tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Typo fixed.	Tobias Brunner	2011-04-28	1	-1/+1
\|
*	Move establish/inherit of rekeyed IKE_SAs to delete messages	Martin Willi	2011-03-15	1	-3/+1
\| \| \| \| \| \| \| \|	Having the inherit() function delayed to the IKE_SA establish procedure was problematic. The task destroy function was never a good place and results in locking/cleanup problems. After establishing the SA, it should be really checked in ASAP to avoid any triggered DPD checks to get lost.
*	Slightly change IKE_SA destruction order to inherit properly during ↵	Martin Willi	2011-02-28	1	-1/+1
\| \| \| \|	ike_rekey task destruction
*	Force port update as responder when initiator switches to 4500 in IKE_AUTH	Martin Willi	2011-01-12	1	-2/+2
\|
*	Moved check if packet already encoded to ike_sa, avoids message() hook ↵	Martin Willi	2011-01-05	1	-0/+5
\| \| \| \|	invocation twice
*	Move critical bit checking to ike_sa, notify payload includes unsupported ↵	Martin Willi	2011-01-05	1	-11/+37
\| \| \| \|	payload type
*	Moved message()-hook invocation to generate_message(), catch pre-generated ↵	Martin Willi	2011-01-05	1	-0/+1
\| \| \| \|	IKE_SA_INITs, too
*	Support manually triggerd DPD check, even if DPD disabled in config	Martin Willi	2011-01-05	1	-11/+10
\|
*	Change behavior of responder during roaming.	Tobias Brunner	2010-10-12	1	-16/+17
\| \| \| \| \| \|	If the current source address is not available anymore, the responder uses ike_mobike_t.roam, thus, uses multiple address combinations when trying to notify the initiator.
*	Send list of additional addresses even if current path is still valid.	Tobias Brunner	2010-10-12	1	-0/+11
\|
*	Extracted path checking in ike_sa_t.roam into separate functions.	Tobias Brunner	2010-10-12	1	-46/+68
\|
*	Explicitly configure MOBIKE tasks to update the list of additional addresses.	Tobias Brunner	2010-10-12	1	-0/+1
\|
*	Do not update hosts based on retransmitted messages.	Tobias Brunner	2010-10-12	1	-15/+4
\|
*	Do not update remote host if we are behind a NAT.	Tobias Brunner	2010-10-12	1	-4/+2
\|
*	Refer to scheduler and processor via lib and not hydra.	Tobias Brunner	2010-09-02	1	-15/+15
\|
*	Refer to kernel interface via hydra and not charon.	Tobias Brunner	2010-09-02	1	-13/+13
\|
*	Refer to scheduler via hydra and not charon.	Tobias Brunner	2010-09-02	1	-12/+12
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	1	-3/+3
\|
*	Slightly refactored port floating.	Tobias Brunner	2010-08-30	1	-0/+15
\| \| \| \|	In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
*	Use AEAD wrapper for encryption payload encryption/decryption	Martin Willi	2010-08-19	1	-4/+2
\|
*	Recreate IKE_SA_INIT related tasks only if they have completed	Martin Willi	2010-06-30	1	-11/+35
\|
*	Flush auth configs, create new keymat during SA reset	Martin Willi	2010-06-07	1	-12/+16
\|
*	Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH	Martin Willi	2010-06-07	1	-0/+11
\|
*	Wrap task enumerator in ike_sa	Martin Willi	2010-06-07	1	-0/+7
\|
*	Migrated ike_sa_t to INIT/METHOD macros	Martin Willi	2010-06-07	1	-407/+239
\|
*	Use wrapped getters for close/dpd action	Martin Willi	2010-06-02	1	-7/+7
\|
*	Invoke updown hook if IKE_SA delete is enforced in deleting state	Martin Willi	2010-04-06	1	-0/+1
\|
*	Release virtual IPs with the same identity as we acquired it	Martin Willi	2010-03-25	1	-3/+36
\|
*	Changed all usages of lib->attributes to hydra->attributes.	Tobias Brunner	2010-03-24	1	-3/+4
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	1	-0/+2192