| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Correctly initialize payload length of encrypted payload | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
* | The eap argument of send_response is never NULL | Tobias Brunner | 2012-09-28 | 1 | -13/+11 |
* | Properly initialize sockaddr_in struct in fast and dhcp plugins | Tobias Brunner | 2012-09-28 | 1 | -4/+7 |
* | Clarified error message if enabling UDP decapsulation fails | Tobias Brunner | 2012-09-27 | 2 | -2/+4 |
* | IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled | Tobias Brunner | 2012-09-25 | 1 | -1/+4 |
* | Don't check interface of inbound message if interfaces are not filtered | Tobias Brunner | 2012-09-24 | 1 | -2/+3 |
* | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 5 | -5/+5 |
* | Drop packets received on ignored interfaces | Tobias Brunner | 2012-09-21 | 1 | -2/+12 |
* | Make it easy to check if an address is locally usable via changed get_interfa... | Tobias Brunner | 2012-09-21 | 2 | -18/+9 |
* | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 5 | -7/+7 |
* | Make sure we propose a dynamic TS if we don't have hosts to derive a TS from | Tobias Brunner | 2012-09-21 | 1 | -10/+8 |
* | As Unity responder, don't change the proposed TS at all, racoon doesn't like ... | Martin Willi | 2012-09-18 | 2 | -7/+8 |
* | Don't complain about multiple TS in IKEv1, as it supported with Unity | Martin Willi | 2012-09-18 | 1 | -5/+0 |
* | As initiator, narrow received Unity attributes to configured TS | Martin Willi | 2012-09-18 | 1 | -4/+11 |
* | When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too | Martin Willi | 2012-09-18 | 1 | -5/+8 |
* | Enable Cisco Unity only if Unity vendor id received | Martin Willi | 2012-09-18 | 3 | -2/+5 |
* | Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange | Martin Willi | 2012-09-18 | 1 | -22/+87 |
* | Add a Unity attribute provider that adds Split-Includes for TS | Martin Willi | 2012-09-18 | 4 | -1/+232 |
* | Check if subset calculation actually yields a TS in Unity narrowing | Martin Willi | 2012-09-18 | 1 | -1/+5 |
* | Request Unity configuration attributes for IKEv1 only | Martin Willi | 2012-09-18 | 1 | -0/+6 |
* | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 8 | -0/+781 |
* | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 8 | -118/+160 |
* | Use the vararg list constructor in quick mode task | Martin Willi | 2012-09-18 | 1 | -16/+8 |
* | Make stroke user-creds work with XAuth configs | Tobias Brunner | 2012-09-18 | 1 | -9/+18 |
* | Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> | Tobias Brunner | 2012-09-18 | 1 | -0/+10 |
* | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 1 | -1/+2 |
* | Removed the unneeded socket-raw plugin | Tobias Brunner | 2012-09-14 | 7 | -885/+0 |
* | Change traffic selectors during Quick Mode in case of a NAT in transport mode | Tobias Brunner | 2012-09-14 | 1 | -9/+19 |
* | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+2 |
* | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -24/+23 |
* | Option added to enforce a configured destination address for DHCP packets | Tobias Brunner | 2012-09-13 | 1 | -1/+9 |
* | Ensure traffic selectors are dynamic before calling set_address() when derivi... | Tobias Brunner | 2012-09-12 | 1 | -2/+2 |
* | Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty | Martin Willi | 2012-09-11 | 1 | -29/+14 |
* | Don't use host address for dynamic TS in IKEv1 if a virtual IP was expected | Martin Willi | 2012-09-11 | 1 | -40/+57 |
* | Don't use host address for dynamic TS in IKEv2 if a virtual IP was expected | Martin Willi | 2012-09-11 | 1 | -1/+33 |
* | Send FAILED_CP_REQUIRED if a configuration payload was expected, but not rece... | Martin Willi | 2012-09-11 | 1 | -0/+9 |
* | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 1 | -7/+31 |
* | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 5 | -29/+64 |
* | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 6 | -58/+69 |
* | Add a responder narrow() hook to change TS in the kernel, but not on the wire | Martin Willi | 2012-09-11 | 3 | -3/+48 |
* | Support RADIUS accounting when using IKEv1 with xauth-eap and eap-radius | Martin Willi | 2012-09-11 | 1 | -2/+10 |
* | Fix leak while enumerating RADIUS Framed-IPs from IKE_SA | Martin Willi | 2012-09-11 | 1 | -0/+1 |
* | Add uniqueids=never to ignore INITIAL_CONTACT notifies | Tobias Brunner | 2012-09-10 | 4 | -5/+11 |
* | Print the name of mem pools instead of the confusing <base>/<size> | Tobias Brunner | 2012-09-10 | 1 | -2/+4 |
* | introduced sending of standard IETF Assessment Result PA-TNC attribute by IMVs | Andreas Steffen | 2012-09-09 | 3 | -21/+29 |
* | Only initiate an exchange from send_dpd() if a task was actually queued | Tobias Brunner | 2012-09-07 | 1 | -2/+8 |
* | Trigger ike_updown event caused by retransmits only after reestablish() has b... | Tobias Brunner | 2012-09-06 | 3 | -10/+5 |
* | Add ike_reestablish() event that is triggered when an IKE_SA is reestablished | Tobias Brunner | 2012-09-06 | 4 | -0/+49 |
* | Add a new condition to mark IKE_SAs that are currently being reauthenticated | Tobias Brunner | 2012-09-06 | 2 | -9/+9 |
* | Clear virtual IPs before storing assigned ones on the IKE_SA | Tobias Brunner | 2012-09-05 | 5 | -1/+43 |