aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/ike_sa.c
Commit message (Collapse)AuthorAgeFilesLines
* changed mobike behavior to NOT use additional responder addresses until we ↵Martin Willi2007-07-041-95/+3
| | | | have path discovery
* improved MOBIKE:Martin Willi2007-07-031-9/+73
| | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation
* fixed mobike address update from and to NATMartin Willi2007-07-021-1/+6
|
* proper update of IPsec SA when roaming a host-to-host tunnelMartin Willi2007-07-021-60/+91
| | | | roaming of IPsec SAs using virtual IPs
* fixed dpd=hold when using virtual IPsMartin Willi2007-06-291-6/+19
|
* fixed IKE_SA reestablishment after DPD using port 500Martin Willi2007-06-281-65/+71
|
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-271-3/+10
|
* simple roaming of the client works (not MOBIKE conform yet!)Martin Willi2007-06-261-144/+144
|
* further fixed for mobike roamingMartin Willi2007-06-251-12/+21
|
* further MOBIKE stuff:Martin Willi2007-06-211-46/+180
| | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet!
* added extensions management to IKE_SAMartin Willi2007-06-181-0/+24
| | | | fixed NATD payload (port) when using route lookup
* source address lookup in kernel interfaceMartin Willi2007-06-181-1/+1
| | | | | | use it for NAT detection if no source address known from config support for %any...%any connections
* fixed memleak when initiating to %anyMartin Willi2007-06-141-0/+1
|
* proper reauthentication:Martin Willi2007-06-141-71/+10
| | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool
* introduced callback_job:Martin Willi2007-06-111-13/+13
| | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere
* proper thread cancellation when using the charon->interfacesMartin Willi2007-05-231-0/+1
|
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-44/+68
|
* removed route_job, handled all in interface_managerMartin Willi2007-05-161-1/+0
|
* routing/unrouting through interfaceMartin Willi2007-05-161-3/+3
|
* properly implemented interface_managers initiate, terminte_[ike|child]Martin Willi2007-05-091-3/+0
| | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues
* restructuring of configuration backendsMartin Willi2007-04-271-2/+2
| | | | | | | | | added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP
* properly checking received IDr as initiatorMartin Willi2007-04-251-3/+4
|
* added support for EAP methods not establishing an MSKMartin Willi2007-04-191-33/+28
|
* not using %m printf handler, as late errno interpration over bus may be ↵Martin Willi2007-04-121-7/+12
| | | | problematic
* removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to goMartin Willi2007-04-111-48/+13
|
* cleaned up apidocMartin Willi2007-04-111-10/+7
| | | | | | added some comments removed configuration.[ch], as it does not make sense like it is
* fixed bug with roadwarrior and wildcard IDsAndreas Steffen2007-04-101-11/+19
|
* requesting the same virtual IP on reauthenticationMartin Willi2007-04-101-49/+54
|
* restructured file layoutMartin Willi2007-04-101-215/+161
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* added IKE_SA_INIT retransmission detectionMartin Willi2007-03-291-10/+4
| | | | fixed thread exhaustion when IKE_SA is blocked for a longer time
* removed send_queue, handled internally in sender_t knowMartin Willi2007-03-281-2/+2
| | | | | do header parsing in receiver, ready for cookie integration
* fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progressMartin Willi2007-03-271-2/+8
|
* prevent from initiating to %anyMartin Willi2007-03-211-0/+7
|
* fixed some exchange collisions (except IKE/CHILD rekeying)Martin Willi2007-03-201-27/+51
|
* respecting "keyingtries" parameter on IKE_SA setupMartin Willi2007-03-201-154/+172
|
* cleaned up and fixed DPD handling codeMartin Willi2007-03-141-93/+113
|
* fixed payload order (again)Martin Willi2007-03-081-4/+4
|
* added more debug output Martin Willi2007-03-081-0/+2
|
* implemented get_iface() using RTM_GETADDRMartin Willi2007-03-021-3/+3
| | | | | added support for multi-header netlink messages really ugly now, need a lot of refactoring
* fixed reauthentication when connections other is %anyMartin Willi2007-02-281-0/+2
|
* merged tasking branch into trunkMartin Willi2007-02-281-853/+693
|
* merged EAP framework from branch into trunkMartin Willi2007-02-121-5/+3
| | | | | includes a lot of other modifications
* sending proper signal to the bus when detecting a dead peerMartin Willi2007-02-011-0/+17
|
* show rekeying|reauthentication time4.0.6Andreas Steffen2007-01-101-4/+15
|
* removed unused debugging codeMartin Willi2007-01-081-2/+0
|
* fixed reauthentication when using %any hostsMartin Willi2007-01-081-3/+5
|
* fixed reuathentication when connections other host is %anyMartin Willi2007-01-031-9/+17
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-1/+2
| | | | | support for the type=transport/tunnel parameter in charon
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-41/+93
|
* log IKE SPIs on a separate lineAndreas Steffen2006-11-011-3/+3
|