aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/ike_sa.h
Commit message (Collapse)AuthorAgeFilesLines
* Indicate and dected support for EAP-only authenticationMartin Willi2010-01-071-0/+5
|
* Add an option to send a vendor ID, allows us to properly support private ↵Martin Willi2010-01-071-0/+5
| | | | extensions
* Store completed authentication rounds permanently on IKE_SA, with flush optionMartin Willi2009-12-011-0/+16
|
* Removed obsolete and unused [gs]et_eap_identity() methodsMartin Willi2009-11-301-16/+0
|
* Give plugins more control of which configuration attributes to request, and ↵Martin Willi2009-11-171-0/+1
| | | | pass received attributes back to the requesting handler
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-80/+80
|
* Fixed some typos; whitespace cleanup.Tobias Brunner2009-09-021-76/+78
|
* defer MOBIKE update if we have no route to the peerMartin Willi2009-07-021-0/+5
|
* include TSi/TSr of triggering packet in acquireMartin Willi2009-05-201-2/+7
|
* initiate trapped CHILD_SAs with same reqidMartin Willi2009-05-081-1/+3
|
* removed obsolete route/unroute code from ike_sa/controllerMartin Willi2009-05-081-37/+0
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* attribute_manager supports attribute_handler's to handle configuration ↵Martin Willi2009-04-241-6/+11
| | | | | | | | attributes via plugins moved resolv.conf editing to a separate plugin (resolv_conf) extended attribute_provider interface to hand out arbitrary attributes moved strongswan.conf based dns/nbns configuration to a plugin (attr)
* schedule_job uses seconds to support time values larger than 49 daysMartin Willi2009-04-211-2/+2
| | | | added schedule_job_ms for ms resolution events
* merged multi-auth branch back into trunkMartin Willi2009-04-141-13/+12
|
* updated DoxyfileMartin Willi2009-03-241-1/+1
| | | | | | properly close all doxygen groups fixed remaining doxygen warnings
* improved IKE_SA uniqueness checkTobias Brunner2008-12-161-2/+2
|
* added a PASSIVE IKE_SA state to manage it externallyMartin Willi2008-11-281-0/+5
|
* set message IDs on IKE_SAsMartin Willi2008-11-241-0/+11
|
* moved ike_initiator flag to IKE_SAs condition bitfieldMartin Willi2008-11-121-9/+7
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-0/+11
|
* added hooks for IKE and CHILD keymatMartin Willi2008-10-301-0/+14
|
* moved key derivation and management into keymat objectMartin Willi2008-10-281-56/+5
| | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now
* store IKE proposal implicitly during derive_keysMartin Willi2008-10-281-11/+3
|
* use more generic stats getter, introducing new statsMartin Willi2008-10-271-11/+15
|
* reintegrated bus-refactoring branchMartin Willi2008-10-141-0/+5
|
* use MOBIKE enabled DPD if we are NATedMartin Willi2008-10-061-0/+8
| | | | update SAs if we detect changes in NAT mappings
* ported parts of two-sim branchMartin Willi2008-08-221-0/+16
| | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones
* display selected IKE proposal in ipsec statusallAndreas Steffen2008-06-221-0/+15
|
* support for hash and URL encoded certificate payloads in charonTobias Brunner2008-04-181-0/+5
|
* added API for random number generators, served through credential factoryMartin Willi2008-04-151-1/+0
| | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
* using dpd actions to enforce connection stateMartin Willi2008-04-111-2/+11
| | | | dpd actions a per child-, not peer ike-sa
* enabling acquire for mediated connectionsTobias Brunner2008-04-101-2/+1
|
* fixing a problem if the mediation server initiates the rekeyingTobias Brunner2008-04-101-0/+7
|
* mediation connections should now properly rekeyTobias Brunner2008-04-091-0/+5
|
* stopping connectivity checks on the responders side after receiving an ↵Tobias Brunner2008-04-011-2/+10
| | | | IKE_SA_INIT request with the proper ME_CONNECTID
* mediation extension adapted to the naming convention of the current version ↵Tobias Brunner2008-03-261-11/+11
| | | | of the draft. note: the external interface (config, autotools) has not yet been changed
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-191/+112
|
* implemented RFC4478 (repeated authentication)Martin Willi2007-11-201-9/+36
| | | | | changed %V printf handler to take a time delta, %#V now takes two arguments
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-031-1/+92
|
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-011-2/+7
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
* improved MOBIKE:Martin Willi2007-07-031-3/+20
| | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation
* simple roaming of the client works (not MOBIKE conform yet!)Martin Willi2007-06-261-0/+11
|
* further MOBIKE stuff:Martin Willi2007-06-211-29/+86
| | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet!
* added extensions management to IKE_SAMartin Willi2007-06-181-1/+37
| | | | fixed NATD payload (port) when using route lookup
* proper reauthentication:Martin Willi2007-06-141-2/+3
| | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool
* added set_other_ca() and get_other_ca()Andreas Steffen2007-05-171-2/+19
|
* routing/unrouting through interfaceMartin Willi2007-05-161-2/+3
|
* added support for EAP methods not establishing an MSKMartin Willi2007-04-191-5/+5
|
* removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to goMartin Willi2007-04-111-0/+7
|