aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-9/+11
* Fix typo in error handling for sigwaitinfo() in charon-systemd and charon-tkmTobias Brunner2015-10-292-2/+2
* random: Properly handle errors when reading from /dev/[u]randomTobias Brunner2015-10-291-0/+1
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Prevent deadlock when checking for duplicate IKEv1 SAsTobias Brunner2015-10-291-0/+16
* Replace usages of sigwait(3) with sigwaitinfo(2)Tobias Brunner2015-10-299-36/+31
* updown: Add rules to allow IP6IP6 traffic used for uncompressed small packetsTobias Brunner2015-09-211-0/+31
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
* shunt-manager: Don't install policies in case of an address family or IP prot...Tobias Brunner2015-09-161-0/+20
* openssl: Explicitly include openssl/bn.hTobias Brunner2015-09-165-0/+5
* unit-tests: Add a test to verify that there is no partial matching of RDNsTobias Brunner2015-09-091-0/+1
* scepclient: Remove copyright and license from man pageTobias Brunner2015-09-091-9/+0
* include: Add linux/socket.hTobias Brunner2015-09-072-1/+22
* imv-os: Add some useful usage output to the pacman utilityTobias Brunner2015-08-311-2/+8
* kernel-netlink: Properly set port mask for ICMP type/code if only set on one ...Tobias Brunner2015-08-311-7/+8
* kernel-pfkey: Properly encode ICMP type/code if only set on one sideTobias Brunner2015-08-311-34/+20
* libimcv: Updated Android.mk fileTobias Brunner2015-08-311-2/+5
* eap-radius: Fix creation of host_t objects based on Framed-IPv6-Address attri...Tobias Brunner2015-08-281-1/+1
* pki: Add new type options to --issue command usage outputTobias Brunner2015-08-271-2/+2
* eap-ttls: Limit maximum length of tunneled EAP packet to EAP-TTLS packetTobias Brunner2015-08-271-1/+8
* trap-manager: Cleanup local address in error casesTobias Brunner2015-08-271-0/+2
* imv-os: Properly free strings for invalid input in pacmanTobias Brunner2015-08-271-0/+11
* ha: Close control FIFO if it is not validTobias Brunner2015-08-271-0/+4
* swanctl: Correctly build man page in out-of-tree builds from the repositoryTobias Brunner2015-08-271-1/+1
* Fixed some typos, courtesy of codespellTobias Brunner2015-08-273-3/+3
* Fix some Doxygen issuesTobias Brunner2015-08-277-8/+11
* unit-tests: Additional test cases to increase coverageTobias Brunner2015-08-272-9/+611
* traffic-selector: Use calc_netbits() in RFC 3779 constructorTobias Brunner2015-08-271-2/+1
* ike: Fix half-open count for initiating SAs when initially checked inTobias Brunner2015-08-271-0/+6
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-276-19/+45
* vici: Handle closed sockets in the Ruby gemEvan Broder2015-08-241-1/+5
* starter: Don't flush SAs in the kernelTobias Brunner2015-08-213-14/+0
* starter: Don't flush policies in the kernelTobias Brunner2015-08-211-1/+0
* kernel-pfkey: Only flush SAs of types we actually manageTobias Brunner2015-08-211-13/+26
* kernel-netlink: Only flush SAs of types we actually manageTobias Brunner2015-08-211-6/+19
* vici: Optionally check limits when initiating connectionsTobias Brunner2015-08-212-1/+7
* vici: Add get_bool() convenience getter for VICI messagesTobias Brunner2015-08-213-0/+94
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-2115-20/+71
* ike: Also track initiating IKE_SAs as half-openTobias Brunner2015-08-211-1/+0
* stroke: Allow %any as local addressTobias Brunner2015-08-211-3/+7
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-33/+46
* ikev1: Assign different job priorities for inbound IKEv1 messagesTobias Brunner2015-08-211-2/+12
* child-rekey: Don't add a REKEY_SA notify if the child-create task is deleting...Tobias Brunner2015-08-211-6/+9
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-rekey: Remove redundant migrate() call for child-create sub-taskTobias Brunner2015-08-211-2/+1
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* auth-cfg: Don't enforce EAP_RADIUSTobias Brunner2015-08-211-1/+2
* stroke: Change how CA certificates are storedTobias Brunner2015-08-205-58/+285
* stroke: Combine CA certificate load methodsTobias Brunner2015-08-201-82/+74