aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
| * child-rekey: Only rekey installed CHILD_SAsTobias Brunner2016-06-171-7/+14
| * Report test coverage of libcharon and starterTobias Brunner2016-06-172-0/+6
| * unit-tests: Add test for CHILD_SA rekey if a retry due to an INVALID_KE_PAYLO...Tobias Brunner2016-06-171-0/+143
| * child-rekey: Ignore failed colliding CHILD_SA rekeyingsTobias Brunner2016-06-171-1/+10
| * unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creationTobias Brunner2016-06-173-0/+108
| * child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is receivedTobias Brunner2016-06-171-4/+33
| * ikev2: Add possibility to delay initiation of a queued taskTobias Brunner2016-06-175-66/+189
| * ike: Reduce RETRY_INTERVAL a bitTobias Brunner2016-06-171-2/+2
| * ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SATobias Brunner2016-06-171-14/+35
| * unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are rec...Tobias Brunner2016-06-171-0/+470
| * ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-176-10/+26
| * child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-174-23/+38
| * ike-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-175-32/+48
| * proposal: Remove MODP_NONE from IKE proposals parsed from stringsTobias Brunner2016-06-171-0/+10
| * proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-174-6/+97
| * proposal: Parse modpnone as MODP_NONE(0)Tobias Brunner2016-06-171-0/+1
| * ike-rekey: Make sure to ignore task when detecting collisions if ike-init sub...Tobias Brunner2016-06-171-1/+2
| * unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is d...Tobias Brunner2016-06-171-0/+221
| * unit-tests: Add tests for IKE_SA rekeying if collision is not detected by one...Tobias Brunner2016-06-171-0/+340
| * ike-rekey: Handle undetected collisions also if delete is delayedTobias Brunner2016-06-171-16/+26
| * ike-rekey: There is no passive reauth task, so it will never collide with oneTobias Brunner2016-06-172-7/+4
| * ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SATobias Brunner2016-06-171-56/+64
| * ike-rekey: Properly handle situation if the peer did not notice the rekey col...Tobias Brunner2016-06-171-0/+11
| * ike-delete: Handle deletes while rekeying differently if there was a collisionTobias Brunner2016-06-171-2/+40
| * ike-rekey: Add method to check if there was a rekey collisionTobias Brunner2016-06-172-1/+17
| * ikev2: Check for collisions after handling IKE deletionTobias Brunner2016-06-171-1/+5
| * unit-tests: Add tests for IKE/CHILD delete collisionsTobias Brunner2016-06-171-0/+165
| * child-delete: Reply as usual when concurrently rekeying the IKE_SATobias Brunner2016-06-171-5/+1
| * unit-tests: Add tests for IKE/CHILD rekey collisionsTobias Brunner2016-06-171-0/+170
| * child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SATobias Brunner2016-06-171-2/+2
| * ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...Tobias Brunner2016-06-171-1/+8
| * unit-tests: Add tests for collisions between IKE_SA rekeying and deletionTobias Brunner2016-06-171-0/+174
| * ike-rekey: Handle TEMPORARY_FAILURE notifyTobias Brunner2016-06-171-8/+22
| * ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SATobias Brunner2016-06-171-0/+5
| * unit-tests: Add tests for IKE SA deletionTobias Brunner2016-06-173-0/+139
| * ike-delete: No need to wait for a response in case of concurrent deletesTobias Brunner2016-06-171-14/+0
| * unit-tests: Only deliver messages to the SA they are addressed toTobias Brunner2016-06-171-4/+12
| * unit-tests: Add test for simple IKE rekey collisionTobias Brunner2016-06-171-5/+171
| * ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-177-44/+53
| * ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messagesTobias Brunner2016-06-171-8/+13
| * unit-tests: Add tests for IKE_SA rekeyingTobias Brunner2016-06-173-0/+111
| * unit-tests: Add asserts against IKE_SAsTobias Brunner2016-06-171-0/+45
| * unit-tests: Make sure to flush the IKE_SA manager before destroying the senderTobias Brunner2016-06-171-1/+3
| * unit-tests: Return status from process_message()Tobias Brunner2016-06-172-4/+8
| * unit-tests: Use wrapper for add_listener in bus_t related assertsTobias Brunner2016-06-171-2/+2
| * unit-tests: Provide a wrapper around bus_t::add_listener and unregister them ...Tobias Brunner2016-06-172-0/+32
| * ike-sa-manager: Make sure rng is defined before destroying it in flush()Tobias Brunner2016-06-171-1/+1
| * ike-rekey: Establish new IKE_SA earlier as responder, but only if no collisionTobias Brunner2016-06-171-3/+8
| * unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collisionTobias Brunner2016-06-171-1/+354
| * child-delete: Check if the deleted CHILD_SA is the redundant SA of a collisionTobias Brunner2016-06-171-4/+39