aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ike-config: Do not assign attributes for redirected IKE_SAsTobias Brunner2016-03-041-0/+5
* child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTHTobias Brunner2016-03-041-0/+4
* ike-sa: Add a condition to mark redirected IKE_SAsTobias Brunner2016-03-041-0/+5
* ike-init: Handle REDIRECTED_FROM similar to REDIRECT_SUPPORTED as serverTobias Brunner2016-03-041-0/+17
* ike-init: Send REDIRECTED_FROM instead of REDIRECT_SUPPORTED if appropriateTobias Brunner2016-03-041-1/+19
* ike-sa: Keep track of the address of the gateway that redirected usTobias Brunner2016-03-042-1/+27
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-042-1/+20
* ikev2: Handle REDIRECT notifies during IKE_SA_INITTobias Brunner2016-03-043-0/+64
* ike-init: Send REDIRECT notify during IKE_SA_INIT if requested by providersTobias Brunner2016-03-041-0/+17
* redirect-manager: Add helper function to create and parse REDIRECT notify dataTobias Brunner2016-03-042-11/+162
* redirect-manager: Verify type of returned gateway IDTobias Brunner2016-03-041-1/+12
* ike-init: Send REDIRECT_SUPPORTED as initiatorTobias Brunner2016-03-041-0/+5
* ike-init: Enable redirection extension if client sends REDIRECT_SUPPORTED notifyTobias Brunner2016-03-041-0/+4
* ike-sa: Add new extension for IKEv2 redirection (RFC 5685)Tobias Brunner2016-03-041-1/+6
* daemon: Create global redirect manager instanceTobias Brunner2016-03-042-0/+8
* redirect-manager: Add manager for redirect providersTobias Brunner2016-03-044-2/+223
* redirect-provider: Add interface to redirect clients during initial messagesTobias Brunner2016-03-043-0/+61
* Set PLUTO port variables to 0 in the case of no port restrictionsAndreas Steffen2016-03-041-1/+1
* Port range support in updown scriptAndreas Steffen2016-03-041-13/+37
* Implemented port ranges in kernel_netlink interfaceAndreas Steffen2016-03-041-7/+19
* libhydra: Remove empty unused libraryTobias Brunner2016-03-0369-74/+1
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-0356-307/+2646
* libhydra: Move all kernel plugins to libcharonTobias Brunner2016-03-0325-0/+12445
* ikev1: Send and verify IPv6 addresses correctlyTobias Brunner2016-03-032-26/+18
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-1/+17
* ikev1: Avoid modifying local auth config when detecting pubkey methodTobias Brunner2016-03-031-1/+1
* forecast: Fix alignment when adding rulesTobias Brunner2016-03-031-114/+133
* connmark: Fix alignment when adding rulesTobias Brunner2016-03-031-160/+172
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-033-11/+24
* ike: Don't send NAT keepalives if we have no path to the other peerTobias Brunner2016-03-031-3/+9
* vici: Provide ports of local and remote IKE endpointsTobias Brunner2016-03-032-2/+9
* duplicheck: Include required headers for FreeBSDDenis Volpato Martins2016-03-031-0/+2
* charon: Add custom logger to daemonThomas Egerer2016-03-014-43/+336
* vici: Correctly document 'up' key for updown eventsTobias Brunner2016-03-011-4/+4
* ikev2: Use config value for sending of vendor IDsThomas Egerer2016-03-011-13/+43
* ike-sa-manager: Store a reference to the thread that checked out an IKE_SATobias Brunner2016-02-171-13/+14
* Fix of the mutual TNC measurement use caseAndreas Steffen2016-02-161-1/+1
* utils: Add enum name for pseudo log group 'any'Tobias Brunner2016-02-051-10/+3
* libipsec: Pass the same data to del_policy() as to add_policy()Tobias Brunner2016-02-041-2/+2
* ikev2: Add debug message about failed IKE authenticationThomas Egerer2016-02-021-0/+4
* ikev1: Log successful authentication with signature schemeThomas Egerer2016-02-011-1/+1
* peer-cfg: Set DPD timeout to at least DPD delayTobias Brunner2016-02-011-0/+4
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-2/+2
* load-tester: Register kernel-ipsec implementation as plugin featureTobias Brunner2016-02-011-10/+11
* child-rekey: Suppress updown event when deleting redundant CHILD_SAsTobias Brunner2016-02-011-1/+10
* ha: Properly sync IKEv1 IV if gateway is initiatorTobias Brunner2016-02-011-12/+16
* ha: Add DH group to CHILD_ADD messageTobias Brunner2016-02-012-1/+12
* ha: Add DH group to IKE_ADD messageTobias Brunner2016-02-014-0/+16
* ike-sa-manager: Don't update entries for init messages after unlocking segmentTobias Brunner2016-02-011-3/+2
* vici: Support multiple named raw ublic keysAndreas Steffen2016-01-101-15/+19