strongswan/src
Martin Willi d1317adb9a addrblock: Support an optional non-strict mode accepting certs without addrblock
This allows a gateway to enforce the addrblock policy on certificates that
actually have the extension only. For (legacy) certificates not having the
extension, traffic selectors are validated/narrowed by other means, most
likely by the configuration.
2017-03-02 08:24:02 +01:00
..
_copyright lib: Add global config namespace 2014-02-12 14:34:31 +01:00
_updown updown: Add rules to allow IP6IP6 traffic used for uncompressed small packets 2015-09-21 10:12:17 +02:00
aikgen aikgen: Fix computation of key ID of the AIK public key 2016-06-30 12:56:41 +02:00
aikpub2 Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00
charon daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-cmd daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-nm daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-svc daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-systemd daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-tkm tkm: Fix get_auth_octets() signature 2017-02-13 18:36:01 +01:00
checksum Use of TPM 2.0 private keys for signatures via tpm plugin 2017-02-22 12:18:26 +01:00
conftest keymat: Allow keymat to modify signature scheme(s) 2017-02-08 10:32:17 +01:00
dumm Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
frontends android: New release after fixing potential ANR issue 2017-02-20 16:34:43 +01:00
include include: Update xfrm.h to Linux v4.3 2016-09-30 14:51:58 +02:00
ipsec ipsec: Only allow specific commands to be executed via ipsec script 2017-01-18 16:15:48 +01:00
libcharon addrblock: Support an optional non-strict mode accepting certs without addrblock 2017-03-02 08:24:02 +01:00
libfast configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
libimcv libimcv: Add Debian 8.6 to database 2016-10-05 16:01:20 +02:00
libipsec libipsec: Add support for AES and Camellia in CCM mode 2017-01-25 17:26:45 +01:00
libpttls libtpmtss: Added to integrity checks 2016-06-26 18:19:05 +02:00
libradius Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libsimaka Fixed some typos, courtesy of codespell 2016-07-04 12:18:51 +02:00
libstrongswan traffic-selector: Allow calling set_address() for any traffic selector 2017-02-27 18:21:02 +01:00
libtls gmp: Support of SHA-3 RSA signatures 2016-09-22 17:34:31 +02:00
libtnccs Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libtncif Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libtpmtss Use of TPM 2.0 private keys for signatures via tpm plugin 2017-02-22 12:18:26 +01:00
manager Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
medsrv medsrv: Replace remaining JavaScript code with CSS 2015-11-09 16:36:48 +01:00
pki pki: Add a note about constructing RFC 3779 compliant certificates to manpage 2017-02-27 09:36:48 +01:00
pool pool: Fix (known) memory leak when querying leases 2016-09-20 15:36:14 +02:00
pt-tls-client pt-tls-client: Added support of ECDSA keys 2016-08-31 17:06:47 +02:00
scepclient libhydra: Remove empty unused library 2016-03-03 17:36:11 +01:00
starter testing: make curve25519 the default DH group 2016-11-14 16:20:51 +01:00
stroke Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
swanctl vici: Add support for mediation extension 2017-02-16 19:24:09 +01:00
Makefile.am Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00