aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
| * | | | | Pass complete port range over stroke interface for more flexibilityMartin Willi2013-02-211-14/+4
| * | | | | Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-216-14/+24
| | |/ / / | |/| | |
* | | | | Without MOBIKE, update remote host only if it is behind NATMartin Willi2013-03-011-2/+3
* | | | | Merge branch 'ikev1-mm-retransmits'Martin Willi2013-03-014-45/+55
|\ \ \ \ \
| * | | | | For IKEv1 Main Mode, use message hash to detect early retransmissionsMartin Willi2013-02-251-10/+23
| * | | | | Move initial message dropping to task managerMartin Willi2013-02-253-19/+27
| * | | | | Use INIT macro to initialize IKE_SA manager entriesMartin Willi2013-02-251-17/+6
| | |/ / / | |/| | |
* | | | | Merge branch 'tfc-notify'Martin Willi2013-03-011-0/+9
|\ \ \ \ \
| * | | | | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
| | |/ / / | |/| | |
* | | | | Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACTTobias Brunner2013-02-281-0/+1
| |_|_|/ |/| | |
* | | | Android.mk updated to latest MakefilesTobias Brunner2013-02-261-1/+1
| |/ / |/| |
* | | treat IF-M and IF-TNCCS remediation instructions/parameters in an equal wayAndreas Steffen2013-02-193-97/+198
* | | Streamlined log messages in ipseckey pluginAndreas Steffen2013-02-192-58/+30
* | | ipseckey: Report IPSECKEYs with invalid DNSSEC security stateReto Guadagnini2013-02-191-2/+12
* | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-191-3/+16
* | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRsReto Guadagnini2013-02-198-0/+859
* | | added missing return statementAndreas Steffen2013-02-191-0/+1
* | | reject PB-Experimental messages with NOSKIP flag setAndreas Steffen2013-02-191-0/+7
* | | Add a timeout to clean up PDP RADIUS connectionsMartin Willi2013-02-141-0/+51
* | | Keep the PDP connections lock while accessing its objectsMartin Willi2013-02-143-7/+34
* | | Add locking to TNC-PDP connectionsMartin Willi2013-02-141-7/+23
* | | Add a global return_success() method implementationMartin Willi2013-02-141-8/+2
* | | Merge branch 'ike-dscp'Martin Willi2013-02-1413-59/+163
|\ \ \
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-1/+1
| * | | Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
| * | | Add a DSCP configuration value to IKE configsMartin Willi2013-02-0611-21/+38
| * | | Set DSCP values when sending IP packets in socket-defaultMartin Willi2013-02-061-1/+65
| * | | Don't send a packet in default socket if family is not IPv4 nor IPv6Martin Willi2013-02-061-12/+18
| * | | Avoid extensive casting of sockaddr types in socket-default by using a unionMartin Willi2013-02-061-24/+16
| |/ /
* | | Check if recommendations is set before applying language preferenceMartin Willi2013-02-141-3/+6
* | | Merge branch 'pt-tls'Martin Willi2013-02-143-9/+0
|\ \ \
| * | | TNCCS plugins don't depend on EAP-TNC, but can be used by other transports, tooMartin Willi2013-01-153-9/+0
| | |/ | |/|
* | | Fix 'stroke loglevel any'Tobias Brunner2013-02-131-4/+11
* | | treat EAP identities as user IDsAndreas Steffen2013-02-121-3/+3
* | | make TNC client authentication type available to IMVsAndreas Steffen2013-02-129-27/+204
* | | determine underlying IF-T transport protocolAndreas Steffen2013-02-1210-62/+184
* | | make AR identities available to IMVs via IF-IMV 1.4 draftAndreas Steffen2013-02-115-0/+146
* | | Make IKE/EAP IDs available to TNC server/clientAndreas Steffen2013-02-118-24/+81
* | | Allow more than one CERTREQ payload for IKEv2Tobias Brunner2013-02-081-2/+2
| |/ |/|
* | Use proper buffer sizes for parse_smartcard()Tobias Brunner2013-01-241-7/+10
* | Removed unused command name when printing usage info for lookipTobias Brunner2013-01-241-1/+1
* | Fix check-in of IKE_SA when IKE_SA_INIT fails and hash table is enabledTobias Brunner2013-01-241-2/+13
* | Avoid a deadlock when installing a trap policy failedTobias Brunner2013-01-231-1/+5
* | Fix IKE SA inherit API docAdrian-Ken Rueegsegger2013-01-221-2/+1
* | Filter TS list for Split-Includes before printing them to debug logMartin Willi2013-01-211-10/+34
|/
* Properly send IKEv1 packets if no ike_cfg is known yetTobias Brunner2013-01-141-2/+5
* Don't handle right=%any6 as "loose" identity, but as %anyMartin Willi2013-01-141-2/+1
* Merge branch 'ikev1-fragmentation'Tobias Brunner2013-01-1225-55/+832
|\
| * Added an option to configure the maximum size of a fragmentTobias Brunner2013-01-121-3/+10
| * Properly detect fragmentation capabilitiesTobias Brunner2013-01-121-3/+27