aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* eap-mschapv2: Keep internal state to prevent authentication from succeeding p...Tobias Brunner2015-11-161-24/+67
* vici: Attribute certificates are not trustedTobias Brunner2015-11-121-1/+3
* vici: Properly add CRLs to the credential setTobias Brunner2015-11-121-2/+8
* mode-config: Reassign migrated virtual IP if client requests %anyTobias Brunner2015-11-121-1/+3
* eap-radius: Compare address family when handing out virtual IPsTobias Brunner2015-11-121-6/+26
* eap-mschapv2: Report username if different from EAP-Identity (or IKE identity)Tobias Brunner2015-11-121-1/+4
* eap-mschapv2: Provide EAP-MSCHAPv2 username as EAP-IdentityTobias Brunner2015-11-121-2/+17
* android: Fix build after updating Linux headersTobias Brunner2015-11-121-1/+0
* ike-sa-manager: Allow plugins to provide IKE SPIs via a callbackTobias Brunner2015-11-112-11/+54
* libcharon: Publish IKE_SA/CHILD_SA managers as custom plugin featureTobias Brunner2015-11-111-11/+29
* ikev1: Also use message hashes for Quick Mode for the early retransmission checkTobias Brunner2015-11-111-4/+8
* kernel-interface: Pass the same data to del_policy() that was passed to add_p...Tobias Brunner2015-11-105-107/+119
* trap-manager: Also clean up remote address in error casesTobias Brunner2015-11-101-0/+2
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-109-14/+14
* vici: Add option to query leases of poolsTobias Brunner2015-11-102-3/+36
* vici: Return local and remote virtual IPs when listing SAsTobias Brunner2015-11-102-0/+36
* socket-dynamic: Refactor setting source address when sending messagesTobias Brunner2015-11-091-32/+62
* socket-default: Refactor setting source address when sending messagesTobias Brunner2015-11-091-46/+107
* socket-default: Refactor retrieval of destination address of received packetsTobias Brunner2015-11-091-39/+89
* file-logger: Add option to print milliseconds within the current second after...Tobias Brunner2015-11-093-11/+34
* ike-natd: Create fake NAT-D payloads in a more static wayTobias Brunner2015-11-091-20/+8
* mediation: Reschedule initiate mediation job if SA is not yet foundTobias Brunner2015-11-091-0/+4
* ike-sa-manager: Signal entries that we don't actually check outTobias Brunner2015-11-091-1/+8
* ike-sa-manager: Signal waiting threads after check out/in for uniqueness checkTobias Brunner2015-11-091-0/+3
* ikev1: Fix calculation of DPD timeoutTobias Brunner2015-11-091-0/+2
* xauth: Call authorize() hook also when xauth-noauth is usedTobias Brunner2015-11-091-2/+8
* vici: Add NAT information when listing IKE_SAsTobias Brunner2015-11-092-0/+21
* stroke: Make down-nb actually non-blockingTobias Brunner2015-11-091-31/+40
* Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemesAndreas Steffen2015-11-061-3/+3
* ikev2: Fix size of key material for CAMELLIA-CTRTobias Brunner2015-10-301-0/+1
* ike-mobike: Send retransmits to the current local and remote addressesTobias Brunner2015-10-301-1/+5
* ikev1: Handle queued INFORMATIONAL message after receiving the last AM requestTobias Brunner2015-10-301-0/+16
* ikev1: Queue INFORMATIONAL request if AM is not complete yetTobias Brunner2015-10-301-6/+13
* ikev1: Handle queued TRANSACTION messages only after processing repliesTobias Brunner2015-10-301-1/+2
* ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yetTobias Brunner2015-10-301-17/+27
* ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM mes...Tobias Brunner2015-10-301-0/+32
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-9/+11
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Prevent deadlock when checking for duplicate IKEv1 SAsTobias Brunner2015-10-291-0/+16
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
* shunt-manager: Don't install policies in case of an address family or IP prot...Tobias Brunner2015-09-161-0/+20
* eap-radius: Fix creation of host_t objects based on Framed-IPv6-Address attri...Tobias Brunner2015-08-281-1/+1
* eap-ttls: Limit maximum length of tunneled EAP packet to EAP-TTLS packetTobias Brunner2015-08-271-1/+8
* trap-manager: Cleanup local address in error casesTobias Brunner2015-08-271-0/+2
* ha: Close control FIFO if it is not validTobias Brunner2015-08-271-0/+4
* Fix some Doxygen issuesTobias Brunner2015-08-273-5/+5
* ike: Fix half-open count for initiating SAs when initially checked inTobias Brunner2015-08-271-0/+6
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-276-19/+45
* vici: Handle closed sockets in the Ruby gemEvan Broder2015-08-241-1/+5
* vici: Optionally check limits when initiating connectionsTobias Brunner2015-08-212-1/+7