aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
* kernel-pfroute: Make sure there is a netmask when enumerating subnetsTobias Brunner2017-07-051-2/+2
* sql: Use qualified names in SQL query statementsTobias Brunner2017-07-052-49/+54
* stroke: Don't load configs with invalid proposalsTobias Brunner2017-07-051-7/+20
* ikev1: Determine transform ID before mapping integrity algorithm IDTobias Brunner2017-07-051-1/+1
* eap-aka-3gpp: Add plugin that implements 3GPP MILENAGE algorithm in softwareTobias Brunner2017-07-0511-0/+1382
* ikev1: Only delete redundant CHILD_SAs if configuredTobias Brunner2017-06-261-1/+5
* ike-cfg: Fix memory leak when matching against rangesTobias Brunner2017-05-291-1/+1
* ike: Apply retransmission_limit before applying the jitterTobias Brunner2017-05-262-8/+8
* eap-sim-file: Remove redundant enumerator allocationTobias Brunner2017-05-261-1/+1
* sql: Remove redundant enumerator allocationTobias Brunner2017-05-261-1/+1
* Fixed some typos, courtesy of codespellTobias Brunner2017-05-264-5/+5
* linked-list: Change return value of find_first() and signature of its callbackTobias Brunner2017-05-2618-227/+244
* linked-list: Change interface of callback for invoke_function()Tobias Brunner2017-05-265-34/+65
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-2623-393/+551
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-2634-169/+333
* vici: Make 96-bit truncation for SHA-256 configurableTobias Brunner2017-05-261-0/+11
* stroke: Make 96-bit truncation for SHA-256 configurableTobias Brunner2017-05-262-1/+3
* child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256Tobias Brunner2017-05-262-0/+11
* android-log: Link against liblogTobias Brunner2017-05-261-0/+1
* unit-tests: Check installed IPsec SAs in child-rekey testsTobias Brunner2017-05-231-3/+94
* unit-tests: Add assert to check for installed IPsec SAsTobias Brunner2017-05-232-3/+115
* unit-tests: Migrate cached IPsec SAs to new IKE_SAs during rekeyingTobias Brunner2017-05-231-0/+42
* unit-tests: Keep track of installed IPsec SAs in mock kernel_ipsec_t implemen...Tobias Brunner2017-05-232-4/+136
* child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAsTobias Brunner2017-05-233-128/+412
* delete-child-sa-job: Add new constructor that takes the unique ID of a CHILD_SATobias Brunner2017-05-232-13/+69
* child-sa: Remove state to track installation of half the SA againTobias Brunner2017-05-236-62/+47
* unit-tests: Overload helper macro to check for outbound SA stateTobias Brunner2017-05-231-2/+30
* child-sa: Expose state of the outbound SATobias Brunner2017-05-232-17/+61
* child-sa: Add method to remove the outbound SA and policiesTobias Brunner2017-05-232-5/+78
* child-sa: Keep track whether the outbound SA has been installed or notTobias Brunner2017-05-231-8/+13
* child-delete: Track flags per individual CHILD_SATobias Brunner2017-05-231-47/+78
* ikev2: Delay installation of outbound SAs during rekeying on the responderTobias Brunner2017-05-234-30/+124
* child-sa: Add log message for CHILD_SA state changesTobias Brunner2017-05-231-0/+4
* child-sa: Add method to associate rekeyed CHILD_SAs with their replacementTobias Brunner2017-05-232-0/+35
* child-sa: Add methods that allow partial installation of CHILD_SATobias Brunner2017-05-232-5/+144
* child-sa: Add new state to track installation of only the inbound SATobias Brunner2017-05-232-1/+7
* child-sa: Change API used to set/install policiesTobias Brunner2017-05-236-79/+119
* child-sa: Split in- and outbound policy de-/installationTobias Brunner2017-05-231-62/+127
* child-create: Trigger NARROW_RESPONDER_POST hook before installing SAsTobias Brunner2017-05-231-25/+21
* tnc-ifmap: Null-terminate buffer to make sscanf()-calls safeTobias Brunner2017-05-231-4/+5
* Add plugin constructor registration for all libraries that provide pluginsTobias Brunner2017-05-232-0/+16
* kernel-netlink: Use total retransmit timeout as acquire timeoutTobias Brunner2017-05-232-13/+23
* task-manager: Add helper function to calculate the total retransmit timeoutTobias Brunner2017-05-232-1/+42
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-233-5/+57
* kernel-netlink: Try to add new inbound SA if update failsThomas Egerer2017-05-231-3/+12
* kernel-pfkey: Update SA addresses if supported by the kernelTobias Brunner2017-05-231-21/+16
* kernel-pfkey: Use new encap flag on Mac OS X when updating SAsTobias Brunner2017-05-231-1/+1
* receiver: Restrict init limit to half-open SAs as responderThomas Egerer2017-05-231-4/+2
* kernel-netlink: Update hardware offload attribute when SAs are updatedTobias Brunner2017-05-231-11/+37
* kernel-netlink: Base SA update on correct message in multi-message responseTobias Brunner2017-05-231-7/+7