aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/tasks/ike_rekey.c
Commit message (Collapse)AuthorAgeFilesLines
* fallback to reauthentication if peer does not support CHILD_SA rekeyingMartin Willi2008-11-141-2/+1
|
* fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SASMartin Willi2008-11-141-1/+27
|
* moved key derivation and management into keymat objectMartin Willi2008-10-281-1/+1
| | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now
* reset threads IKE_SA after checking other IKE_SAsMartin Willi2008-10-201-0/+6
| | | | invoke updown script only if we have valid IKE_SA
* reintegrated bus-refactoring branchMartin Willi2008-10-141-14/+14
|
* completed IKE_SA logging at the AUDIT levelAndreas Steffen2008-07-231-1/+16
|
* IKE_SA rekeying inherits other_host from old IKE_SAAndreas Steffen2008-07-231-0/+3
|
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-7/+2
|
* proper reauthentication:Martin Willi2007-06-141-2/+3
| | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool
* introduced callback_job:Martin Willi2007-06-111-2/+2
| | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere
* added PDF support for CHILD_SAsMartin Willi2007-04-191-22/+33
| | | | support for INVALID_KE_PAYLOAD negotiation for rekeying
* cleaned up apidocMartin Willi2007-04-111-2/+1
| | | | | | added some comments removed configuration.[ch], as it does not make sense like it is
* restructured file layoutMartin Willi2007-04-101-17/+8
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* added IKE_SA_INIT retransmission detectionMartin Willi2007-03-291-8/+4
| | | | fixed thread exhaustion when IKE_SA is blocked for a longer time
* fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progressMartin Willi2007-03-271-2/+2
|
* fixed some rekey collision issuesMartin Willi2007-03-211-1/+9
| | | | added retry with jitter when rekeying fails
* fixed child rekey collisionMartin Willi2007-03-211-19/+77
| | | | | implemented ike rekey collision
* fixed some exchange collisions (except IKE/CHILD rekeying)Martin Willi2007-03-201-1/+36
|
* merged tasking branch into trunkMartin Willi2007-02-281-0/+232