aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/config/child_cfg.c
Commit message (Collapse)AuthorAgeFilesLines
* child-cfg: Ignore duplicate proposalsTobias Brunner2014-09-121-0/+11
| | | | | If ESP proposals are added once with and once without DH groups duplicates result during IKE_AUTH when DH groups are stripped.
* child-cfg: Store connection specific replay window on CHILD_SA configMartin Willi2014-06-171-0/+24
|
* child-cfg: Allow passing NULL as proposal to add_proposal()Martin Willi2014-05-161-1/+4
| | | | Making the API consistent to the one of ike_cfg.
* child-cfg: Fix removal of redundant traffic selectorsTobias Brunner2014-04-251-1/+1
| | | | | | | We have to make sure we compare every selected traffic selector with every other in the list. Fixes #577.
* Raise an alert if the responding peer narrowed traffic selectorsMartin Willi2013-06-191-7/+24
|
* proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove allTobias Brunner2012-10-241-2/+2
|
* Make sure we propose a dynamic TS if we don't have hosts to derive a TS fromTobias Brunner2012-09-211-10/+8
| | | | 7ee37114 removed this behavior.
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-36/+43
|
* Ensure traffic selectors are dynamic before calling set_address() when ↵Tobias Brunner2012-09-121-2/+2
| | | | deriving them
* Log configured CHILD_SA proposals as initiatorTobias Brunner2012-08-241-0/+2
|
* Added a null-safe strdup variantMartin Willi2011-01-051-1/+1
|
* Added a TFC padding option to child_cfgMartin Willi2010-12-201-1/+15
|
* start and route connections defined in an SQL database via start_action ↵Andreas Steffen2010-11-281-3/+15
| | | | field and ipsec up %startall command
* Migrated child_cfg_t to INIT/METHOD macrosAndreas Steffen2010-11-261-145/+89
|
* Moved ipsec_transform_t to kernel_ipsec.h in libhydra.Tobias Brunner2010-09-021-9/+0
| | | | | Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-7/+12
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-2/+36
|
* Explicitly include stdint.h for UINT64_MAX.Tobias Brunner2010-06-151-0/+2
| | | | This is required on FreeBSD 8.
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-041-1/+16
|
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+552