aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* child-sa: Add new state to track installation of only the inbound SATobias Brunner2017-05-232-1/+7
* child-sa: Change API used to set/install policiesTobias Brunner2017-05-236-79/+119
* child-sa: Split in- and outbound policy de-/installationTobias Brunner2017-05-231-62/+127
* child-create: Trigger NARROW_RESPONDER_POST hook before installing SAsTobias Brunner2017-05-231-25/+21
* tnc-ifmap: Null-terminate buffer to make sscanf()-calls safeTobias Brunner2017-05-231-4/+5
* Add plugin constructor registration for all libraries that provide pluginsTobias Brunner2017-05-232-0/+16
* kernel-netlink: Use total retransmit timeout as acquire timeoutTobias Brunner2017-05-232-13/+23
* task-manager: Add helper function to calculate the total retransmit timeoutTobias Brunner2017-05-232-1/+42
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-233-5/+57
* kernel-netlink: Try to add new inbound SA if update failsThomas Egerer2017-05-231-3/+12
* kernel-pfkey: Update SA addresses if supported by the kernelTobias Brunner2017-05-231-21/+16
* kernel-pfkey: Use new encap flag on Mac OS X when updating SAsTobias Brunner2017-05-231-1/+1
* receiver: Restrict init limit to half-open SAs as responderThomas Egerer2017-05-231-4/+2
* kernel-netlink: Update hardware offload attribute when SAs are updatedTobias Brunner2017-05-231-11/+37
* kernel-netlink: Base SA update on correct message in multi-message responseTobias Brunner2017-05-231-7/+7
* vici: Make hardware offload configurableTobias Brunner2017-05-231-0/+11
* child-sa: Optionally enable hardware offload for CHILD_SAsTobias Brunner2017-05-231-0/+1
* child-cfg: Add flag to enable hardware offloadTobias Brunner2017-05-231-0/+3
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-2311-152/+128
* kernel-netlink: Enable hardware offloading if configured for an SATobias Brunner2017-05-231-0/+25
* kernel-ipsec: Add flag to enable hardware offloading for an IPsec SATobias Brunner2017-05-231-0/+2
* kernel-netlink: Directly handle Netlink messages if thread pool is emptyTobias Brunner2017-05-231-1/+2
* socket-default: Add an option to force the sending interface via IP_PKTINFOMartin Willi2017-05-231-7/+48
* Add an option to announce support for IKE fragmentation but not sending fragm...Tobias Brunner2017-05-232-3/+6
* vici: Return key ID from load-key commandTobias Brunner2017-05-232-4/+13
* ikev1: Send NAT-D payloads after HASH payloads in Aggressive Mode requestsTobias Brunner2017-05-191-1/+1
* ike-sa-manager: Improve scalability of IKE_SA count checkingThomas Egerer2017-05-191-19/+10
* attr-sql: Make release of online leases during startup optionalTobias Brunner2017-05-191-8/+12
* eap-simaka-sql: Fixed database column from use to usedAndreas Steffen2017-04-261-4/+7
* vici: Fix type error exception in Python bindingsodi792017-04-191-1/+1
* kernel-netlink: Avoid O(n^2) copy operations when concatenating Netlink respo...Jiri Horky2017-03-271-7/+13
* addrblock: Narrow selectors when rekeying a CHILD_SA as original responderMartin Willi2017-03-241-0/+1
* kernel-wfp: Don't redefine IPPROTO_IP* if already definedTobias Brunner2017-03-231-0/+4
* vici: Don't fall back to uninstalling traps if a matching shunt was foundTobias Brunner2017-03-231-3/+7
* Fixed some typos, courtesy of codespellTobias Brunner2017-03-234-4/+4
* vici: Document how we pronounce the vici protocol and pluginMartin Willi2017-03-201-3/+3
* ikev1: First do PSK lookups based on identities then fallback to IPsTobias Brunner2017-03-201-36/+34
* ike-sa-manager: Remove superfluous assignmentThomas Egerer2017-03-161-4/+0
* ike: Log remote IP when deleting half-open IKE_SAsTobias Brunner2017-03-151-1/+2
* quick-mode: Correctly prepare NAT-OA payloads as responderTobias Brunner2017-03-061-8/+13
* controller: Don't listen for CHILD_SA state changes when terminating IKE_SAsTobias Brunner2017-03-021-1/+0
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-023-6/+26
* addrblock: Use dynamic TS narrowing instead of rejecting the whole CHILD_SAMartin Willi2017-03-021-43/+28
* addrblock: Support an optional non-strict mode accepting certs without addrblockMartin Willi2017-03-021-3/+11
* child-cfg: Always apply hosts to traffic selectors if proposing transport modeTobias Brunner2017-02-271-14/+19
* ikev1: Respond to DPDs for rekeyed IKE_SAsTobias Brunner2017-02-172-0/+10
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-171-1/+23
* ikev2: Ignore roam events without MOBIKE but static local addressTobias Brunner2017-02-171-0/+10
* ike-cfg: Add helper function to determine if a given IP address was configuredTobias Brunner2017-02-172-2/+46
* vici: Only log messages if there actually is a listenerTobias Brunner2017-02-161-0/+7
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-01 19:17:50 +0000