tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-7/+7
\|
*	libipsec: Pass the same data to del_policy() as to add_policy()	Tobias Brunner	2016-02-04	1	-4/+5
\| \| \| \| \| \|	We already do this for the other kernel interfaces. Fixes e1e88d5adde0 ("libipsec: Don't attempt deletion of any non-IPsec policies")
*	libipsec: Don't attempt deletion of any non-IPsec policies	Tobias Brunner	2016-02-04	1	-1/+1
\| \| \| \| \| \| \| \|	An example are the fallback drop policies installed when updating SAs. We ignore such policies in add_policy() so there is no point in attempting to remove them. Since they use different priorities than regular policies this did not result in policies getting deleted unintentionally but there was an irritating log message on level 2 that indicated otherwise.
*	libipsec: Add support for new policy priority class	Tobias Brunner	2014-06-19	1	-1/+4
\|
*	libipsec: check for a policy with the reqid of the SA on decapsulation	Martin Willi	2013-09-13	1	-3/+7
\| \| \| \| \|	To prevent a client from sending a packet with a source address of a different client, we require a policy bound via reqid to the decapsulating SA.
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	IPsec policies can be looked up based on an IP packet	Tobias Brunner	2012-08-08	1	-1/+26
\|
*	Order IPsec policies by a pseudo-priority based on the traffic selectors	Tobias Brunner	2012-08-08	1	-28/+127
\| \| \| \| \|	This allows a simple lookup, i.e. just use the first policy that matches a given IP packet.
*	IPsec policy manager added	Tobias Brunner	2012-08-08	1	-0/+162
	This version only provides the very simplest management functions.