aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/processing
Commit message (Expand)AuthorAgeFilesLines
* charon: add optional source and remote overrides for initiateTimo Teräs2017-11-201-1/+1
* delete-child-sa-job: Add new constructor that takes the unique ID of a CHILD_SATobias Brunner2017-05-232-13/+69
* ike: Log remote IP when deleting half-open IKE_SAsTobias Brunner2017-03-151-1/+2
* peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-161-2/+19
* stroke: Use peer name as namespace for shunt policiesTobias Brunner2017-02-161-1/+2
* shunt-manager: Add an optional namespace for each shuntTobias Brunner2017-02-161-1/+2
* Use standard unsigned integer typesAndreas Steffen2016-03-2416-28/+28
* redirect-job: Add job to redirect an active IKE_SATobias Brunner2016-03-042-0/+157
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-1/+0
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-031-1/+1
* mediation: Reschedule initiate mediation job if SA is not yet foundTobias Brunner2015-11-091-0/+4
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-212-3/+3
* ikev1: Assign different job priorities for inbound IKEv1 messagesTobias Brunner2015-08-211-2/+12
* jobs: Don't execute rekey CHILD_SA job on passive IKE_SAsThomas Egerer2015-08-041-1/+4
* ikev1: When a reauth is detected explicitly delete the old IKE_SATobias Brunner2015-05-211-3/+13
* ikev1: Trigger children_migrate event if CHILD_SAs are adoptedTobias Brunner2015-05-211-0/+4
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-1/+2
* ikev1: Adopt virtual IPs on new IKE_SA during re-authenticationTobias Brunner2015-03-191-13/+45
* ikev2: Immediately initiate queued tasks after establishing rekeyed IKE_SAMartin Willi2015-03-182-0/+145
* ikev1: Don't handle DPD timeout job if IKE_SA got passiveMartin Willi2015-03-101-0/+6
* migrate-job: Do CHILD_SA reqid lookup locallyMartin Willi2015-02-202-26/+21
* kernel-interface: Raise mapping event with a proto/SPI/dst tupleMartin Willi2015-02-202-11/+30
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-202-10/+10
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-204-39/+33
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-201-4/+15
* ike: Remove redundant check for local NAT when handling changed NAT mappingsTobias Brunner2014-10-131-6/+1
* ikev1: Extend adopt_children_job by task queuing, executed after adoptionMartin Willi2014-08-252-0/+48
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-041-1/+1
* ike: Delay actively initiated reauthentication when other exchanges in progressMartin Willi2014-04-171-2/+47
* ike: Restart inactivity counter after doing a CHILD_SA rekeyMartin Willi2014-01-231-2/+3
* ikev1: Don't log a reauthentication detection message if no children adoptedMartin Willi2013-09-301-2/+6
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-011-1/+1
* Delete IKE_SAs if responder does not initiate XAuth exchange within a certain...Tobias Brunner2013-03-191-1/+11
* When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMOUT alertMartin Willi2013-03-141-0/+1
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-142-4/+3
* Log message size for in- and outbound IKE messagesTobias Brunner2012-12-241-2/+3
* Raise an alert if half-open timeout limit reachedMartin Willi2012-12-191-0/+1
* Properly trigger ike_updown() event if IKEv1 DPD times outMartin Willi2012-12-041-0/+1
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
* Moved host_t and host_resolver_t to a new networking subfolderTobias Brunner2012-10-242-2/+2
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-3/+12
* Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-1/+1
* Make the UDP ports charon listens for packets on (and uses as source ports) c...Tobias Brunner2012-08-081-1/+1
* Make rescheduling a job more predictableTobias Brunner2012-06-251-6/+4
* Give processor_t more control over the lifecycle of a jobTobias Brunner2012-06-2519-59/+51
* Use XAuth/EAP remote identity for uniqueness checkMartin Willi2012-06-251-2/+2
* Avoid queueing more than one retry initiate job.Tobias Brunner2012-05-301-1/+1
* Job added to re-initiate an IKE_SA.Tobias Brunner2012-05-302-0/+143
* Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not neededMartin Willi2012-05-211-9/+3
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-1/+1