| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | Remove peer_cfg IKE version matching, as it is done in ike_cfg matching | Martin Willi | 2012-10-24 | 1 | -22/+3 |
| * | Respect IKE version while selecting an ike_cfg as responder | Martin Willi | 2012-10-24 | 4 | -13/+38 |
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 11 | -23/+15 |
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 11 | -22/+52 |
| * | Move ike_version_t definition from peer_cfg_t to ike_cfg_t | Martin Willi | 2012-10-24 | 4 | -24/+24 |
| * | Handle type of first EAP-RADIUS response more sophisticated | Tobias Brunner | 2012-10-18 | 1 | -3/+18 |
| * | Update routed connections in trap manager | Tobias Brunner | 2012-10-18 | 1 | -37/+39 |
| * | Reload logger configuration on SIGHUP | Tobias Brunner | 2012-10-18 | 3 | -37/+369 |
| * | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 4 | -21/+157 |
| * | Resolve hosts by DNS name in separate threads so we can cancel them | Tobias Brunner | 2012-10-18 | 1 | -1/+2 |
| * | Added a new alert that is raised if peer does not respond to initial IKE message | Tobias Brunner | 2012-10-16 | 2 | -0/+4 |
| * | Remove unused this parameter to load_issuer_cert/key(), as it is uninitialized | Martin Willi | 2012-10-16 | 1 | -4/+4 |
| * | Generate a load-tester certificate only for DN or subjectAltName identities | Martin Willi | 2012-10-16 | 1 | -7/+17 |
| * | Add a load-tester initiator_match option to match custom initiator_id | Martin Willi | 2012-10-16 | 1 | -2/+15 |
| * | Encode non-DN load-tester identities as subjectAltNames | Martin Willi | 2012-10-16 | 1 | -1/+16 |
| * | Add a load-tester digest option for issuing peer certificates | Martin Willi | 2012-10-16 | 1 | -1/+16 |
| * | Load a multiple load-tester CA certificates from a directory | Martin Willi | 2012-10-16 | 1 | -4/+63 |
| * | Added load-tester options to read issuing CA certificate and key from files | Martin Willi | 2012-10-16 | 1 | -7/+45 |
| * | Fixed compilation of android_handler_t | Tobias Brunner | 2012-10-11 | 1 | -0/+1 |
| * | Fix leak of PINs from ipsec.secrets | Martin Willi | 2012-10-09 | 1 | -1/+2 |
| * | allow has_noskip_flag to contain TRUE_OR_FALSE | Andreas Steffen | 2012-10-07 | 1 | -1/+1 |
| * | test first and up in the outer while loop | Andreas Steffen | 2012-10-07 | 1 | -5/+1 |
| * | Ensure UNSUPPORTED_CRITICAL_PAYLOAD notify contains correct payload type | Tobias Brunner | 2012-09-28 | 1 | -0/+1 |
| * | Missed one in 6c10cece | Tobias Brunner | 2012-09-28 | 1 | -0/+2 |
| * | Request is never NULL when responding with an INFORMATIONAL message | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| * | Completed state handling in isakmp_cert_pre | Tobias Brunner | 2012-09-28 | 1 | -0/+4 |
| * | Added missing continue statement in ha socket error handling | Tobias Brunner | 2012-09-28 | 1 | -0/+1 |
| * | Fixed snprintf check in tnc-ifmap plugin | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| * | Use %x to print uint32 as long ints are 64-bit long on x64 Linux | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 6 | -21/+22 |
| * | Avoid memory leak when sending RADIUS accounting start message failed | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| * | Correctly initialize payload length of encrypted payload | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| * | The eap argument of send_response is never NULL | Tobias Brunner | 2012-09-28 | 1 | -13/+11 |
| * | Properly initialize sockaddr_in struct in fast and dhcp plugins | Tobias Brunner | 2012-09-28 | 1 | -4/+7 |
| * | Clarified error message if enabling UDP decapsulation fails | Tobias Brunner | 2012-09-27 | 2 | -2/+4 |
| * | IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled | Tobias Brunner | 2012-09-25 | 1 | -1/+4 |
| * | Don't check interface of inbound message if interfaces are not filtered | Tobias Brunner | 2012-09-24 | 1 | -2/+3 |
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 5 | -5/+5 |
| * | Drop packets received on ignored interfaces | Tobias Brunner | 2012-09-21 | 1 | -2/+12 |
| * | Make it easy to check if an address is locally usable via changed get_interfa... | Tobias Brunner | 2012-09-21 | 2 | -18/+9 |
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 5 | -7/+7 |
| * | Make sure we propose a dynamic TS if we don't have hosts to derive a TS from | Tobias Brunner | 2012-09-21 | 1 | -10/+8 |
| * | As Unity responder, don't change the proposed TS at all, racoon doesn't like ... | Martin Willi | 2012-09-18 | 2 | -7/+8 |
| * | Don't complain about multiple TS in IKEv1, as it supported with Unity | Martin Willi | 2012-09-18 | 1 | -5/+0 |
| * | As initiator, narrow received Unity attributes to configured TS | Martin Willi | 2012-09-18 | 1 | -4/+11 |
| * | When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too | Martin Willi | 2012-09-18 | 1 | -5/+8 |
| * | Enable Cisco Unity only if Unity vendor id received | Martin Willi | 2012-09-18 | 3 | -2/+5 |
| * | Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange | Martin Willi | 2012-09-18 | 1 | -22/+87 |
| * | Add a Unity attribute provider that adds Split-Includes for TS | Martin Willi | 2012-09-18 | 4 | -1/+232 |
| * | Check if subset calculation actually yields a TS in Unity narrowing | Martin Willi | 2012-09-18 | 1 | -1/+5 |
