aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Increase the limit of acceptable IKEv1 CERTREQ payloads to 20Martin Willi2012-10-241-1/+1
|
* Use explicit, larger buffer sizes for smartcard keyids and modulesMartin Willi2012-10-241-8/+8
|
* Add a strongswan.conf option to disable loading of all certificates from a ↵Martin Willi2012-10-241-6/+11
| | | | pkcs11 module
* Support loading cacert certificates in ipsec.conf ca sections from smartcardMartin Willi2012-10-241-19/+37
|
* Refactored stroke smartcard token parsing, support module and slot in ↵Martin Willi2012-10-241-62/+101
| | | | leftcert option
* Explicit pkcs11 certificate loading can enforce a module and a slotMartin Willi2012-10-242-4/+21
|
* Be less verbose if loading PKCS#11 certificate failsMartin Willi2012-10-241-6/+1
|
* Load ipsec.conf %smartcard leftcerts with pkcs11 builderMartin Willi2012-10-241-8/+20
|
* Add a builder to load specific pkcs11 certificates by keyidMartin Willi2012-10-243-0/+115
|
* If no pkcs11 public key for a private key found, search for a certificateMartin Willi2012-10-241-4/+53
|
* Move pkcs11 public key lookup function declaration to header fileMartin Willi2012-10-243-20/+18
|
* Only add an implicit PRF based on the MAC alg if no PRF given in proposalMartin Willi2012-10-241-38/+38
|
* Add proposal keywords to explicitly specify PRF algorithmsMartin Willi2012-10-241-0/+8
|
* Add an interactive mode in lookip tool, demonstrate lasting connectionsMartin Willi2012-10-241-9/+57
|
* Send a lookip NOT_FOUND reply if a lookup yields no resultsMartin Willi2012-10-243-11/+32
|
* lookup function of lookip listener returns the number of matchesMartin Willi2012-10-242-3/+9
|
* Handle multiple lookip connections using a single FDSETMartin Willi2012-10-241-49/+162
|
* Renamed list to store listening lookip clientsMartin Willi2012-10-241-5/+5
|
* Handle client subscriptions in lookip pluginMartin Willi2012-10-241-12/+89
|
* Add a lookip server side UNIX socket processing LOOKUP and DUMP requestsMartin Willi2012-10-244-1/+309
|
* Add a simple command line utility to query the lookip pluginMartin Willi2012-10-243-0/+213
|
* Defined on-the-wire format used on lookip socketMartin Willi2012-10-242-1/+94
|
* Add a lookip function to register virtual IP notification listenersMartin Willi2012-10-242-4/+87
|
* Add a lookup method to lookip plugin, using a callback to invokeMartin Willi2012-10-242-0/+53
|
* Add a lookip listener that collects the information we are interested inMartin Willi2012-10-244-1/+267
|
* Add a lookip plugin stub to lookup connections by virtual IPMartin Willi2012-10-244-0/+125
|
* Add "listcounters" command to ipsec.8 manpageMartin Willi2012-10-241-0/+4
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-247-5/+16
|
* Add a print method for stroke countersMartin Willi2012-10-242-0/+29
|
* Support field with specifiers in %N printf hookMartin Willi2012-10-241-5/+7
|
* Add stroke message type countersMartin Willi2012-10-241-0/+75
|
* Add stroke counters for invalid IKE messagesMartin Willi2012-10-241-0/+27
|
* Add stroke CHILD_SA rekeying counterMartin Willi2012-10-241-0/+12
|
* Add stroke IKE rekey countersMartin Willi2012-10-241-0/+26
|
* Raise a bus alert when IKE message body parsing failsMartin Willi2012-10-243-0/+7
|
* Raise a bus alert when IKE message header parsing failsMartin Willi2012-10-242-0/+3
|
* Raise a bus alert when a received message contains unknown SPIsMartin Willi2012-10-242-0/+6
|
* Define stroke counter types to implementMartin Willi2012-10-242-0/+86
|
* Add a stub for IKE event counters in strokeMartin Willi2012-10-244-0/+112
|
* Add a load-tester option to define the IKE version to use for testingMartin Willi2012-10-241-2/+9
|
* Remove peer_cfg IKE version matching, as it is done in ike_cfg matchingMartin Willi2012-10-241-22/+3
|
* Respect IKE version while selecting an ike_cfg as responderMartin Willi2012-10-244-13/+38
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-2414-26/+18
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-2414-25/+55
|
* Move ike_version_t definition from peer_cfg_t to ike_cfg_tMartin Willi2012-10-244-24/+24
|
* android: Enable ECC in the app as our custom built libcrypto supports itTobias Brunner2012-10-231-3/+0
|
* implemented IETF Numeric Version attributeAndreas Steffen2012-10-188-1/+429
|
* implemented IETF Remediation Instructions attributeAndreas Steffen2012-10-186-1/+520
|
* Handle type of first EAP-RADIUS response more sophisticatedTobias Brunner2012-10-181-3/+18
|
* Starter ignores non-fatal errors when reloading configTobias Brunner2012-10-181-1/+1
|