aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* Correctly initialize payload length of encrypted payloadTobias Brunner2012-09-281-1/+1
* The eap argument of send_response is never NULLTobias Brunner2012-09-281-13/+11
* Properly initialize sockaddr_in struct in fast and dhcp pluginsTobias Brunner2012-09-281-4/+7
* Clarified error message if enabling UDP decapsulation failsTobias Brunner2012-09-272-2/+4
* IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabledTobias Brunner2012-09-251-1/+4
* Don't check interface of inbound message if interfaces are not filteredTobias Brunner2012-09-241-2/+3
* Made IP address enumeration more flexibleTobias Brunner2012-09-215-5/+5
* Drop packets received on ignored interfacesTobias Brunner2012-09-211-2/+12
* Make it easy to check if an address is locally usable via changed get_interfa...Tobias Brunner2012-09-212-18/+9
* Don't ignore loopback devices and allow addresses on them being enumeratedTobias Brunner2012-09-215-7/+7
* Make sure we propose a dynamic TS if we don't have hosts to derive a TS fromTobias Brunner2012-09-211-10/+8
* As Unity responder, don't change the proposed TS at all, racoon doesn't like ...Martin Willi2012-09-182-7/+8
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* As initiator, narrow received Unity attributes to configured TSMartin Willi2012-09-181-4/+11
* When using Unity, bump up remote TS as initiator to 0.0.0.0/0, tooMartin Willi2012-09-181-5/+8
* Enable Cisco Unity only if Unity vendor id receivedMartin Willi2012-09-183-2/+5
* Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchangeMartin Willi2012-09-181-22/+87
* Add a Unity attribute provider that adds Split-Includes for TSMartin Willi2012-09-184-1/+232
* Check if subset calculation actually yields a TS in Unity narrowingMartin Willi2012-09-181-1/+5
* Request Unity configuration attributes for IKEv1 onlyMartin Willi2012-09-181-0/+6
* Add Cisco Unity client support for Split-Include and Local-LANMartin Willi2012-09-188-0/+781
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-188-118/+160
* Use the vararg list constructor in quick mode taskMartin Willi2012-09-181-16/+8
* Make stroke user-creds work with XAuth configsTobias Brunner2012-09-181-9/+18
* Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity>Tobias Brunner2012-09-181-0/+10
* Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiatorTobias Brunner2012-09-181-1/+2
* Removed the unneeded socket-raw pluginTobias Brunner2012-09-147-885/+0
* Change traffic selectors during Quick Mode in case of a NAT in transport modeTobias Brunner2012-09-141-9/+19
* Added possibility to register custom proposal keywordsTobias Brunner2012-09-131-2/+2
* Removed len argument from proposal_get_token()Tobias Brunner2012-09-131-24/+23
* Option added to enforce a configured destination address for DHCP packetsTobias Brunner2012-09-131-1/+9
* Ensure traffic selectors are dynamic before calling set_address() when derivi...Tobias Brunner2012-09-121-2/+2
* Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is emptyMartin Willi2012-09-111-29/+14
* Don't use host address for dynamic TS in IKEv1 if a virtual IP was expectedMartin Willi2012-09-111-40/+57
* Don't use host address for dynamic TS in IKEv2 if a virtual IP was expectedMartin Willi2012-09-111-1/+33
* Send FAILED_CP_REQUIRED if a configuration payload was expected, but not rece...Martin Willi2012-09-111-0/+9
* Check for an existing lease in all stroke pools before creating a new oneMartin Willi2012-09-111-7/+31
* Pass full pool list to release_addressMartin Willi2012-09-115-29/+64
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-116-58/+69
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-113-3/+48
* Support RADIUS accounting when using IKEv1 with xauth-eap and eap-radiusMartin Willi2012-09-111-2/+10
* Fix leak while enumerating RADIUS Framed-IPs from IKE_SAMartin Willi2012-09-111-0/+1
* Add uniqueids=never to ignore INITIAL_CONTACT notifiesTobias Brunner2012-09-104-5/+11
* Print the name of mem pools instead of the confusing <base>/<size>Tobias Brunner2012-09-101-2/+4
* introduced sending of standard IETF Assessment Result PA-TNC attribute by IMVsAndreas Steffen2012-09-093-21/+29
* Only initiate an exchange from send_dpd() if a task was actually queuedTobias Brunner2012-09-071-2/+8
* Trigger ike_updown event caused by retransmits only after reestablish() has b...Tobias Brunner2012-09-063-10/+5
* Add ike_reestablish() event that is triggered when an IKE_SA is reestablishedTobias Brunner2012-09-064-0/+49
* Add a new condition to mark IKE_SAs that are currently being reauthenticatedTobias Brunner2012-09-062-9/+9
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-055-1/+43