2013-03-14 |
Martin Willi | Pass correclty sized pointer to lookup_algorithm()... |
tree | commitdiff |
2013-03-14 |
Martin Willi | kernel_ipsec_t.query_sa() additionally returns the... |
tree | commitdiff |
2013-03-13 |
Martin Willi | Send NAS-Port, NAS-IP and Calling/Called-Station-ID... |
tree | commitdiff |
2013-03-12 |
Martin Willi | Forward Cisco Banner received from RADIUS to Unity... |
tree | commitdiff |
2013-03-12 |
Martin Willi | Add a radius message method to enumerate vendor specifi... |
tree | commitdiff |
2013-03-12 |
Martin Willi | Add Altiga Private Enterprise Numbers that Cisco uses... |
tree | commitdiff |
2013-03-12 |
Martin Willi | In eap-radius, hand out received Framed-IP-Address... |
tree | commitdiff |
2013-03-12 |
Martin Willi | Add missing XAuthRespPSK switch case to IKEv1 key deriv... |
tree | commitdiff |
2013-03-11 |
Martin Willi | strdup() iface passed to queue_route_reinstall(), fixin... |
tree | commitdiff |
2013-03-11 |
Martin Willi | Support mutliple subnets and ranges as external load... |
tree | commitdiff |
2013-03-11 |
Martin Willi | Add a constructor to create in-memory pools from an... |
tree | commitdiff |
2013-03-11 |
Martin Willi | Clean up IKE_SA state if IKE_SA_INIT request does not... |
tree | commitdiff |
2013-03-11 |
Martin Willi | Ignore fourth Qick Mode message sent by Windows servers. |
tree | commitdiff |
2013-03-11 |
Andreas Steffen | added ITA Echo PA-TNC Subtype and ITA Echo Attribute... |
tree | commitdiff |
2013-03-11 |
Andreas Steffen | moved ar_id from imv_agent to imv_state |
tree | commitdiff |
2013-03-08 |
Tobias Brunner | esc() is only used if dladdr(3) is available 5.0.3dr3 |
tree | commitdiff |
2013-03-07 |
Tobias Brunner | Fix maximum size of a mem_pool_t |
tree | commitdiff |
2013-03-07 |
Tobias Brunner | New Android release after adding translations and Cert... |
tree | commitdiff |
2013-03-07 |
Tobias Brunner | android: Add support for combined certificate and EAP... |
tree | commitdiff |
2013-03-07 |
Martin Willi | Merge branch 'pt-tls' |
tree | commitdiff |
2013-03-07 |
Martin Willi | As Quick Mode initiator, select a subset of the propose... |
tree | commitdiff |
2013-03-06 |
Martin Willi | If TLS peer authentication not required, the client... |
tree | commitdiff |
2013-03-06 |
Andreas Steffen | added some otherNames OIDs |
tree | commitdiff |
2013-03-06 |
Martin Willi | Fix some apidoc in mem_pool.h |
tree | commitdiff |
2013-03-04 |
Andreas Steffen | instead of cloning use extract_buf() method |
tree | commitdiff |
2013-03-04 |
Martin Willi | Don't invoke addr2line if dladdr() did not yield a... |
tree | commitdiff |
2013-03-04 |
Martin Willi | When receiving critical signals, additionally log backt... |
tree | commitdiff |
2013-03-04 |
Martin Willi | backtrace_t.log() takes a NULL file pointer to log... |
tree | commitdiff |
2013-03-04 |
Martin Willi | Don't use color escapes when printing backtraces to... |
tree | commitdiff |
2013-03-04 |
Martin Willi | Add a utility function to resolve TTY color escape... |
tree | commitdiff |
2013-03-03 |
Andreas Steffen | make TNC Access Requestor ID available to IMVs |
tree | commitdiff |
2013-03-03 |
Andreas Steffen | added getpwuid_r and initgroups to whitelist |
tree | commitdiff |
2013-03-02 |
Andreas Steffen | third parameter was not copied |
tree | commitdiff |
2013-03-02 |
Tobias Brunner | Fixed Doxygen comments after scanning complete src... |
tree | commitdiff |
2013-03-02 |
Tobias Brunner | Removed backend for old Android frontend patch |
tree | commitdiff |
2013-03-02 |
Andreas Steffen | added ERX_SUPPORTED IKEv2 Notify |
tree | commitdiff |
2013-03-02 |
Andreas Steffen | added some new TCG IF-M message subtypes and attributes |
tree | commitdiff |
2013-03-01 |
Tobias Brunner | android: Mitigate race condition on reauthentication |
tree | commitdiff |
2013-03-01 |
Tobias Brunner | openssl: The EVP GCM interface requires at least OpenSS... |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'multi-eap' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'multi-cert' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'systime' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-rekeying' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'vip-shunts' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'opaque-ports' |
tree | commitdiff |
2013-03-01 |
Martin Willi | When running with an unprivileged user, initialize... |
tree | commitdiff |
2013-03-01 |
Martin Willi | Without MOBIKE, update remote host only if it is behind NAT |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-mm-retransmits' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Merge branch 'tfc-notify' |
tree | commitdiff |
2013-03-01 |
Martin Willi | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel... |
tree | commitdiff |
2013-03-01 |
Martin Willi | Indicate support for processing ESPv3 TFC padding in... |
tree | commitdiff |
2013-03-01 |
