aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
* leak-detective: Use callback functions to report leaks and usage informationMartin Willi2013-11-061-1/+22
* ikev2: Properly free DH secret in case of errors during IKE key derivationTobias Brunner2013-11-061-0/+3
* Added IFOM_CAPABILITY notify message typeAndreas Steffen2013-11-012-6/+10
* ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeyingMartin Willi2013-11-011-0/+8
* ikev1: Properly initialize list of fragments in case fragment ID is 0Volker RĂ¼melin2013-10-311-1/+1
* updown: fix segfault when interface name can't be resolvedAnsis Atteka2013-10-301-0/+4
* Use exact mask when calling umask(2)Tobias Brunner2013-10-292-2/+2
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
* Fixed some typosTobias Brunner2013-10-293-3/+3
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
* updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-171-2/+23
* proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4
* stroke: Reuse reqids of established CHILD_SAs when routing connectionsTobias Brunner2013-10-171-1/+45
* trap-manager: Make sure a config is not trapped twiceTobias Brunner2013-10-171-4/+16
* Doxygen fixesTobias Brunner2013-10-152-3/+2
* iv_gen: Provide external sequence number (IKE, ESP)Tobias Brunner2013-10-113-5/+7
* ikev2: Use IV generator to encrypt encrypted payloadTobias Brunner2013-10-111-1/+9
* iv_gen: aead_t implementations provide an IV generatorTobias Brunner2013-10-111-0/+8
* eap-radius: Forward RAT_FRAMED_IP_NETMASK as INTERNAL_IP4_NETMASKTobias Brunner2013-10-111-0/+5
* eap-radius: Forward UNITY_SPLIT_INCLUDE or UNITY_LOCAL_LAN attributesTobias Brunner2013-10-111-0/+93
* eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributesTobias Brunner2013-10-111-3/+25
* dnscert: Add DNS CERT support for pubkey authenticationRuslan N. Marchenko2013-10-118-0/+828
* ipseckey: Properly handle failure to create a certificateTobias Brunner2013-10-111-33/+28
* ipseckey: Refactor creation of certificate enumeratorTobias Brunner2013-10-111-86/+81
* ipseckey: Depend on plugin features to create public key and certificate objectsTobias Brunner2013-10-111-0/+2
* kernel-libipsec: Don't ignore policies of type != POLICY_IPSECTobias Brunner2013-10-111-5/+0
* kernel-libipsec: Add an option to allow remote TS to match the IKE peerTobias Brunner2013-10-111-2/+9
* socket-default: Allow setting firewall mark on outbound packetsTobias Brunner2013-10-111-0/+18
* sql: Don't use MyISAM engine and set collation/charset for all tablesTobias Brunner2013-10-111-26/+25
* Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required ...Tobias Brunner2013-10-112-2/+2
* kernel-libipsec: Support ESPv3 TFC paddingMartin Willi2013-10-111-1/+1
* kernel-libipsec: Support query_sa() to report usage statisticsMartin Willi2013-10-111-1/+2
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-113-4/+4
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-113-5/+5
* updown: Add a PLUTO_PROTO variable set to 'ah' or 'esp'Martin Willi2013-10-111-0/+2
* ike: Define keylength for aescmac algorithmMartin Willi2013-10-111-0/+1
* ikev1: Support parsing of AH+IPComp proposalsMartin Willi2013-10-111-9/+11
* ikev1: Accept more than two certificate payloadsMartin Willi2013-10-111-2/+2
* ikev1: Support en-/decoding of SA payloads with AH algorithmsMartin Willi2013-10-111-31/+99
* kernel-handler: Whitespace cleanupsMartin Willi2013-10-111-42/+38
* stroke: List proposals in statusall without leading '/' in AH SAsMartin Willi2013-10-111-1/+7
* ikev1: Delete quick modes with the negotiated SA protocolMartin Willi2013-10-111-1/+1
* trap-manager: Install trap with SA protocol of the first configured proposalMartin Willi2013-10-111-4/+12
* child-sa: Save protocol during SPI allocationMartin Willi2013-10-111-6/+3
* ikev1: Negotiate SPI with the first/negotiated proposal protocolMartin Willi2013-10-111-3/+18
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* proposal: Strip redundant integrity algos for ESP proposals onlyMartin Willi2013-10-111-16/+19