aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
* libcharon: Remove unused charon->nameTobias Brunner2014-02-122-13/+5
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-1272-259/+255
* libhydra: Use lib->ns instead of hydra->daemonTobias Brunner2014-02-121-1/+1
* pool: Install SQL schemas from src/poolTobias Brunner2014-02-123-567/+0
* sql: Set default values for some fields in addresses tableTobias Brunner2014-02-122-6/+6
* sql: Install SQL schemas in /usr/share/strongswan/templates/databaseTobias Brunner2014-02-121-0/+3
* sql: Remove unused cred.sql snippetTobias Brunner2014-02-121-24/+0
* ikev1: Fix config switching due to failed authentication during Aggressive modeTobias Brunner2014-02-121-3/+1
* updown: Return an empty DNS server enumerator if no IKE_SA availableMartin Willi2014-02-061-1/+1
* ike: Restart inactivity counter after doing a CHILD_SA rekeyMartin Willi2014-01-231-2/+3
* child-sa: Add a getter for CHILD_SA install timeMartin Willi2014-01-232-0/+20
* xauth-pam: Open/close a PAM session for each connected clientAndrea Bonomi2014-01-234-9/+265
* xauth-pam: Sanitize XAuth attributes before passing them to PAMMartin Willi2014-01-231-1/+5
* ikev2: Add Cisco FRAGMENTATION vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Copyright vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Delete Reason vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Use a more dynamic vendor ID database, as we use with IKEv1Martin Willi2014-01-231-16/+57
* stroke: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-30/+6
* radattr: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-40/+8
* chunk: Externalize error reporting in chunk_write()Martin Willi2014-01-231-1/+10
* unity: Send all traffic selectors in a single UNITY_SPLIT_INCLUDE attributeTobias Brunner2014-01-231-35/+47
* unity: Change local TS to 0.0.0.0/0 as responderTobias Brunner2014-01-231-4/+7
* unity: Send UNITY_SPLIT_INCLUDE attributes with proper paddingTobias Brunner2014-01-231-11/+16
* updown: Increase buffer size for script and environment variablesTobias Brunner2014-01-231-1/+1
* updown: Add PLUTO_IPCOMP to indicate if IPComp was negotiatedTobias Brunner2014-01-231-1/+7
* stroke: Ensure the buffer of strings in a stroke_msg_t is null-terminatedTobias Brunner2014-01-231-2/+5
* stroke: Add an option to prevent log level changes via stroke socketTobias Brunner2014-01-231-2/+15
* ike: Simplify error handling if name resolution failedTobias Brunner2014-01-231-16/+3
* ike: Use proper hostname(s) when name resolution failedTobias Brunner2014-01-231-1/+1
* ikev2: Wipe (optional) shared secret during CHILD_SA key derivationTobias Brunner2014-01-231-11/+14
* dhcp: Allow binding of socket to particular interfaceThomas Egerer2014-01-201-0/+34
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-164-9/+16
* stroke: Fix error message if parsing leftsourceip failsTobias Brunner2014-01-061-1/+1
* ike: Log SK_p consistently on level 4Tobias Brunner2013-11-281-1/+1
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
* leak-detective: Use callback functions to report leaks and usage informationMartin Willi2013-11-061-1/+22
* ikev2: Properly free DH secret in case of errors during IKE key derivationTobias Brunner2013-11-061-0/+3
* Added IFOM_CAPABILITY notify message typeAndreas Steffen2013-11-012-6/+10
* ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeyingMartin Willi2013-11-011-0/+8
* ikev1: Properly initialize list of fragments in case fragment ID is 0Volker RĂ¼melin2013-10-311-1/+1
* updown: fix segfault when interface name can't be resolvedAnsis Atteka2013-10-301-0/+4
* Use exact mask when calling umask(2)Tobias Brunner2013-10-292-2/+2
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
* Fixed some typosTobias Brunner2013-10-293-3/+3
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
* updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-171-2/+23
* proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4