index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libcharon
/
sa
Commit message (
Expand
)
Author
Age
Files
Lines
*
ikev2: Enumerate RSA/PSS schemes and use them if enabled
Tobias Brunner
2017-11-08
1
-7
/
+11
*
ikev2: Support signing with RSASSA-PSS via RFC 7427 signature auth
Tobias Brunner
2017-11-08
1
-6
/
+21
*
ikev2: Verify RSASSA-PSS signatures via RFC 7427 signature auth
Tobias Brunner
2017-11-08
1
-19
/
+34
*
keymat_v2: Pass/receive signature schemes as signature_param_t objects
Tobias Brunner
2017-11-08
2
-28
/
+58
*
auth-cfg: Store signature schemes as signature_params_t objects
Tobias Brunner
2017-11-08
2
-18
/
+23
*
certificate: Return signature scheme and parameters from issued_by() method
Tobias Brunner
2017-11-08
1
-0
/
+1
*
private-key: Add optional parameters argument to sign() method
Tobias Brunner
2017-11-08
2
-3
/
+3
*
public-key: Add optional parameters argument to verify() method
Tobias Brunner
2017-11-08
2
-2
/
+2
*
ikev2: Don't use SHA-1 for RFC 7427 signature authentication
Tobias Brunner
2017-11-08
1
-3
/
+1
*
shunt-mananger: Make outbound FWD shunt policies optional
Tobias Brunner
2017-11-02
1
-6
/
+15
*
ike: Do not send initial contact only for UNIQUE_NEVER
Thomas Egerer
2017-11-02
2
-3
/
+1
*
child-cfg: Optionally set mark on inbound SA
Tobias Brunner
2017-11-02
1
-2
/
+17
*
ikev2: Abort make-before-break reauth if we don't find children to recreate
Tobias Brunner
2017-11-02
1
-1
/
+19
*
libcharon: Added Cisco FlexVPN Supported VID
Andreas Steffen
2017-10-27
1
-0
/
+2
*
child-create: Don't consider a DH group mismatch as failure as responder
Tobias Brunner
2017-09-18
1
-1
/
+0
*
child-delete: Only let SAs expire naturally if they not already did
Tobias Brunner
2017-09-15
1
-1
/
+1
*
ike: Reset local SPI if retrying to connect in state IKE_CONNECTING
Tobias Brunner
2017-09-04
3
-11
/
+19
*
ike-sa-manager: Add method to change the initiator SPI of an IKE_SA
Tobias Brunner
2017-09-04
2
-4
/
+99
*
ike-init: Fail if DH group in KE payload does not match proposed group
Tobias Brunner
2017-09-04
1
-1
/
+5
*
child-sa: Allow requesting different unique marks for in/out
Eyal Birger
2017-08-07
1
-6
/
+23
*
trap-manager: Don't require that remote is resolvable during installation
Tobias Brunner
2017-08-07
1
-10
/
+49
*
child-create: Don't log CHILD_SA initiation until we know the unique ID
Tobias Brunner
2017-08-07
1
-11
/
+13
*
child-rekey: Add CHILD_SA name and unique ID to collision log messages
Tobias Brunner
2017-08-07
1
-8
/
+13
*
child-sa: Suppress CHILD_SA state changes if there is no change
Tobias Brunner
2017-08-07
1
-6
/
+9
*
child-rekey: Don't install outbound SA in case of lost collisions
Tobias Brunner
2017-08-07
3
-21
/
+66
*
child-sa: Install outbound SA immediately if kernel supports SPIs on policies
Tobias Brunner
2017-08-07
3
-26
/
+47
*
child-sa: Use flags to track installation of outbound SA and policies separately
Tobias Brunner
2017-08-07
2
-28
/
+44
*
ikev2: AES-CMAC-PRF-128 only uses the first 64 bits of each nonce
Tobias Brunner
2017-07-27
1
-2
/
+5
*
ike: Trigger CHILD_INSTALLED state change after corresponding log message
Tobias Brunner
2017-07-27
2
-10
/
+9
*
ikev1: Only delete redundant CHILD_SAs if configured
Tobias Brunner
2017-06-26
1
-1
/
+5
*
ike: Apply retransmission_limit before applying the jitter
Tobias Brunner
2017-05-26
2
-8
/
+8
*
linked-list: Change return value of find_first() and signature of its callback
Tobias Brunner
2017-05-26
4
-104
/
+125
*
linked-list: Change interface of callback for invoke_function()
Tobias Brunner
2017-05-26
1
-5
/
+5
*
Change interface for enumerator_create_filter() callback
Tobias Brunner
2017-05-26
6
-94
/
+150
*
Migrate all enumerators to venumerate() interface change
Tobias Brunner
2017-05-26
3
-8
/
+20
*
child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256
Tobias Brunner
2017-05-26
1
-0
/
+8
*
child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs
Tobias Brunner
2017-05-23
2
-6
/
+50
*
child-sa: Remove state to track installation of half the SA again
Tobias Brunner
2017-05-23
5
-17
/
+2
*
child-sa: Expose state of the outbound SA
Tobias Brunner
2017-05-23
2
-17
/
+61
*
child-sa: Add method to remove the outbound SA and policies
Tobias Brunner
2017-05-23
2
-5
/
+78
*
child-sa: Keep track whether the outbound SA has been installed or not
Tobias Brunner
2017-05-23
1
-8
/
+13
*
child-delete: Track flags per individual CHILD_SA
Tobias Brunner
2017-05-23
1
-47
/
+78
*
ikev2: Delay installation of outbound SAs during rekeying on the responder
Tobias Brunner
2017-05-23
3
-10
/
+92
*
child-sa: Add log message for CHILD_SA state changes
Tobias Brunner
2017-05-23
1
-0
/
+4
*
child-sa: Add method to associate rekeyed CHILD_SAs with their replacement
Tobias Brunner
2017-05-23
2
-0
/
+35
*
child-sa: Add methods that allow partial installation of CHILD_SA
Tobias Brunner
2017-05-23
2
-5
/
+144
*
child-sa: Add new state to track installation of only the inbound SA
Tobias Brunner
2017-05-23
2
-1
/
+7
*
child-sa: Change API used to set/install policies
Tobias Brunner
2017-05-23
5
-70
/
+112
*
child-sa: Split in- and outbound policy de-/installation
Tobias Brunner
2017-05-23
1
-62
/
+127
*
child-create: Trigger NARROW_RESPONDER_POST hook before installing SAs
Tobias Brunner
2017-05-23
1
-25
/
+21
[next]