aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ikev1: Accept IPComp proposals with 4 octet long CPI valuesTobias Brunner2014-12-051-2/+2
* ike: Only parse payloads valid for the current IKE versionTobias Brunner2014-12-054-3/+33
* ike: Make check for known payloads depend on IKE versionTobias Brunner2014-12-054-26/+41
* unity: Only do narrowing of responder's TS if we received 0.0.0.0/0Tobias Brunner2014-12-051-2/+84
* id-payload: Enable multiple calls to get_ts() for subnet traffic selectorsTobias Brunner2014-12-051-2/+5
* ikev2: Fix handling of more than one hash-and-URL certificate payloadsTobias Brunner2014-12-041-2/+2
* kernel-wfp: Install outbound ALE connect rules for IPsecMartin Willi2014-12-041-16/+43
* kernel-wfp: Install inbound ALE IP-in-IP filtersMartin Willi2014-12-041-41/+159
* kernel-wfp: Add missing IPsec sublayer GUIDsMartin Willi2014-12-041-0/+6
* kernel-wfp: Define IPsec related ALE layers and callout GUIDsMartin Willi2014-12-042-0/+40
* kernel-wfp: Fix logging of MM/QM/EM NetEvent failuresMartin Willi2014-12-041-0/+12
* vici: Make sure to send/recv all requested bytes over socketMartin Willi2014-12-041-3/+22
* Implemented full BLISS support for IKEv2 public key authentication and the pk...Andreas Steffen2014-11-295-8/+45
* ikev2: Fix ike_rekey switch statement broken with last commitMartin Willi2014-11-241-1/+1
* ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekeyMartin Willi2014-11-211-0/+1
* controller: Keep following initiate() if the first DH guess was wrongMartin Willi2014-11-211-0/+12
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-213-0/+7
* kernel-libipsec: Use poll(2) instead of selectMartin Willi2014-11-211-54/+56
* socket-default: Use round-robin selection of sockets to read fromMartin Willi2014-11-211-5/+13
* socket-default: Use poll(2) instead of selectMartin Willi2014-11-211-46/+20
* proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algori...Tobias Brunner2014-10-311-0/+2
* ike-cfg: Use host_create_from_range() helperTobias Brunner2014-10-301-16/+1
* vici: Add support for address range definitions of poolsTobias Brunner2014-10-301-5/+35
* stroke: Add support for address range definitions of in-memory poolsTobias Brunner2014-10-301-7/+33
* ikev1: Don't inherit children if INITITAL_CONTACT was seenThomas Egerer2014-10-301-1/+4
* ikev1: Send INITIAL_CONTACT notify in Main ModeThomas Egerer2014-10-301-0/+28
* message: Include encrypted fragment payload in payload (order) rulesTobias Brunner2014-10-291-0/+12
* updown: Explicitly pass caller PATH to updown scriptMartin Willi2014-10-221-0/+1
* vici: Return default value for get_int() if message value is empty stringMartin Willi2014-10-142-1/+5
* vici: Add vici.gemspec.in and vici.rb to distributionTobias Brunner2014-10-141-0/+2
* libimcv: Updated Android.mk to latest Makefile.amTobias Brunner2014-10-131-0/+1
* ike: Do remote address updates also when behind static NATsTobias Brunner2014-10-131-4/+7
* ike: Remove redundant check for local NAT when handling changed NAT mappingsTobias Brunner2014-10-131-6/+1
* vici: Cancel processor before calling library_deinit()Martin Willi2014-10-101-0/+1
* vici: Reduce debug level during thread spawningMartin Willi2014-10-101-0/+2
* vici: Don't include-depend on libstrongswan for boolean typesMartin Willi2014-10-102-4/+2
* vici: Document the ruby gem and add some simple examplesMartin Willi2014-10-101-0/+58
* vici: Add some simple libvici examples to the READMEMartin Willi2014-10-101-2/+116
* vici: Document the available vici command and event messagesMartin Willi2014-10-101-1/+509
* vici: Use "gem"-assisted vici ruby gem building and installationMartin Willi2014-10-104-1/+29
* vici: Add a ruby gem providing a native vici interfaceMartin Willi2014-10-103-0/+586
* vici: Return a success result for the clear-creds commandMartin Willi2014-10-101-4/+1
* vici: Fix message encoding type values in documentationMartin Willi2014-10-101-6/+6
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-103-13/+58
* eap-radius: Add option to set interval for interim accounting updatesTobias Brunner2014-10-101-0/+10
* message: Limit maximum number of IKEv2 fragmentsTobias Brunner2014-10-101-1/+11
* packet: Define a global default maximum size for IKE packetsTobias Brunner2014-10-104-18/+4
* message: Ensure a minimum fragment lengthTobias Brunner2014-10-101-8/+18
* ikev2: Send retransmits using the latest known addressesTobias Brunner2014-10-101-1/+3
* ikev2: Send and receive fragmented IKE messagesTobias Brunner2014-10-101-44/+169