tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	support gre key in ikev1tteras	Timo Teräs	2017-11-20	2	-2/+62
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	this implements gre key negotiation in ikev1 similarly to the ipsec-tools patch in alpine. the from/to port pair is internally used as gre key for gre protocol traffic selectors. since from/to pairs 0/0xffff and 0xffff/0 have special meaning, the gre keys 0xffff and 0xffff0000 will not work. this is not standard compliant, and should probably not be upstreamed or used widely, but it is applied for interoperability with alpine racoon for the time being.
*	traffic-selector: Use single buffer for both address families	Tobias Brunner	2017-08-17	1	-150/+73
\| \| \| \| \| \| \| \|	The generic field of size 0 in the union that was used previously triggered index-out-of-bounds errors with the UBSAN sanitizer that's used on OSS-Fuzz. Since the two family specific union members don't really provide any advantage, we can just use a single buffer for both families to avoid the errors.
*	traffic-selector: Allow calling set_address() for any traffic selector	Tobias Brunner	2017-02-27	2	-46/+53
\| \| \| \| \|	Users may check is_host(), is_dynamic() or includes() before calling this if restrictions are required (most actually already do).
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	2	-58/+58
\|
*	traffic-selector: Don't end printf'ed list of traffic selectors with a space	Tobias Brunner	2015-11-10	1	-5/+4
\|
*	traffic-selector: Use calc_netbits() in RFC 3779 constructor	Tobias Brunner	2015-08-27	1	-2/+1
\| \| \| \|	This properly detects prefixes encoded as ranges.
*	traffic-selector: Add a hash() method	Martin Willi	2015-02-20	2	-0/+20
\|
*	traffic-selector: Add a compare function to sort traffic selectors	Martin Willi	2015-02-20	2	-34/+86
\|
*	windows: Add a common Windows header for platform specific wrappers	Martin Willi	2014-06-03	1	-4/+3
\| \| \| \| \|	Include some more basic system headers in utils.h, so we can use that common header on the different platforms.
*	traffic-selector: Print ICMP[v6] message type and code in a more readable way	Tobias Brunner	2013-10-17	1	-4/+35
\|
*	traffic-selector: Store ICMP[v6] message type and code properly	Tobias Brunner	2013-10-17	2	-8/+70
\| \| \| \|	We now store them as defined in RFC 4301, section 4.4.1.1.
*	traffic-selector: Move class to its own Doxygen group	Tobias Brunner	2013-10-17	1	-1/+1
\|
*	traffic-selector: inet_pton is successful only if it returns 1	Martin Willi	2013-05-16	1	-23/+17
\|
*	Use a complete port range in traffic_selector_create_from_{subnet,cidr}	Martin Willi	2013-02-21	2	-16/+17
\|
*	Print OPAQUE traffic selectors as what they are, not as port range	Martin Willi	2013-02-21	1	-0/+4
\|
*	Support "opaque" ports in traffic selector subset calculation	Martin Willi	2013-02-21	1	-6/+32
\|
*	Slightly refactor traffic_selector_t.get_subset()	Martin Willi	2013-02-21	1	-61/+68
\|
*	Migrate remaining traffic selector methods to METHOD macro	Martin Willi	2013-02-21	1	-19/+18
\|
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Moved host_t and host_resolver_t to a new networking subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Add a traffic selector constructor creating a TS directly from a CIDR string	Martin Willi	2012-10-24	2	-0/+30
\|
*	Allow calls to set_address() for any host-sized TS, not only dynamic ones	Tobias Brunner	2012-09-12	1	-1/+1
\| \| \| \| \|	This fixes CHILD_SA updates (e.g. due to MOBIKE), which were broken since 4cb0783.
*	Don't return a subset for a dynamic TS unless set_address has been called	Martin Willi	2012-09-11	1	-1/+5
\|
*	Validate netmask in traffic_selector_create_from_subnet	Tobias Brunner	2012-08-13	1	-0/+1
\| \| \| \|	Fixes #216.
*	Pass opaque data to printf hooks and print_in_hook()	Martin Willi	2012-07-13	2	-17/+17
\|
*	Accept non-"/0" subnet sizes for traffic selectors starting at 0.0.0.0	Martin Willi	2012-07-02	1	-40/+9
\|
*	ts.get_subnet() returns TRUE if the selector actually is a subnet	Martin Willi	2012-03-20	2	-3/+6
\|
*	cosmetics	Andreas Steffen	2011-10-02	1	-2/+2
\|
*	Migrated traffic_selector to INIT/METHOD macros	Andreas Steffen	2011-10-02	1	-77/+52
\|
*	Replaced simple iterator usages.	Tobias Brunner	2011-07-06	1	-10/+10
\|
*	fixed IP range to subnet conversion in ts_to_subnet()	Andreas Steffen	2011-06-03	1	-6/+7
\|
*	Compare ending address in ts->equals, fixes redundant traffic selector ↵	Martin Willi	2011-01-14	1	-2/+4
\| \| \| \|	elimination
*	Fixed some Doxygen warnings.	Tobias Brunner	2010-03-24	1	-14/+14
\|
*	do not recalculate netbits for true subnets	Andreas Steffen	2009-12-22	1	-1/+4
\|
*	cosmetics	Andreas Steffen	2009-12-22	1	-2/+4
\|
*	fixed IPv6 bug in calc_range()	Andreas Steffen	2009-12-22	1	-25/+16
\|
*	fixed initialization of netbits	Andreas Steffen	2009-12-21	1	-2/+3
\|
*	traffic_selector supports RFC 3779 address range format	Andreas Steffen	2009-12-21	2	-39/+115
\|
*	this->type is set by traffic_selector_create()	Andreas Steffen	2009-12-20	1	-2/+0
\|
*	moved traffic_selectors from charon to libstrongswan	Andreas Steffen	2009-12-20	2	-0/+1160