aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Explicit pkcs11 certificate loading can enforce a module and a slotMartin Willi2012-10-242-4/+21
|
* Be less verbose if loading PKCS#11 certificate failsMartin Willi2012-10-241-6/+1
|
* Load ipsec.conf %smartcard leftcerts with pkcs11 builderMartin Willi2012-10-241-8/+20
|
* Add a builder to load specific pkcs11 certificates by keyidMartin Willi2012-10-243-0/+115
|
* If no pkcs11 public key for a private key found, search for a certificateMartin Willi2012-10-241-4/+53
|
* Move pkcs11 public key lookup function declaration to header fileMartin Willi2012-10-243-20/+18
|
* Only add an implicit PRF based on the MAC alg if no PRF given in proposalMartin Willi2012-10-241-38/+38
|
* Add proposal keywords to explicitly specify PRF algorithmsMartin Willi2012-10-241-0/+8
|
* Add an interactive mode in lookip tool, demonstrate lasting connectionsMartin Willi2012-10-241-9/+57
|
* Send a lookip NOT_FOUND reply if a lookup yields no resultsMartin Willi2012-10-243-11/+32
|
* lookup function of lookip listener returns the number of matchesMartin Willi2012-10-242-3/+9
|
* Handle multiple lookip connections using a single FDSETMartin Willi2012-10-241-49/+162
|
* Renamed list to store listening lookip clientsMartin Willi2012-10-241-5/+5
|
* Handle client subscriptions in lookip pluginMartin Willi2012-10-241-12/+89
|
* Add a lookip server side UNIX socket processing LOOKUP and DUMP requestsMartin Willi2012-10-244-1/+309
|
* Add a simple command line utility to query the lookip pluginMartin Willi2012-10-243-0/+213
|
* Defined on-the-wire format used on lookip socketMartin Willi2012-10-242-1/+94
|
* Add a lookip function to register virtual IP notification listenersMartin Willi2012-10-242-4/+87
|
* Add a lookup method to lookip plugin, using a callback to invokeMartin Willi2012-10-242-0/+53
|
* Add a lookip listener that collects the information we are interested inMartin Willi2012-10-244-1/+267
|
* Add a lookip plugin stub to lookup connections by virtual IPMartin Willi2012-10-244-0/+125
|
* Add "listcounters" command to ipsec.8 manpageMartin Willi2012-10-241-0/+4
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-247-5/+16
|
* Add a print method for stroke countersMartin Willi2012-10-242-0/+29
|
* Support field with specifiers in %N printf hookMartin Willi2012-10-241-5/+7
|
* Add stroke message type countersMartin Willi2012-10-241-0/+75
|
* Add stroke counters for invalid IKE messagesMartin Willi2012-10-241-0/+27
|
* Add stroke CHILD_SA rekeying counterMartin Willi2012-10-241-0/+12
|
* Add stroke IKE rekey countersMartin Willi2012-10-241-0/+26
|
* Raise a bus alert when IKE message body parsing failsMartin Willi2012-10-243-0/+7
|
* Raise a bus alert when IKE message header parsing failsMartin Willi2012-10-242-0/+3
|
* Raise a bus alert when a received message contains unknown SPIsMartin Willi2012-10-242-0/+6
|
* Define stroke counter types to implementMartin Willi2012-10-242-0/+86
|
* Add a stub for IKE event counters in strokeMartin Willi2012-10-244-0/+112
|
* Add a load-tester option to define the IKE version to use for testingMartin Willi2012-10-241-2/+9
|
* Remove peer_cfg IKE version matching, as it is done in ike_cfg matchingMartin Willi2012-10-241-22/+3
|
* Respect IKE version while selecting an ike_cfg as responderMartin Willi2012-10-244-13/+38
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-2414-26/+18
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-2414-25/+55
|
* Move ike_version_t definition from peer_cfg_t to ike_cfg_tMartin Willi2012-10-244-24/+24
|
* android: Enable ECC in the app as our custom built libcrypto supports itTobias Brunner2012-10-231-3/+0
|
* implemented IETF Numeric Version attributeAndreas Steffen2012-10-188-1/+429
|
* implemented IETF Remediation Instructions attributeAndreas Steffen2012-10-186-1/+520
|
* Handle type of first EAP-RADIUS response more sophisticatedTobias Brunner2012-10-181-3/+18
|
* Starter ignores non-fatal errors when reloading configTobias Brunner2012-10-181-1/+1
|
* Starter unroutes removed or changed connections before loading and routing ↵Tobias Brunner2012-10-183-0/+19
| | | | new ones
* Update routed connections in trap managerTobias Brunner2012-10-181-37/+39
| | | | | | Before this change, modified configs that have been updated with ipsec reload, could properly be started manually, but the old config would get used if triggered via trap policies.
* Reload logger configuration on SIGHUPTobias Brunner2012-10-186-208/+400
| | | | | | Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t.
* Make syslog and file loggers configurable at runtimeTobias Brunner2012-10-188-80/+185
|
* Store loggers in conftest separately, not on charonTobias Brunner2012-10-182-6/+19
|