tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	fixed rekeying behavior when proposing an inacceptable DH group ↵4.0.3	Martin Willi	2006-08-23	2	-35/+26
\| \| \| \|	(INVALID_KE_PAYLOAD)
*	implement proper handling of most simultaneous IKE_SA rekeying cases	Martin Willi	2006-08-23	5	-21/+177
\|
*	implemented IKE_SA rekeying	Martin Willi	2006-07-27	6	-50/+956
\| \| \| \| \| \|	uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
*	reuse an existing IKE_SA to set up additional CHILD_SAs	Martin Willi	2006-07-20	2	-1/+9
\|
*	introduced refcounting on policy and connections	Martin Willi	2006-07-20	9	-202/+276
\| \| \| \| \| \| \| \| \|	aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
*	cleanups in kernel interface code	Martin Willi	2006-07-18	2	-6/+6
\| \| \| \| \| \|	added proper traffic selector to string conversion some cleanups here & there
*	fixed bug which erroneously detected KE payload when rekeying	Martin Willi	2006-07-14	1	-0/+1
\|
*	improved logging on verify errors for some payloads	Martin Willi	2006-07-13	1	-7/+16
\| \| \| \| \| \|	enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload
*	fixed CREATE_CHILD_SA transaction dispatching	Martin Willi	2006-07-13	1	-37/+28
\|
*	added CHILD_SA states, which allows us to detect further simultaneous ↵	Martin Willi	2006-07-13	13	-89/+111
\| \| \| \| \| \| \|	transactions reimplemented the buggy message id handling
*	updated some inline docs	Martin Willi	2006-07-12	2	-1/+3
\|
*	fixed payload order	Martin Willi	2006-07-12	1	-5/+4
\|
*	added policy cache to kernel interface	Martin Willi	2006-07-12	2	-19/+11
\| \| \| \| \| \|	allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
*	identification_t.matches() supports multiple wildcard counts	Andreas Steffen	2006-07-11	1	-8/+10
\|
*	further work done for simultaneous rekeying/delete	Martin Willi	2006-07-10	4	-20/+160
\| \| \| \| \|	still some cases which cause trouble
*	updated copyright information	Martin Willi	2006-07-07	2	-2/+4
\|
*	reimplemented CHILD_SA rekeying & delete	Martin Willi	2006-07-07	8	-40/+1372
\| \| \| \| \|	no simultanous transaction with CHILD_SAs yet!
*	redesigned IKE_SA using a transaction mechanism:	Martin Willi	2006-07-05	10	-0/+3185
	removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet