aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
* child-cfg: Fix removal of redundant traffic selectorsTobias Brunner2014-04-251-1/+1
* libcharon: Added AEAD sources of libtls to Android.mkTobias Brunner2014-04-251-0/+1
* bus: Add a fast-path if log messages don't have to be loggedTobias Brunner2014-04-241-7/+53
* load-tester: Fix race condition issuing same SPIChristophe Gouault2014-04-241-2/+2
* load-tester: Fix race condition issuing same identityChristophe Gouault2014-04-241-2/+2
* ike-sa-manager: Improve scalability of half-open IKE_SA checkingTobias Brunner2014-04-241-7/+8
* ike: Delay actively initiated reauthentication when other exchanges in progressMartin Willi2014-04-171-2/+47
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Apply extensions and conditions before starting rekeyingMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-174-22/+30
* ikev1: Add an option to accept unencrypted ID/HASH payloadsMartin Willi2014-04-171-1/+20
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAsMartin Willi2014-04-141-0/+9
* eap-mschapv2: Fix potential leaks in case of invalid messages from serversTobias Brunner2014-04-091-0/+4
* stroke: Fix memory leak when printing unknown AC group OIDsTobias Brunner2014-04-091-0/+1
* ike-cfg: Properly compare IKE proposals for equality5.1.3rc1Tobias Brunner2014-04-031-1/+1
* tls: Support a maximum TLS version to negotiate using TLS socket abstractionMartin Willi2014-04-011-1/+1
* tls: Support a null encryption flag on TLS socket abstractionMartin Willi2014-04-011-2/+2
* aead: Support custom AEAD salt sizesMartin Willi2014-03-311-2/+27
* ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeyingMartin Willi2014-03-311-0/+12
* Properly hash pointers for hash tables where appropriateTobias Brunner2014-03-313-54/+5
* eap-radius: Add option to not close IKE_SAs on timeouts during interim accout...Tobias Brunner2014-03-311-1/+6
* ikev1: Accept SPI size of any length <= 16 in ISAKMP proposalTobias Brunner2014-03-311-4/+12
* proposal: Don't fail DH proposal matching if peer includes NONETobias Brunner2014-03-311-4/+19
* ikev2: Cache all received attribute certificates to auth configMartin Willi2014-03-311-1/+27
* ikev2: Send all known and valid attribute certificates for subject certMartin Willi2014-03-311-0/+46
* ikev2: Slightly refactor certificate payload construction to separate functionsMartin Willi2014-03-311-37/+56
* ike: Support encoding of attribute certificates in CERT payloadsMartin Willi2014-03-311-1/+6
* x509: Replace fixed acert group string getter by a more dynamic group enumeratorMartin Willi2014-03-311-16/+68
* tnc-pdp: Fix monolithic buildTobias Brunner2014-03-201-1/+2
* tnc-ifmap: Get a reference to the client cert as it is also used in an auth c...Tobias Brunner2014-03-101-1/+1
* stroke: Use thread-safe dirname(3)Tobias Brunner2014-02-241-6/+4
* stroke: Use dirname(3) correctlyTobias Brunner2014-02-241-5/+5
* uclibc only defines strndup(3) if _GNU_SOURCE is definedTobias Brunner2014-02-192-3/+6
* stroke: Use proper modifiers to print size_t argumentsTobias Brunner2014-02-181-1/+1
* lookip: Properly return from disconnect callback jobTobias Brunner2014-02-181-1/+3
* lookip: Disconnect asynchronously to avoid dead-locking watcher unregistrationMartin Willi2014-02-171-3/+30
* libcharon: Remove unused charon->nameTobias Brunner2014-02-122-13/+5
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-1272-259/+255
* libhydra: Use lib->ns instead of hydra->daemonTobias Brunner2014-02-121-1/+1
* pool: Install SQL schemas from src/poolTobias Brunner2014-02-123-567/+0
* sql: Set default values for some fields in addresses tableTobias Brunner2014-02-122-6/+6
* sql: Install SQL schemas in /usr/share/strongswan/templates/databaseTobias Brunner2014-02-121-0/+3
* sql: Remove unused cred.sql snippetTobias Brunner2014-02-121-24/+0
* ikev1: Fix config switching due to failed authentication during Aggressive modeTobias Brunner2014-02-121-3/+1
* updown: Return an empty DNS server enumerator if no IKE_SA availableMartin Willi2014-02-061-1/+1
* ike: Restart inactivity counter after doing a CHILD_SA rekeyMartin Willi2014-01-231-2/+3
* child-sa: Add a getter for CHILD_SA install timeMartin Willi2014-01-232-0/+20
* xauth-pam: Open/close a PAM session for each connected clientAndrea Bonomi2014-01-234-9/+265
* xauth-pam: Sanitize XAuth attributes before passing them to PAMMartin Willi2014-01-231-1/+5