2017-02-27 |
Martin Willi | pki: Support an --addrblock option for self-signed...
|
commit | commitdiff | tree |
2017-02-27 |
Martin Willi | pki: Add a helper function parse traffic selectors...
|
commit | commitdiff | tree |
2017-02-27 |
Martin Willi | x509: Do not mark generated addrblock extension as...
|
commit | commitdiff | tree |
2017-02-27 |
Martin Willi | x509: Support encoding the RFC 3779 addrblock extension
|
commit | commitdiff | tree |
2017-02-27 |
Martin Willi | builder: Define a builder part for X.509 RFC 3779 address...
|
commit | commitdiff | tree |
2017-02-17 |
Martin Willi | ike-sa: Optionally try to migrate to the best path...
|
commit | commitdiff | tree |
2017-02-13 |
Martin Willi | kernel-netlink: Use RTA_SRC to specify route source...
|
commit | commitdiff | tree |
2017-02-13 |
Martin Willi | kernel-netlink: Use kernel-based route lookup if we...
|
commit | commitdiff | tree |
2017-02-13 |
Martin Willi | swanctl: List CHILD_SA marks, if set
|
commit | commitdiff | tree |
2017-02-13 |
Martin Willi | vici: Include the Netfilter marks in listed CHILD_SAs
|
commit | commitdiff | tree |
2017-02-13 |
Martin Willi | vici: Explicitly set the Python encoding type
|
commit | commitdiff | tree |
2016-11-15 |
Martin Willi | proposal: Remove RFC 5114 MODP DH groups from default...
|
commit | commitdiff | tree |
2016-09-30 |
Martin Willi | include: Update xfrm.h to Linux v4.3
|
commit | commitdiff | tree |
2016-06-14 |
Martin Willi | configure: Check for and explicitly link against -latomic
|
commit | commitdiff | tree |
2016-05-19 |
Martin Willi | af-alg: Silently skip probing algorithms if AF_ALG...
|
commit | commitdiff | tree |
2016-05-18 |
Martin Willi | configure: Check for a potential -lpthread by using...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | Merge branch 'vici-undo-on-unload'
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Fix documentation about the initiate/terminate...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Honor an optionally passed IKE configuration...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Support completely asynchronous initiating and...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Use an empty local auth round if none given
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Limit start action undoing to IKE_SAs using the...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Close empty IKE_SAs after undoing CHILD_SA start...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Use value based array to store CHILD_SA ids during...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | array: Add an insert/create function for value based...
|
commit | commitdiff | tree |
2015-12-07 |
Martin Willi | vici: Undo start actions when unloading configs
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | byteorder: Provide a fallback for le32toh/htole32()
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | byteorder: Add 32-bit unaligned little-endian conversion...
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | swanctl: Explicitly link against -lpthread and -ldl...
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | pki: Explicitly link against -lpthread and -ldl if...
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | configure: Link against potential -ldl when checking...
|
commit | commitdiff | tree |
2015-12-04 |
Martin Willi | watcher: Check for cancellation if poll() fails with...
|
commit | commitdiff | tree |
2015-06-05 |
Martin Willi | ikev2: Enforce remote authentication config before...
|
commit | commitdiff | tree |
2013-04-18 |
Martin Willi | During libstrongswan initialization, check if memwipe...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Make resync/monitoring functionality optional
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Listen to ike_updown/rekey hook instead of ike_state_change
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Request a complete resync after daemon startup
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Do not automatically take over segments, as we need...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Drop overlapping segments only if we have no active...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Do not install iptables rules, they should stay active...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Take over all segments if heartbeat becomes silent
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Renamed ha-sync plugin to ha
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Try to send HA sync messages synchronously
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Do not sync a delete for a child in a destroying IKE_SA
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Include ICMP traffic in sync tunnel
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Refactored segment enabling/disabling
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Use a connected UDP socket
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Removed obsolete socket subclasses
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Automatically segment cluster using periodically sent...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Do not enable/disable our own sync tunnel
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Enable/disable inactive/active segments only
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Deactivate all active segments before shutting down
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | HA kernel interface can mangle netfilter rules, currently...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Added support for kernel segment manipulation
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Moved segment configuration parsing to ha_sync_plugin
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Propagate segment manipulation to cluster node
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Segment manipulation in HA sync is thread save
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | Passing 0 to segments->(de-)activate enables/disables...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | separated auto-tunnel functionality from socket
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | create external fifo socket only if "fifo_interface...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | updated linuxdir include variable
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | updated HA sync plugin to new lifetime config
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | print "none" if not serving any segments
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | automatically establish a PSK authenticated SA between...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | fixed memleak when installing synced virtual IPs
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | do not sync CHILD_SAs without an IKE_SA
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | removed $Id$ from ha plugin
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | fixed ike_sa condition/extension parsing
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | added a copy of the linux jenkins hash to dist
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | fixed sync of CHILD_SA delete
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | added HA resync option to (re-)integrate nodes to a...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | apply peer config during rekeying
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | manage synced SAs in IKE_SA Manager, tag them with...
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | support for IKE_SA rekeying sync
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | IKE_SA activation/deactivation magic using a fifo socket
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | syncing of complete IKE/CHILD_SAs works
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | pushing basic CHILD_SA sync data to backup node
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | basic syncing of IKE_SAs
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | added a dispatcher class to receive HA sync messages
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | generating basic IKE_SA sync messages
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | set up basic infrastructure ha_sync plugin
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | added child_sa serialization to ha_sync plugin
|
commit | commitdiff | tree |
2010-04-07 |
Martin Willi | HA sync plugin stub
|
commit | commitdiff | tree |
2010-02-26 |
Martin Willi | Use message instead of attributes in hook
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Use side-channel secured mpz_powm_sec of libgmp 5,...
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Updated debian package for NetworkManager-strongswan...
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Version bump and NEWS for NetworkManager-strongswan...
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Updated german translation
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Tooltips are translatable
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Newer glade requires explicit vertical vboxes
|
commit | commitdiff | tree |
2010-02-18 |
Martin Willi | Fixed lost renaimings in android plugin
|
commit | commitdiff | tree |
2010-02-17 |
Martin Willi | Added Android plugin, currently provides DNS handling...
|
commit | commitdiff | tree |
2010-02-17 |
Martin Willi | Invoke missing message() hook for incoming responses
|
commit | commitdiff | tree |
2010-02-09 |
Martin Willi | Do not build own authentication data before we've verified...
|
commit | commitdiff | tree |
2010-02-05 |
Martin Willi | Use destination address of ppp interfaces as nexthop...
|
commit | commitdiff | tree |
2010-02-03 |
Martin Willi | Use child_updown hook in updown plugin, fixes doubled...
|
commit | commitdiff | tree |
2010-01-27 |
Martin Willi | Updated NEWS about per-connection inactivity timeout
|
commit | commitdiff | tree |
2010-01-27 |
Martin Willi | Added a ipsec.conf "inactivity" option to configure...
|
commit | commitdiff | tree |
2010-01-27 |
Martin Willi | Made inactivity_timeout a per CHILD_SA config option
|
commit | commitdiff | tree |
2010-01-21 |
Martin Willi | Refactored EAP payload, avoid unaligned word access
|
commit | commitdiff | tree |
next |