aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/child_sa.c
Commit message (Expand)AuthorAgeFilesLines
* child-cfg: Optionally set mark on inbound SATobias Brunner2017-11-021-2/+17
* child-sa: Allow requesting different unique marks for in/outEyal Birger2017-08-071-6/+23
* child-sa: Suppress CHILD_SA state changes if there is no changeTobias Brunner2017-08-071-6/+9
* child-sa: Install outbound SA immediately if kernel supports SPIs on policiesTobias Brunner2017-08-071-18/+36
* child-sa: Use flags to track installation of outbound SA and policies separatelyTobias Brunner2017-08-071-23/+28
* linked-list: Change interface of callback for invoke_function()Tobias Brunner2017-05-261-5/+5
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-4/+6
* child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256Tobias Brunner2017-05-261-0/+8
* child-sa: Remove state to track installation of half the SA againTobias Brunner2017-05-231-1/+0
* child-sa: Expose state of the outbound SATobias Brunner2017-05-231-16/+26
* child-sa: Add method to remove the outbound SA and policiesTobias Brunner2017-05-231-5/+73
* child-sa: Keep track whether the outbound SA has been installed or notTobias Brunner2017-05-231-8/+13
* child-sa: Add log message for CHILD_SA state changesTobias Brunner2017-05-231-0/+4
* child-sa: Add method to associate rekeyed CHILD_SAs with their replacementTobias Brunner2017-05-231-0/+19
* child-sa: Add methods that allow partial installation of CHILD_SATobias Brunner2017-05-231-5/+117
* child-sa: Add new state to track installation of only the inbound SATobias Brunner2017-05-231-0/+1
* child-sa: Change API used to set/install policiesTobias Brunner2017-05-231-30/+56
* child-sa: Split in- and outbound policy de-/installationTobias Brunner2017-05-231-62/+127
* child-sa: Optionally enable hardware offload for CHILD_SAsTobias Brunner2017-05-231-0/+1
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-231-7/+9
* Fixed some typos, courtesy of codespellTobias Brunner2017-03-231-1/+1
* child-sa: Do not install mark on inbound kernel SAEyal Birger2017-02-141-4/+1
* child-sa: Use single return statement in update_usebytes()Thomas Egerer2016-11-181-4/+8
* child-sa: Only install outbound FWD policies if explicitly configuredTobias Brunner2016-09-281-14/+27
* child-sa: Use non-static variable to store generated unique markTobias Brunner2016-06-061-1/+2
* child-sa: Install "outbound" FWD policy with lower priorityTobias Brunner2016-05-061-1/+12
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-041-1/+1
* Implemented IPsec policies restricted to given network interfaceAndreas Steffen2016-04-091-0/+4
* Support manually-set IPsec policy prioritiesAndreas Steffen2016-04-091-19/+40
* child-sa: Install "outbound" FWD policyTobias Brunner2016-04-091-0/+16
* kernel: Use structs to pass information to the kernel-ipsec interfaceTobias Brunner2016-04-091-62/+189
* Use standard unsigned integer typesAndreas Steffen2016-03-241-26/+26
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-44/+38
* kernel-interface: Pass the same data to del_policy() that was passed to add_p...Tobias Brunner2015-11-101-87/+91
* child-sa: Fix refcounting of allocated reqidsTobias Brunner2015-08-171-3/+12
* child-sa: Use any fixed reqid configured on the CHILD_SA configMartin Willi2015-06-051-2/+2
* Fixed some typos, courtesy of codespellTobias Brunner2015-03-251-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-0/+1
* child-sa: Remove policies before states to avoid acquire events for untrapped...Tobias Brunner2015-03-191-16/+16
* kernel-interface: Add a separate "update" flag to add_sa()Martin Willi2015-03-091-1/+1
* Revert "child-sa: Remove the obsolete update logic"Martin Willi2015-03-091-1/+6
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-4/+27
* child-sa: Introduce a unique CHILD_SA identifierMartin Willi2015-02-201-0/+14
* child-sa: Delegate reqid allocation to the kernel interfaceMartin Willi2015-02-201-15/+46
* child-sa: Sort traffic selectors after adding CHILD_SA policiesMartin Willi2015-02-201-0/+3
* child-sa: Remove the obsolete update logicMartin Willi2015-02-201-6/+1
* kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-201-8/+6
* kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-201-2/+2
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* child-sa: Set replay window on both inbound and outbound SAMartin Willi2014-06-181-6/+2