Martin Willi | Introduce "features" for the kernel backends returning... |
tree | commitdiff |
2013-02-28 |
Tobias Brunner | openssl: Provide AES-GCM implementation |
tree | commitdiff |
2013-02-28 |
Tobias Brunner | Fix cleanup in crypto_tester if AEAD implementation... |
tree | commitdiff |
2013-02-28 |
Tobias Brunner | Order of arguments in Doxygen comment fixed |
tree | commitdiff |
2013-02-28 |
Tobias Brunner | Fix auth_cfg_t.clone() for single-valued auth rules |
tree | commitdiff |
2013-02-28 |
Tobias Brunner | Trigger an updown event when destroying an IKE_SA based... |
tree | commitdiff |
2013-02-28 |
Martin Willi | Support different authentication schemes for PT-TLS |
tree | commitdiff |
2013-02-28 |
Martin Willi | Request a TLS client certificate even if no peer identi... |
tree | commitdiff |
2013-02-28 |
Martin Willi | Wrap tls_t.get_{server,peer}_id methods in tls_socket_t |
tree | commitdiff |
2013-02-28 |
Martin Willi | Delegate tls_t.get_{peer,server}_id to handshake layer |
tree | commitdiff |
2013-02-28 |
Martin Willi | Implement a SASL PLAIN mechanism using shared secrets |
tree | commitdiff |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS client |
tree | commitdiff |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS server |
tree | commitdiff |
2013-02-28 |
Martin Willi | Define PT-TLS SASL result codes |
tree | commitdiff |
2013-02-28 |
Martin Willi | Define an interface for SASL mechanisms and provide... |
tree | commitdiff |
2013-02-28 |
Martin Willi | Pass a client identity to pt_tls_client, usable for... |
tree | commitdiff |
2013-02-28 |
Martin Willi | Don't close underlying file descriptor before destroyin... |
tree | commitdiff |
2013-02-26 |
Martin Willi | Apply a mutual EAP auth_cfg not before the EAP method... |
tree | commitdiff |
2013-02-26 |
Martin Willi | Be a little more verbose why a peer_cfg is inacceptable |
tree | commitdiff |
2013-02-26 |
Martin Willi | Refactor auth_cfg applying to a common function |
tree | commitdiff |
2013-02-26 |
Tobias Brunner | Use SIGUSR2 for SIG_CANCEL on Android |
tree | commitdiff |
2013-02-26 |
Tobias Brunner | Android.mk updated to latest Makefiles |
tree | commitdiff |
2013-02-25 |
Martin Willi | For IKEv1 Main Mode, use message hash to detect early... |
tree | commitdiff |
2013-02-25 |
Martin Willi | Move initial message dropping to task manager |
tree | commitdiff |
2013-02-25 |
Martin Willi | Use INIT macro to initialize IKE_SA manager entries |
tree | commitdiff |
2013-02-21 |
Martin Willi | Don't reject OPAQUE ports while verifying traffic selec... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Optionally support port ranges in leftprotoport |
tree | commitdiff |
2013-02-21 |
Martin Willi | Support %opaque keyword in leftprotoport for "opaque... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Pass complete port range over stroke interface for... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Use a complete port range in traffic_selector_create_fr... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Print OPAQUE traffic selectors as what they are, not... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Support "opaque" ports in traffic selector subset calcu... |
tree | commitdiff |
2013-02-21 |
Martin Willi | Slightly refactor traffic_selector_t.get_subset() |
tree | commitdiff |
2013-02-21 |
Martin Willi | Migrate remaining traffic selector methods to METHOD... |
tree | commitdiff |
2013-02-20 |
Tobias Brunner | openssl: Disable PKCS#7/CMS when building against OpenS... |
tree | commitdiff |
2013-02-20 |
Martin Willi | Install a route for shunt policies |
tree | commitdiff |
2013-02-20 |
Martin Willi | Include local address for Unity Split-Exclude shunt... |
tree | commitdiff |
2013-02-20 |
Martin Willi | After IKEv1 reauthentication, reinstall VIP routes... |
tree | commitdiff |
2013-02-20 |
Martin Willi | When detecting a duplicate IKEv1 SA, adopt children... |
tree | commitdiff |
2013-02-19 |
Andreas Steffen | treat IF-M and IF-TNCCS remediation instructions/parame... |
tree | commitdiff |
2013-02-19 |
Martin Willi | systime-fix disables certificate lifetime validation... |
tree | commitdiff |
2013-02-19 |
Martin Willi | Add a stub for systime-fix, a plugin handling certifica... |
tree | commitdiff |
2013-02-19 |
Martin Willi | Add a cert_validator hook allowing plugins to provide... |
tree | commitdiff |
2013-02-19 |
Martin Willi | Make cert_validator_t.validate optional to implement |
tree | commitdiff |
2013-02-19 |
Tobias Brunner | Merge branch 'dnssec' |
tree | commitdiff |
2013-02-19 |
Andreas Steffen | Streamlined log messages in ipseckey plugin |
tree | commitdiff |
2013-02-19 |
Andreas Steffen | Encode RSA public keys in RFC 3110 DNSKEY format |
tree | commitdiff |
2013-02-19 |
Andreas Steffen | Moved configuration from resolver manager to unbound... |
tree | commitdiff |
2013-02-19 |
Reto Guadagnini | ipseckey: Report IPSECKEYs with invalid DNSSEC security... |
tree | commitdiff |
next |