aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/child_sa.c
Commit message (Expand)AuthorAgeFilesLines
* Fixed some typos, courtesy of codespellTobias Brunner2015-03-251-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-0/+1
* child-sa: Remove policies before states to avoid acquire events for untrapped...Tobias Brunner2015-03-191-16/+16
* kernel-interface: Add a separate "update" flag to add_sa()Martin Willi2015-03-091-1/+1
* Revert "child-sa: Remove the obsolete update logic"Martin Willi2015-03-091-1/+6
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-4/+27
* child-sa: Introduce a unique CHILD_SA identifierMartin Willi2015-02-201-0/+14
* child-sa: Delegate reqid allocation to the kernel interfaceMartin Willi2015-02-201-15/+46
* child-sa: Sort traffic selectors after adding CHILD_SA policiesMartin Willi2015-02-201-0/+3
* child-sa: Remove the obsolete update logicMartin Willi2015-02-201-6/+1
* kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-201-8/+6
* kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-201-2/+2
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* child-sa: Set replay window on both inbound and outbound SAMartin Willi2014-06-181-6/+2
* kernel-interface: Add a replay_window parameter to add_sa()Martin Willi2014-06-171-2/+6
* child-sa: Pass the number of total policies tied to an SA to the kernelMartin Willi2014-06-041-0/+8
* kernel-interface: Add a flag to indicate no policy updates requiredMartin Willi2014-06-041-3/+14
* child-sa: Reclaim old state if SA updating is not supportedMartin Willi2014-05-091-0/+2
* child-sa: Add a getter for CHILD_SA install timeMartin Willi2014-01-231-0/+13
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-111-2/+2
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-111-3/+3
* child-sa: Save protocol during SPI allocationMartin Willi2013-10-111-6/+3
* child-sa: refactor proxy transport mode address lookupMartin Willi2013-07-171-56/+42
* child-sa: replace traffic selector lists by arraysMartin Willi2013-07-171-18/+19
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-4/+8
* ike: reuse the reqid of an installed trap having the same configMartin Willi2013-06-191-1/+5
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-4/+5
* Use ref_get() to make sure CHILD_SA reqids are uniqueMartin Willi2013-06-111-2/+9
* kernel-interface: query SAD for last use time if SPD query didn't yield oneMartin Willi2013-05-061-5/+19
* child-sa: query SAD/SPD just for what we actually need to update statisticsMartin Willi2013-05-061-2/+5
* child-sa: pass traffic selector to add_sa() regardless of IPsec modeMartin Willi2013-05-061-14/+11
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-1/+6
* kernel_ipsec_t.query_sa() additionally returns the number of processed packetsMartin Willi2013-03-141-3/+15
* Don't wait while removing external IPs used for load testingMartin Willi2012-11-291-1/+1
* Install virtual IPs via interface name, and use an interface lookup where req...Martin Willi2012-11-291-2/+9
* Add an optional kernel-interface parameter to install IPs with a custom prefixMartin Willi2012-11-291-2/+2
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-3/+7
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-9/+12
* Store shorter soft lifetime of in- and outbound SAs onlyMartin Willi2012-06-081-1/+8
* Mark CHILD_SAs used for trap policies to uninstall them properly.Tobias Brunner2012-06-041-6/+13
* Added a getter for CHILD_SA marksMartin Willi2012-03-221-0/+11
* Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqidMartin Willi2012-03-221-0/+9
* typos: initator->initiator, authenticaion->authentication.Tobias Brunner2011-08-151-1/+1
* Update fallback drop policies if required.Tobias Brunner2011-07-291-2/+20
* Install fallback drop policies for all three directions.Tobias Brunner2011-07-281-65/+66
* Install fallback drop policies to avoid transmitting unencrypted packets.Tobias Brunner2011-07-271-0/+17
* Remove policies in kernel interfaces based on their priority.Tobias Brunner2011-07-271-15/+21
* Add the reqid to kernel_ipsec_t.del_policy.Tobias Brunner2011-07-061-6/+12
* Install ESN SAs if such a proposal has been negotiatedMartin Willi2011-04-201-1/+4
* Added an esn parameter to the kernel interface add_sa functionsMartin Willi2011-04-201-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-19 13:02:41 +0000