aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-1710-26/+67
|
* IKEv1 daemon supports DNS and NBNS server assignment from databaseAndreas Steffen2009-12-161-18/+85
|
* ipsec pool manages dns and nbns serversAndreas Steffen2009-12-161-15/+298
|
* cosmeticsAndreas Steffen2009-12-161-1/+1
|
* provide attributes from SQL databaseAndreas Steffen2009-12-164-3/+37
|
* add IKEv1 support for the Camellia cipherAndreas Steffen2009-12-152-0/+22
|
* Added htoun16/32 and untoh16/32 to read/write unaligned network order integersMartin Willi2009-12-151-0/+54
|
* Install v6 routes via outgoing interface for nowMartin Willi2009-12-141-18/+7
|
* fixed IKEv1 support of HMAC_SHA2_256_96Andreas Steffen2009-12-093-23/+22
|
* if end id is missing assign IP address to raw public keyAndreas Steffen2009-12-091-4/+10
|
* IKEv1 support of ESP SHA2_HMAC with correct truncationAndreas Steffen2009-12-0910-112/+160
|
* some code optimizationsAndreas Steffen2009-12-091-34/+37
|
* added ipAddrBlocks OIDAndreas Steffen2009-12-091-0/+1
|
* Improved libfast session management, using a hashtableMartin Willi2009-12-082-40/+109
|
* Removed obsolete curl interface specific destructorMartin Willi2009-12-081-5/+0
|
* Support "_" and "-" variants of NetworkManager pkg-config packagesMartin Willi2009-12-081-1/+4
|
* Undef PACKAGE_BUG/URL of strongSwan before including ruby variantsMartin Willi2009-12-082-0/+3
|
* Remove generated config.h.in from source treeMartin Willi2009-12-082-116/+1
|
* The attribute manager was moved from daemon_t to libstrongswan.Tobias Brunner2009-12-071-4/+4
|
* Do not execute the callback job if it has been cancelled since registrationMartin Willi2009-12-031-2/+8
|
* Cleanup library if daemon initialization failsMartin Willi2009-12-031-0/+2
|
* Do not install invalid 0.0.0.0 DNS serversMartin Willi2009-12-011-9/+14
|
* Prefer EAP-Identity for provider attribute/address lookupMartin Willi2009-12-011-4/+37
|
* Save EAP-Identity on auth configMartin Willi2009-12-011-3/+26
|
* Store completed authentication rounds permanently on IKE_SA, with flush optionMartin Willi2009-12-016-50/+110
|
* Removed obsolete and unused [gs]et_eap_identity() methodsMartin Willi2009-11-302-42/+0
|
* Do not propose transport mode as initiator if connection is NATedMartin Willi2009-11-301-0/+6
|
* Verify EAP-SIM/AKA AT_MAC before processing any attributesMartin Willi2009-11-304-36/+24
|
* SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the ↵Martin Willi2009-11-304-6/+4
| | | | response
* Invoke attribute/key hooks from libsimakaMartin Willi2009-11-302-5/+13
|
* Extended SIM manager by hooks, currently featuring attribute and key hooksMartin Willi2009-11-302-1/+134
|
* Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SAMartin Willi2009-11-302-0/+19
|
* Handle NOT_SUPPORTED or other errors properly in get_quintupletMartin Willi2009-11-301-4/+10
|
* Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ↵Martin Willi2009-11-261-3/+11
| | | | header
* Use full algorithm name for SHA384/512 HMACsMartin Willi2009-11-261-2/+2
|
* Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keywordMartin Willi2009-11-265-5/+11
|
* Install SHA256_128 auth algorithm with specified 128 bit truncationMartin Willi2009-11-261-1/+25
|
* Updated XFRM linux header, includes specified truncations for auth algosMartin Willi2009-11-261-1/+9
|
* Added support for IPv6 source route installationMartin Willi2009-11-262-17/+44
|
* Check existing path in mobike probing only if we still have a routeMartin Willi2009-11-262-8/+6
|
* put identities in single quotesAndreas Steffen2009-11-251-2/+2
|
* added more debugging in configuration attribute handlingAndreas Steffen2009-11-241-0/+4
|
* changed error messages in the case of faulty esp and ike stringsAndreas Steffen2009-11-241-8/+6
|
* do not send all available kernel algorithms if esp string is faultyAndreas Steffen2009-11-241-28/+0
|
* check if alg_info_esp existsElmar Vonlanthen2009-11-241-1/+1
|
* added some parenthesesAndreas Steffen2009-11-241-0/+16
|
* allow ECP DH groups in pfsgroup definitionAndreas Steffen2009-11-241-0/+5
|
* issue error message for expired certificates in OCSP trust chain checkingAndreas Steffen2009-11-241-1/+5
|
* updated IKEv2 notification messages assigned by IANAAndreas Steffen2009-11-242-12/+48
|
* Do not recreate existing create_child subtask when retrying with different ↵Martin Willi2009-11-231-2/+5
| | | | DH group