Permalink
Commits on Oct 29, 2018
  1. change NSS init to use sql: method

    mcr authored and shussain committed Oct 25, 2018
  2. adjust functional tests to ignore NSS status, but some certificate te…

    mcr authored and shussain committed Oct 25, 2018
    …sts are not going to run with NSS
  3. initialize NSS libraries

    mcr authored and shussain committed Oct 25, 2018
  4. remove another USE_1DES

    mcr authored and shussain committed Oct 25, 2018
Commits on Oct 5, 2018
Commits on Apr 9, 2018
  1. initial work on step 2 of #7011

    mcr committed Apr 9, 2018
  2. wo#7011 . revise log message about responder failing to add to pendin…

    mcr committed Apr 9, 2018
    …g (responder had no pending)
Commits on Nov 13, 2017
  1. added debug option to usage summary

    mcr authored and bartman committed Nov 10, 2017
Commits on Oct 30, 2017
  1. wo#6364 . the use of the I-bit in the ISAKMP header was wrong.

    mcr committed Oct 30, 2017
    It should be set on all messages (even Responding messages) for the
    end which is the initiator (or successful rekeying) of the Parent SA
Commits on Aug 31, 2017
Commits on Jul 13, 2017
Commits on Jul 12, 2017
Commits on Jul 4, 2017
  1. wo#4822 . seam must actually set the generated SPI

    mcr committed Jun 5, 2017
  2. wo#4822 . the reason for netlink using replace all the time has becom…

    mcr committed Jun 2, 2017
    …e clear.
    
    	Netlink allocates SPI# in the kernel, and the kernel does this by actually
    	allocating a dud SA. So when it is time to actually put the keys, etc.
    	in it, the action is an update rather than a create
Commits on Jun 12, 2017
  1. added new PLUTO_CONN_CLIENTFAMILY and PLUTO_CONN_ENDFAMILY for updown…

    mcr committed Apr 26, 2017
    … scripts
  2. wo#4822 . calculate the nat-type earlier so that it can be logged, al…

    mcr committed Jun 5, 2017
    …ong with port numbers
  3. wo#4822 . the reason for netlink using replace all the time has becom…

    mcr committed Jun 2, 2017
    …e clear.
    
    	Netlink allocates SPI# in the kernel, and the kernel does this by actually
    	allocating a dud SA. So when it is time to actually put the keys, etc.
    	in it, the action is an update rather than a create