aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-2112-17/+68
* ike: Also track initiating IKE_SAs as half-openTobias Brunner2015-08-211-1/+0
* stroke: Allow %any as local addressTobias Brunner2015-08-211-3/+7
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-33/+46
* ikev1: Assign different job priorities for inbound IKEv1 messagesTobias Brunner2015-08-211-2/+12
* child-rekey: Don't add a REKEY_SA notify if the child-create task is deleting...Tobias Brunner2015-08-211-6/+9
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-rekey: Remove redundant migrate() call for child-create sub-taskTobias Brunner2015-08-211-2/+1
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* stroke: Change how CA certificates are storedTobias Brunner2015-08-205-58/+285
* stroke: Combine CA certificate load methodsTobias Brunner2015-08-201-82/+74
* stroke: Atomically replace CA and AA certificates when reloading themTobias Brunner2015-08-201-34/+45
* ikev1: Fix handling of overlapping Quick Mode exchangesTobias Brunner2015-08-203-2/+70
* ikev2: Compare initiator flag again, partially reverts 17ec1c74deTobias Brunner2015-08-202-1/+5
* ikev2: Drop IKE_SA_INIT messages that don't have the initiator flag setTobias Brunner2015-08-201-1/+3
* ikev1: Pass current auth-cfg when looking for key to determine auth methodTobias Brunner2015-08-191-1/+1
* ikev2: Store outer EAP method used to authenticate remote peer in auth-cfgTobias Brunner2015-08-191-0/+9
* ike: Use the original port when remote resolves to %anyTobias Brunner2015-08-191-1/+3
* trap-manager: Enable auto=route with right=%any for transport mode connectionsTobias Brunner2015-08-191-27/+118
* sql: Also do a reversed ID matchTobias Brunner2015-08-171-2/+9
* ha: Recreate the control FIFO if the file exists but is not a FIFOTobias Brunner2015-08-171-13/+68
* ikev1: Assume a default key length of 128-bit for AES-CBCTobias Brunner2015-08-171-0/+11
* vici: Add option to disable policy installation for CHILD_SAsTobias Brunner2015-08-171-1/+6
* child-sa: Fix refcounting of allocated reqidsTobias Brunner2015-08-171-3/+12
* plugin-feature: Add vendor specific EAP method registration macrosTobias Brunner2015-08-171-1/+2
* eap-radius: Use Framed-IPv6-Address attributes to send IPv6 VIPs in accountin...Tobias Brunner2015-08-171-4/+2
* eap-radius: Add support for some basic IPv6-specific RADIUS attributesTobias Brunner2015-08-171-1/+10
* vici: Add listen methods to receive arbitrary events in Python libraryTobias Brunner2015-08-171-0/+34
* vici: Move event (un-)registration to a helper method in Python libraryTobias Brunner2015-08-173-49/+60
* vici: Add ike/child-rekey eventsTobias Brunner2015-08-172-0/+108
* vici: Document the ike/child-updown eventsTobias Brunner2015-08-171-0/+23
* vici: Don't include a child-sas section in ike-updown eventTobias Brunner2015-08-171-2/+0
* vici: Explicitly notify listeners of the type of ike/child-updown eventTobias Brunner2015-08-171-0/+11
* Fixed AR identities in mutual TNC measurements caseAndreas Steffen2015-08-151-0/+4
* load-tester: Include string.h for strcmp() on some platformsTobias Brunner2015-08-131-0/+1
* Initialize variables that some compilers seem to warn aboutTobias Brunner2015-08-132-2/+2
* Fixed some typosTobias Brunner2015-08-132-5/+5
* whitelist: Use hash() method so DNs with different string types matchTobias Brunner2015-08-061-1/+1
* updown: Pass virtual IPs assigned to a peer to the updown scriptTobias Brunner2015-08-061-7/+11
* eap-radius: Don't send RADIUS Accounting Start messages twiceTobias Brunner2015-08-061-0/+5
* eap-radius: Change trigger for Accounting Start messages for IKEv1Tobias Brunner2015-08-061-5/+12
* ha: Properly initialize algo variables when installing CHILD_SAsTobias Brunner2015-08-041-1/+1
* ha: Sync remote address in HA_IKE_ADD, tooThomas Egerer2015-08-042-0/+11
* jobs: Don't execute rekey CHILD_SA job on passive IKE_SAsThomas Egerer2015-08-041-1/+4
* ike: Disable NAT keepalives in state PASSIVEThomas Egerer2015-08-041-3/+12
* ha: Use the same init values for jhash() as Linux 4.1Tobias Brunner2015-07-311-2/+19
* sql: Fix memory leak in SQL loggerTobias Brunner2015-07-281-0/+1
* ike: Fix memory leak if remote address is keptTobias Brunner2015-07-271-0/+4
* ike-rekey: Fix cleanup() callTobias Brunner2015-07-271-2/+2