tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Added encapsulation mode transform attribute to IPComp proposal.	Tobias Brunner	2012-05-25	3	-5/+10
\|
*	Add an additional proposal without IPComp to SA payload.	Tobias Brunner	2012-05-24	1	-17/+15
\|
*	Added log message if peer does not accept/provide IPComp proposal.	Tobias Brunner	2012-05-24	1	-2/+12
\|
*	Added support to negotiate IPComp during Quick Mode.	Tobias Brunner	2012-05-24	1	-11/+91
\|
*	Added support for IKEv1 IPComp proposals in SA payload.	Tobias Brunner	2012-05-24	5	-14/+98
\|
*	Added support for IKEv1 IPComp proposals in proposal substructure.	Tobias Brunner	2012-05-24	4	-10/+129
\|
*	Fix memleak during Quick Mode in case no SPI can be allocated from kernel.	Tobias Brunner	2012-05-24	1	-8/+8
\|
*	Properly filter IKEv1 proposals consisting of multiple proposal payloads.	Tobias Brunner	2012-05-24	1	-9/+15
\| \| \| \| \| \| \|	Since a proposal_t object is created for each transform contained in the proposal payload, it does not work to simply remove the last proposal_t object added to the list (there may be several other extracted from the previous proposal payload).
*	Fixed check for loaded plugins with feature types that are not compared exactly.	Tobias Brunner	2012-05-24	1	-25/+13
\| \| \| \| \|	Previously e.g. RNGs with weaker strength would have overwritten stronger ones.
*	get_match() method added to hashtable_t.	Tobias Brunner	2012-05-24	2	-5/+34
\|
*	Use a hashtable to check for already loaded plugin features.	Tobias Brunner	2012-05-23	1	-20/+37
\|
*	Hash function for plugin features added.	Tobias Brunner	2012-05-23	2	-0/+68
\|
*	Apply IDir before deriving keys as aggressive initiator	Martin Willi	2012-05-23	1	-4/+4
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Check if we actually have an initiating packet to free while processing ↵	Martin Willi	2012-05-23	1	-1/+1
\| \| \| \|	responses
*	list IKEv1 Aggressive Mode in ipsec statusall	Andreas Steffen	2012-05-23	1	-2/+9
\|
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	4	-24/+85
\|
*	Cancel pending retransmits when flushing active task queue	Martin Willi	2012-05-21	1	-0/+4
\|
*	Cancel active quick mode task when receiving INFORMATIONAL error	Martin Willi	2012-05-21	1	-0/+30
\|
*	Flush task queues explicitly, not implicitly if task returns ALREADY_DONE	Martin Willi	2012-05-21	6	-12/+20
\|
*	Wrap task managers flush_queue() in IKE_SA	Martin Willi	2012-05-21	2	-0/+14
\|
*	Make task managers flush_queue() method public	Martin Willi	2012-05-21	3	-20/+62
\|
*	Destroy Netlink socket only after deleting remaining source routes.	Tobias Brunner	2012-05-21	1	-2/+1
\|
*	Enumerate correct list while removing nonce_gens, fix deregistration	Martin Willi	2012-05-21	1	-1/+1
\|
*	Added a convenience function to dump backtraces for gdb-less debugging	Martin Willi	2012-05-21	2	-0/+26
\|
*	Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed	Martin Willi	2012-05-21	1	-9/+3
\|
*	Properly munmap/close file if loading IMC/IMV fails.	Tobias Brunner	2012-05-18	1	-7/+7
\|
*	Remove executable flag from source files.	Tobias Brunner	2012-05-18	32	-0/+0
\|
*	Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵	Tobias Brunner	2012-05-18	46	-51/+66
\| \| \| \|	tasks etc.).
*	Removed superfluous @param in bus.h.	Tobias Brunner	2012-05-18	1	-1/+0
\|
*	whitelist: Make sure listed IDs are null-terminated.	Tobias Brunner	2012-05-18	1	-0/+1
\|
*	pkcs8: Initialize salt and IV properly.	Tobias Brunner	2012-05-18	1	-1/+1
\|
*	List registered nonce generators in statusall output.	Tobias Brunner	2012-05-18	1	-2/+18
\|
*	Add enumerator for registered nonce generators.	Tobias Brunner	2012-05-18	2	-9/+33
\|
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	4	-34/+34
\| \| \| \| \|	Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
*	Add create_nonce_gen function to keymat interface	Adrian-Ken Rueegsegger	2012-05-18	3	-0/+24
\| \| \| \|	This function returns a nonce generator object.
*	Add nonce plugin implementation	Adrian-Ken Rueegsegger	2012-05-18	6	-0/+271
\| \| \| \| \| \| \|	This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default.
*	Add nonce generator interface	Adrian-Ken Rueegsegger	2012-05-18	6	-0/+163
\| \| \| \| \| \| \|	Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory.
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	19	-25/+76
\|
*	Moved IKEv1 DPD processing to task manager, fix sequence issues	Martin Willi	2012-05-15	3	-73/+72
\|
*	Consider inbound ESP as a sign of liveness for DPD timeout	Martin Willi	2012-05-15	1	-2/+15
\|
*	Schedule a DPD timeout job that enforces the IKE message timeout policy	Martin Willi	2012-05-15	4	-0/+177
\|
*	Send unanswered follow up R_U_THERE messages with the same DPD seq	Martin Willi	2012-05-15	1	-1/+7
\|
*	Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL	Martin Willi	2012-05-15	1	-11/+0
\|
*	Free name of application using libcharon.	Tobias Brunner	2012-05-15	1	-0/+1
\|
*	starter: Initialize thread pool so kernel events are consumed.	Tobias Brunner	2012-05-15	1	-0/+9
\|
*	Explicitly cast from strict_t to crl_policy_t	Martin Willi	2012-05-14	1	-1/+1
\|
*	Use correct integrity_algorithm_t enum type in bench_signer()	Martin Willi	2012-05-14	1	-1/+1
\|
*	Make function pointer defined with METHOD() macro non-const	Martin Willi	2012-05-14	1	-2/+2
\| \| \| \| \|	clang complains about it being const, and the object code generated from gcc is the same.
*	Remove unused return value of INIT(), making clang happy	Martin Willi	2012-05-14	1	-3/+2
\|