aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* Use ikev2 keymat proxyReto Buerki2013-03-191-7/+18
* Add skeleton for TKM keymat variantReto Buerki2013-03-193-0/+256
* id_manager: Use limits given by TKMReto Buerki2013-03-191-5/+15
* Pass context limits on to id managerReto Buerki2013-03-194-12/+21
* Request limits from TKM on initReto Buerki2013-03-191-0/+15
* id_manager: Use array of bool instead of listReto Buerki2013-03-192-41/+42
* Use id manager to acquire DH context idReto Buerki2013-03-191-9/+23
* Add TKM_CTX_DH (Diffie-Hellman context) to id managerReto Buerki2013-03-192-3/+6
* Use id manager to acquire nonce context idReto Buerki2013-03-191-6/+16
* Add initial TKM Diffie-Hellman implementationReto Buerki2013-03-197-2/+234
* charon-tkm: Register tkm nonce generatorReto Buerki2013-03-192-1/+9
* tkm_nonceg: Return nonce generated by TKMReto Buerki2013-03-191-1/+13
* Initialize TKM client library in tkm.cReto Buerki2013-03-193-6/+37
* Introduce TKM specific charon daemon (charon-tkm)Reto Buerki2013-03-1919-0/+1212
* starter: Make daemon name configurableAdrian-Ken Rueegsegger2013-03-195-38/+126
* Load arbitrary (non-host) attributes from strongswan.confTobias Brunner2013-03-191-21/+32
* Don't try to mmap() empty ipsec.secret filesMartin Willi2013-03-191-1/+5
* Delete IKE_SAs if responder does not initiate XAuth exchange within a certain...Tobias Brunner2013-03-193-3/+27
* Make sure that xauth-noauth is not used accidentallyTobias Brunner2013-03-191-2/+5
* Added xauth-noauth pluginTobias Brunner2013-03-197-29/+305
* In stroke counters, check if we have an IKE_SA before getting the name from itMartin Willi2013-03-191-3/+6
* Add an "esp" load-tester option to configure custom CHILD_SA ESP proposalMartin Willi2013-03-181-3/+16
* Algorithms are not really specific to an IKE versionTobias Brunner2013-03-181-1/+1
* Merge branch 'radius-ext'Martin Willi2013-03-1831-114/+1333
|\
| * Don't create interim update entries if RADIUS accounting is disabledMartin Willi2013-03-142-7/+7
| * Add support for RADIUS Interim accounting updatesMartin Willi2013-03-143-39/+269
| * Add an option to delete any established IKE_SA if RADIUS server is not respon...Martin Willi2013-03-144-7/+67
| * Make check whether to use IKEv1 fragmentation more readableMartin Willi2013-03-141-5/+14
| * Send Acct-Terminate-Cause based on some alerts catched on the busMartin Willi2013-03-141-0/+62
| * When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMOUT alertMartin Willi2013-03-142-1/+2
| * Raise an alert if an IKE_SA could not have been reauthenticated and expiresMartin Willi2013-03-142-0/+6
| * Send NAS-Port, NAS-IP and Calling/Called-Station-ID in Accounting-RequestsMartin Willi2013-03-141-4/+33
| * Support RADIUS accounting of sent/received packetsMartin Willi2013-03-141-13/+23
| * Report the number of processed packets in "ipsec statusall"Martin Willi2013-03-141-5/+9
| * child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-149-16/+20
| * Pass correclty sized pointer to lookup_algorithm() in PF_KEYMartin Willi2013-03-141-1/+1
| * kernel_ipsec_t.query_sa() additionally returns the number of processed packetsMartin Willi2013-03-149-16/+50
| * Send NAS-Port, NAS-IP and Calling/Called-Station-ID in Access-RequestMartin Willi2013-03-132-10/+56
| * Forward Cisco Banner received from RADIUS to Unity capable clientsMartin Willi2013-03-123-5/+176
| * Add a radius message method to enumerate vendor specific attributesMartin Willi2013-03-122-0/+92
| * Add Altiga Private Enterprise Numbers that Cisco uses in VPN 3000Martin Willi2013-03-122-1/+4
| * In eap-radius, hand out received Framed-IP-Address attributes as virtual IPMartin Willi2013-03-125-2/+460
* | Merge branch 'stroke-counters'Martin Willi2013-03-188-23/+223
|\ \
| * | Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-158-14/+53
| * | Add connection name specific stroke countersMartin Willi2013-03-157-20/+181
| * | Add a chunk_from_str() initializer that does not include 0-terminatorMartin Willi2013-03-151-0/+5
* | | Merge branch 'stroke-timeout'Martin Willi2013-03-182-22/+94
|\ \ \
| * | | If controller operations have a callback, don't succeed before hook gets calledMartin Willi2013-03-071-4/+12
| * | | Add a stroke command timeout option, and report status of completed commandMartin Willi2013-03-071-18/+82
| |/ /
* | | Merge branch 'netlink-align'Martin Willi2013-03-183-268/+151
|\ \ \ | |_|/ |/| |