aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* ikev2: Handle REDIRECT notifies during IKE_SA_INITTobias Brunner2016-03-043-0/+64
* ike-init: Send REDIRECT notify during IKE_SA_INIT if requested by providersTobias Brunner2016-03-041-0/+17
* redirect-manager: Add helper function to create and parse REDIRECT notify dataTobias Brunner2016-03-042-11/+162
* redirect-manager: Verify type of returned gateway IDTobias Brunner2016-03-041-1/+12
* ike-init: Send REDIRECT_SUPPORTED as initiatorTobias Brunner2016-03-041-0/+5
* ike-init: Enable redirection extension if client sends REDIRECT_SUPPORTED notifyTobias Brunner2016-03-041-0/+4
* ike-sa: Add new extension for IKEv2 redirection (RFC 5685)Tobias Brunner2016-03-041-1/+6
* daemon: Create global redirect manager instanceTobias Brunner2016-03-042-0/+8
* redirect-manager: Add manager for redirect providersTobias Brunner2016-03-044-2/+223
* redirect-provider: Add interface to redirect clients during initial messagesTobias Brunner2016-03-043-0/+61
* Set PLUTO port variables to 0 in the case of no port restrictionsAndreas Steffen2016-03-041-1/+1
* Port range support in updown scriptAndreas Steffen2016-03-041-13/+37
* Implemented port ranges in kernel_netlink interfaceAndreas Steffen2016-03-041-7/+19
* thread: Allow thread ID to be value returned by gettid()Thomas Egerer2016-03-043-14/+32
* Request missing SWID tags in a directed PA-TNC messageAndreas Steffen2016-03-043-20/+47
* libhydra: Remove empty unused libraryTobias Brunner2016-03-03110-534/+15
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-0369-358/+257
* libhydra: Move all kernel plugins to libcharonTobias Brunner2016-03-0327-28/+28
* ikev1: Send and verify IPv6 addresses correctlyTobias Brunner2016-03-032-26/+18
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-1/+17
* ikev1: Avoid modifying local auth config when detecting pubkey methodTobias Brunner2016-03-031-1/+1
* forecast: Fix alignment when adding rulesTobias Brunner2016-03-031-114/+133
* connmark: Fix alignment when adding rulesTobias Brunner2016-03-031-160/+172
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-033-11/+24
* ike: Don't send NAT keepalives if we have no path to the other peerTobias Brunner2016-03-031-3/+9
* vici: Provide ports of local and remote IKE endpointsTobias Brunner2016-03-032-2/+9
* duplicheck: Include required headers for FreeBSDDenis Volpato Martins2016-03-031-0/+2
* charon: Add custom logger to daemonThomas Egerer2016-03-014-43/+336
* vici: Correctly document 'up' key for updown eventsTobias Brunner2016-03-011-4/+4
* ikev2: Use config value for sending of vendor IDsThomas Egerer2016-03-011-13/+43
* swanctl: Fix minor typos in documentationChris Patterson2016-02-291-3/+3
* ike-sa-manager: Store a reference to the thread that checked out an IKE_SATobias Brunner2016-02-171-13/+14
* Fix of the mutual TNC measurement use caseAndreas Steffen2016-02-162-20/+20
* kernel-netlink: Allow Netlink send buffer size to be configured via compile o...Tobias Brunner2016-02-121-3/+11
* utils: Add enum name for pseudo log group 'any'Tobias Brunner2016-02-052-12/+7
* libipsec: Pass the same data to del_policy() as to add_policy()Tobias Brunner2016-02-044-12/+17
* libipsec: Don't attempt deletion of any non-IPsec policiesTobias Brunner2016-02-041-1/+1
* ikev2: Add debug message about failed IKE authenticationThomas Egerer2016-02-021-0/+4
* ikev1: Log successful authentication with signature schemeThomas Egerer2016-02-011-1/+1
* peer-cfg: Set DPD timeout to at least DPD delayTobias Brunner2016-02-011-0/+4
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-2/+2
* load-tester: Register kernel-ipsec implementation as plugin featureTobias Brunner2016-02-011-10/+11
* child-rekey: Suppress updown event when deleting redundant CHILD_SAsTobias Brunner2016-02-011-1/+10
* ha: Properly sync IKEv1 IV if gateway is initiatorTobias Brunner2016-02-011-12/+16
* ha: Add DH group to CHILD_ADD messageTobias Brunner2016-02-012-1/+12
* ha: Add DH group to IKE_ADD messageTobias Brunner2016-02-014-0/+16
* ike-sa-manager: Don't update entries for init messages after unlocking segmentTobias Brunner2016-02-011-3/+2
* unit-tests: The pseudonym RDN is now recognized, so use something more exoticTobias Brunner2016-01-281-3/+3
* Support pseudonym RDNAndreas Steffen2016-01-273-0/+5
* vici: Support multiple named raw ublic keysAndreas Steffen2016-01-101-15/+19