aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-176-10/+26
| * child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-174-23/+38
| * ike-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-175-32/+48
| * proposal: Remove MODP_NONE from IKE proposals parsed from stringsTobias Brunner2016-06-171-0/+10
| * proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-174-6/+97
| * proposal: Parse modpnone as MODP_NONE(0)Tobias Brunner2016-06-171-0/+1
| * ike-rekey: Make sure to ignore task when detecting collisions if ike-init sub...Tobias Brunner2016-06-171-1/+2
| * unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is d...Tobias Brunner2016-06-171-0/+221
| * unit-tests: Add tests for IKE_SA rekeying if collision is not detected by one...Tobias Brunner2016-06-171-0/+340
| * ike-rekey: Handle undetected collisions also if delete is delayedTobias Brunner2016-06-171-16/+26
| * ike-rekey: There is no passive reauth task, so it will never collide with oneTobias Brunner2016-06-172-7/+4
| * ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SATobias Brunner2016-06-171-56/+64
| * ike-rekey: Properly handle situation if the peer did not notice the rekey col...Tobias Brunner2016-06-171-0/+11
| * ike-delete: Handle deletes while rekeying differently if there was a collisionTobias Brunner2016-06-171-2/+40
| * ike-rekey: Add method to check if there was a rekey collisionTobias Brunner2016-06-172-1/+17
| * ikev2: Check for collisions after handling IKE deletionTobias Brunner2016-06-171-1/+5
| * unit-tests: Add tests for IKE/CHILD delete collisionsTobias Brunner2016-06-171-0/+165
| * child-delete: Reply as usual when concurrently rekeying the IKE_SATobias Brunner2016-06-171-5/+1
| * unit-tests: Add tests for IKE/CHILD rekey collisionsTobias Brunner2016-06-171-0/+170
| * child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SATobias Brunner2016-06-171-2/+2
| * ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...Tobias Brunner2016-06-171-1/+8
| * unit-tests: Add tests for collisions between IKE_SA rekeying and deletionTobias Brunner2016-06-171-0/+174
| * ike-rekey: Handle TEMPORARY_FAILURE notifyTobias Brunner2016-06-171-8/+22
| * ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SATobias Brunner2016-06-171-0/+5
| * unit-tests: Add tests for IKE SA deletionTobias Brunner2016-06-173-0/+139
| * ike-delete: No need to wait for a response in case of concurrent deletesTobias Brunner2016-06-171-14/+0
| * unit-tests: Only deliver messages to the SA they are addressed toTobias Brunner2016-06-171-4/+12
| * unit-tests: Add test for simple IKE rekey collisionTobias Brunner2016-06-171-5/+171
| * ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-177-44/+53
| * ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messagesTobias Brunner2016-06-171-8/+13
| * unit-tests: Add tests for IKE_SA rekeyingTobias Brunner2016-06-173-0/+111
| * unit-tests: Add asserts against IKE_SAsTobias Brunner2016-06-171-0/+45
| * unit-tests: Make sure to flush the IKE_SA manager before destroying the senderTobias Brunner2016-06-171-1/+3
| * unit-tests: Return status from process_message()Tobias Brunner2016-06-172-4/+8
| * unit-tests: Use wrapper for add_listener in bus_t related assertsTobias Brunner2016-06-171-2/+2
| * unit-tests: Provide a wrapper around bus_t::add_listener and unregister them ...Tobias Brunner2016-06-172-0/+32
| * ike-sa-manager: Make sure rng is defined before destroying it in flush()Tobias Brunner2016-06-171-1/+1
| * ike-rekey: Establish new IKE_SA earlier as responder, but only if no collisionTobias Brunner2016-06-171-3/+8
| * unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collisionTobias Brunner2016-06-171-1/+354
| * child-delete: Check if the deleted CHILD_SA is the redundant SA of a collisionTobias Brunner2016-06-171-4/+39
| * child-rekey: Add method to check for the redundant SA created in a collisionTobias Brunner2016-06-172-18/+37
| * unit-tests: Test for rekeying if INVALID_KE_PAYLOAD notifies are receivedTobias Brunner2016-06-171-0/+253
| * child-rekey: Don't change state to INSTALLED if it was already REKEYINGTobias Brunner2016-06-171-3/+5
| * unit-tests: Make IKE and ESP proposals configurableTobias Brunner2016-06-174-44/+116
| * unit-tests: Add tests for CHILD_SA rekeying/deletion collisionsTobias Brunner2016-06-171-1/+288
| * unit-tests: Add asserts against job schedulingTobias Brunner2016-06-172-0/+60
| * ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeyingTobias Brunner2016-06-173-15/+17
| * unit-tests: Add asserts against task queues of IKE_SAsTobias Brunner2016-06-171-0/+32
| * child-rekey: Use more appropriate error notifies if CHILD_SA is not found or ...Tobias Brunner2016-06-171-3/+8
| * child-rekey: Recreate the CHILD_SA if we receive a CHILD_SA_NOT_FOUND notifyTobias Brunner2016-06-171-0/+28