2013-03-18 |
Martin Willi | Merge branch 'stroke-counters'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'stroke-timeout'
|
commit | commitdiff | tree |
2013-03-18 |
Martin Willi | Merge branch 'netlink-align'
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_add_attribute() to copy over attributes...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use a helper function to add XFRM_MARK attribute
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Use netlink_reserve() helper function in XFRM to simplify...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a Netlink utility function to add a RTA header...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Correctly check buffer length in netlink_add_attribute()
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Avoid unneeded termination of netlink algorithm name...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a "resetcounters" command to ipsec, clearing global...
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add connection name specific stroke counters
|
commit | commitdiff | tree |
2013-03-15 |
Martin Willi | Add a chunk_from_str() initializer that does not include...
|
commit | commitdiff | tree |
2013-03-12 |
Martin Willi | Add missing XAuthRespPSK switch case to IKEv1 key derivation
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | strdup() iface passed to queue_route_reinstall(), fixing...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Support mutliple subnets and ranges as external load...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Add a constructor to create in-memory pools from an...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | When adding Netlink attributes, increase header length...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Clean up IKE_SA state if IKE_SA_INIT request does not...
|
commit | commitdiff | tree |
2013-03-11 |
Martin Willi | Ignore fourth Qick Mode message sent by Windows servers.
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Merge branch 'pt-tls'
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | If controller operations have a callback, don't succeed...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | Add a stroke command timeout option, and report status...
|
commit | commitdiff | tree |
2013-03-07 |
Martin Willi | As Quick Mode initiator, select a subset of the proposed...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | If TLS peer authentication not required, the client...
|
commit | commitdiff | tree |
2013-03-06 |
Martin Willi | Fix some apidoc in mem_pool.h
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't invoke addr2line if dladdr() did not yield a...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | When receiving critical signals, additionally log backtraces...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | backtrace_t.log() takes a NULL file pointer to log...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Don't use color escapes when printing backtraces to...
|
commit | commitdiff | tree |
2013-03-04 |
Martin Willi | Add a utility function to resolve TTY color escape...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-eap'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'multi-cert'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'systime'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-rekeying'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'vip-shunts'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'opaque-ports'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | When running with an unprivileged user, initialize...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Without MOBIKE, update remote host only if it is behind NAT
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'ikev1-mm-retransmits'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Merge branch 'tfc-notify'
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Indicate support for processing ESPv3 TFC padding in...
|
commit | commitdiff | tree |
2013-03-01 |
Martin Willi | Introduce "features" for the kernel backends returning...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Support different authentication schemes for PT-TLS
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Request a TLS client certificate even if no peer identity...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Wrap tls_t.get_{server,peer}_id methods in tls_socket_t
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Delegate tls_t.get_{peer,server}_id to handshake layer
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement a SASL PLAIN mechanism using shared secrets
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS client
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Implement SASL authentication in PT-TLS server
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define PT-TLS SASL result codes
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Define an interface for SASL mechanisms and provide...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Pass a client identity to pt_tls_client, usable for...
|
commit | commitdiff | tree |
2013-02-28 |
Martin Willi | Don't close underlying file descriptor before destroying...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Apply a mutual EAP auth_cfg not before the EAP method...
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Be a little more verbose why a peer_cfg is inacceptable
|
commit | commitdiff | tree |
2013-02-26 |
Martin Willi | Refactor auth_cfg applying to a common function
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | For IKEv1 Main Mode, use message hash to detect early...
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | Move initial message dropping to task manager
|
commit | commitdiff | tree |
2013-02-25 |
Martin Willi | Use INIT macro to initialize IKE_SA manager entries
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Don't reject OPAQUE ports while verifying traffic selector...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Document ipsec.conf leftprotoport extensions in manpage
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Optionally support port ranges in leftprotoport
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Support %opaque keyword in leftprotoport for "opaque...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Pass complete port range over stroke interface for...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Use a complete port range in traffic_selector_create_from_...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Print OPAQUE traffic selectors as what they are, not...
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Support "opaque" ports in traffic selector subset calculation
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Slightly refactor traffic_selector_t.get_subset()
|
commit | commitdiff | tree |
2013-02-21 |
Martin Willi | Migrate remaining traffic selector methods to METHOD...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | Install a route for shunt policies
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | Include local address for Unity Split-Exclude shunt...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | After IKEv1 reauthentication, reinstall VIP routes...
|
commit | commitdiff | tree |
2013-02-20 |
Martin Willi | When detecting a duplicate IKEv1 SA, adopt children...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | systime-fix disables certificate lifetime validation...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Add a stub for systime-fix, a plugin handling certificate...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Add a cert_validator hook allowing plugins to provide...
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Make cert_validator_t.validate optional to implement
|
commit | commitdiff | tree |
2013-02-19 |
Martin Willi | Fix encoding of issuerAndSubject while handling SCEP...
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add a timeout to clean up PDP RADIUS connections
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Keep the PDP connections lock while accessing its objects
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add locking to TNC-PDP connections
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add IF-M message subtype getter to IMC/IMV messages
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Use a generic constructor to create PA-TNC error attributes
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add a global return_success() method implementation
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add a convenience method to check pen_type_t for vendor...
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Add a comparison function for pen_type_t
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Whitespace and comment cleanups in pen.[ch]
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Merge branch 'ike-dscp'
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Check if recommendations is set before applying language...
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | PT-TLS dispatcher TNCCS constructor takes peer identities...
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Merge branch 'pt-tls'
|
commit | commitdiff | tree |
2013-02-14 |
Martin Willi | Remove leading zeros in SCEP certificate serialNumbers
|
commit | commitdiff | tree |
2013-02-08 |
Martin Willi | Add a --httptimeout option to scepclient
|
commit | commitdiff | tree |
2013-02-08 |
Martin Willi | Use CURL_TIMEOUT and not CURL_CONNECTTIMEOUT for FETCHER_TIM...
|
commit | commitdiff | tree |
2013-02-06 |
Martin Willi | Add ikedscp documentation to ipsec.conf.5
|
commit | commitdiff | tree |
2013-02-06 |
Martin Willi | Add a ikedscp ipsec.conf option to set DSCP value on...
|
commit | commitdiff | tree |
2013-02-06 |
Martin Willi | Set configured DSCP value while generating IKE packets
|
commit | commitdiff | tree |
2013-02-06 |
Martin Willi | Add a DSCP configuration value to IKE configs
|
commit | commitdiff | tree |
2013-02-06 |
Martin Willi | Set DSCP values when sending IP packets in socket-default
|
commit | commitdiff | tree |
next |