aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ikev2: Add Cisco FRAGMENTATION vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Copyright vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Delete Reason vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Use a more dynamic vendor ID database, as we use with IKEv1Martin Willi2014-01-231-16/+57
* stroke: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-30/+6
* radattr: Use chunk_map() instead of non-portable mmap()Martin Willi2014-01-231-40/+8
* chunk: Externalize error reporting in chunk_write()Martin Willi2014-01-231-1/+10
* unity: Send all traffic selectors in a single UNITY_SPLIT_INCLUDE attributeTobias Brunner2014-01-231-35/+47
* unity: Change local TS to 0.0.0.0/0 as responderTobias Brunner2014-01-231-4/+7
* unity: Send UNITY_SPLIT_INCLUDE attributes with proper paddingTobias Brunner2014-01-231-11/+16
* updown: Increase buffer size for script and environment variablesTobias Brunner2014-01-231-1/+1
* updown: Add PLUTO_IPCOMP to indicate if IPComp was negotiatedTobias Brunner2014-01-231-1/+7
* stroke: Ensure the buffer of strings in a stroke_msg_t is null-terminatedTobias Brunner2014-01-231-2/+5
* stroke: Add an option to prevent log level changes via stroke socketTobias Brunner2014-01-231-2/+15
* ike: Simplify error handling if name resolution failedTobias Brunner2014-01-231-16/+3
* ike: Use proper hostname(s) when name resolution failedTobias Brunner2014-01-231-1/+1
* ikev2: Wipe (optional) shared secret during CHILD_SA key derivationTobias Brunner2014-01-231-11/+14
* dhcp: Allow binding of socket to particular interfaceThomas Egerer2014-01-201-0/+34
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-164-9/+16
* stroke: Fix error message if parsing leftsourceip failsTobias Brunner2014-01-061-1/+1
* ike: Log SK_p consistently on level 4Tobias Brunner2013-11-281-1/+1
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
* leak-detective: Use callback functions to report leaks and usage informationMartin Willi2013-11-061-1/+22
* ikev2: Properly free DH secret in case of errors during IKE key derivationTobias Brunner2013-11-061-0/+3
* Added IFOM_CAPABILITY notify message typeAndreas Steffen2013-11-012-6/+10
* ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeyingMartin Willi2013-11-011-0/+8
* ikev1: Properly initialize list of fragments in case fragment ID is 0Volker RĂ¼melin2013-10-311-1/+1
* updown: fix segfault when interface name can't be resolvedAnsis Atteka2013-10-301-0/+4
* Use exact mask when calling umask(2)Tobias Brunner2013-10-292-2/+2
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
* Fixed some typosTobias Brunner2013-10-293-3/+3
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
* updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-171-2/+23
* proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4
* stroke: Reuse reqids of established CHILD_SAs when routing connectionsTobias Brunner2013-10-171-1/+45
* trap-manager: Make sure a config is not trapped twiceTobias Brunner2013-10-171-4/+16
* Doxygen fixesTobias Brunner2013-10-152-3/+2
* iv_gen: Provide external sequence number (IKE, ESP)Tobias Brunner2013-10-113-5/+7
* ikev2: Use IV generator to encrypt encrypted payloadTobias Brunner2013-10-111-1/+9
* iv_gen: aead_t implementations provide an IV generatorTobias Brunner2013-10-111-0/+8
* eap-radius: Forward RAT_FRAMED_IP_NETMASK as INTERNAL_IP4_NETMASKTobias Brunner2013-10-111-0/+5
* eap-radius: Forward UNITY_SPLIT_INCLUDE or UNITY_LOCAL_LAN attributesTobias Brunner2013-10-111-0/+93
* eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributesTobias Brunner2013-10-111-3/+25
* dnscert: Add DNS CERT support for pubkey authenticationRuslan N. Marchenko2013-10-118-0/+828
* ipseckey: Properly handle failure to create a certificateTobias Brunner2013-10-111-33/+28
* ipseckey: Refactor creation of certificate enumeratorTobias Brunner2013-10-111-86/+81
* ipseckey: Depend on plugin features to create public key and certificate objectsTobias Brunner2013-10-111-0/+2