aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-1710-26/+67
* IKEv1 daemon supports DNS and NBNS server assignment from databaseAndreas Steffen2009-12-161-18/+85
* ipsec pool manages dns and nbns serversAndreas Steffen2009-12-161-15/+298
* cosmeticsAndreas Steffen2009-12-161-1/+1
* provide attributes from SQL databaseAndreas Steffen2009-12-164-3/+37
* add IKEv1 support for the Camellia cipherAndreas Steffen2009-12-152-0/+22
* Added htoun16/32 and untoh16/32 to read/write unaligned network order integersMartin Willi2009-12-151-0/+54
* Install v6 routes via outgoing interface for nowMartin Willi2009-12-141-18/+7
* fixed IKEv1 support of HMAC_SHA2_256_96Andreas Steffen2009-12-093-23/+22
* if end id is missing assign IP address to raw public keyAndreas Steffen2009-12-091-4/+10
* IKEv1 support of ESP SHA2_HMAC with correct truncationAndreas Steffen2009-12-0910-112/+160
* some code optimizationsAndreas Steffen2009-12-091-34/+37
* added ipAddrBlocks OIDAndreas Steffen2009-12-091-0/+1
* Improved libfast session management, using a hashtableMartin Willi2009-12-082-40/+109
* Removed obsolete curl interface specific destructorMartin Willi2009-12-081-5/+0
* Support "_" and "-" variants of NetworkManager pkg-config packagesMartin Willi2009-12-081-1/+4
* Undef PACKAGE_BUG/URL of strongSwan before including ruby variantsMartin Willi2009-12-082-0/+3
* Remove generated config.h.in from source treeMartin Willi2009-12-082-116/+1
* The attribute manager was moved from daemon_t to libstrongswan.Tobias Brunner2009-12-071-4/+4
* Do not execute the callback job if it has been cancelled since registrationMartin Willi2009-12-031-2/+8
* Cleanup library if daemon initialization failsMartin Willi2009-12-031-0/+2
* Do not install invalid 0.0.0.0 DNS serversMartin Willi2009-12-011-9/+14
* Prefer EAP-Identity for provider attribute/address lookupMartin Willi2009-12-011-4/+37
* Save EAP-Identity on auth configMartin Willi2009-12-011-3/+26
* Store completed authentication rounds permanently on IKE_SA, with flush optionMartin Willi2009-12-016-50/+110
* Removed obsolete and unused [gs]et_eap_identity() methodsMartin Willi2009-11-302-42/+0
* Do not propose transport mode as initiator if connection is NATedMartin Willi2009-11-301-0/+6
* Verify EAP-SIM/AKA AT_MAC before processing any attributesMartin Willi2009-11-304-36/+24
* SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the re...Martin Willi2009-11-304-6/+4
* Invoke attribute/key hooks from libsimakaMartin Willi2009-11-302-5/+13
* Extended SIM manager by hooks, currently featuring attribute and key hooksMartin Willi2009-11-302-1/+134
* Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SAMartin Willi2009-11-302-0/+19
* Handle NOT_SUPPORTED or other errors properly in get_quintupletMartin Willi2009-11-301-4/+10
* Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ...Martin Willi2009-11-261-3/+11
* Use full algorithm name for SHA384/512 HMACsMartin Willi2009-11-261-2/+2
* Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keywordMartin Willi2009-11-265-5/+11
* Install SHA256_128 auth algorithm with specified 128 bit truncationMartin Willi2009-11-261-1/+25
* Updated XFRM linux header, includes specified truncations for auth algosMartin Willi2009-11-261-1/+9
* Added support for IPv6 source route installationMartin Willi2009-11-262-17/+44
* Check existing path in mobike probing only if we still have a routeMartin Willi2009-11-262-8/+6
* put identities in single quotesAndreas Steffen2009-11-251-2/+2
* added more debugging in configuration attribute handlingAndreas Steffen2009-11-241-0/+4
* changed error messages in the case of faulty esp and ike stringsAndreas Steffen2009-11-241-8/+6
* do not send all available kernel algorithms if esp string is faultyAndreas Steffen2009-11-241-28/+0
* check if alg_info_esp existsElmar Vonlanthen2009-11-241-1/+1
* added some parenthesesAndreas Steffen2009-11-241-0/+16
* allow ECP DH groups in pfsgroup definitionAndreas Steffen2009-11-241-0/+5
* issue error message for expired certificates in OCSP trust chain checkingAndreas Steffen2009-11-241-1/+5
* updated IKEv2 notification messages assigned by IANAAndreas Steffen2009-11-242-12/+48
* Do not recreate existing create_child subtask when retrying with different DH...Martin Willi2009-11-231-2/+5