aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* Support of IP address ranges in traffic selectorsAndreas Steffen2016-03-102-7/+27
* attr: Only enumerate attributes matching the IKE version of the current IKE_SATobias Brunner2016-03-101-19/+49
* attr: Add p-cscf keyword for P-CSCF server addressesTobias Brunner2016-03-101-0/+1
* p-cscf: Make sending requests configurable and disable it by defaultTobias Brunner2016-03-101-2/+6
* p-cscf: Only send requests if virtual IPs of the same family are requestedTobias Brunner2016-03-101-2/+18
* p-cscf: Add attribute handler for P-CSCF server addressesTobias Brunner2016-03-104-1/+243
* p-cscf: Add plugin stubTobias Brunner2016-03-105-0/+132
* payloads: Verify P-CSCF configuration attributes like others carrying IP addr...Tobias Brunner2016-03-101-0/+2
* attributes: Define P-CSCF address attributes described in RFC 7651Tobias Brunner2016-03-102-6/+13
* ike-sa: Improve interaction between flush_auth_cfg and delayed revocation checksTobias Brunner2016-03-101-26/+37
* ikev2: Delay online revocation checks during make-before-break reauthenticationTobias Brunner2016-03-101-0/+5
* ikev2: Add task that verifies a peer's certificateTobias Brunner2016-03-107-2/+183
* ikev2: Initiate other tasks after a no-op taskTobias Brunner2016-03-101-1/+1
* ikev2: Don't do online revocation checks in pubkey authenticator if requestedTobias Brunner2016-03-101-1/+8
* ike-sa: Add condition to suspend online certificate revocation checks for an ...Tobias Brunner2016-03-101-0/+5
* ike-sa: Add method to verify certificates in completed authentication roundsTobias Brunner2016-03-102-0/+111
* credential-manager: Make online revocation checks optional for public key enu...Tobias Brunner2016-03-102-2/+2
* vici: Replace child configs atomicallyTobias Brunner2016-03-081-14/+11
* peer-cfg: Add method to atomically replace child configsTobias Brunner2016-03-082-2/+128
* ike-cfg: Use new method to compare proposal lists in equals()Tobias Brunner2016-03-081-20/+4
* peer-cfg: Use new method to compare linked lists in equals()Tobias Brunner2016-03-081-36/+3
* child-cfg: Add equals() methodTobias Brunner2016-03-082-2/+62
* vici: Order auth rounds by optional `round` parameter instead of by position ...Tobias Brunner2016-03-081-40/+64
* ikev1: Send NAT-D payloads after vendor ID payloads in Aggressive Mode messagesTobias Brunner2016-03-071-6/+6
* ike-sa-manager: Log a checkin/failure message for every checkoutThomas Egerer2016-03-071-8/+32
* ike-sa-manager: Log some additional details like SPIs when checking out SAsTobias Brunner2016-03-041-7/+16
* smp: Correctly return IKE SPIs stored in network orderTobias Brunner2016-03-041-4/+4
* vici: Correctly return IKE SPIs stored in network orderTobias Brunner2016-03-041-2/+4
* stroke: Correctly print IKE SPIs stored in network orderTobias Brunner2016-03-041-2/+4
* vici: Add support for pubkey constraints with EAP-TLSTobias Brunner2016-03-041-0/+8
* auth-cfg: Make IKE signature schemes configurableTobias Brunner2016-03-042-5/+7
* ikev2: Always store signature scheme in auth-cfgTobias Brunner2016-03-041-12/+1
* ikev2: Diversify signature scheme ruleThomas Egerer2016-03-042-3/+4
* ike-init: Verify REDIRECT notify before processing IKE_SA_INIT messageTobias Brunner2016-03-041-7/+51
* ikev2: Allow tasks to verify request messages before processing themTobias Brunner2016-03-041-4/+47
* ikev2: Allow tasks to verify response messages before processing themTobias Brunner2016-03-041-1/+27
* task: Add optional pre_process() methodTobias Brunner2016-03-041-1/+13
* ike-init: Ignore notifies related to redirects during rekeyingTobias Brunner2016-03-041-3/+13
* ike-sa: Add limit for the number of redirects within a defined time periodTobias Brunner2016-03-042-0/+54
* ike-sa: Reauthenticate to the same addresses we currently useTobias Brunner2016-03-041-2/+5
* vici: Don't redirect all SAs if no selectors are givenTobias Brunner2016-03-041-1/+1
* vici: Match subnets and ranges against peer IP in redirect commandTobias Brunner2016-03-042-12/+42
* vici: Match identity with wildcards against remote ID in redirect commandTobias Brunner2016-03-042-5/+9
* vici: Add redirect commandTobias Brunner2016-03-045-0/+150
* redirect-job: Add job to redirect an active IKE_SATobias Brunner2016-03-044-0/+159
* ike-sa: Add redirect() method to actively redirect an IKE_SATobias Brunner2016-03-042-0/+50
* ike-redirect: Add task to redirect active IKE_SAsTobias Brunner2016-03-047-0/+220
* ike-auth: Handle REDIRECT notifies during IKE_AUTHTobias Brunner2016-03-041-22/+44
* ike-sa: Handle redirect requests for established SAs as reestablishmentTobias Brunner2016-03-041-82/+174
* ike-auth: Send REDIRECT notify during IKE_AUTH if requested by providersTobias Brunner2016-03-041-27/+51
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-12 15:06:04 +0000