aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
Commit message (Collapse)AuthorAgeFilesLines
* fixed some compiler warnings4.0.4Martin Willi2006-09-213-10/+10
|
* extended statusall outputMartin Willi2006-09-212-2/+48
| | | | | added job/event-queue statistics added allocation statistics when using LEAK_DETECTIVE
* public declaration of all HASH_SIZEs in hasher.hMartin Willi2006-09-204-14/+13
|
* support of encrypted private key filesAndreas Steffen2006-09-207-28/+61
|
* added copyright notice to sha2_hasherMartin Willi2006-09-192-3/+4
| | | | included SHA2 in build process
* implemented sha2_hasher which supports SHA-256, SHA-384 and SHA-512Martin Willi2006-09-197-50/+741
|
* added support for 3DES encryption algorithm in IKEMartin Willi2006-09-195-8/+1611
|
* fixed the ids parsing bugAndreas Steffen2006-09-191-0/+1
|
* some cleanups here and thereMartin Willi2006-09-184-13/+9
|
* cosmeticsAndreas Steffen2006-09-181-1/+0
|
* verify_emsa_pkcs1_signature returns status_tAndreas Steffen2006-09-181-1/+1
|
* cosmeticsAndreas Steffen2006-09-181-2/+1
|
* fixed certificate verification bug!Martin Willi2006-09-142-5/+19
|
* removed unneeded constructorMartin Willi2006-08-312-30/+2
|
* initial support for IPv6 (more testing needed)Martin Willi2006-08-302-83/+251
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* added stddef.h include for compilers which do not support the offsetof() ↵Martin Willi2006-08-281-0/+2
| | | | directive
* implemented proper refcounting using atomic operationsMartin Willi2006-07-282-0/+64
|
* implemented IKE_SA rekeyingMartin Willi2006-07-272-0/+56
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-202-20/+20
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-0/+5
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-183-57/+34
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* leak detective blanks memory on free & alloc, allows further membug detectionMartin Willi2006-07-122-13/+27
|
* code cleanupsMartin Willi2006-07-122-84/+43
|
* identification_t.matches() supports multiple wildcard countsAndreas Steffen2006-07-112-85/+124
|
* reenabled check_expiryMartin Willi2006-07-071-6/+6
|
* updated copyright informationMartin Willi2006-07-0748-48/+96
|
* updated whitelist (getprotobynumber)Martin Willi2006-07-051-0/+2
|
* fixed compiler warningsMartin Willi2006-07-058-30/+26
|
* updated leak detective whitelistMartin Willi2006-07-041-5/+6
|
* support of cert payloadsAndreas Steffen2006-07-034-11/+119
|
* added X.509 trust chain verificationAndreas Steffen2006-06-2712-95/+636
|
* applied new changes from NATT teamMartin Willi2006-06-231-0/+1
| | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there
* fixed identification_t clone to apply function pointersMartin Willi2006-06-231-0/+3
|
* first merge of NATT codeMartin Willi2006-06-223-5/+97
|
* fixed whitelist detectionMartin Willi2006-06-201-4/+8
|
* reworked function ignore mechanism to not-report whitelistMartin Willi2006-06-201-233/+46
| | | | rather than overriding functions
* readded local_credential_storeMartin Willi2006-06-201-13/+0
| | | | | | added sendcert policy to connection some other cleanups
* implemented rereadcrls rereadcacertsAndreas Steffen2006-06-203-4/+22
|
* added chunk_equals_or_null()Andreas Steffen2006-06-162-26/+43
|
* added crl supportAndreas Steffen2006-06-161-12/+31
|
* changed tabs from 8 to 4 spacesAndreas Steffen2006-06-161-1/+1
|
* added crl supportAndreas Steffen2006-06-162-0/+604
|
* cosmeticsAndreas Steffen2006-06-161-7/+21
|
* cosmetics (space)Andreas Steffen2006-06-161-1/+1
|
* fixed aes code, we support now aes128, aes192, aes256 in IKEMartin Willi2006-06-151-10/+2
|
* corrected some descriptionsAndreas Steffen2006-06-131-5/+5
|
* moved RSA key size constraints to definitions.hAndreas Steffen2006-06-132-7/+7
|
* NULL string argument is treated as %anyAndreas Steffen2006-06-121-0/+3
|
* workaround for peers rekeying at the same timeMartin Willi2006-06-122-2/+2
| | | | | loading lifetime policies from ipsec.conf
* added support for leftsendcert= and left|rightca= parametersAndreas Steffen2006-06-091-0/+12
|