aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* kernel-netlink: Use the same priority range for trap and regular policiesTobias Brunner2017-02-081-14/+14
* kernel-netlink: Fix spacing in log message when policy is unchangedTobias Brunner2017-02-081-1/+1
* ikev1: Factor out IV and QM managementTobias Brunner2017-02-086-261/+500
* keymat: Allow keymat to modify signature scheme(s)Thomas Egerer2017-02-087-18/+49
* forecast: Mark correct port in UDP NAT-T ruleJames Laird-Wah2017-02-081-1/+1
* eap-dynamic: Publish the get_auth() method of the wrapped EAP methodTobias Brunner2017-02-071-0/+12
* ike-auth: Don't send INITIAL_CONTACT if remote ID contains wildcardsTobias Brunner2017-02-061-1/+2
* proposal: Copy SPI and proposal number from correct proposal in select()Tobias Brunner2017-02-065-8/+47
* kernel-netlink: Set NODAD flag for virtual IPv6 addressesTobias Brunner2017-02-061-10/+16
* kernel-netlink: Prefer matching label when selecting IPv6 source addressesTobias Brunner2017-02-061-3/+78
* kernel-netlink: Use correct 4 byte alignment for AH with IPv4Tobias Brunner2017-01-251-0/+5
* kernel-netlink: Allow change of Netlink socket receive buffer sizeThomas Egerer2017-01-251-0/+44
* kernel-pfkey: Set state to SADB_SASTATE_MATURE when adding/updating SAsTobias Brunner2017-01-251-0/+2
* kernel-pfroute: Don't set a gateway if it is of a different address family th...Tobias Brunner2017-01-251-1/+2
* stroke: Default to %dynamic if no valid TS are specified in left|rightsubnetTobias Brunner2017-01-251-57/+44
* vici: Reload loggers after reloading strongswan.conf via reload-setting commandTobias Brunner2017-01-251-0/+1
* daemon: Use separate method to set default loggersTobias Brunner2017-01-254-17/+65
* ha: Fix assignment of IP addresses if multiple pools are definedTobias Brunner2017-01-251-2/+6
* ha: Delete passive IKE_SA on other node after half-open timeoutTobias Brunner2017-01-251-0/+15
* kernel-netlink: Return const pointer from lookup_algorithm()Thomas Egerer2017-01-231-3/+4
* stroke: Load general PKCS#8 private keysAndreas Steffen2016-12-172-3/+9
* Merge branch 'Ed25519'Andreas Steffen2016-12-161-0/+32
|\
| * Implemented EdDSA for IKEv2 using a pro forma Identity hash functionAndreas Steffen2016-12-141-0/+32
* | vici: Check for closed connection in Python bindingsWeilu Jia2016-12-141-1/+4
|/
* kernel-netlink: Add support for AES-CMAC-96 (RFC 4494)Tobias Brunner2016-12-121-0/+1
* ikev1: Minor code optimization in task managerThomas Egerer2016-12-071-11/+5
* child-sa: Use single return statement in update_usebytes()Thomas Egerer2016-11-181-4/+8
* proposal: Remove RFC 5114 MODP DH groups from default proposalMartin Willi2016-11-151-2/+4
* proposal: Add curve25519 and curve448 to default proposalTobias Brunner2016-11-141-0/+2
* bus: Re-add ampersand that got lost in refactoringTobias Brunner2016-11-141-1/+1
* peer-cfg: Fix memory leak when replacing child configsTobias Brunner2016-11-111-0/+1
* bus: Fix maximum log level for different groups after removal of a loggerTobias Brunner2016-11-111-5/+5
* farp: Fix BPF jump false offsetVolker RĂ¼melin2016-10-311-1/+1
* connmark: Add CAP_NET_RAW to capabilities keep listTim Kent2016-10-251-0/+6
* Fixed some typos, courtesy of codespellTobias Brunner2016-10-141-1/+1
* kernel-netlink: Fix get_route() interface determinationChristophe Gouault2016-10-121-2/+2
* Save both base and delta CRLs to diskAndreas Steffen2016-10-112-2/+9
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-116-4/+83
* task-manager: Only trigger retransmit cleared alert if there was at least one...Tobias Brunner2016-10-052-2/+2
* unit-tests: Enable optional logging in libcharon unit testsTobias Brunner2016-10-051-0/+17
* unit-tests: Add more tests for proposal creationTobias Brunner2016-10-051-8/+62
* proposal: Correctly add AES-GMAC for AH proposalsTobias Brunner2016-10-051-0/+41
* proposal: Enforce separate proposals for AEAD and classic encryption algorithmsTobias Brunner2016-10-051-16/+22
* proposal: Make sure there is a PRF defined in IKE proposalsTobias Brunner2016-10-051-14/+34
* proposal: Make DH groups mandatory in IKE proposals parsed from stringsTobias Brunner2016-10-052-21/+40
* ikev2: Respond with NO_PROPOSAL_CHOSEN if proposal without DH group was selectedTobias Brunner2016-10-051-0/+1
* kernel-netlink: Consider RTA_SRC when looking for a source addressTobias Brunner2016-10-051-52/+134
* ikev2: Only add NAT-D notifies to DPDs as initiatorTobias Brunner2016-10-041-8/+15
* ikev1: Activate task to delete the IKE_SA in state IKE_REKEYINGTobias Brunner2016-10-041-0/+8
* ikev1: Delete Quick Mode SAs before the ISAKMP SATobias Brunner2016-10-041-2/+2