Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | condvar->wait() can handle recursive mutex | Martin Willi | 2008-10-16 | 1 | -20/+76 | |
| | ||||||
* | added a guest.mconsole() method to script mconsole (e.g. add additional conX=) | Martin Willi | 2008-10-15 | 5 | -14/+33 | |
| | ||||||
* | cache keys for in and outbound ESP SAs | Martin Willi | 2008-10-15 | 4 | -202/+241 | |
| | | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator() | |||||
* | store ESP keys in CHILD_SA | Martin Willi | 2008-10-15 | 4 | -57/+78 | |
| | ||||||
* | passing chunks, not prf+, to kernel interface | Martin Willi | 2008-10-14 | 7 | -210/+263 | |
| | | | | gives us better control of keymat in CHILD_SA | |||||
* | typos | Tobias Brunner | 2008-10-14 | 1 | -6/+6 | |
| | ||||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 30 | -911/+939 | |
| | ||||||
* | merging kernel_pfkey plugin back from kernel-interface branch | Tobias Brunner | 2008-10-14 | 22 | -274/+2176 | |
| | ||||||
* | version bump to 4.2.9 | Andreas Steffen | 2008-10-14 | 2 | -1/+3 | |
| | ||||||
* | set guest-specific kernel parameters | Martin Willi | 2008-10-10 | 6 | -47/+41 | |
| | | | | removed memory setting, use mem= instead | |||||
* | reintegrated two-sim branch providing SIM card plugin API | Martin Willi | 2008-10-10 | 19 | -423/+1154 | |
| | ||||||
* | use busybox compatible kill | Martin Willi | 2008-10-10 | 1 | -4/+4 | |
| | ||||||
* | fixed MOBIKE roaming if clients address changes | Martin Willi | 2008-10-09 | 2 | -5/+20 | |
| | ||||||
* | faster implementation of addr_in_subnet() | Andreas Steffen | 2008-10-09 | 1 | -13/+14 | |
| | ||||||
* | added proposal parsing of uncommon DH groups 3072/6144 | Martin Willi | 2008-10-08 | 1 | -0/+8 | |
| | ||||||
* | ignore routing events for our own routes | Martin Willi | 2008-10-08 | 1 | -0/+6 | |
| | ||||||
* | mobike: try to keep existing source address before switching to another | Martin Willi | 2008-10-08 | 7 | -29/+43 | |
| | ||||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 7 | -21/+81 | |
| | ||||||
* | correct fix that replaces Changeset 4378 | Andreas Steffen | 2008-10-08 | 1 | -4/+6 | |
| | ||||||
* | removing fix applied by Changeset 4378 | Andreas Steffen | 2008-10-08 | 1 | -4/+2 | |
| | ||||||
* | get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 ↵ | Andreas Steffen | 2008-10-08 | 1 | -1/+1 | |
| | | | | hash consistent with the IKEv2 keyid philosophy | |||||
* | Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype | Andreas Steffen | 2008-10-08 | 2 | -4/+24 | |
| | ||||||
* | fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang ↵ | Andreas Steffen | 2008-10-07 | 1 | -2/+4 | |
| | | | | Steudel, TU Ilmenau | |||||
* | guest bootup waits for init, not for network stack (fixes 2.6.27 guest kernels) | Martin Willi | 2008-10-07 | 1 | -20/+3 | |
| | ||||||
* | ported mconsole-exec patch to 2.6.27-rc7 | Martin Willi | 2008-10-07 | 1 | -0/+335 | |
| | ||||||
* | userland support to process notifies for new NAT mappings detected in UDP ↵ | Martin Willi | 2008-10-07 | 6 | -12/+237 | |
| | | | | encapsulation | |||||
* | use MOBIKE enabled DPD if we are NATed | Martin Willi | 2008-10-06 | 6 | -4/+113 | |
| | | | | update SAs if we detect changes in NAT mappings | |||||
* | fixed builder_cancel macro to return NULL on failed build | Martin Willi | 2008-10-06 | 2 | -1/+15 | |
| | ||||||
* | do not run CHILD_SA delete action if rekeying | Martin Willi | 2008-10-03 | 1 | -1/+13 | |
| | ||||||
* | added --disable-kernel-netlink configure option | Andreas Steffen | 2008-10-03 | 1 | -2/+2 | |
| | ||||||
* | use dpd_action also for remotely closed tunnels | Martin Willi | 2008-10-02 | 1 | -1/+1 | |
| | ||||||
* | also respect the mobike=no setting as responder | Martin Willi | 2008-09-30 | 2 | -4/+15 | |
| | ||||||
* | using signed return value for read() | Martin Willi | 2008-09-30 | 1 | -1/+2 | |
| | ||||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 15 | -67/+87 | |
| | ||||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 20 | -2994/+4293 | |
| | ||||||
* | version bump to 4.2.8 | Andreas Steffen | 2008-09-18 | 2 | -1/+3 | |
| | ||||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 | |
| | ||||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 4 | -8/+32 | |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | |||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 4 | -12/+74 | |
| | ||||||
* | ported NM plugin to upstream NetworkManager changes | Martin Willi | 2008-09-12 | 3 | -22/+55 | |
| | | | | | splitted secrets (4031) using uuid in auth-dialog (4053) | |||||
* | allow multiple DELETE payloads in an informational message | Martin Willi | 2008-09-11 | 1 | -2/+7 | |
| | ||||||
* | NM plugin supports (encrypted) private key files | Martin Willi | 2008-09-05 | 4 | -89/+210 | |
| | ||||||
* | time values in strongswan.conf can be optionally specified in days (d), ↵ | Andreas Steffen | 2008-09-04 | 7 | -13/+57 | |
| | | | | hours (h), minutes (m), or seconds (s) | |||||
* | fixed some translations/encoding | Martin Willi | 2008-09-04 | 1 | -51/+52 | |
| | ||||||
* | an initial German translation for NM plugin | Martin Willi | 2008-09-04 | 3 | -2/+117 | |
| | ||||||
* | reduced nm verbosity | Martin Willi | 2008-09-04 | 1 | -1/+1 | |
| | ||||||
* | implemented NetworkManager certificate/private key authentication using ↵ | Martin Willi | 2008-09-04 | 8 | -161/+447 | |
| | | | | ssh-agent | |||||
* | added a configure option to select charon binary | Martin Willi | 2008-09-04 | 3 | -2/+10 | |
| | ||||||
* | agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵ | Martin Willi | 2008-09-04 | 1 | -18/+68 | |
| | | | | private key from the agent | |||||
* | charon.keep_alive = 0 disables the sending of NAT keep alives | Andreas Steffen | 2008-09-03 | 1 | -1/+1 | |
| |