aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ike-sa: Resolve hosts before reestablishing an IKE_SATobias Brunner2013-09-231-0/+2
* android: Several plugins were moved from libcharon to libtnccsTobias Brunner2013-09-231-29/+5
* Implemented TCG/PB-PDP_Referral messageAndreas Steffen2013-09-171-0/+12
* stroke: don't remove a matching peer config if used by other child configsMartin Willi2013-09-131-4/+3
* ikev1: Fix double free when searching for redundant CHILD_SAsTobias Brunner2013-09-131-1/+1
* Build all shared libraries with -no-undefined and link them properlyTobias Brunner2013-09-121-1/+7
* sockets: Initialize the whole ancillary data buffer not only the actual structTobias Brunner2013-09-102-4/+4
* ikev1: For PFS prefer DH group from IKE_SA over first configuredThomas Egerer2013-09-101-18/+54
* Fixed double free causing swapped ends to crash5.1.1dr3Andreas Steffen2013-09-071-1/+0
* load-tester: support extended traffic selector syntax, as in leftsubnetMartin Willi2013-09-041-13/+168
* load-tester: add an option to test transport/beet connectionsMartin Willi2013-09-041-1/+21
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-0411-100/+296
* ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addrMartin Willi2013-09-047-33/+18
* backends: use ike_cfg host matching functionsMartin Willi2013-09-041-38/+7
* ike-cfg: add methods to match a host against configured local/remote addressesMartin Willi2013-09-042-0/+62
* trap-manager: use ike_cfg resolver functionsMartin Willi2013-09-041-4/+2
* ike-sa: use ike_cfg resolver functionsMartin Willi2013-09-041-16/+12
* ike-cfg: add a method to resolve local/remote hosts with portMartin Willi2013-09-042-0/+30
* stroke: ignore a leftsourceip if a rightsourceip is given as wellMartin Willi2013-09-041-1/+7
* ikev1: implement mode config push modeMartin Willi2013-09-045-76/+363
* stroke: re-enable modeconfig keywordMartin Willi2013-09-041-1/+1
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-0410-14/+37
* xauth-generic: honor requested XAuth credential types as a clientMartin Willi2013-09-031-16/+51
* message: print type of configuration payloadMartin Willi2013-09-031-1/+21
* message: print attributes for IKEv1 configuration payloads as wellMartin Willi2013-09-031-1/+2
* eap-radius: support XAuth configuration profiles, defining multiple XAuth roundsMartin Willi2013-09-031-22/+157
* xauth: add a configuration string option to be passed to XAuth instancesMartin Willi2013-09-0315-17/+52
* Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp pluginAndreas Steffen2013-08-261-76/+95
* stroke: stop enumerating IKE_SAs in statusall if output stream gets closedMartin Willi2013-08-231-1/+1
* Process PB-TNC batches received via PT-TLS asynchronouslyAndreas Steffen2013-08-191-4/+1
* Show host address of peer connecting to PT-TLS socketAndreas Steffen2013-08-151-1/+7
* enabled SASL PLAIN authenticationAndreas Steffen2013-08-151-2/+2
* PT-TLS connection is properly terminatedAndreas Steffen2013-08-151-3/+2
* moved tnc_imv plugin to libtnccs thanks to recommendation callback functionAndreas Steffen2013-08-1513-1894/+79
* Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon plug...Andreas Steffen2013-08-1567-10664/+0
* rapid PT-TLS AR/PDP prototypeAndreas Steffen2013-08-155-60/+254
* Add PT-TLS interface to strongSwan PDPAndreas Steffen2013-08-154-39/+68
* ikev1: Fix calculation of the number of fragmentsTobias Brunner2013-08-151-1/+1
* ikev1: When sending fragments, use ports to decide if a non-ESP marker is addedTobias Brunner2013-08-151-6/+8
* ikev2: Fix segfault when reestablishing CHILD_SAs due to closeaction=restart|...Tobias Brunner2013-08-131-3/+4
* updown: remove description of unsupported PLUTO_ variablesMartin Willi2013-08-081-1/+0
* tnc-pdp: Initialize struct msghdr properly when reading RADIUS messages5.1.0Tobias Brunner2013-07-311-10/+10
* whitelist: Fix compilation on FreeBSDTobias Brunner2013-07-311-0/+2
* Callback job is not needed any moreAndreas Steffen2013-07-311-4/+0
* receiver: Avoid cloning packet data when verifying COOKIE payloadsTobias Brunner2013-07-291-5/+1
* unity: Handle multi-valued UNITY_SPLIT_INCLUDE/UNITY_LOCAL_LAN attributesTobias Brunner2013-07-291-50/+97
* tnc-pdp now uses watcher_tAndreas Steffen2013-07-291-92/+63
* ikev2: Only schedule half-open-timeout delete job after successfully handling...Tobias Brunner2013-07-291-8/+16
* eap-radius: do RADIUS/IKE attribute forwarding in XAuth backendMartin Willi2013-07-292-1/+5
* eap-radius: support plain XAuth RADIUS authentication using User-PasswordMartin Willi2013-07-294-0/+253