Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Ingore messages with exchange type altered to UNDEFINED in message() hook | Martin Willi | 2011-01-05 | 1 | -0/+8 | |
| | ||||||
* | Fail silently without INVALID_SYNTAX if message not verified | Martin Willi | 2011-01-05 | 1 | -10/+8 | |
| | ||||||
* | Moved message()-hook invocation to generate_message(), catch pre-generated ↵ | Martin Willi | 2011-01-05 | 2 | -2/+1 | |
| | | | | IKE_SA_INITs, too | |||||
* | Support removal of payloads from messages | Martin Willi | 2011-01-05 | 2 | -0/+14 | |
| | ||||||
* | Added a message_t option to disable automatic payload sorting | Martin Willi | 2011-01-05 | 2 | -1/+21 | |
| | ||||||
* | Implemented cert payload constructor for custom encoding types | Martin Willi | 2011-01-05 | 2 | -0/+21 | |
| | ||||||
* | Support manually triggerd DPD check, even if DPD disabled in config | Martin Willi | 2011-01-05 | 1 | -11/+10 | |
| | ||||||
* | Moved logger initialization from libcharon to charon | Martin Willi | 2011-01-05 | 2 | -155/+13 | |
| | ||||||
* | removed superfluous s | Andreas Steffen | 2011-01-05 | 8 | -8/+8 | |
| | ||||||
* | remove private_ | Andreas Steffen | 2011-01-05 | 1 | -1/+1 | |
| | ||||||
* | remove private_ | Andreas Steffen | 2011-01-05 | 4 | -4/+4 | |
| | ||||||
* | cosmetics in debug output | Andreas Steffen | 2011-01-05 | 1 | -1/+1 | |
| | ||||||
* | detect fragmentation of PB-TNC batch | Andreas Steffen | 2011-01-05 | 1 | -4/+11 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2011-01-02 | 1 | -2/+2 | |
| | ||||||
* | set tfcv3 flag TRUE in ha_dispatcher | Andreas Steffen | 2010-12-26 | 1 | -4/+4 | |
| | ||||||
* | implemented wrap around of registered IKEv1 algorithm names | Andreas Steffen | 2010-12-26 | 1 | -3/+1 | |
| | ||||||
* | wrap list of IKEv2 algorithms after 120 characters per line | Andreas Steffen | 2010-12-24 | 1 | -20/+43 | |
| | ||||||
* | Migrated stroke_list_t to INIT/METHOD macros | Andreas Steffen | 2010-12-24 | 1 | -25/+21 | |
| | ||||||
* | eliminated whitespace | Andreas Steffen | 2010-12-21 | 1 | -1/+1 | |
| | ||||||
* | Migrated child_create_t to INIT/METHOD macros | Andreas Steffen | 2010-12-21 | 1 | -83/+55 | |
| | ||||||
* | Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality | Martin Willi | 2010-12-20 | 1 | -1/+1 | |
| | ||||||
* | Do not use TFC padding if peer does not support ESPv3 | Martin Willi | 2010-12-20 | 3 | -11/+31 | |
| | ||||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 12 | -12/+36 | |
| | ||||||
* | Implemented Traffic Flow Confidentiality padding in kernel_interface | Martin Willi | 2010-12-20 | 2 | -2/+3 | |
| | ||||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 3 | -17/+35 | |
| | ||||||
* | Install selectors on transport mode IPsec SAs. | Jiri Bohac | 2010-12-13 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | This fixes several test cases in IKEv2_Self_Test (part of the IPv6 Ready Logo Program) which is required for USGv6 certification, namely: - IKEv2.EN.I.1.1.7.1, IKEv2.EN.I.1.1.7.1: Narrowing the range of members of the set of traffic selectors - IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selector When traffic selectors of a triggered SA are narrowed by the responder, the installed policy and the broader trap policy share the same reqid. Without selectors on the IPsec SA packets matching the trap policy, but not the narrowed policy, would incorrectly be handled by that IPsec SA. Since only one selector can be specified per IPsec SA, there is currently no solution for tunnel mode SAs. | |||||
* | reverted Connection ID to capital letters | Andreas Steffen | 2010-12-12 | 1 | -2/+2 | |
| | ||||||
* | some more cosmetics | Andreas Steffen | 2010-12-12 | 1 | -9/+9 | |
| | ||||||
* | final cosmetics in PB-TNC debug output | Andreas Steffen | 2010-12-12 | 2 | -31/+30 | |
| | ||||||
* | implemented PB-TNC message parsing checks | Andreas Steffen | 2010-12-12 | 25 | -605/+1195 | |
| | ||||||
* | some code optimizations | Andreas Steffen | 2010-12-11 | 1 | -42/+67 | |
| | ||||||
* | support handshake retry requests | Andreas Steffen | 2010-12-10 | 1 | -0/+15 | |
| | ||||||
* | the PB-TNC protocol is working | Andreas Steffen | 2010-12-10 | 2 | -15/+50 | |
| | ||||||
* | refactored message handling | Andreas Steffen | 2010-12-10 | 1 | -147/+194 | |
| | ||||||
* | do not accept results and recommendation messages from clients | Andreas Steffen | 2010-12-10 | 1 | -10/+29 | |
| | ||||||
* | defined some additional Private Enterprise Numbers | Andreas Steffen | 2010-12-10 | 1 | -2/+6 | |
| | ||||||
* | define pb_tnc_state_machine_t object | Andreas Steffen | 2010-12-10 | 6 | -229/+401 | |
| | ||||||
* | debug cosmetics | Andreas Steffen | 2010-12-10 | 2 | -13/+21 | |
| | ||||||
* | Renamed purgex509/crl to purgecerts/crls to be consistent with list commands | Martin Willi | 2010-12-10 | 1 | -2/+2 | |
| | ||||||
* | implemented handling of received PB-TNC messages | Andreas Steffen | 2010-12-10 | 2 | -14/+179 | |
| | ||||||
* | Added options to flush CRLs/X509 certs from the cert cache | Martin Willi | 2010-12-10 | 1 | -0/+8 | |
| | ||||||
* | refactored PB-TNC state machine in receive direction | Andreas Steffen | 2010-12-09 | 1 | -83/+90 | |
| | ||||||
* | refactored PB-TNC state machine in send direction | Andreas Steffen | 2010-12-09 | 1 | -91/+95 | |
| | ||||||
* | pb_tnc_batch_t class implements parsing and building of PB-TNC batches | Andreas Steffen | 2010-12-09 | 12 | -430/+1155 | |
| | ||||||
* | fixed memory corruption | Andreas Steffen | 2010-12-08 | 1 | -1/+1 | |
| | ||||||
* | Never register IKE_SA during checkout_new, as rekeying keeps it checked out | Martin Willi | 2010-12-07 | 2 | -18/+2 | |
| | ||||||
* | added newline | Andreas Steffen | 2010-12-07 | 1 | -0/+1 | |
| | ||||||
* | re-introduced comment | Andreas Steffen | 2010-12-07 | 1 | -1/+3 | |
| | ||||||
* | Migrated stroke_control_t to INIT/METHOD macros | Andreas Steffen | 2010-12-07 | 1 | -46/+30 | |
| | ||||||
* | Migrated stroke_plugin_t to INIT/METHOD macros | Andreas Steffen | 2010-12-07 | 1 | -7/+11 | |
| |