aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* Use exact mask when calling umask(2)Tobias Brunner2013-10-292-2/+2
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
* Fixed some typosTobias Brunner2013-10-293-3/+3
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
* updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-171-2/+23
* proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4
* stroke: Reuse reqids of established CHILD_SAs when routing connectionsTobias Brunner2013-10-171-1/+45
* trap-manager: Make sure a config is not trapped twiceTobias Brunner2013-10-171-4/+16
* Doxygen fixesTobias Brunner2013-10-152-3/+2
* iv_gen: Provide external sequence number (IKE, ESP)Tobias Brunner2013-10-113-5/+7
* ikev2: Use IV generator to encrypt encrypted payloadTobias Brunner2013-10-111-1/+9
* iv_gen: aead_t implementations provide an IV generatorTobias Brunner2013-10-111-0/+8
* eap-radius: Forward RAT_FRAMED_IP_NETMASK as INTERNAL_IP4_NETMASKTobias Brunner2013-10-111-0/+5
* eap-radius: Forward UNITY_SPLIT_INCLUDE or UNITY_LOCAL_LAN attributesTobias Brunner2013-10-111-0/+93
* eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributesTobias Brunner2013-10-111-3/+25
* dnscert: Add DNS CERT support for pubkey authenticationRuslan N. Marchenko2013-10-118-0/+828
* ipseckey: Properly handle failure to create a certificateTobias Brunner2013-10-111-33/+28
* ipseckey: Refactor creation of certificate enumeratorTobias Brunner2013-10-111-86/+81
* ipseckey: Depend on plugin features to create public key and certificate objectsTobias Brunner2013-10-111-0/+2
* kernel-libipsec: Don't ignore policies of type != POLICY_IPSECTobias Brunner2013-10-111-5/+0
* kernel-libipsec: Add an option to allow remote TS to match the IKE peerTobias Brunner2013-10-111-2/+9
* socket-default: Allow setting firewall mark on outbound packetsTobias Brunner2013-10-111-0/+18
* sql: Don't use MyISAM engine and set collation/charset for all tablesTobias Brunner2013-10-111-26/+25
* Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required ...Tobias Brunner2013-10-112-2/+2
* kernel-libipsec: Support ESPv3 TFC paddingMartin Willi2013-10-111-1/+1
* kernel-libipsec: Support query_sa() to report usage statisticsMartin Willi2013-10-111-1/+2
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-113-4/+4
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-113-5/+5
* updown: Add a PLUTO_PROTO variable set to 'ah' or 'esp'Martin Willi2013-10-111-0/+2
* ike: Define keylength for aescmac algorithmMartin Willi2013-10-111-0/+1
* ikev1: Support parsing of AH+IPComp proposalsMartin Willi2013-10-111-9/+11
* ikev1: Accept more than two certificate payloadsMartin Willi2013-10-111-2/+2
* ikev1: Support en-/decoding of SA payloads with AH algorithmsMartin Willi2013-10-111-31/+99
* kernel-handler: Whitespace cleanupsMartin Willi2013-10-111-42/+38
* stroke: List proposals in statusall without leading '/' in AH SAsMartin Willi2013-10-111-1/+7
* ikev1: Delete quick modes with the negotiated SA protocolMartin Willi2013-10-111-1/+1
* trap-manager: Install trap with SA protocol of the first configured proposalMartin Willi2013-10-111-4/+12
* child-sa: Save protocol during SPI allocationMartin Willi2013-10-111-6/+3
* ikev1: Negotiate SPI with the first/negotiated proposal protocolMartin Willi2013-10-111-3/+18
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* proposal: Strip redundant integrity algos for ESP proposals onlyMartin Willi2013-10-111-16/+19
* stroke: Configure proposal with AH protocol if 'ah' option setMartin Willi2013-10-112-11/+16
* Keep a copy of the tnccs instance for PT-TLS handoverAndreas Steffen2013-10-091-2/+16
* xauth-pam: Make trimming of email addresses optional5.1.1dr4Tobias Brunner2013-10-041-4/+9
* ikev1: Accept reauthentication attempts with a keep unique policy from same hostMartin Willi2013-09-301-6/+17
* ikev1: Don't log a reauthentication detection message if no children adoptedMartin Willi2013-09-301-2/+6
* ikev1: Delay a potential delete for a duplicate IKE_SA having a replace policyMartin Willi2013-09-301-8/+29
* eap-radius: Increase buffer for attributes sent in RADIUS accounting messagesTobias Brunner2013-09-271-1/+1
* load-tester: Fix crash if private key was not loaded successfullyTobias Brunner2013-09-241-1/+1
* ikev2: Force an update of the host addresses on the first responseTobias Brunner2013-09-231-11/+9