
*	ikev2: Try all eligible signature schemes	Tobias Brunner	2015-03-09	1	-34/+71
*	ikev1: Set protocol ID and SPIs in INITIAL-CONTACT notification payloads	Tobias Brunner	2015-03-06	1	-2/+13
*	ikev2: Try all RSA signature schemes if none is configured	Tobias Brunner	2015-03-04	1	-4/+19
*	ikev2: Consider signature schemes in rightauth when sending hash algorithms	Tobias Brunner	2015-03-04	1	-14/+54
*	keymat: Use hash algorithm set	Tobias Brunner	2015-03-04	1	-29/+7
*	ikev2: Add an option to disable constraints against signature schemes	Tobias Brunner	2015-03-04	1	-1/+11
*	ikev2: Fall back to SHA-1 signatures for RSA	Tobias Brunner	2015-03-04	1	-0/+7
*	ikev2: Select a signature scheme appropriate for the given key	Tobias Brunner	2015-03-04	1	-18/+13
*	ikev2: Log the actual signature scheme used for RFC 7427 authentication	Tobias Brunner	2015-03-04	1	-4/+6
*	ikev2: Store signature scheme used to verify peer in auth_cfg	Tobias Brunner	2015-03-04	1	-0/+1
*	ikev2: Add a global option to disable RFC 7427 signature authentication	Tobias Brunner	2015-03-04	1	-2/+12
*	ikev2: Remove private AUTH_BLISS method	Tobias Brunner	2015-03-04	3	-18/+1
*	ikev2: Handle RFC 7427 signature authentication in pubkey authenticator	Tobias Brunner	2015-03-04	2	-49/+179
*	ikev2: Enable signature authentication by transmitting supported hash algorithms	Tobias Brunner	2015-03-04	2	-4/+88
*	keymat: Add facility to store supported hash algorithms	Tobias Brunner	2015-03-04	2	-1/+70
*	ikev2: Add new authentication method defined by RFC 7427	Tobias Brunner	2015-03-04	2	-3/+9
*	ikev2: Only accept initial messages in specific states	Tobias Brunner	2015-03-04	1	-10/+9
*	ike-sa-manager: Make sure the message ID of initial messages is 0	Tobias Brunner	2015-03-04	1	-1/+2
*	ikev2: Don't destroy the SA if an IKE_SA_INIT with unexpected MID is received	Tobias Brunner	2015-03-04	1	-4/+0
*	ikev2: Don't adopt any CHILD_SA during make-before-break reauthentication	Martin Willi	2015-03-04	1	-1/+2
*	ikev2: Merge EAP client authentication details if EAP methods provides them	Martin Willi	2015-03-03	1	-0/+7
*	eap: Add an optional authentication details getter to the EAP method interface	Martin Willi	2015-03-03	1	-0/+12
*	ikev2: Schedule a timeout for the delete message following passive IKE rekeying	Martin Willi	2015-03-03	1	-0/+6
*	bus: Add an ike_update() hook invoked when peer endpoints change	Martin Willi	2015-02-20	1	-0/+2
*	ikev2: Schedule a make-before-break completion task to delete old IKE_SA	Martin Willi	2015-02-20	6	-1/+172
*	ikev2: Allow task to skip exchange by setting undefined exchange type	Martin Willi	2015-02-20	1	-0/+5
*	ikev2: Trigger make-before-break reauthentication instead of reauth task	Martin Willi	2015-02-20	2	-2/+79
*	ike-sa-manager: Use IKEv1 uniqueness reauthentication detection for IKEv2, too	Martin Willi	2015-02-20	1	-12/+8
*	attribute-manager: Pass full IKE_SA to handler methods	Martin Willi	2015-02-20	3	-9/+5
*	attribute-manager: Pass the full IKE_SA to provider methods	Martin Willi	2015-02-20	3	-10/+8
*	attributes: Move the configuration attributes framework to libcharon	Martin Willi	2015-02-20	3	-25/+24
*	ike: Consistently log CHILD_SAs with their unique_id instead of their reqid	Martin Willi	2015-02-20	5	-8/+10
*	ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid	Martin Willi	2015-02-20	2	-36/+13
*	inactivity-job: Schedule job by CHILD_SA unique ID instead of reqid	Martin Willi	2015-02-20	2	-13/+7
*	kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid	Martin Willi	2015-02-20	1	-2/+2
*	ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA manager	Martin Willi	2015-02-20	2	-15/+77
*	child-sa-manager: Add a global manager storing CHILD_SA relations	Martin Willi	2015-02-20	2	-0/+422
*	child-sa: Replace reqid based marks by "unique" marks	Martin Willi	2015-02-20	9	-10/+108
*	child-sa: Introduce a unique CHILD_SA identifier	Martin Willi	2015-02-20	2	-0/+24
*	child-sa: Delegate reqid allocation to the kernel interface	Martin Willi	2015-02-20	1	-15/+46
*	child-sa: Sort traffic selectors after adding CHILD_SA policies	Martin Willi	2015-02-20	1	-0/+3
*	child-sa: Remove the obsolete update logic	Martin Willi	2015-02-20	1	-6/+1
*	kernel-interface: Pass full list of traffic selectors to add_sa()	Martin Willi	2015-02-20	1	-8/+6
*	kernel-interface: Remove reqid parameter from get_spi/get_cpi() methods	Martin Willi	2015-02-20	1	-2/+2
*	ikev2: Only touch the DH object if we have a matching proposal	Tobias Brunner	2014-12-23	1	-11/+17
*	apple: Redefine some additional clashing Mach types	Martin Willi	2014-12-16	1	-0/+2
*	ike: Make check for known payloads depend on IKE version	Tobias Brunner	2014-12-05	1	-1/+1
*	ikev2: Fix handling of more than one hash-and-URL certificate payloads	Tobias Brunner	2014-12-04	1	-2/+2