aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ikev1: Send DELETE for rekeyed IKE_SAsTobias Brunner2016-10-041-9/+5
* vici: Enable IKE fragmentation by defaultTobias Brunner2016-10-041-1/+1
* ike: Set default IKE fragment size to 1280Tobias Brunner2016-10-041-1/+1
* ikev2: Send derived CHILD_SA keys to the busTobias Brunner2016-10-041-26/+43
* ikev2: Send derived IKE_SA keys to busTobias Brunner2016-10-041-26/+30
* ikev1: Send derived CHILD_SA keys to the busTobias Brunner2016-10-041-14/+26
* ikev1: Send derived IKE_SA keys to busTobias Brunner2016-10-041-14/+11
* bus: Add new hooks for derived IKE_SA and CHILD_SA keysTobias Brunner2016-10-043-11/+131
* bus: Fix maximum log levels when mixing log/vlog implementing loggersTobias Brunner2016-09-301-12/+20
* kernel-netlink: Pass zero mark to kernel if mask is setTobias Brunner2016-09-301-2/+2
* kernel-netlink: Support configuring XFRM policy hashing thresholdsTobias Brunner2016-09-301-0/+107
* child-sa: Only install outbound FWD policies if explicitly configuredTobias Brunner2016-09-281-14/+27
* vici: Make installation of outbound FWD policies configurableTobias Brunner2016-09-281-25/+29
* child-cfg: Add setting that controls whether outbound FWD policies are installedTobias Brunner2016-09-282-0/+24
* kernel-netlink: Update cached reqid when updating policiesTobias Brunner2016-09-281-0/+2
* gmp: Support of SHA-3 RSA signaturesAndreas Steffen2016-09-221-2/+2
* eap-peap: Fix memory leaks when handling tunneled methodsTobias Brunner2016-09-201-1/+3
* ipseckey: Properly free enumerated certificatesTobias Brunner2016-09-201-12/+14
* ipseckey: Properly free public key after creating certificateTobias Brunner2016-09-201-1/+1
* dnscert: Properly free enumerated certificatesTobias Brunner2016-09-201-8/+11
* vici: Fix indention of flush_certs() method in Python bindingsTobias Brunner2016-09-201-1/+1
* maemo: Remove unused pluginTobias Brunner2016-09-157-748/+0
* vici: flush-certs command flushes certificate cacheAndreas Steffen2016-09-136-0/+68
* ikev2: (Re-)Queue tasks used to establish an IKE_SA in reset()Tobias Brunner2016-09-061-2/+1
* ikev2: Store proposal on IKE_SA before creating DH objectTobias Brunner2016-09-061-2/+5
* ikev1: Don't require AH mapping for integrity algorithm when generating proposalThomas Egerer2016-08-251-6/+9
* ikev1: Ignore the last two bytes of the Cisco Unity vendor IDTobias Brunner2016-08-241-0/+3
* ikev1: Accept more than one certificate payload in aggressive modeTobias Brunner2016-08-171-2/+2
* Created newhope plugin implementing the New Hope key exchange algorithmAndreas Steffen2016-08-101-0/+1
* xof: Defined Extended Output FunctionsAndreas Steffen2016-07-292-0/+19
* vici: Increased various string buffers to BUF_LEN (512 bytes)Andreas Steffen2016-07-291-4/+4
* libcharon: Add exchange_tests to .gitignoreTobias Brunner2016-07-251-0/+1
* ike1: Flush active queue when queueing a delete of the IKE_SATobias Brunner2016-07-191-0/+3
* ikev1: Add support for extended sequence numbersThomas Egerer2016-06-291-3/+17
* unit-tests: Add tests for expires after CHILD_SA rekeyingTobias Brunner2016-06-171-0/+129
* child-rekey: Only rekey installed CHILD_SAsTobias Brunner2016-06-171-7/+14
* Report test coverage of libcharon and starterTobias Brunner2016-06-171-0/+3
* unit-tests: Add test for CHILD_SA rekey if a retry due to an INVALID_KE_PAYLO...Tobias Brunner2016-06-171-0/+143
* child-rekey: Ignore failed colliding CHILD_SA rekeyingsTobias Brunner2016-06-171-1/+10
* unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creationTobias Brunner2016-06-173-0/+108
* child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is receivedTobias Brunner2016-06-171-4/+33
* ikev2: Add possibility to delay initiation of a queued taskTobias Brunner2016-06-175-66/+189
* ike: Reduce RETRY_INTERVAL a bitTobias Brunner2016-06-171-2/+2
* ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SATobias Brunner2016-06-171-14/+35
* unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are rec...Tobias Brunner2016-06-171-0/+470
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-175-10/+21
* child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-174-23/+38
* ike-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-175-32/+48
* proposal: Remove MODP_NONE from IKE proposals parsed from stringsTobias Brunner2016-06-171-0/+10
* proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-174-6/+97