aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ike_sa.c
Commit message (Expand)AuthorAgeFilesLines
* ike: Reset local SPI if retrying to connect in state IKE_CONNECTINGTobias Brunner2017-09-041-6/+12
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-261-17/+32
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-2/+6
* ikev1: Respond to DPDs for rekeyed IKE_SAsTobias Brunner2017-02-171-0/+4
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-171-1/+23
* ikev2: Ignore roam events without MOBIKE but static local addressTobias Brunner2017-02-171-0/+10
* ike: Publish getter for the current message ID on IKE_SATobias Brunner2017-02-081-0/+7
* ikev1: Send DELETE for rekeyed IKE_SAsTobias Brunner2016-10-041-9/+5
* ike: Set default IKE fragment size to 1280Tobias Brunner2016-10-041-1/+1
* ikev2: (Re-)Queue tasks used to establish an IKE_SA in reset()Tobias Brunner2016-09-061-2/+1
* ikev2: Add possibility to delay initiation of a queued taskTobias Brunner2016-06-171-2/+9
* ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-171-1/+4
* ike: Don't trigger message hook when fragmenting pre-generated messagesTobias Brunner2016-06-061-2/+10
* Use standard unsigned integer typesAndreas Steffen2016-03-241-22/+22
* ike-sa: Improve interaction between flush_auth_cfg and delayed revocation checksTobias Brunner2016-03-101-26/+37
* ike-sa: Add method to verify certificates in completed authentication roundsTobias Brunner2016-03-101-0/+103
* ike-sa: Add limit for the number of redirects within a defined time periodTobias Brunner2016-03-041-0/+44
* ike-sa: Reauthenticate to the same addresses we currently useTobias Brunner2016-03-041-2/+5
* ike-sa: Add redirect() method to actively redirect an IKE_SATobias Brunner2016-03-041-0/+41
* ike-sa: Handle redirect requests for established SAs as reestablishmentTobias Brunner2016-03-041-82/+174
* ike-sa: Keep track of the address of the gateway that redirected usTobias Brunner2016-03-041-1/+20
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-041-0/+12
* ikev2: Handle REDIRECT notifies during IKE_SA_INITTobias Brunner2016-03-041-0/+32
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-14/+11
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-031-9/+20
* ike: Don't send NAT keepalives if we have no path to the other peerTobias Brunner2016-03-031-3/+9
* ike: Use the original port when remote resolves to %anyTobias Brunner2015-08-191-1/+3
* ike: Disable NAT keepalives in state PASSIVEThomas Egerer2015-08-041-3/+12
* ike: Fix memory leak if remote address is keptTobias Brunner2015-07-271-0/+4
* ike: Fall back to the current remote IP if it resolves to %anyTobias Brunner2015-07-271-1/+6
* ike: Use address family of local address when resolving remote hostTobias Brunner2015-07-271-1/+14
* ikev2: Migrate MOBIKE additional peer addresses to new SA after IKE_SA rekeyingMartin Willi2015-03-181-0/+6
* bus: Add an ike_update() hook invoked when peer endpoints changeMartin Willi2015-02-201-0/+2
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-201-1/+1
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-201-3/+1
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-3/+4
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-201-7/+58
* ike: Do remote address updates also when behind static NATsTobias Brunner2014-10-131-4/+7
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-101-0/+30
* ike: IKE_SA may fragment IKEv2 messagesTobias Brunner2014-10-101-1/+1
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-101-1/+64
* ikev2: Skip peer addresses we can't send packets to when looking for valid pathsTobias Brunner2014-09-121-0/+18
* ike: Reset IKE_SA in state CONNECTING instead of reauthenticatingTobias Brunner2014-09-091-0/+8
* bus: Add ike_reestablish_pre hook, called before DNS resolutionTobias Brunner2014-07-221-1/+5
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+1
* ike: Create an enumerator for (un-)handled configuration attributes on IKE_SAMartin Willi2014-06-161-0/+21
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-2/+5
* ikev2: Apply extensions and conditions before starting rekeyingMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-171-2/+14
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-3/+3