aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ike_sa.c
Commit message (Expand)AuthorAgeFilesLines
...
| | * Replace xauth_request task with a new stub where we reimplement itMartin Willi2012-03-201-14/+7
| | * Implemented post-authentication certificate handling for IKEv1Martin Willi2012-03-201-0/+3
| | * Implemented pre-authentication certificate handling for IKEv1Martin Willi2012-03-201-0/+3
| | * Task added for IKEv1 NAT detection.Tobias Brunner2012-03-201-0/+3
| | * IKEv1 XAuth: Adding "initiate" flag parameter to the initiate_xauth method, s...Clavister OpenSource2012-03-201-2/+6
| | * IKEv1 XAuth: Add "initiate xauth" method, which adds the xauth task into the ...Clavister OpenSource2012-03-201-0/+9
| | * Moved main part of message processing to task managers.Tobias Brunner2012-03-201-153/+7
| | * Addded ike_sa_t.set_statistic to set timestamps from task manager.Tobias Brunner2012-03-201-0/+10
| | * Revert "IKEv1 XAuth: Temporarilty add an "initiate_later" flag to the task ma...Clavister OpenSource2012-03-201-13/+0
| | * Use a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1Martin Willi2012-03-201-0/+3
| | * Added a get_rekey/reauth_time() jitter parameter to get time without randomiz...Martin Willi2012-03-201-2/+2
| | * IKEv1 XAuth: Added temporary "initiate_xauth" public method to ike_sa_t. Thi...Clavister OpenSource2012-03-201-0/+13
| | * XAUTH is initiated based on configuration, no need to call externallyMartin Willi2012-03-201-9/+0
| | * Temp fix for compile error with XAUTH code.Clavister OpenSource2012-03-201-1/+1
| | * IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle XAUT...Clavister OpenSource2012-03-201-0/+10
| | * Don't compare initiator flag in IKE_SA manager, pass initiator parameter to I...Martin Willi2012-03-201-2/+3
| | * Provide keymat_t to message_t to encrypt/decrypt data.Tobias Brunner2012-03-201-4/+2
| | * Added a generic TASK_ prefix to all task typesMartin Willi2012-03-201-1/+1
| | * Initiate and respond to quick mode task (stub)Martin Willi2012-03-201-3/+4
| | * Implemented first two exchanges of Main Mode as initiatorMartin Willi2012-03-201-27/+43
| | * Added factory function to create task_manager_t implementations.Tobias Brunner2012-03-201-2/+1
| | * Added factory function to create keymat_t implementations.Tobias Brunner2012-03-201-3/+4
| | * Store IKE version of an SA on ike_sa_t.Tobias Brunner2012-03-201-2/+16
| | * Use keymat_t as common interface, renamed current implementation to _v2.Tobias Brunner2012-03-201-2/+3
| | * Use task manager as generic interface, renamed implementation to _v2.Martin Willi2012-03-201-2/+2
| | * Allow creation of message_t objects for IKEv1 packets.Tobias Brunner2012-03-201-1/+1
* | | Properly initialize src in ike_sa_t.is_any_path_valid().Tobias Brunner2012-04-061-1/+1
|/ /
* | Simplified some route lookups now that we store all peer addresses in a list.Tobias Brunner2012-03-091-14/+9
* | Renamed list of additional peer addresses as it now stores all known addresses.Tobias Brunner2012-03-091-20/+20
* | Re-resolve hosts on additional keyingtriesMartin Willi2012-03-061-0/+1
* | Be a little more verbose before starting IKE_SA reauthenticationMartin Willi2012-03-051-2/+9
* | Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth ...Martin Willi2012-03-051-7/+32
* | Set hard timeouts when setting a lifetimeMartin Willi2012-03-051-7/+14
* | Fix IKE_SA timeout debug output on 64bit platformsMartin Willi2012-03-051-3/+4
* | Trigger DPD not before IKE_SA state gets updatedMartin Willi2012-02-021-6/+8
* | Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE stateMartin Willi2012-02-021-0/+26
|/
* Change order of destroy/get_ref function callsThomas Egerer2011-11-041-1/+1
* Throw an alert when the peer address cannot be resolved during initiation.Tobias Brunner2011-08-121-0/+1
* Properly initialize ike_sa_t.Tobias Brunner2011-08-011-1/+1
* Inherit authentication information during IKE_SA rekeyingMartin Willi2011-07-251-0/+16
* Fixed common misspellings.Tobias Brunner2011-07-201-1/+1
* Replaced ike_sa_t.create_additional_address_iterator with enumerator.Tobias Brunner2011-07-061-4/+19
* Replaced ike_sa_t.create_child_sa_iterator with enumerator.Tobias Brunner2011-07-061-4/+18
* Replaced simple iterator usages.Tobias Brunner2011-07-061-20/+20
* Added strongswan.conf option to override half open IKE_SA timeoutMartin Willi2011-05-161-1/+2
* Typo fixed.Tobias Brunner2011-04-281-1/+1
* Move establish/inherit of rekeyed IKE_SAs to delete messagesMartin Willi2011-03-151-3/+1
* Slightly change IKE_SA destruction order to inherit properly during ike_rekey...Martin Willi2011-02-281-1/+1
* Force port update as responder when initiator switches to 4500 in IKE_AUTHMartin Willi2011-01-121-2/+2
* Moved check if packet already encoded to ike_sa, avoids message() hook invoca...Martin Willi2011-01-051-0/+5