tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	added CHILD_SA states, which allows us to detect further simultaneous ↵	Martin Willi	2006-07-13	1	-2/+42
\| \| \| \| \| \| \|	transactions reimplemented the buggy message id handling
*	added policy cache to kernel interface	Martin Willi	2006-07-12	1	-125/+34
\| \| \| \| \| \|	allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
*	further work done for simultaneous rekeying/delete	Martin Willi	2006-07-10	1	-23/+50
\| \| \| \| \|	still some cases which cause trouble
*	updated copyright information	Martin Willi	2006-07-07	1	-1/+2
\|
*	reimplemented CHILD_SA rekeying & delete	Martin Willi	2006-07-07	1	-2/+2
\| \| \| \| \|	no simultanous transaction with CHILD_SAs yet!
*	improved CHILD_SA output for "ipsec statusall"	Martin Willi	2006-07-05	1	-61/+106
\|
*	redesigned IKE_SA using a transaction mechanism:	Martin Willi	2006-07-05	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \|	removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
*	applied latest NATT patch with some fixes and cleanups	Martin Willi	2006-07-04	1	-1/+1
\|
*	lowercase log entries	Andreas Steffen	2006-07-03	1	-1/+1
\|
*	applied new changes from NATT team	Martin Willi	2006-06-23	1	-1/+89
\| \| \| \| \|	DPD only done when no IPsec and IKE traffic processed minor changes here and there
*	first merge of NATT code	Martin Willi	2006-06-22	1	-54/+235
\|
*	fixed SPI when rekeying and deleting CHILD_SAs	Martin Willi	2006-06-19	1	-6/+6
\|
*	change key derivation order to fullfill RFC	Martin Willi	2006-06-19	1	-11/+26
\|
*	implemented clean spi allocation behavior when using multiple proposals	Martin Willi	2006-06-15	1	-35/+104
\|
*	using same reqid if a child sa rekeys an existing one	Martin Willi	2006-06-12	1	-2/+4
\|
*	workaround for peers rekeying at the same time	Martin Willi	2006-06-12	1	-2/+10
\| \| \| \| \|	loading lifetime policies from ipsec.conf
*	old child_sa gets deleted after rekeying	Martin Willi	2006-06-09	1	-28/+48
\| \| \| \| \| \|	rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time,
*	improved kernel interface logging	Martin Willi	2006-06-09	1	-7/+4
\|
*	specifying keysize in bits, as it is required in IKEv2	Martin Willi	2006-06-09	1	-58/+23
\| \| \| \| \| \|	added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
*	fixed compile warnings when using -Wall	Martin Willi	2006-06-08	1	-9/+8
\| \| \| \| \| \| \| \|	further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing
*	further work for rekeying:	Martin Willi	2006-06-07	1	-250/+193
\| \| \| \| \| \| \| \| \|	get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
*	job management:	Martin Willi	2006-05-31	1	-4/+12
\| \| \| \| \| \| \| \| \| \| \| \| \|	moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
*	- show connection templates in status & statusall	Martin Willi	2006-05-23	1	-2/+2
\| \| \| \| \|	- don't complain on termination of IKEv1 connections
*	- applied patch from the NAT-T team fixing several typos	Martin Willi	2006-05-19	1	-1/+1
\|
*	(no commit message)	Martin Willi	2006-05-10	1	-0/+590