tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Moved kernel interface to libhydra.	Tobias Brunner	2010-09-02	12	-1620/+8
\|
*	Removed references to protocol_id_t from kernel interface.	Tobias Brunner	2010-09-02	10	-199/+193
\| \| \| \| \|	Instead we use the actual IP protocol identifier (the conversion now happens in child_sa_t and kernel_handler_t).
*	Migrated child_sa_t to INIT/METHOD macros.	Tobias Brunner	2010-09-02	1	-202/+132
\|
*	Moved roam job creation to kernel event handler.	Tobias Brunner	2010-09-02	3	-21/+56
\|
*	Refer to scheduler via hydra and not charon.	Tobias Brunner	2010-09-02	14	-29/+32
\|
*	Moved scheduler_t to libhydra.	Tobias Brunner	2010-09-02	6	-499/+0
\|
*	Moved migrate job creation to kernel event handler.	Tobias Brunner	2010-09-02	3	-15/+22
\|
*	Moved update SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-19/+22
\|
*	Moved delete/rekey CHILD_SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-53/+39
\|
*	Moved acquire job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-21/+31
\|
*	Added kernel event handler stub.	Tobias Brunner	2010-09-02	5	-0/+120
\|
*	All kernel listener hooks are optional.	Tobias Brunner	2010-09-02	2	-5/+11
\|
*	Added listener handling to kernel interface.	Tobias Brunner	2010-09-02	2	-2/+202
\|
*	Added an interface for kernel event listeners.	Tobias Brunner	2010-09-02	3	-0/+96
\|
*	Some whitespace and code style fixes.	Tobias Brunner	2010-09-02	4	-25/+33
\|
*	Move callback_job_t to libhydra.	Tobias Brunner	2010-09-02	4	-392/+0
\|
*	Fixing Doxygen groups after moving processor.	Tobias Brunner	2010-09-02	18	-20/+20
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	33	-71/+100
\|
*	Move processor_t (thread-pool) to libhydra.	Tobias Brunner	2010-09-02	7	-437/+3
\|
*	Respect key types in stroke key/certificate backend	Martin Willi	2010-09-02	1	-15/+24
\|
*	increase number of message due to large certificate payloads	Andreas Steffen	2010-09-01	1	-1/+1
\|
*	Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined	Martin Willi	2010-08-31	1	-1/+10
\|
*	Use the AAA Identity for EAP authentication, if given	Martin Willi	2010-08-31	2	-1/+14
\|
*	Added support for the ipsec.conf aaa_identity keyword	Martin Willi	2010-08-31	2	-0/+7
\|
*	Added strongswan.conf options for EAP-TLS/TTLS fragment size	Martin Willi	2010-08-31	2	-9/+20
\|
*	Migrated EAP-TTLS to the generic TLS helper	Martin Willi	2010-08-31	1	-281/+21
\|
*	Migrated EAP-TLS to the generic TLS helper	Martin Willi	2010-08-31	1	-272/+19
\|
*	Support output fragmentation of TLS records	Martin Willi	2010-08-31	2	-4/+6
\|
*	Moved EAP type/code definitions to a seprate header file in libstrongswan	Martin Willi	2010-08-31	2	-35/+1
\|
*	Enable the generation of unencrypted messages (e.g. ME connectivity checks).	Tobias Brunner	2010-08-30	1	-9/+10
\|
*	fixed copy-and-paste errors	Andreas Steffen	2010-08-30	2	-2/+2
\|
*	created an eap-tnc method hull	Andreas Steffen	2010-08-30	6	-0/+363
\|
*	for the time being assume a single request/response exchange for a given EAP ↵	Andreas Steffen	2010-08-30	1	-2/+3
\| \| \| \|	method
*	Port floating patch partially reversed.	Tobias Brunner	2010-08-30	2	-12/+8
\| \| \| \| \| \|	If MOBIKE is enabled, we do have to switch to port 4500 with the IKE_AUTH request, that is, before we know whether the other peer actually supports MOBIKE or not.
*	Slightly refactored port floating.	Tobias Brunner	2010-08-30	5	-35/+39
\| \| \| \|	In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
*	Fixed ME after introduction of AEAD wrapper.	Tobias Brunner	2010-08-30	1	-1/+1
\|
*	Win7 might send up to 7k of certificate requests	Andreas Steffen	2010-08-27	3	-3/+3
\|
*	Update delete_payload length when adding SPIs	Martin Willi	2010-08-25	1	-0/+1
\|
*	Migrated delete_payload to INIT/METHOD macros, replaced iterator	Martin Willi	2010-08-25	3	-130/+108
\|
*	Use different return values in payload decryption to distinguish between ↵	Martin Willi	2010-08-25	3	-12/+16
\| \| \| \|	integrity and syntax errors
*	Check if colliding rekey actually created an IKE_INIT	Thomas Egerer	2010-08-25	1	-37/+42
\| \| \| \| \| \|	In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.
*	Added a ike_name logger option to prefix the IKE_SA name on each line	Martin Willi	2010-08-25	5	-19/+69
\|
*	removed tls_record_t definition	Andreas Steffen	2010-08-24	1	-10/+0
\|
*	Pass NULL peer identity to omit TLS peer authentication, added ↵	Martin Willi	2010-08-24	2	-2/+7
\| \| \| \|	eap-ttls.request_peer_auth option
*	support fragmentation in AVPs	Andreas Steffen	2010-08-24	3	-21/+118
\|
*	Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS	Martin Willi	2010-08-24	1	-0/+6
\|
*	Moved TLS record parsing/generation to tls.c	Martin Willi	2010-08-24	2	-122/+8
\|
*	EAP-TLS clients send an empty packet on failure to properly shut down a TLS ↵	Martin Willi	2010-08-23	1	-0/+6
\| \| \| \|	session
*	Accept encryption payloads with no wrapped payloads	Martin Willi	2010-08-23	1	-1/+1
\|
*	Use enum mappings to resolve debug group	Martin Willi	2010-08-23	1	-16/+1
\|