Tobias Brunner 517cc501ef stroke: Change how CA certificates are stored ...

Since 11c14bd2f5 CA certificates referenced in ca sections were
enumerated by two credential sets if they were also stored in
ipsec.d/cacerts.  This caused duplicate certificate requests to
get sent.  All CA certificates, whether loaded automatically or
via a ca section, are now stored in stroke_ca_t.

Certificates referenced in ca sections are now also reloaded
when `ipsec rereadcacerts` is used.

2015-08-20 19:33:41 +02:00

..

Makefile.am

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

stroke_attribute.c

mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth

2015-02-20 13:34:57 +01:00

stroke_attribute.h

Support multiple addresses/pools in left/rightsourceip

2012-08-30 16:43:42 +02:00

stroke_ca.c

stroke: Change how CA certificates are stored

2015-08-20 19:33:41 +02:00

stroke_ca.h

stroke: Change how CA certificates are stored

2015-08-20 19:33:41 +02:00

stroke_config.c

stroke: Properly parse bliss key strength in public key constraint

2015-03-25 13:27:15 +01:00

stroke_config.h

Support multiple addresses/pools in left/rightsourceip

2012-08-30 16:43:42 +02:00

stroke_control.c

kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid

2015-02-20 13:34:50 +01:00

stroke_control.h

Added a stroke rekey command to trigger IKE/CHILD_SA rekeying manually

2010-11-03 15:12:05 +01:00

stroke_counter.c

List all stroke counters when "all" is given, and report if connection not known

2013-04-03 14:58:08 +02:00

stroke_counter.h

Add a "resetcounters" command to ipsec, clearing global or connection counters

2013-03-15 10:55:22 +01:00

stroke_cred.c

stroke: Change how CA certificates are stored

2015-08-20 19:33:41 +02:00

stroke_cred.h

stroke: Change how CA certificates are stored

2015-08-20 19:33:41 +02:00

stroke_handler.c

attribute-handler: Pass full IKE_SA to handler backends

2015-02-20 13:34:56 +01:00

stroke_handler.h

Add a stroke attribute_handler requesting DNS servers given with leftdns

2012-08-21 09:38:01 +02:00

stroke_list.c

child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAs

2015-03-25 12:00:20 +01:00

stroke_list.h

Added a statusallnb stroke command to show status non-blocking

2011-05-16 15:24:14 +02:00

stroke_plugin.c

Implemented full BLISS support for IKEv2 public key authentication and the pki tool

2014-11-29 14:51:18 +01:00

stroke_plugin.h

Moving charon to libcharon.

2010-03-19 13:34:52 +01:00

stroke_socket.c

stroke: Change how CA certificates are stored

2015-08-20 19:33:41 +02:00

stroke_socket.h

Moving charon to libcharon.

2010-03-19 13:34:52 +01:00