2013-03-18 |
Martin Willi | Add an "esp" load-tester option to configure custom...
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Add some 5.0.3 NEWS
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'radius-ext'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'stroke-counters'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'stroke-timeout'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'netlink-align'
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_add_attribute() to copy over attributes...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use a helper function to add XFRM_MARK attribute
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_reserve() helper function in XFRM to simplify...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a Netlink utility function to add a RTA header...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Correctly check buffer length in netlink_add_attribute()
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Avoid unneeded termination of netlink algorithm name...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a "resetcounters" command to ipsec, clearing global...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add connection name specific stroke counters
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a chunk_from_str() initializer that does not include...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Don't create interim update entries if RADIUS accounting...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Add support for RADIUS Interim accounting updates
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Add an option to delete any established IKE_SA if RADIUS...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Make check whether to use IKEv1 fragmentation more...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Send Acct-Terminate-Cause based on some alerts catched...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMO...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Raise an alert if an IKE_SA could not have been reauthentica...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Send NAS-Port, NAS-IP and Calling/Called-Station-ID...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Support RADIUS accounting of sent/received packets
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Report the number of processed packets in "ipsec statusall"
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | child_sa_t.get_usestats() can additionally return the...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | Pass correclty sized pointer to lookup_algorithm()...
|
commit | commitdiff | tree |
2013-03-14 |
Martin Willi | kernel_ipsec_t.query_sa() additionally returns the...
|
commit | commitdiff | tree |
2013-03-13 |
Martin Willi | Send NAS-Port, NAS-IP and Calling/Called-Station-ID...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Forward Cisco Banner received from RADIUS to Unity...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add a radius message method to enumerate vendor specific...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add Altiga Private Enterprise Numbers that Cisco uses...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | In eap-radius, hand out received Framed-IP-Address...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add missing XAuthRespPSK switch case to IKEv1 key derivation
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | strdup() iface passed to queue_route_reinstall(), fixing...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Support mutliple subnets and ranges as external load...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Add a constructor to create in-memory pools from an...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | When adding Netlink attributes, increase header length...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Clean up IKE_SA state if IKE_SA_INIT request does not...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Ignore fourth Qick Mode message sent by Windows servers.
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Merge branch 'pt-tls'
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | If controller operations have a callback, don't succeed...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Add a stroke command timeout option, and report status...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | As Quick Mode initiator, select a subset of the proposed...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | If TLS peer authentication not required, the client...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | Fix some apidoc in mem_pool.h
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't invoke addr2line if dladdr() did not yield a...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | When receiving critical signals, additionally log backtraces...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | backtrace_t.log() takes a NULL file pointer to log...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't use color escapes when printing backtraces to...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Add a utility function to resolve TTY color escape...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-eap'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-cert'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'systime'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-rekeying'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'vip-shunts'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'opaque-ports'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | When running with an unprivileged user, initialize...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Without MOBIKE, update remote host only if it is behind NAT
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-mm-retransmits'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'tfc-notify'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Indicate support for processing ESPv3 TFC padding in...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Introduce "features" for the kernel backends returning...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Support different authentication schemes for PT-TLS
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Request a TLS client certificate even if no peer identity...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Wrap tls_t.get_{server,peer}_id methods in tls_socket_t
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Delegate tls_t.get_{peer,server}_id to handshake layer
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement a SASL PLAIN mechanism using shared secrets
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS client
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS server
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define PT-TLS SASL result codes
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define an interface for SASL mechanisms and provide...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Pass a client identity to pt_tls_client, usable for...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Don't close underlying file descriptor before destroying...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Apply a mutual EAP auth_cfg not before the EAP method...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Be a little more verbose why a peer_cfg is inacceptable
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Refactor auth_cfg applying to a common function
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | For IKEv1 Main Mode, use message hash to detect early...
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | Move initial message dropping to task manager
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | Use INIT macro to initialize IKE_SA manager entries
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Don't reject OPAQUE ports while verifying traffic selector...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Document ipsec.conf leftprotoport extensions in manpage
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Optionally support port ranges in leftprotoport
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Support %opaque keyword in leftprotoport for "opaque...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Pass complete port range over stroke interface for...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Use a complete port range in traffic_selector_create_from_...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Print OPAQUE traffic selectors as what they are, not...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Support "opaque" ports in traffic selector subset calculation
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Slightly refactor traffic_selector_t.get_subset()
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Migrate remaining traffic selector methods to METHOD...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | Install a route for shunt policies
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | Include local address for Unity Split-Exclude shunt...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | After IKEv1 reauthentication, reinstall VIP routes...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | When detecting a duplicate IKEv1 SA, adopt children...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | systime-fix disables certificate lifetime validation...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Add a stub for systime-fix, a plugin handling certificate...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Add a cert_validator hook allowing plugins to provide...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Make cert_validator_t.validate optional to implement
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Fix encoding of issuerAndSubject while handling SCEP...
|
commit | commitdiff | tree |
next |