aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets ar...Andreas Steffen2015-07-201-6/+20
* ike-sa-manager: Safely access the RNG instance with an rwlockTobias Brunner2015-07-141-5/+16
* vici: Asynchronize debug loggingMartin Willi2015-07-121-1/+47
* unit-tests: Add a IKEv2 message encryption test caseMartin Willi2015-07-123-0/+140
* unit-tests: Forward variable argument list in TEST_SUITE_DEPENDMartin Willi2015-07-121-2/+2
* unit-tests: Load libstrongswan plugins in libcharon testsMartin Willi2015-07-122-0/+16
* ikev2: Derive additional 4 byte CHILD_SA nonce keymat for ChaCha20-Poly1305Martin Willi2015-06-291-0/+1
* ikev2: Use four byte salt for ChaCha20-Poly1305 AEADMartin Willi2015-06-291-0/+1
* osx-attr: Optionally replace existing DNS server instead of appending themMartin Willi2015-06-181-3/+27
* ikev2: Enforce remote authentication config before proceeding with own authen...Martin Willi2015-06-051-0/+44
* child-sa: Use any fixed reqid configured on the CHILD_SA configMartin Willi2015-06-051-2/+2
* message: Log message if unknown/disallowed payload receivedTobias Brunner2015-06-011-3/+10
* message: Log original message type of unknown payloadsTobias Brunner2015-06-011-0/+13
* unknown-payload: Use a new private payload type and make original type availableTobias Brunner2015-06-016-10/+35
* ikev2: Include fragment number into message ID passed to IV genMartin Willi2015-06-011-0/+5
* message: Show the fragmentation numbers in message stringificationMartin Willi2015-06-011-0/+36
* ha: Document tunnel parameterTobias Brunner2015-05-271-0/+1
* ha: Skip SA for sync messages when resyncing HA segmentsTobias Brunner2015-05-263-3/+14
* ha: Move plugin initialization from constructor to plugin callbackTobias Brunner2015-05-261-58/+69
* vici: Explicitly disable --user-install when installing Ruby GemTobias Brunner2015-05-211-1/+1
* vici: Make installation of Ruby Gem and Python Egg optionalTobias Brunner2015-05-212-0/+4
* vici: Support out-of-tree build of Python EggTobias Brunner2015-05-211-5/+5
* ikev1: When a reauth is detected explicitly delete the old IKE_SATobias Brunner2015-05-211-3/+13
* eap-radius: Keep track of stats for SAs migrated during IKEv1 reauthenticationTobias Brunner2015-05-211-88/+229
* ikev1: Trigger children_migrate event if CHILD_SAs are adoptedTobias Brunner2015-05-213-1/+12
* bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SATobias Brunner2015-05-213-3/+58
* eap-radius: Remove cache entries for expired SAs during ike/child_rekeyTobias Brunner2015-05-211-0/+53
* eap-radius: Add cache for usage stats of expired/rekeyed SAsTobias Brunner2015-05-211-6/+102
* child-create: Destroy nonceg in migrate()Tobias Brunner2015-05-051-1/+2
* child-create: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-14/+12
* ike-init: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-13/+21
* ike-init: Fix compiler warningTobias Brunner2015-05-051-2/+0
* ike-init: Make nonceg a member of ike_init structReto Buerki2015-05-041-20/+17
* child-create: Make nonceg a member of child_create structReto Buerki2015-05-041-12/+16
* Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-042-3/+8
* vici: Default to certificate subject for identityTimo Teräs2015-05-041-0/+37
* vici: Add support for ike_sa and child_sa updown notificationsTimo Teräs2015-05-043-0/+137
* vici: Add function to test if an event should be generatedTimo Teräs2015-05-042-0/+74
* ike-vendor: Add some Microsoft vendor IDsTobias Brunner2015-04-211-0/+10
* vici: Relicense libvici.h under MITMartin Willi2015-04-141-9/+20
* utils: Use chunk_equals_const() for all cryptographic purposesMartin Willi2015-04-1410-13/+11
* utils: Use memeq_const() for all cryptographic purposesMartin Willi2015-04-146-13/+7
* vici: Defer read/write error reporting after connection entry has been releasedMartin Willi2015-04-131-12/+34
* aead: Create AEAD using traditional transforms with an explicit IV generatorMartin Willi2015-04-131-4/+11
* stroke: Properly parse bliss key strength in public key constraintTobias Brunner2015-03-251-1/+1
* eap-tnc: Free eap-tnc object if IKE_SA not found to get IPsTobias Brunner2015-03-251-0/+1
* Fixed some typos, courtesy of codespellTobias Brunner2015-03-252-2/+2
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-257-5/+15
* ikev1: Inverse check when applying received KE value during Quick Mode5.3.0rc1Martin Willi2015-03-241-1/+1
* encoding: Remove DH public value verification from KE payloadMartin Willi2015-03-231-73/+0