aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/child_sa.c
Commit message (Expand)AuthorAgeFilesLines
* child-sa: Do not install mark on inbound kernel SAEyal Birger2017-02-141-4/+1
* child-sa: Use single return statement in update_usebytes()Thomas Egerer2016-11-181-4/+8
* child-sa: Only install outbound FWD policies if explicitly configuredTobias Brunner2016-09-281-14/+27
* child-sa: Use non-static variable to store generated unique markTobias Brunner2016-06-061-1/+2
* child-sa: Install "outbound" FWD policy with lower priorityTobias Brunner2016-05-061-1/+12
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-041-1/+1
* Implemented IPsec policies restricted to given network interfaceAndreas Steffen2016-04-091-0/+4
* Support manually-set IPsec policy prioritiesAndreas Steffen2016-04-091-19/+40
* child-sa: Install "outbound" FWD policyTobias Brunner2016-04-091-0/+16
* kernel: Use structs to pass information to the kernel-ipsec interfaceTobias Brunner2016-04-091-62/+189
* Use standard unsigned integer typesAndreas Steffen2016-03-241-26/+26
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-44/+38
* kernel-interface: Pass the same data to del_policy() that was passed to add_p...Tobias Brunner2015-11-101-87/+91
* child-sa: Fix refcounting of allocated reqidsTobias Brunner2015-08-171-3/+12
* child-sa: Use any fixed reqid configured on the CHILD_SA configMartin Willi2015-06-051-2/+2
* Fixed some typos, courtesy of codespellTobias Brunner2015-03-251-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-0/+1
* child-sa: Remove policies before states to avoid acquire events for untrapped...Tobias Brunner2015-03-191-16/+16
* kernel-interface: Add a separate "update" flag to add_sa()Martin Willi2015-03-091-1/+1
* Revert "child-sa: Remove the obsolete update logic"Martin Willi2015-03-091-1/+6
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-4/+27
* child-sa: Introduce a unique CHILD_SA identifierMartin Willi2015-02-201-0/+14
* child-sa: Delegate reqid allocation to the kernel interfaceMartin Willi2015-02-201-15/+46
* child-sa: Sort traffic selectors after adding CHILD_SA policiesMartin Willi2015-02-201-0/+3
* child-sa: Remove the obsolete update logicMartin Willi2015-02-201-6/+1
* kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-201-8/+6
* kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-201-2/+2
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* child-sa: Set replay window on both inbound and outbound SAMartin Willi2014-06-181-6/+2
* kernel-interface: Add a replay_window parameter to add_sa()Martin Willi2014-06-171-2/+6
* child-sa: Pass the number of total policies tied to an SA to the kernelMartin Willi2014-06-041-0/+8
* kernel-interface: Add a flag to indicate no policy updates requiredMartin Willi2014-06-041-3/+14
* child-sa: Reclaim old state if SA updating is not supportedMartin Willi2014-05-091-0/+2
* child-sa: Add a getter for CHILD_SA install timeMartin Willi2014-01-231-0/+13
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-111-2/+2
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-111-3/+3
* child-sa: Save protocol during SPI allocationMartin Willi2013-10-111-6/+3
* child-sa: refactor proxy transport mode address lookupMartin Willi2013-07-171-56/+42
* child-sa: replace traffic selector lists by arraysMartin Willi2013-07-171-18/+19
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-4/+8
* ike: reuse the reqid of an installed trap having the same configMartin Willi2013-06-191-1/+5
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-4/+5
* Use ref_get() to make sure CHILD_SA reqids are uniqueMartin Willi2013-06-111-2/+9
* kernel-interface: query SAD for last use time if SPD query didn't yield oneMartin Willi2013-05-061-5/+19
* child-sa: query SAD/SPD just for what we actually need to update statisticsMartin Willi2013-05-061-2/+5
* child-sa: pass traffic selector to add_sa() regardless of IPsec modeMartin Willi2013-05-061-14/+11
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-1/+6
* kernel_ipsec_t.query_sa() additionally returns the number of processed packetsMartin Willi2013-03-141-3/+15
* Don't wait while removing external IPs used for load testingMartin Willi2012-11-291-1/+1
* Install virtual IPs via interface name, and use an interface lookup where req...Martin Willi2012-11-291-2/+9