2013-04-10 |
Martin Willi | RSA_check_key() may return -1 if it fails
|
commit | commitdiff | tree |
2013-04-10 |
Martin Willi | RAND_bytes/RAND_pseudo_bytes returns -1 if it is not...
|
commit | commitdiff | tree |
2013-04-10 |
Martin Willi | Check return value of ECDSA_Verify() correctly
|
commit | commitdiff | tree |
2013-04-10 |
Martin Willi | eap-radius: Add an option to exclude ports from Called...
|
commit | commitdiff | tree |
2013-04-04 |
Martin Willi | duplicheck: track multiple IKE_SAs in checking state...
|
commit | commitdiff | tree |
2013-04-03 |
Martin Willi | Refactor check_for_rekeyed_child() in quick_mode task
|
commit | commitdiff | tree |
2013-04-03 |
Martin Willi | Reuse reqid of an existing Quick Mode, even if it has...
|
commit | commitdiff | tree |
2013-04-03 |
Martin Willi | List all stroke counters when "all" is given, and report...
|
commit | commitdiff | tree |
2013-04-03 |
Martin Willi | Defer CHILD_SA rekeying if allocating an SPI fails
|
commit | commitdiff | tree |
2013-04-02 |
Martin Willi | Accept a certificate/key pair to use client authentication...
|
commit | commitdiff | tree |
2013-03-26 |
Martin Willi | Use new strongSwan HA kernel patchset keeping iptables ABI
|
commit | commitdiff | tree |
2013-03-26 |
Martin Willi | Define SSHCONF from strongswan testing directory, not...
|
commit | commitdiff | tree |
2013-03-26 |
Martin Willi | Lazy unmount guest filesystem after building image...
|
commit | commitdiff | tree |
2013-03-21 |
Martin Willi | Add a load-tester option to keep allocated external...
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Add an option to autobalance a HA cluster automatically
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Check if for some reason we handle a HA segment on...
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Acquire HA segment lock while sending heartbeat
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Fix scheduling of heartbeat sending in HA plugin
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Fix compiler warning in HA plugin
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | Don't try to mmap() empty ipsec.secret files
|
commit | commitdiff | tree |
2013-03-19 |
Martin Willi | In stroke counters, check if we have an IKE_SA before...
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Add an "esp" load-tester option to configure custom...
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Add some 5.0.3 NEWS
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'radius-ext'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'stroke-counters'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'stroke-timeout'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'netlink-align'
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_add_attribute() to copy over attributes...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use a helper function to add XFRM_MARK attribute
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_reserve() helper function in XFRM to simplify...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a Netlink utility function to add a RTA header...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Correctly check buffer length in netlink_add_attribute()
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Avoid unneeded termination of netlink algorithm name...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a "resetcounters" command to ipsec, clearing global...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add connection name specific stroke counters
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a chunk_from_str() initializer that does not include...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Don't create interim update entries if RADIUS accounting...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Add support for RADIUS Interim accounting updates
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Add an option to delete any established IKE_SA if RADIUS...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Make check whether to use IKEv1 fragmentation more...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Send Acct-Terminate-Cause based on some alerts catched...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMO...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Raise an alert if an IKE_SA could not have been reauthentica...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Send NAS-Port, NAS-IP and Calling/Called-Station-ID...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Support RADIUS accounting of sent/received packets
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Report the number of processed packets in "ipsec statusall"
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | child_sa_t.get_usestats() can additionally return the...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Pass correclty sized pointer to lookup_algorithm()...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | kernel_ipsec_t.query_sa() additionally returns the...
|
commit | commitdiff | tree |
2013-03-13 |
Martin Willi | Send NAS-Port, NAS-IP and Calling/Called-Station-ID...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Forward Cisco Banner received from RADIUS to Unity...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add a radius message method to enumerate vendor specific...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add Altiga Private Enterprise Numbers that Cisco uses...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | In eap-radius, hand out received Framed-IP-Address...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add missing XAuthRespPSK switch case to IKEv1 key derivation
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | strdup() iface passed to queue_route_reinstall(), fixing...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Support mutliple subnets and ranges as external load...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Add a constructor to create in-memory pools from an...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | When adding Netlink attributes, increase header length...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Clean up IKE_SA state if IKE_SA_INIT request does not...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Ignore fourth Qick Mode message sent by Windows servers.
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Merge branch 'pt-tls'
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | If controller operations have a callback, don't succeed...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Add a stroke command timeout option, and report status...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | As Quick Mode initiator, select a subset of the proposed...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | If TLS peer authentication not required, the client...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | Fix some apidoc in mem_pool.h
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't invoke addr2line if dladdr() did not yield a...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | When receiving critical signals, additionally log backtraces...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | backtrace_t.log() takes a NULL file pointer to log...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't use color escapes when printing backtraces to...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Add a utility function to resolve TTY color escape...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-eap'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-cert'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'systime'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-rekeying'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'vip-shunts'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'opaque-ports'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | When running with an unprivileged user, initialize...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Without MOBIKE, update remote host only if it is behind NAT
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-mm-retransmits'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'tfc-notify'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Indicate support for processing ESPv3 TFC padding in...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Introduce "features" for the kernel backends returning...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Support different authentication schemes for PT-TLS
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Request a TLS client certificate even if no peer identity...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Wrap tls_t.get_{server,peer}_id methods in tls_socket_t
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Delegate tls_t.get_{peer,server}_id to handshake layer
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement a SASL PLAIN mechanism using shared secrets
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS client
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS server
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define PT-TLS SASL result codes
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define an interface for SASL mechanisms and provide...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Pass a client identity to pt_tls_client, usable for...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Don't close underlying file descriptor before destroying...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Apply a mutual EAP auth_cfg not before the EAP method...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Be a little more verbose why a peer_cfg is inacceptable
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Refactor auth_cfg applying to a common function
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | For IKEv1 Main Mode, use message hash to detect early...
|
commit | commitdiff | tree |
next |