aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* | Add missing XAuthRespPSK switch case to IKEv1 key derivationMartin Willi2013-03-121-0/+1
* | Support mutliple subnets and ranges as external load-tester addressesMartin Willi2013-03-111-15/+59
* | Clean up IKE_SA state if IKE_SA_INIT request does not have message ID 0Martin Willi2013-03-111-0/+4
* | Ignore fourth Qick Mode message sent by Windows servers.Martin Willi2013-03-111-0/+9
* | As Quick Mode initiator, select a subset of the proposed and the returned TSMartin Willi2013-03-071-4/+11
* | instead of cloning use extract_buf() methodAndreas Steffen2013-03-041-1/+1
* | Fixed Doxygen comments after scanning complete src directoryTobias Brunner2013-03-024-5/+5
* | Removed backend for old Android frontend patchTobias Brunner2013-03-0212-923/+82
* | added ERX_SUPPORTED IKEv2 NotifyAndreas Steffen2013-03-022-7/+11
* | Merge branch 'multi-eap'Martin Willi2013-03-012-28/+50
|\ \
| * | Apply a mutual EAP auth_cfg not before the EAP method completesMartin Willi2013-02-262-1/+18
| * | Be a little more verbose why a peer_cfg is inacceptableMartin Willi2013-02-261-8/+16
| * | Refactor auth_cfg applying to a common functionMartin Willi2013-02-261-20/+17
* | | Merge branch 'multi-cert'Martin Willi2013-03-011-15/+32
|\ \ \
| * | | Load multiple comma seperarated certificates in the leftcert optionMartin Willi2013-01-181-15/+32
* | | | Merge branch 'systime'Martin Willi2013-03-016-0/+452
|\ \ \ \
| * | | | systime-fix disables certificate lifetime validation if system time not syncedMartin Willi2013-02-194-0/+326
| * | | | Add a stub for systime-fix, a plugin handling certificate lifetimes gracefullyMartin Willi2013-02-194-0/+126
| | |_|/ | |/| |
* | | | Merge branch 'ikev1-rekeying'Martin Willi2013-03-011-0/+21
|\ \ \ \
| * | | | When detecting a duplicate IKEv1 SA, adopt children, as it might be a rekeyingMartin Willi2013-02-201-0/+21
* | | | | Merge branch 'vip-shunts'Martin Willi2013-03-011-11/+6
|\ \ \ \ \
| * | | | | Include local address for Unity Split-Exclude shunt policiesMartin Willi2013-02-201-10/+5
| |/ / / /
* | | | | Merge branch 'opaque-ports'Martin Willi2013-03-017-12/+18
|\ \ \ \ \
| * | | | | Don't reject OPAQUE ports while verifying traffic selector substructureMartin Willi2013-02-211-1/+5
| * | | | | Pass complete port range over stroke interface for more flexibilityMartin Willi2013-02-211-14/+4
| * | | | | Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-216-14/+24
| | |/ / / | |/| | |
* | | | | Without MOBIKE, update remote host only if it is behind NATMartin Willi2013-03-011-2/+3
* | | | | Merge branch 'ikev1-mm-retransmits'Martin Willi2013-03-014-45/+55
|\ \ \ \ \
| * | | | | For IKEv1 Main Mode, use message hash to detect early retransmissionsMartin Willi2013-02-251-10/+23
| * | | | | Move initial message dropping to task managerMartin Willi2013-02-253-19/+27
| * | | | | Use INIT macro to initialize IKE_SA manager entriesMartin Willi2013-02-251-17/+6
| | |/ / / | |/| | |
* | | | | Merge branch 'tfc-notify'Martin Willi2013-03-011-0/+9
|\ \ \ \ \
| * | | | | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
| | |/ / / | |/| | |
* | | | | Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACTTobias Brunner2013-02-281-0/+1
| |_|_|/ |/| | |
* | | | Android.mk updated to latest MakefilesTobias Brunner2013-02-261-1/+1
| |/ / |/| |
* | | treat IF-M and IF-TNCCS remediation instructions/parameters in an equal wayAndreas Steffen2013-02-193-97/+198
* | | Streamlined log messages in ipseckey pluginAndreas Steffen2013-02-192-58/+30
* | | ipseckey: Report IPSECKEYs with invalid DNSSEC security stateReto Guadagnini2013-02-191-2/+12
* | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-191-3/+16
* | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRsReto Guadagnini2013-02-198-0/+859
* | | added missing return statementAndreas Steffen2013-02-191-0/+1
* | | reject PB-Experimental messages with NOSKIP flag setAndreas Steffen2013-02-191-0/+7
* | | Add a timeout to clean up PDP RADIUS connectionsMartin Willi2013-02-141-0/+51
* | | Keep the PDP connections lock while accessing its objectsMartin Willi2013-02-143-7/+34
* | | Add locking to TNC-PDP connectionsMartin Willi2013-02-141-7/+23
* | | Add a global return_success() method implementationMartin Willi2013-02-141-8/+2
* | | Merge branch 'ike-dscp'Martin Willi2013-02-1413-59/+163
|\ \ \
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-1/+1
| * | | Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
| * | | Add a DSCP configuration value to IKE configsMartin Willi2013-02-0611-21/+38
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-18 09:37:03 +0000