aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
...
* ike: Rename encryption_payload to encrypted_payloadTobias Brunner2014-10-109-101/+97
* ikev1: Fix handling of UNITY_LOAD_BALANCETobias Brunner2014-10-071-3/+3
* ikev1: Don't queue more than one mode config or XAuth taskTobias Brunner2014-10-071-7/+22
* ext-auth: Add an ext-auth plugin invoking an external authorization scriptMartin Willi2014-10-066-0/+492
* updown: Use process abstraction to invoke updown scriptMartin Willi2014-10-061-246/+215
* stroke: Allow specifying the ipsec.secrets location in strongswan.confShea Levy2014-10-021-2/+10
* ikev1: Be more verbose if a peer config would match, but is unusable for ModeMartin Willi2014-09-251-0/+12
* ikev2: Reorder task activation for established IKE SAsTobias Brunner2014-09-251-11/+11
* Revert "ikev2: Insert MOBIKE tasks at the front of the queue"Tobias Brunner2014-09-251-6/+1
* plugin-loader: Support a reload() callback for static featuresMartin Willi2014-09-221-1/+1
* vici: Add a command to reload strongswan.confMartin Willi2014-09-221-0/+12
* encoding: Accept all exchange types for non IKEv1/IKEv2 major versionsMartin Willi2014-09-221-5/+11
* ikev2: Don't treat initial messages as MOBIKE exchangesTobias Brunner2014-09-161-6/+9
* ikev1: Don't cache last block of INFORMATIONAL messages as IVTobias Brunner2014-09-121-2/+2
* ikev1: Log IV when encrypting messagesTobias Brunner2014-09-121-0/+1
* ikev1: Skip unusable IPComp proposalsTobias Brunner2014-09-121-1/+1
* ikev1: Properly handle different proposal numbering schemesTobias Brunner2014-09-121-5/+10
* ikev2: Reduce timeout if path probing was enabledTobias Brunner2014-09-121-6/+13
* ikev2: Defer MOBIKE updates if no path is availableTobias Brunner2014-09-121-7/+14
* ike-mobike: Allow calling transmit() even when not currently path probingTobias Brunner2014-09-121-5/+17
* ikev2: Defer path probing if no path is currently availableTobias Brunner2014-09-121-1/+20
* ike-mobike: Return FALSE in transmit() if no path was availableTobias Brunner2014-09-122-3/+7
* ikev2: Enable path probing for currently active MOBIKE taskTobias Brunner2014-09-121-0/+18
* ike-mobike: Add method to enable path probingTobias Brunner2014-09-122-0/+12
* ike-mobike: Skip peer addresses we can't send packets to when checking pathsTobias Brunner2014-09-121-5/+18
* ikev2: Skip peer addresses we can't send packets to when looking for valid pathsTobias Brunner2014-09-121-0/+18
* ikev2: Insert MOBIKE tasks at the front of the queueTobias Brunner2014-09-121-1/+6
* ikev2: Migrate number of pending MOBIKE updatesTobias Brunner2014-09-121-0/+5
* ikev2: Properly keep track of pending MOBIKE updatesTobias Brunner2014-09-121-8/+27
* child-cfg: Ignore duplicate proposalsTobias Brunner2014-09-121-0/+11
* proposal: Fix equals()Tobias Brunner2014-09-121-5/+5
* eap-radius: Forward Cisco and Microsoft specific DNS/NBNS attributesTobias Brunner2014-09-091-0/+50
* ikev1: Make sure proposed IPsec mode matches our ownTobias Brunner2014-09-091-1/+2
* ike: Reset IKE_SA in state CONNECTING instead of reauthenticatingTobias Brunner2014-09-091-0/+8
* ha: Don't adopt IKEv1 children when building without IKEv1 supportMartin Willi2014-08-281-0/+2
* unity: Do not bump TS to 0.0.0.0/0 as initiator when no Split-Include receivedMartin Willi2014-08-251-1/+21
* unity: Handle narrowing according to roles in the IKE_SATobias Brunner2014-08-251-16/+33
* ikev1: Defer Mode Config push after CHILD adoption when using XAuthMartin Willi2014-08-254-6/+40
* ikev1: Defer Mode Config push after CHILD adoption and reauth detectionMartin Willi2014-08-252-10/+35
* ikev1: Extend adopt_children_job by task queuing, executed after adoptionMartin Willi2014-08-252-0/+48
* ikev1: Accept Quick Mode DELETES while Quick Mode rekeying is activeMartin Willi2014-08-251-2/+21
* ike-sa-manager: Use transient hasher for IKE_SA_INIT hash calculationChristophe Gouault2014-08-251-32/+11
* bus: Add ike_reestablish_pre hook, called before DNS resolutionTobias Brunner2014-07-224-9/+69
* receiver: Send a single INVALID_MAJOR_VERSION notify for IKE version > 2Martin Willi2014-07-171-3/+1
* xauth-pam: Add workaround for null-terminated passwordsTobias Brunner2014-07-071-1/+6
* stroke: Don't log unspecified options of conn and ca sectionsTobias Brunner2014-06-301-37/+50
* libvici: Add missing argument to Doxygen commentTobias Brunner2014-06-301-0/+1
* Fixed some typosTobias Brunner2014-06-302-2/+2
* updown: Force subnet address to be numericTobias Brunner2014-06-251-2/+2
* eap-radius: Increase buffer for accounting attributes to maximum attribute sizeMartin Willi2014-06-251-1/+1