tteras/strongswan/src/libcharon/network, branch master

receiver: Restrict init limit to half-open SAs as responder

2017-05-23T15:53:20+00:00

Signed-off-by: Thomas Egerer

Use standard unsigned integer types

2016-03-24T17:52:48+00:00

libhydra: Move kernel interface to libcharon

2016-03-03T16:36:11+00:00

This moves hydra->kernel_interface to charon->kernel.

ike: Only consider number of half-open SAs as responder when deciding whether COOKIEs are sent

2015-08-27T09:18:51+00:00

ikev2: Drop IKE_SA_INIT messages that don't have the initiator flag set

2015-08-20T14:05:02+00:00

While this doesn't really create any problems it is not 100% correct to
accept such messages because, of course, the sender of an IKE_SA_INIT
request is always the original initiator of an IKE_SA.

We currently don't check the flag later, so we wouldn't notice if the
peer doesn't set it in later messages (ike_sa_id_t.equals doesn't
compare it anymore since we added support for IKEv1, in particular since
17ec1c74de).

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14T10:02:51+00:00

receiver: Send a single INVALID_MAJOR_VERSION notify for IKE version > 2

2014-07-17T07:35:49+00:00

We sent both a notify using IKEv1 and IKEv2. This is a little more aggressive
than required, RFC 5996 says we "SHOULD send an unauthenticated Notify
message of type INVALID_MAJOR_VERSION containing the highest (closest) version
number it supports".

Fixes #657.

payload: Use common prefixes for all payload type identifiers

2014-06-04T13:53:03+00:00

The old identifiers did not use a proper namespace and often clashed with
other defines.

libcharon: Use lib->ns instead of charon->name

2014-02-12T13:34:32+00:00

Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required for IKEv2 anyway

2013-10-11T13:13:25+00:00