aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/child_sa.c
Commit message (Expand)AuthorAgeFilesLines
* ike: reuse the reqid of an installed trap having the same configMartin Willi2013-06-191-1/+5
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-4/+5
* Use ref_get() to make sure CHILD_SA reqids are uniqueMartin Willi2013-06-111-2/+9
* kernel-interface: query SAD for last use time if SPD query didn't yield oneMartin Willi2013-05-061-5/+19
* child-sa: query SAD/SPD just for what we actually need to update statisticsMartin Willi2013-05-061-2/+5
* child-sa: pass traffic selector to add_sa() regardless of IPsec modeMartin Willi2013-05-061-14/+11
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-1/+6
* kernel_ipsec_t.query_sa() additionally returns the number of processed packetsMartin Willi2013-03-141-3/+15
* Don't wait while removing external IPs used for load testingMartin Willi2012-11-291-1/+1
* Install virtual IPs via interface name, and use an interface lookup where req...Martin Willi2012-11-291-2/+9
* Add an optional kernel-interface parameter to install IPs with a custom prefixMartin Willi2012-11-291-2/+2
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-3/+7
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-9/+12
* Store shorter soft lifetime of in- and outbound SAs onlyMartin Willi2012-06-081-1/+8
* Mark CHILD_SAs used for trap policies to uninstall them properly.Tobias Brunner2012-06-041-6/+13
* Added a getter for CHILD_SA marksMartin Willi2012-03-221-0/+11
* Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqidMartin Willi2012-03-221-0/+9
* typos: initator->initiator, authenticaion->authentication.Tobias Brunner2011-08-151-1/+1
* Update fallback drop policies if required.Tobias Brunner2011-07-291-2/+20
* Install fallback drop policies for all three directions.Tobias Brunner2011-07-281-65/+66
* Install fallback drop policies to avoid transmitting unencrypted packets.Tobias Brunner2011-07-271-0/+17
* Remove policies in kernel interfaces based on their priority.Tobias Brunner2011-07-271-15/+21
* Add the reqid to kernel_ipsec_t.del_policy.Tobias Brunner2011-07-061-6/+12
* Install ESN SAs if such a proposal has been negotiatedMartin Willi2011-04-201-1/+4
* Added an esn parameter to the kernel interface add_sa functionsMartin Willi2011-04-201-1/+1
* Do not use TFC padding if peer does not support ESPv3Martin Willi2010-12-201-2/+5
* Added a TFC padding option to child_cfgMartin Willi2010-12-201-0/+2
* Implemented Traffic Flow Confidentiality padding in kernel_interfaceMartin Willi2010-12-201-1/+2
* Install selectors on transport mode IPsec SAs.Jiri Bohac2010-12-131-1/+1
* Adapted child_sa_t to changed kernel interface.Tobias Brunner2010-09-021-25/+49
* Added an option to specify the type of a policy to kernel_ipsec.add_policy.Tobias Brunner2010-09-021-18/+18
* Replaced the protocol argument in add_policy with an optional SPI for an AH SA.Tobias Brunner2010-09-021-18/+37
* Refer to kernel interface via hydra and not charon.Tobias Brunner2010-09-021-31/+32
* Removed references to protocol_id_t from kernel interface.Tobias Brunner2010-09-021-37/+65
* Migrated child_sa_t to INIT/METHOD macros.Tobias Brunner2010-09-021-202/+132
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-34/+48
* Wrap getters for dpd/close action into CHILD_SA, allows us to override themMartin Willi2010-06-021-0/+48
* Use reqid from connection config if present.Reto Buerki2010-05-041-2/+6
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+1015