2012-07-11 |
Martin Willi | Install libtls development headers
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Install libfast development headers
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Define CONFIG_H_INCLUDED in Android build
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Check if config.h passed correctly via gcc -include
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Install libstrongswan development headers
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Use and install a config.h AC_CONFIG_HEADER that contains...
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Added a description to all AC_DEFINE macros, as required...
|
commit | commitdiff | tree |
2012-07-11 |
Martin Willi | Add safe_strerror() to leak detective whitelist
|
commit | commitdiff | tree |
2012-07-10 |
Martin Willi | Send cert request based on peers configured authentication...
|
commit | commitdiff | tree |
2012-07-09 |
Martin Willi | Add an option to disable libstrongswan certificate...
|
commit | commitdiff | tree |
2012-07-09 |
Martin Willi | Don't send CERTREQs when initiating aggressive mode PSK
|
commit | commitdiff | tree |
2012-07-04 |
Martin Willi | Refactored heavily #ifdefd capability code to its own...
|
commit | commitdiff | tree |
2012-07-03 |
Martin Willi | Add charon-nm to .gitignore
|
commit | commitdiff | tree |
2012-07-03 |
Martin Willi | Default to register_printf_specifier() if no printf...
|
commit | commitdiff | tree |
2012-07-02 |
Martin Willi | Accept non-"/0" subnet sizes for traffic selectors...
|
commit | commitdiff | tree |
2012-07-02 |
Martin Willi | Update our network-manager-strongswan/debian to what...
|
commit | commitdiff | tree |
2012-06-29 |
Martin Willi | Pass "lo" as faked tundev to NM, as it now needs a...
|
commit | commitdiff | tree |
2012-06-29 |
Martin Willi | As a responder, don't start a TRANSACTION request if...
|
commit | commitdiff | tree |
2012-06-28 |
Martin Willi | Show some uname() info in "ipsec statusall"
|
commit | commitdiff | tree |
2012-06-28 |
Martin Willi | Show some uname() info during charon startup
|
commit | commitdiff | tree |
2012-06-27 |
Martin Willi | Defer quick mode initiation if we expect a mode config...
|
commit | commitdiff | tree |
2012-06-27 |
Martin Willi | Queue a mode config task as responder if we need a...
|
commit | commitdiff | tree |
2012-06-27 |
Martin Willi | Add basic support for XAuth responder authentication
|
commit | commitdiff | tree |
2012-06-27 |
Martin Willi | Map XAuth responder authentication methods between...
|
commit | commitdiff | tree |
2012-06-27 |
Martin Willi | Show remote EAP/XAuth identity in "statusall" on a...
|
commit | commitdiff | tree |
2012-06-26 |
Martin Willi | Ignore a received %any virtual IP for installation
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Enforce uniqueids=keep based on XAuth identity
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Don't send XAUTH_OK if a hook prevents SA to establish
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Enforce uniqueids=keep only for non-XAuth Main/Agressive...
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Show EAP/XAuth identity in "ipsec status", if available
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Use XAuth/EAP remote identity for uniqueness check
|
commit | commitdiff | tree |
2012-06-25 |
Martin Willi | Add missing XAuth name variable when complaining about...
|
commit | commitdiff | tree |
2012-06-20 |
Martin Willi | Select requested virtual IP family based on remote...
|
commit | commitdiff | tree |
2012-06-14 |
Martin Willi | Adopt children as XAuth initiator (which is IKE responder)
|
commit | commitdiff | tree |
2012-06-14 |
Martin Willi | Added 5.0 NEWS about IKEv1 in charon
|
commit | commitdiff | tree |
2012-06-14 |
Martin Willi | Print the kind of *Swan during starter startup
|
commit | commitdiff | tree |
2012-06-14 |
Martin Willi | Show what kind of *Swan we run in "ipsec status"
|
commit | commitdiff | tree |
2012-06-14 |
Martin Willi | Require a scary option to respond to Aggressive Mode...
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | NEWS about specifying trustchain HASH algorithm requirements
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | Add documentation for signature hash algorithm enforcing...
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | Added signature scheme options left/rightauth
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | Support multiple different public key strength types...
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | Add signature schemes to auth_cfg during trustchain...
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | certificate_t->issued_by takes an argument to receive...
|
commit | commitdiff | tree |
2012-06-12 |
Martin Willi | Define auth_cfg rules for signature schemes
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Enforce uniqueness policy in IKEv1 main and aggressive...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Try to rekey without KE exchange if peer returns INVALID_KE_...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | While checking for redundant quick modes, compare traffic...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Store shorter soft lifetime of in- and outbound SAs...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Initiate quick mode rekeying with narrowed traffic...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Use traffic selectors passed to quick mode constructor...
|
commit | commitdiff | tree |
2012-06-08 |
Martin Willi | Instead of rekeying, delete a quick mode if we have...
|
commit | commitdiff | tree |
2012-06-06 |
Martin Willi | As responder, enforce the same configuration while...
|
commit | commitdiff | tree |
2012-06-05 |
Martin Willi | Show expiration time of rekeyed CHILD_SAs in statusall
|
commit | commitdiff | tree |
2012-05-23 |
Martin Willi | Apply IDir before deriving keys as aggressive initiator
|
commit | commitdiff | tree |
2012-05-23 |
Martin Willi | Use received identity to look up PSK as aggressive...
|
commit | commitdiff | tree |
2012-05-23 |
Martin Willi | Check if we actually have an initiating packet to free...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Cancel pending retransmits when flushing active task...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Cancel active quick mode task when receiving INFORMATIONAL...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Flush task queues explicitly, not implicitly if task...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Wrap task managers flush_queue() in IKE_SA
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Make task managers flush_queue() method public
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Enumerate correct list while removing nonce_gens, fix...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Added a convenience function to dump backtraces for...
|
commit | commitdiff | tree |
2012-05-21 |
Martin Willi | Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish...
|
commit | commitdiff | tree |
2012-05-15 |
Martin Willi | Moved IKEv1 DPD processing to task manager, fix sequence...
|
commit | commitdiff | tree |
2012-05-15 |
Martin Willi | Consider inbound ESP as a sign of liveness for DPD...
|
commit | commitdiff | tree |
2012-05-15 |
Martin Willi | Schedule a DPD timeout job that enforces the IKE message...
|
commit | commitdiff | tree |
2012-05-15 |
Martin Willi | Send unanswered follow up R_U_THERE messages with the...
|
commit | commitdiff | tree |
2012-05-15 |
Martin Willi | Do not send IKEv1 DPD retransmit, but create a new...
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Explicitly cast from strict_t to crl_policy_t
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Use correct integrity_algorithm_t enum type in bench_signer()
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Make function pointer defined with METHOD() macro non...
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Remove unused return value of INIT(), making clang...
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Register load-tester faked kernel interface before...
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Load tester can enforce a local IP to use
|
commit | commitdiff | tree |
2012-05-14 |
Martin Willi | Add plugin features support to load-tester plugin
|
commit | commitdiff | tree |
2012-05-03 |
Martin Willi | If we load new features from a plugin, restart loading...
|
commit | commitdiff | tree |
2012-05-03 |
Martin Willi | stroke plugin sdepends on building CERT_ANY certificates
|
commit | commitdiff | tree |
2012-05-03 |
Martin Willi | Building CERT_ANY through PEM requires either a CERT_X509...
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | Add plugin features support to stroke plugin
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | Certificate decoding soft-depends on public key decoding...
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | PEM loading plugin features depend on the same feature...
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | Don't depend on a feature that has a dependency to...
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | Merge branch 'ikev1'
|
commit | commitdiff | tree |
2012-05-02 |
Martin Willi | Added a dedicated sender flush method, delay sender...
|
commit | commitdiff | tree |
2012-04-26 |
Martin Willi | Fixed Android null terminated password fixup in xauth-eap
|
commit | commitdiff | tree |
2012-04-17 |
Martin Willi | Keep COOKIEs enabled once threshold is hit, until we...
|
commit | commitdiff | tree |
2012-04-17 |
Martin Willi | Added a note about DH/keymat lifecycle for custom implementa...
|
commit | commitdiff | tree |
2012-04-17 |
Martin Willi | Reuse existing DH value when retrying IKE_SA_INIT with...
|
commit | commitdiff | tree |
2012-04-16 |
Martin Willi | Fix iteration through half-open IKE_SA table
|
commit | commitdiff | tree |
2012-04-11 |
Martin Willi | Don't invoke child_updown hook twice as responder
|
commit | commitdiff | tree |
2012-04-11 |
Martin Willi | Accept zero-length certificate request payloads
|
commit | commitdiff | tree |
2012-04-04 |
Martin Willi | Added another bunch of commonly used IKEv1 NATT vendor IDs
|
commit | commitdiff | tree |
2012-04-02 |
Martin Willi | More detailed NEWS about RADIUS extensions
|
commit | commitdiff | tree |
2012-03-22 |
Martin Willi | Fix null-terminated XAuth passwords, as sent by Android 4
|
commit | commitdiff | tree |
2012-03-22 |
Martin Willi | Store authentication info of a XAUTH round on IKE_SA
|
commit | commitdiff | tree |
2012-03-22 |
Martin Willi | Added a getter for CHILD_SA marks
|
commit | commitdiff | tree |
2012-03-22 |
Martin Willi | Define a special XFRM mark_t.value that dynamically...
|
commit | commitdiff | tree |
2012-03-20 |
Martin Willi | Reply with received configuration payload identifier...
|
commit | commitdiff | tree |
next |