index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libcharon
Commit message (
Expand
)
Author
Age
Files
Lines
...
*
ike: Use optional jitter to calculate retransmission timeouts
Tobias Brunner
2017-05-23
3
-5
/
+57
*
kernel-netlink: Try to add new inbound SA if update fails
Thomas Egerer
2017-05-23
1
-3
/
+12
*
kernel-pfkey: Update SA addresses if supported by the kernel
Tobias Brunner
2017-05-23
1
-21
/
+16
*
kernel-pfkey: Use new encap flag on Mac OS X when updating SAs
Tobias Brunner
2017-05-23
1
-1
/
+1
*
receiver: Restrict init limit to half-open SAs as responder
Thomas Egerer
2017-05-23
1
-4
/
+2
*
kernel-netlink: Update hardware offload attribute when SAs are updated
Tobias Brunner
2017-05-23
1
-11
/
+37
*
kernel-netlink: Base SA update on correct message in multi-message response
Tobias Brunner
2017-05-23
1
-7
/
+7
*
vici: Make hardware offload configurable
Tobias Brunner
2017-05-23
1
-0
/
+11
*
child-sa: Optionally enable hardware offload for CHILD_SAs
Tobias Brunner
2017-05-23
1
-0
/
+1
*
child-cfg: Add flag to enable hardware offload
Tobias Brunner
2017-05-23
1
-0
/
+3
*
child-cfg: Use flags for boolean options
Tobias Brunner
2017-05-23
11
-152
/
+128
*
kernel-netlink: Enable hardware offloading if configured for an SA
Tobias Brunner
2017-05-23
1
-0
/
+25
*
kernel-ipsec: Add flag to enable hardware offloading for an IPsec SA
Tobias Brunner
2017-05-23
1
-0
/
+2
*
kernel-netlink: Directly handle Netlink messages if thread pool is empty
Tobias Brunner
2017-05-23
1
-1
/
+2
*
socket-default: Add an option to force the sending interface via IP_PKTINFO
Martin Willi
2017-05-23
1
-7
/
+48
*
Add an option to announce support for IKE fragmentation but not sending fragm...
Tobias Brunner
2017-05-23
2
-3
/
+6
*
vici: Return key ID from load-key command
Tobias Brunner
2017-05-23
2
-4
/
+13
*
ikev1: Send NAT-D payloads after HASH payloads in Aggressive Mode requests
Tobias Brunner
2017-05-19
1
-1
/
+1
*
ike-sa-manager: Improve scalability of IKE_SA count checking
Thomas Egerer
2017-05-19
1
-19
/
+10
*
attr-sql: Make release of online leases during startup optional
Tobias Brunner
2017-05-19
1
-8
/
+12
*
eap-simaka-sql: Fixed database column from use to used
Andreas Steffen
2017-04-26
1
-4
/
+7
*
vici: Fix type error exception in Python bindings
odi79
2017-04-19
1
-1
/
+1
*
kernel-netlink: Avoid O(n^2) copy operations when concatenating Netlink respo...
Jiri Horky
2017-03-27
1
-7
/
+13
*
addrblock: Narrow selectors when rekeying a CHILD_SA as original responder
Martin Willi
2017-03-24
1
-0
/
+1
*
kernel-wfp: Don't redefine IPPROTO_IP* if already defined
Tobias Brunner
2017-03-23
1
-0
/
+4
*
vici: Don't fall back to uninstalling traps if a matching shunt was found
Tobias Brunner
2017-03-23
1
-3
/
+7
*
Fixed some typos, courtesy of codespell
Tobias Brunner
2017-03-23
4
-4
/
+4
*
vici: Document how we pronounce the vici protocol and plugin
Martin Willi
2017-03-20
1
-3
/
+3
*
ikev1: First do PSK lookups based on identities then fallback to IPs
Tobias Brunner
2017-03-20
1
-36
/
+34
*
ike-sa-manager: Remove superfluous assignment
Thomas Egerer
2017-03-16
1
-4
/
+0
*
ike: Log remote IP when deleting half-open IKE_SAs
Tobias Brunner
2017-03-15
1
-1
/
+2
*
quick-mode: Correctly prepare NAT-OA payloads as responder
Tobias Brunner
2017-03-06
1
-8
/
+13
*
controller: Don't listen for CHILD_SA state changes when terminating IKE_SAs
Tobias Brunner
2017-03-02
1
-1
/
+0
*
kernel: Make range of SPIs for IPsec SAs configurable
Tobias Brunner
2017-03-02
3
-6
/
+26
*
addrblock: Use dynamic TS narrowing instead of rejecting the whole CHILD_SA
Martin Willi
2017-03-02
1
-43
/
+28
*
addrblock: Support an optional non-strict mode accepting certs without addrblock
Martin Willi
2017-03-02
1
-3
/
+11
*
child-cfg: Always apply hosts to traffic selectors if proposing transport mode
Tobias Brunner
2017-02-27
1
-14
/
+19
*
ikev1: Respond to DPDs for rekeyed IKE_SAs
Tobias Brunner
2017-02-17
2
-0
/
+10
*
ike-sa: Optionally try to migrate to the best path on routing priority changes
Martin Willi
2017-02-17
1
-1
/
+23
*
ikev2: Ignore roam events without MOBIKE but static local address
Tobias Brunner
2017-02-17
1
-0
/
+10
*
ike-cfg: Add helper function to determine if a given IP address was configured
Tobias Brunner
2017-02-17
2
-2
/
+46
*
vici: Only log messages if there actually is a listener
Tobias Brunner
2017-02-16
1
-0
/
+7
*
vici: Let has_event_listeners() actually check if clients are registered
Tobias Brunner
2017-02-16
1
-2
/
+4
*
vici: Add support for mediation extension
Tobias Brunner
2017-02-16
1
-1
/
+85
*
peer-cfg: Store mediated_by as name and not peer-cfg reference
Tobias Brunner
2017-02-16
6
-68
/
+95
*
vici: Include uniqueness policy in list-conns
Tobias Brunner
2017-02-16
1
-0
/
+2
*
vici: Add command to initiate SA rekeying
Tobias Brunner
2017-02-16
2
-2
/
+118
*
vici: Use unique names for CHILD_SAs in the list-sas command
Tobias Brunner
2017-02-16
2
-2
/
+7
*
vici: Add support to load CA certificates from tokens and paths in authority ...
Tobias Brunner
2017-02-16
1
-10
/
+97
*
vici: Add support to load certificates from file paths
Tobias Brunner
2017-02-16
1
-13
/
+32
[prev]
[next]