aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Moved credential manager to libstrongswanMartin Willi2010-07-1348-205/+191
|
* Move pathlen constraint checking to X509 specific checksMartin Willi2010-07-131-17/+18
|
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-133-5/+11
|
* Combined the OCSP/CRL options to a signle Online check optionMartin Willi2010-07-131-23/+14
|
* added mark, mark_in, and mark_out to the ipsec.conf.5 man pageAndreas Steffen2010-07-131-0/+19
|
* we need some orderingAndreas Steffen2010-07-121-1/+3
|
* changed ordering of statusattr outputAndreas Steffen2010-07-121-8/+6
|
* fixed alignment of captionAndreas Steffen2010-07-121-2/+2
|
* updated SQL templates to support attribute pool and identity parametersAndreas Steffen2010-07-122-1/+29
|
* output identities correctlyAndreas Steffen2010-07-121-7/+11
|
* Added missing pool parameter in DHCP attribute provider.Tobias Brunner2010-07-121-1/+2
|
* Do not interpret long class attributes (such as from NPS) as groupMartin Willi2010-07-091-2/+10
|
* Group membership constraint is fulfilled if subject is member in one of the ↵Martin Willi2010-07-092-8/+20
| | | | groups
* Added support for named attribute groupsHeiko Hund2010-07-0911-93/+360
| | | | | | Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
* transport reqid, mark_in and mark_out in whack messageAndreas Steffen2010-07-092-1/+14
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-0917-55/+108
|
* The file logger supports a time prefix using a strftime() format specifierMartin Willi2010-07-083-9/+36
|
* Print identity to a lease address on the same line for simpler grepingMartin Willi2010-07-081-1/+1
|
* Implemented missing bypass_socket() method in load-testers faked kernel ↵Martin Willi2010-07-071-0/+7
| | | | interface
* added req parameter to ipsec.conf man pageAndreas Steffen2010-07-061-0/+3
|
* Show mallinfo() data in statusall, if availableMartin Willi2010-07-061-1/+12
|
* Avoid relocking while enumerator is aliveMartin Willi2010-07-061-9/+10
|
* Added missing markt_t in load tester, also migrated to INIT/METHOD macros.Tobias Brunner2010-07-061-89/+58
|
* Some Doxygen fixes.Tobias Brunner2010-07-0511-17/+15
|
* Fixed typo.Tobias Brunner2010-07-051-2/+2
|
* Added support for group membership information containted in the RADIUS ↵Martin Willi2010-07-051-0/+40
| | | | class attribute
* Use the group constraint in a more generic fashion, not only for attribute ↵Martin Willi2010-07-056-28/+27
| | | | certificates
* Use the responder side configured EAP-Identity directly, if givenMartin Willi2010-07-051-7/+16
|
* Copy EAP specific attributes to auth config onlyMartin Willi2010-07-052-8/+10
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-0224-150/+530
|
* Recreate IKE_SA_INIT related tasks only if they have completedMartin Willi2010-06-301-11/+35
|
* Use enumerator for queued_tasks migration to avoid infinite loopThomas Egerer2010-06-301-3/+5
|
* Correct check of traffic selectors before destructionThomas Egerer2010-06-291-2/+2
|
* Migrate queued_tasks tasks, to avoid dangling pointersThomas Egerer2010-06-291-0/+7
|
* The signature of keystore_get changed again.Tobias Brunner2010-06-281-1/+3
| | | | | With Android 2.2 (Froyo) the interface of keystore_get was changed once again. The change was made to allow the keys to contain \0 characters.
* Compiler warning fixed.Tobias Brunner2010-06-281-1/+3
|
* upgraded xfrm.h to linux-2.6.34Andreas Steffen2010-06-271-21/+18
|
* Show contents of the CP payload in message_t stringificationMartin Willi2010-06-243-0/+85
|
* Support the subnet attribute in the attr pluginMartin Willi2010-06-241-2/+30
|
* Increased the loglevel for the arguments received via Android control socket.Tobias Brunner2010-06-241-1/+1
|
* Terminate charon from the Android plugin if the tunnel goes down after it ↵Tobias Brunner2010-06-241-0/+24
| | | | was initiated successfully.
* Initiate the tunnel in the Android plugin asynchronously.Tobias Brunner2010-06-241-6/+39
| | | | Also track its initiation using the registered listener.
* Implement the listener_t interface in the Android plugin to track the status ↵Tobias Brunner2010-06-242-2/+47
| | | | of an SA.
* Helper function added to notify the Android frontend about status changes.Tobias Brunner2010-06-241-4/+14
|
* Initiate consumes a child_sa reference, so get an additional one.Tobias Brunner2010-06-241-0/+2
|
* Use the same error code constants as in the Java frontend.Tobias Brunner2010-06-241-1/+15
|
* Flush and destroy the send queue before unloading the socket plugins.Tobias Brunner2010-06-241-1/+1
|
* Select subjectAltName address family using address length in openssl pluginMartin Willi2010-06-241-2/+12
|
* Select subjectAltName address family using address length in x509 pluginMartin Willi2010-06-241-1/+11
|
* Do not install routes in the PF_KEY kernel interface if interface lookup failed.Tobias Brunner2010-06-231-15/+23
|