aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ikev1: Don't use rekeyed CHILD_SAs for rekey detectionTobias Brunner2016-05-061-4/+4
* ikev1: Don't call updown hook etc. when deleting redundant CHILD_SAsTobias Brunner2016-05-061-0/+1
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-048-21/+43
* proposal: Remove some weaker and rarely used DH groups from the default proposalTobias Brunner2016-05-041-3/+5
* kernel-pfkey: Add support for manual prioritiesTobias Brunner2016-04-151-7/+24
* kernel-pfkey: Update priority calculation formula to the new one in kernel-ne...Tobias Brunner2016-04-151-14/+25
* kernel-netlink: Order policies with equal priorities by their automatic priorityTobias Brunner2016-04-151-11/+24
* Extended IPsec kernel policy schemeAndreas Steffen2016-04-091-18/+53
* Include manual policy priorities and restriction to interfaces in vici list-c...Andreas Steffen2016-04-091-1/+14
* Implemented IPsec policies restricted to given network interfaceAndreas Steffen2016-04-097-14/+63
* Support manually-set IPsec policy prioritiesAndreas Steffen2016-04-097-22/+77
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-0911-167/+220
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-0911-295/+293
* kernel-pfkey: Prefer policies with reqid over those withoutTobias Brunner2016-04-091-1/+7
* kernel-pfkey: Only install templates for regular IPsec policies with reqidTobias Brunner2016-04-091-32/+35
* shunt-manager: Install "outbound" FWD policyTobias Brunner2016-04-091-2/+8
* kernel-netlink: Prefer policies with reqid over those withoutTobias Brunner2016-04-091-1/+7
* kernel-netlink: Only associate templates with inbound FWD policiesTobias Brunner2016-04-091-1/+1
* child-sa: Install "outbound" FWD policyTobias Brunner2016-04-091-0/+16
* kernel-netlink: Associate routes with IN policies instead of FWD policiesTobias Brunner2016-04-091-21/+21
* kernel: Use structs to pass information to the kernel-ipsec interfaceTobias Brunner2016-04-0910-894/+1066
* vici: Fix documentation of some dictionary keys of two request messagesCameron McCord2016-03-311-3/+3
* Use standard unsigned integer typesAndreas Steffen2016-03-24233-1711/+1711
* updown: Get value for PLUTO_MARK_{IN,OUT} from CHILD_SAShota Fukumori2016-03-231-2/+2
* connmark: Explicitly include xt_mark.h for older kernelsTobias Brunner2016-03-231-0/+1
* libcharon: Add missing header file to Android.mkTobias Brunner2016-03-231-0/+1
* ike-sa-manager: Avoid memory leak if IKE_SAs get checked in after flush() was...Tobias Brunner2016-03-231-23/+38
* ha: Delete cache entry inside the locked mutexThomas Egerer2016-03-231-0/+2
* kernel-netlink: Fix lookup of next hops for destinations with prefixTobias Brunner2016-03-211-1/+2
* Fix some Doxygen issuesTobias Brunner2016-03-111-1/+1
* vici: Don't hold write lock while running or undoing start actionsTobias Brunner2016-03-111-27/+63
* Initialize ts variableAndreas Steffen2016-03-111-1/+1
* forecast: Compare the complete rules when deleting themTobias Brunner2016-03-101-1/+4
* connmark: Don't restore CONNMARK for packets that already have a mark setTobias Brunner2016-03-101-2/+17
* connmark: Compare the complete rules when deleting themTobias Brunner2016-03-101-1/+4
* Support of IP address ranges in traffic selectorsAndreas Steffen2016-03-102-7/+27
* attr: Only enumerate attributes matching the IKE version of the current IKE_SATobias Brunner2016-03-101-19/+49
* attr: Add p-cscf keyword for P-CSCF server addressesTobias Brunner2016-03-101-0/+1
* p-cscf: Make sending requests configurable and disable it by defaultTobias Brunner2016-03-101-2/+6
* p-cscf: Only send requests if virtual IPs of the same family are requestedTobias Brunner2016-03-101-2/+18
* p-cscf: Add attribute handler for P-CSCF server addressesTobias Brunner2016-03-104-1/+243
* p-cscf: Add plugin stubTobias Brunner2016-03-105-0/+132
* payloads: Verify P-CSCF configuration attributes like others carrying IP addr...Tobias Brunner2016-03-101-0/+2
* attributes: Define P-CSCF address attributes described in RFC 7651Tobias Brunner2016-03-102-6/+13
* ike-sa: Improve interaction between flush_auth_cfg and delayed revocation checksTobias Brunner2016-03-101-26/+37
* ikev2: Delay online revocation checks during make-before-break reauthenticationTobias Brunner2016-03-101-0/+5
* ikev2: Add task that verifies a peer's certificateTobias Brunner2016-03-107-2/+183
* ikev2: Initiate other tasks after a no-op taskTobias Brunner2016-03-101-1/+1
* ikev2: Don't do online revocation checks in pubkey authenticator if requestedTobias Brunner2016-03-101-1/+8
* ike-sa: Add condition to suspend online certificate revocation checks for an ...Tobias Brunner2016-03-101-0/+5
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-12 14:43:45 +0000