| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Set configured DSCP value while generating IKE packets | Martin Willi | 2013-02-06 | 1 | -1/+26 |
| | | |||||
| * | Allow ID_PROT/AGGRESSIVE messages for established IKE_SAs if they contain ↵ | Tobias Brunner | 2012-12-24 | 1 | -1/+2 |
| | | | | | | | | fragments Other implementations send fragments always in an initial message type even for transaction or quick mode exchanges. | ||||
| * | Inherit virtual IP and attributes from old to new, not from new to old | Martin Willi | 2012-12-10 | 1 | -5/+5 |
| | | |||||
| * | Don't wait while removing external IPs used for load testing | Martin Willi | 2012-11-29 | 1 | -2/+3 |
| | | |||||
| * | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 1 | -5/+16 |
| | | | | | required | ||||
| * | Add an optional kernel-interface parameter to install IPs with a custom prefix | Martin Willi | 2012-11-29 | 1 | -4/+4 |
| | | |||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Added a new alert that is raised if peer does not respond to initial IKE message | Tobias Brunner | 2012-10-16 | 1 | -0/+2 |
| | | |||||
| * | IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled | Tobias Brunner | 2012-09-25 | 1 | -1/+4 |
| | | | | | Fixes #229. | ||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -13/+8 |
| | | |||||
| * | Only initiate an exchange from send_dpd() if a task was actually queued | Tobias Brunner | 2012-09-07 | 1 | -2/+8 |
| | | | | | | Otherwise, the initiator would prematurely initiate Quick Mode if it has DPD enabled and XAuth is used. | ||||
| * | Trigger ike_updown event caused by retransmits only after reestablish() has ↵ | Tobias Brunner | 2012-09-06 | 1 | -0/+4 |
| | | | | | | | | | been called This allows listeners to migrate to the new IKE_SA with the ike_reestablish event without having to worry about an ike_updown event for the old IKE_SA. | ||||
| * | Add ike_reestablish() event that is triggered when an IKE_SA is reestablished | Tobias Brunner | 2012-09-06 | 1 | -0/+1 |
| | | | | | | This is particularly useful during reauthentication to get the new IKE_SA. | ||||
| * | Add a new condition to mark IKE_SAs that are currently being reauthenticated | Tobias Brunner | 2012-09-06 | 1 | -9/+4 |
| | | |||||
| * | Clear virtual IPs before storing assigned ones on the IKE_SA | Tobias Brunner | 2012-09-05 | 1 | -0/+18 |
| | | | | | | Otherwise we'll end up with duplicate or invalid VIPs stored on the IKE_SA. | ||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -4/+14 |
| | | |||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -45/+39 |
| | | |||||
| * | Increase log verbosity when sending NAT keep-alives | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | |||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -4/+7 |
| | | |||||
| * | Use send_no_marker to send NAT keepalives. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | |||||
| * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -4/+4 |
| | | | | | configurable. | ||||
| * | Block XAuth transaction on established IKE_SAs, but allow Mode Config | Martin Willi | 2012-08-03 | 1 | -1/+0 |
| | | |||||
| * | Reject initial exchange messages early once IKE_SA is established | Martin Willi | 2012-08-02 | 1 | -0/+18 |
| | | |||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -8/+13 |
| | | |||||
| * | Avoid queueing more than one retry initiate job. | Tobias Brunner | 2012-05-30 | 1 | -3/+25 |
| | | |||||
| * | Retry IKE_SA initiation if DNS resolution failed. | Tobias Brunner | 2012-05-30 | 1 | -4/+39 |
| | | | | | | This is disabled by default and can be enabled with the charon.retry_initiate_interval option in strongswan.conf. | ||||
| * | Resolve hosts before reauthenticating due to address change. | Tobias Brunner | 2012-05-25 | 1 | -0/+2 |
| | | |||||
| * | Don't queue delete_ike_sa job when setting IKE_DELETING. | Tobias Brunner | 2012-05-25 | 1 | -8/+0 |
| | | | | | | This avoids deleting IKE_SAs during reauthentication (without trying to reestablish them). | ||||
| * | During reauthentication reestablish IKE_SA even if deleting the old one fails. | Tobias Brunner | 2012-05-25 | 1 | -0/+6 |
| | | |||||
| * | Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. | Tobias Brunner | 2012-05-25 | 1 | -28/+74 |
| | | |||||
| * | Fixed route lookup in case MOBIKE is not enabled. | Tobias Brunner | 2012-05-25 | 1 | -3/+9 |
| | | |||||
| * | Wrap task managers flush_queue() in IKE_SA | Martin Willi | 2012-05-21 | 1 | -0/+7 |
| | | |||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -2/+2 |
| | | | | | Also fixes several whitespace errors. | ||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -309/+142 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -309/+142 |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | | * | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-03-20 | 1 | -13/+15 |
| | | | | |||||
| | | * | Don't re-resolve addresses during initiate if they have already been set | Martin Willi | 2012-03-20 | 1 | -1/+5 |
| | | | | |||||
| | | * | Update state before triggering DPD, as we cancel it if PASSIVE | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | | |||||
| | | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 1 | -2/+9 |
| | | | | | | | | | | | | | encrypted | ||||
| | | * | Invoke ike_updown hooks for reauthenticated IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | | |||||
| | | * | Disable DPD checking for peers not supporting it | Martin Willi | 2012-03-20 | 1 | -1/+13 |
| | | | | |||||
| | | * | Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE state | Martin Willi | 2012-03-20 | 1 | -0/+24 |
| | | | | |||||
| | | * | Destroy IKE_SA after reauthentication initiatend and lifetime limit reached | Martin Willi | 2012-03-20 | 1 | -1/+6 |
| | | | | |||||
| | | * | Query for XAuth identity in get_other_eap_id(), too | Martin Willi | 2012-03-20 | 1 | -0/+4 |
| | | | | |||||
| | | * | Support initiation of childless IKEv1 ISAKMP SAs | Martin Willi | 2012-03-20 | 1 | -1/+2 |
| | | | | |||||
| | | * | Don't trigger reauthentication if initiator authenticated using XAuth | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | | | | |||||
| | | * | Do not query CHILD_SA during delete if they already expired | Martin Willi | 2012-03-20 | 1 | -2/+3 |
| | | | | |||||
| | | * | Handle initiation of not supported IKE versions properly | Martin Willi | 2012-03-20 | 1 | -5/+21 |
| | | | | |||||
| | | * | Implemented resetting of IKEv1 task manager, enabling additional keyingtries | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | | | |||||
| | | * | Check message version before processing it on an IKE_SA | Martin Willi | 2012-03-20 | 1 | -0/+10 |
| | | | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |