aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa
Commit message (Collapse)AuthorAgeFilesLines
* fixed rekeying behavior when proposing an inacceptable DH group ↵4.0.3Martin Willi2006-08-232-35/+26
| | | | (INVALID_KE_PAYLOAD)
* implement proper handling of most simultaneous IKE_SA rekeying casesMartin Willi2006-08-237-56/+285
|
* implemented IKE_SA rekeyingMartin Willi2006-07-2710-205/+1282
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-216-100/+427
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-206-142/+253
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-2016-455/+682
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-185-175/+144
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* fixed bug which erroneously detected KE payload when rekeyingMartin Willi2006-07-141-0/+1
|
* improved logging on verify errors for some payloadsMartin Willi2006-07-132-7/+23
| | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload
* fixed CREATE_CHILD_SA transaction dispatchingMartin Willi2006-07-131-37/+28
|
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-1317-131/+238
| | | | | | | transactions reimplemented the buggy message id handling
* updated some inline docsMartin Willi2006-07-123-2/+36
|
* fixed crypter/signer in/out to conform with standardMartin Willi2006-07-121-9/+9
|
* fixed payload orderMartin Willi2006-07-121-5/+4
|
* added policy cache to kernel interfaceMartin Willi2006-07-124-156/+50
| | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
* leak detective blanks memory on free & alloc, allows further membug detectionMartin Willi2006-07-121-1/+1
|
* identification_t.matches() supports multiple wildcard countsAndreas Steffen2006-07-111-8/+10
|
* further work done for simultaneous rekeying/deleteMartin Willi2006-07-106-49/+236
| | | | | still some cases which cause trouble
* updated copyright informationMartin Willi2006-07-0711-11/+22
|
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-0713-248/+1516
| | | | | no simultanous transaction with CHILD_SAs yet!
* improved CHILD_SA output for "ipsec statusall"Martin Willi2006-07-051-61/+106
|
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-0537-7598/+4353
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* applied latest NATT patch with some fixes and cleanupsMartin Willi2006-07-041-1/+1
|
* log entries start with lowcercase characterAndreas Steffen2006-07-041-23/+27
|
* fixed natd_hash memory leakAndreas Steffen2006-07-031-2/+7
|
* support of cert payloadsAndreas Steffen2006-07-039-470/+661
|
* lowercase log entriesAndreas Steffen2006-07-031-1/+1
|
* applied new changes from NATT teamMartin Willi2006-06-237-33/+232
| | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there
* first merge of NATT codeMartin Willi2006-06-2211-114/+1175
|
* fixed bug: usage of already freed memMartin Willi2006-06-201-1/+2
|
* fixed SPI when acting as initiator of rekeyingMartin Willi2006-06-191-2/+2
|
* fixed SPI when rekeying and deleting CHILD_SAsMartin Willi2006-06-195-14/+19
|
* change key derivation order to fullfill RFCMartin Willi2006-06-191-11/+26
|
* (no commit message)Martin Willi2006-06-161-5/+5
|
* fixed aes code, we support now aes128, aes192, aes256 in IKEMartin Willi2006-06-151-6/+6
|
* added support for "ike" and "esp" keywordsMartin Willi2006-06-153-16/+16
| | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes
* implemented clean spi allocation behavior when using multiple proposalsMartin Willi2006-06-151-35/+104
|
* debug and logging improvementsMartin Willi2006-06-131-3/+3
|
* using same reqid if a child sa rekeys an existing oneMartin Willi2006-06-126-18/+35
|
* cosmeticsAndreas Steffen2006-06-122-53/+53
|
* workaround for peers rekeying at the same timeMartin Willi2006-06-125-6/+41
| | | | | loading lifetime policies from ipsec.conf
* old child_sa gets deleted after rekeyingMartin Willi2006-06-099-43/+462
| | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time,
* improved kernel interface loggingMartin Willi2006-06-091-7/+4
|
* specifying keysize in bits, as it is required in IKEv2Martin Willi2006-06-092-60/+25
| | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
* fixed compile warnings when using -WallMartin Willi2006-06-0810-186/+804
| | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing
* further work for rekeying:Martin Willi2006-06-0713-618/+883
| | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
* fixed a memleakMartin Willi2006-06-071-1/+5
|
* job management:Martin Willi2006-05-316-74/+121
| | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
* - fixed some memleaks/freebugsMartin Willi2006-05-311-0/+1
| | | | | - leak detective works almost usable now (?!)
* - fixed host-host tunnel traffic selection, host-host works nowMartin Willi2006-05-313-2/+6
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-10 03:00:39 +0000