2012-10-24 |
Martin Willi | Raise a bus alert when IKE message body parsing fails
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Raise a bus alert when IKE message header parsing fails
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Raise a bus alert when a received message contains...
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Define stroke counter types to implement
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Add a stub for IKE event counters in stroke
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Add a load-tester option to define the IKE version...
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Remove peer_cfg IKE version matching, as it is done...
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Respect IKE version while selecting an ike_cfg as responder
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Remove version argument on peer_cfg constructor, use...
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Add IKE version information to ike_cfg_t
|
commit | commitdiff | tree |
2012-10-24 |
Martin Willi | Move ike_version_t definition from peer_cfg_t to ike_cfg_t
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Remove unused this parameter to load_issuer_cert/key...
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Generate a load-tester certificate only for DN or subjectAlt...
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Add a load-tester initiator_match option to match custom...
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Encode non-DN load-tester identities as subjectAltNames
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Add a load-tester digest option for issuing peer certificates
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Load a multiple load-tester CA certificates from a...
|
commit | commitdiff | tree |
2012-10-16 |
Martin Willi | Added load-tester options to read issuing CA certificate...
|
commit | commitdiff | tree |
2012-10-10 |
Martin Willi | Remove outdated TODO information
|
commit | commitdiff | tree |
2012-10-09 |
Martin Willi | Fix leak of PINs from ipsec.secrets
|
commit | commitdiff | tree |
2012-10-02 |
Martin Willi | Add a libfast sendfile() method to send files from...
|
commit | commitdiff | tree |
2012-10-02 |
Martin Willi | Include all dev headers, even if they are configuration...
|
commit | commitdiff | tree |
2012-09-20 |
Martin Willi | In mem_pool, check for an existing ID entry before...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Merge branch 'unity'
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add a simple test case for the unity plugin, featuring...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Build unity plugin in strongSwan test suite
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add unity plugin NEWS
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Update ipsec.conf.5, leftsubnet can handle multiple...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | As Unity responder, don't change the proposed TS at...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Don't complain about multiple TS in IKEv1, as it supported...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | As initiator, narrow received Unity attributes to configured TS
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | When using Unity, bump up remote TS as initiator to...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Enable Cisco Unity only if Unity vendor id received
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add a Unity attribute provider that adds Split-Includes...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Check if subset calculation actually yields a TS in...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Request Unity configuration attributes for IKEv1 only
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add Cisco Unity client support for Split-Include and...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add a road-warrior test case requesting both an IPv4...
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Derive a dynamic TS to multiple virtual IPs
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Use the vararg list constructor in quick mode task
|
commit | commitdiff | tree |
2012-09-18 |
Martin Willi | Add a linked list constructor taking items from a vararg...
|
commit | commitdiff | tree |
2012-09-12 |
Martin Willi | Don't allow NULL encryption with PEAP
|
commit | commitdiff | tree |
2012-09-12 |
Martin Willi | Use memmove on overlapping regions, and operate with...
|
commit | commitdiff | tree |
2012-09-12 |
Martin Willi | Whitespace cleanups in tls_eap
|
commit | commitdiff | tree |
2012-09-12 |
Martin Willi | Use uintptr_t in mem pool to avoid compiler warning...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Always send a configuration payload in IKEv1 TRANSACTIONs...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Don't use host address for dynamic TS in IKEv1 if a...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Don't use host address for dynamic TS in IKEv2 if a...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Don't return a subset for a dynamic TS unless set_address...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Send FAILED_CP_REQUIRED if a configuration payload...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Check for an existing lease in all stroke pools before...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Pass full pool list to release_address
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Pass the full list of pools to acquire_address, enumerate...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Add a linked list constructor initializing from an...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Add a responder narrow() hook to change TS in the kernel...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Support RADIUS accounting when using IKEv1 with xauth...
|
commit | commitdiff | tree |
2012-09-11 |
Martin Willi | Fix leak while enumerating RADIUS Framed-IPs from IKE_SA
|
commit | commitdiff | tree |
2012-09-10 |
Martin Willi | Add random plugin options to strongswan.conf.5
|
commit | commitdiff | tree |
2012-09-10 |
Martin Willi | Add strongswan.conf runtime options for /dev/[u]random...
|
commit | commitdiff | tree |
2012-09-05 |
Martin Willi | In mode_config, destroy temporary pool list instead...
|
commit | commitdiff | tree |
2012-08-31 |
Martin Willi | Merge branch 'multi-vip'
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Added multiple left/rightsourceip NEWS
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Added NEWS for left/rightdns options
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Updated ipsec.conf.5 with multiple left/rightsourceip...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Added a note to _updown for the new PLUTO_MY_SOURCEIP...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Be less verbose if IP allocation for a single pool...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | DHCP plugin returns virtual IPs for IPv4 requests only
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Check address family in HA virtual IP backend
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Strictly enforce address family match while acquiring...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Don't parse comma separated pool names in attr-sql
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Handle comma separated pools as multiple pool names...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Request and acquire multiple virtual IPs in IKEv1 Mode...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Request and acquire multiple virtual IPs in IKEv2 configurat...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Pass all configured pool names to attribute provider...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Pass a list instead of a single virtual IP to attribute...
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Support multiple addresses/pools in left/rightsourceip
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Support multiple address pools configured on a peer_cfg
|
commit | commitdiff | tree |
2012-08-30 |
Martin Willi | Support multiple virtual IPs on peer_cfg and ike_sa...
|
commit | commitdiff | tree |
2012-08-28 |
Martin Willi | Ported tun_device initialization to OS X utun
|
commit | commitdiff | tree |
2012-08-24 |
Martin Willi | Add a getter for the mem_pool_t base address
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Remove unused ipsec.conf left/rightnatip keyword
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Add description about DNS server variables to _updown
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Add a DNS attribute handler to updown, passing servers...
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Add a description of the leftdns option to ipsec.conf.5
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Add a stroke attribute_handler requesting DNS servers...
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Serve ipsec.conf rightdns servers through stroke attribute...
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Add a left/rightdns keyword to configure connection...
|
commit | commitdiff | tree |
2012-08-21 |
Martin Willi | Remove unused src/dst variables in send_no_marker()
|
commit | commitdiff | tree |
2012-08-20 |
Martin Willi | Don't use POSIX semaphores if a MONOTONIC clock is...
|
commit | commitdiff | tree |
2012-08-20 |
Martin Willi | Remove the unused second IKE_SA entry match function...
|
commit | commitdiff | tree |
2012-08-20 |
Martin Willi | Add a mutex/condvar based semaphore implementation...
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | If _POSIX_SPIN_LOCKS is defined as -1, it is not available
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | If vstr printf functions are #defined, undef them before...
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | Use actual daemon name to enable XAuth/PSK with aggressive...
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | Add xauth-pam/eap-gtc NEWS
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | EAP-GTC can use any XAuth backend, including xauth-pam
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | Add xauth-pam, an XAuth backend verifying credentials...
|
commit | commitdiff | tree |
2012-08-10 |
Martin Willi | Add getspnam_r() to leak detective whitelist
|
commit | commitdiff | tree |
2012-08-09 |
Martin Willi | Check if TLS handshake received Finished before processing...
|
commit | commitdiff | tree |
next |