strongswan-ext

Files

T

Martin Willi 246e2bed1d Use subset matching instead of is_contained_in() to select a child_cfg

If one selector has a wider IP range than the other, but the other has a
wider port/protocol selector than the first one, none is completely contained
in the other. The check for a match using is_contained_in() therefore would
fail. Using get_subset() can handle such cases, fixing configuration selection.

2013-06-13 13:37:50 +02:00

bus

Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE

2013-05-15 17:18:03 +02:00

config

Use subset matching instead of is_contained_in() to select a child_cfg

2013-06-13 13:37:50 +02:00

control

controller: clean up job data if a thread gets cancelled waiting in a function

2013-05-06 15:28:26 +02:00

encoding

proposals: try next if IKEv2 algorithm could not be mapped to IKEv1