tteras/strongswan - tteras' strongSwan tree

	Commit message (Expand)	Author	Age	Files	Lines
...
*	migrate-job: Do CHILD_SA reqid lookup locally	Martin Willi	2015-02-20	2	-26/+21
*	kernel-interface: Raise mapping event with a proto/SPI/dst tuple	Martin Willi	2015-02-20	3	-16/+37
*	inactivity-job: Schedule job by CHILD_SA unique ID instead of reqid	Martin Willi	2015-02-20	4	-23/+17
*	kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid	Martin Willi	2015-02-20	9	-60/+51
*	controller: Use the CHILD_SA unique_id to terminate CHILD_SAs	Martin Willi	2015-02-20	5	-37/+23
*	stroke: List CHILD_SA unique ID as the primary identifier, but print reqid, too	Martin Willi	2015-02-20	1	-5/+6
*	vici: Include the CHILD_SA unique ID in list-sa event	Martin Willi	2015-02-20	2	-0/+2
*	ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA manager	Martin Willi	2015-02-20	3	-19/+92
*	child-sa-manager: Add a global manager storing CHILD_SA relations	Martin Willi	2015-02-20	6	-1/+432
*	child-sa: Replace reqid based marks by "unique" marks	Martin Willi	2015-02-20	10	-11/+110
*	child-sa: Introduce a unique CHILD_SA identifier	Martin Willi	2015-02-20	2	-0/+24
*	child-sa: Delegate reqid allocation to the kernel interface	Martin Willi	2015-02-20	1	-15/+46
*	child-sa: Sort traffic selectors after adding CHILD_SA policies	Martin Willi	2015-02-20	1	-0/+3
*	child-sa: Remove the obsolete update logic	Martin Willi	2015-02-20	1	-6/+1
*	kernel-interface: Pass full list of traffic selectors to add_sa()	Martin Willi	2015-02-20	4	-11/+9
*	libipsec: Remove unused src/dst_ts parameters from ipsec_sa_mgr_t.add_sa()	Martin Willi	2015-02-20	1	-2/+1
*	kernel-interface: Remove reqid parameter from get_spi/get_cpi() methods	Martin Willi	2015-02-20	4	-8/+8
*	libipsec: Remove unused reqid parameter from ipsec_sa_mgr_t.get_spi()	Martin Willi	2015-02-19	1	-1/+1
*	ha: Perform child rekeying outside of CHILD_SA enumerator	Thomas Egerer	2015-02-19	1	-7/+22
*	vici: Fix ruby gem author email	Martin Willi	2015-01-22	1	-1/+1
*	vici: Fix README example encoding element type values, off by one	Martin Willi	2015-01-21	1	-10/+10
*	ikev2: Only touch the DH object if we have a matching proposal	Tobias Brunner	2014-12-23	1	-11/+17
*	apple: Redefine some additional clashing Mach types	Martin Willi	2014-12-16	1	-0/+2
*	Fixed some typos, courtesy of codespell	Tobias Brunner	2014-12-15	1	-1/+1
*	ike: Allow creation of internally used payloads	Tobias Brunner	2014-12-12	1	-1/+1
*	vici: Use silent builder destroy function in vici_free_req()	Martin Willi	2014-12-12	1	-7/+1
*	vici: Add a destroy method to builder, allowing cancellation without error	Martin Willi	2014-12-12	2	-4/+18
*	eap-radius: Use the single-server legacy server options as fallback	Martin Willi	2014-12-12	1	-3/+10
*	ikev1: Use same map for AH and ESP authentication algorithms	Tobias Brunner	2014-12-09	1	-152/+120
*	ikev1: Accept IPComp proposals with 4 octet long CPI values	Tobias Brunner	2014-12-05	1	-2/+2
*	ike: Only parse payloads valid for the current IKE version	Tobias Brunner	2014-12-05	4	-3/+33
*	ike: Make check for known payloads depend on IKE version	Tobias Brunner	2014-12-05	4	-26/+41
*	unity: Only do narrowing of responder's TS if we received 0.0.0.0/0	Tobias Brunner	2014-12-05	1	-2/+84
*	id-payload: Enable multiple calls to get_ts() for subnet traffic selectors	Tobias Brunner	2014-12-05	1	-2/+5
*	ikev2: Fix handling of more than one hash-and-URL certificate payloads	Tobias Brunner	2014-12-04	1	-2/+2
*	kernel-wfp: Install outbound ALE connect rules for IPsec	Martin Willi	2014-12-04	1	-16/+43
*	kernel-wfp: Install inbound ALE IP-in-IP filters	Martin Willi	2014-12-04	1	-41/+159
*	kernel-wfp: Add missing IPsec sublayer GUIDs	Martin Willi	2014-12-04	1	-0/+6
*	kernel-wfp: Define IPsec related ALE layers and callout GUIDs	Martin Willi	2014-12-04	2	-0/+40
*	kernel-wfp: Fix logging of MM/QM/EM NetEvent failures	Martin Willi	2014-12-04	1	-0/+12
*	vici: Make sure to send/recv all requested bytes over socket	Martin Willi	2014-12-04	1	-3/+22
*	Implemented full BLISS support for IKEv2 public key authentication and the pk...	Andreas Steffen	2014-11-29	5	-8/+45
*	ikev2: Fix ike_rekey switch statement broken with last commit	Martin Willi	2014-11-24	1	-1/+1
*	ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey	Martin Willi	2014-11-21	1	-0/+1
*	controller: Keep following initiate() if the first DH guess was wrong	Martin Willi	2014-11-21	1	-0/+12
*	child-sa: Introduce a CHILD_RETRYING state to detect DH group retries	Martin Willi	2014-11-21	3	-0/+7
*	kernel-libipsec: Use poll(2) instead of select	Martin Willi	2014-11-21	1	-54/+56
*	socket-default: Use round-robin selection of sockets to read from	Martin Willi	2014-11-21	1	-5/+13
*	socket-default: Use poll(2) instead of select	Martin Willi	2014-11-21	1	-46/+20
*	proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algori...	Tobias Brunner	2014-10-31	1	-0/+2