aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* vici: Fix dispatcher leak when handling unknown requestMartin Willi2014-05-071-10/+11
* vici: Add a test case raising events during request, checks in-order deliveryMartin Willi2014-05-071-0/+76
* vici: Avoid recursive control log invocationsMartin Willi2014-05-071-18/+24
* vici: Add a callback based recursive parser functionMartin Willi2014-05-072-0/+136
* vici: Add a version command to print daemon and OS version infoMartin Willi2014-05-071-0/+23
* vici: Implement a terminate command to close IKE or CHILD_SAsMartin Willi2014-05-071-0/+118
* vici: Add a control backend, currently to initiate connections by nameMartin Willi2014-05-074-0/+275
* vici: Support thread cancellation in command callbacksMartin Willi2014-05-072-19/+53
* vici: Move dumping to core message class, use it in libviciMartin Willi2014-05-074-56/+81
* vici: Add convenience value/string/integer getter to libviciMartin Willi2014-05-072-0/+76
* vici: Add some convenience getters on messageMartin Willi2014-05-073-1/+337
* vici: Raise events with an optional identifier for specific connectionsMartin Willi2014-05-074-9/+14
* vici: Invoke dispatcher outside of connection log, allowing events from commandsMartin Willi2014-05-071-4/+13
* vici: Add a query class, currently implementing a list-sas commandMartin Willi2014-05-074-1/+440
* vici: Add a libvici low-level client libraryMartin Willi2014-05-076-0/+1413
* vici: Provide a command dispatcher handling request and event registrationMartin Willi2014-05-079-128/+1105
* vici: Add a fully asynchronous IPC socket segmenting messages on/from streamMartin Willi2014-05-078-0/+1538
* vici: Add a test runner for pluginMartin Willi2014-05-074-0/+87
* vici: Add a plugin stub for the "Versatile IKE Control Interface" pluginMartin Willi2014-05-074-0/+152
* child-cfg: Fix removal of redundant traffic selectorsTobias Brunner2014-04-251-1/+1
* libcharon: Added AEAD sources of libtls to Android.mkTobias Brunner2014-04-251-0/+1
* bus: Add a fast-path if log messages don't have to be loggedTobias Brunner2014-04-241-7/+53
* load-tester: Fix race condition issuing same SPIChristophe Gouault2014-04-241-2/+2
* load-tester: Fix race condition issuing same identityChristophe Gouault2014-04-241-2/+2
* ike-sa-manager: Improve scalability of half-open IKE_SA checkingTobias Brunner2014-04-241-7/+8
* ike: Delay actively initiated reauthentication when other exchanges in progressMartin Willi2014-04-171-2/+47
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Apply extensions and conditions before starting rekeyingMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-174-22/+30
* ikev1: Add an option to accept unencrypted ID/HASH payloadsMartin Willi2014-04-171-1/+20
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAsMartin Willi2014-04-141-0/+9
* eap-mschapv2: Fix potential leaks in case of invalid messages from serversTobias Brunner2014-04-091-0/+4
* stroke: Fix memory leak when printing unknown AC group OIDsTobias Brunner2014-04-091-0/+1
* ike-cfg: Properly compare IKE proposals for equality5.1.3rc1Tobias Brunner2014-04-031-1/+1
* tls: Support a maximum TLS version to negotiate using TLS socket abstractionMartin Willi2014-04-011-1/+1
* tls: Support a null encryption flag on TLS socket abstractionMartin Willi2014-04-011-2/+2
* aead: Support custom AEAD salt sizesMartin Willi2014-03-311-2/+27
* ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeyingMartin Willi2014-03-311-0/+12
* Properly hash pointers for hash tables where appropriateTobias Brunner2014-03-313-54/+5
* eap-radius: Add option to not close IKE_SAs on timeouts during interim accout...Tobias Brunner2014-03-311-1/+6
* ikev1: Accept SPI size of any length <= 16 in ISAKMP proposalTobias Brunner2014-03-311-4/+12
* proposal: Don't fail DH proposal matching if peer includes NONETobias Brunner2014-03-311-4/+19
* ikev2: Cache all received attribute certificates to auth configMartin Willi2014-03-311-1/+27
* ikev2: Send all known and valid attribute certificates for subject certMartin Willi2014-03-311-0/+46
* ikev2: Slightly refactor certificate payload construction to separate functionsMartin Willi2014-03-311-37/+56
* ike: Support encoding of attribute certificates in CERT payloadsMartin Willi2014-03-311-1/+6
* x509: Replace fixed acert group string getter by a more dynamic group enumeratorMartin Willi2014-03-311-16/+68
* tnc-pdp: Fix monolithic buildTobias Brunner2014-03-201-1/+2
* tnc-ifmap: Get a reference to the client cert as it is also used in an auth c...Tobias Brunner2014-03-101-1/+1