aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ike_sa.c
Commit message (Expand)AuthorAgeFilesLines
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-101-0/+30
* ike: IKE_SA may fragment IKEv2 messagesTobias Brunner2014-10-101-1/+1
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-101-1/+64
* ikev2: Skip peer addresses we can't send packets to when looking for valid pathsTobias Brunner2014-09-121-0/+18
* ike: Reset IKE_SA in state CONNECTING instead of reauthenticatingTobias Brunner2014-09-091-0/+8
* bus: Add ike_reestablish_pre hook, called before DNS resolutionTobias Brunner2014-07-221-1/+5
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+1
* ike: Create an enumerator for (un-)handled configuration attributes on IKE_SAMartin Willi2014-06-161-0/+21
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-2/+5
* ikev2: Apply extensions and conditions before starting rekeyingMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-171-2/+14
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-3/+3
* ike: Simplify error handling if name resolution failedTobias Brunner2014-01-231-16/+3
* ike: Use proper hostname(s) when name resolution failedTobias Brunner2014-01-231-1/+1
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-161-1/+5
* ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeyingMartin Willi2013-11-011-0/+8
* ike-sa: Resolve hosts before reestablishing an IKE_SATobias Brunner2013-09-231-0/+2
* ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addrMartin Willi2013-09-041-1/+1
* ike-sa: use ike_cfg resolver functionsMartin Willi2013-09-041-16/+12
* ike: Fix reestablishing SAs if no child-creating tasks are queuedTobias Brunner2013-07-181-2/+5
* ike-sa: uninstall CHILD_SAs before removing virtual IPsMartin Willi2013-07-181-1/+8
* ike: Migrate queued CHILD_SA-creating tasks when reestablishing an IKE_SATobias Brunner2013-07-171-1/+39
* ike-sa: use arrays instead of linked lists in long lived collectionsMartin Willi2013-07-171-116/+98
* ike: Resolve hosts only for address families currently supportedTobias Brunner2013-07-051-3/+16
* Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restartTobias Brunner2013-07-011-1/+2
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-011-1/+2
* Use ref_get() to make sure IKE_SA unique IDs are uniqueMartin Willi2013-06-111-2/+2
* Don't unset IKE_SA on bus before we released virtual IPs and attributesMartin Willi2013-05-061-10/+8
* emit a single assig_vips bus message for all VIPsAndreas Steffen2013-04-061-6/+8
* ifmap plugin subscribes to assing_vip bus signalAndreas Steffen2013-04-061-0/+6
* Raise an alert if an IKE_SA could not have been reauthenticated and expiresMartin Willi2013-03-141-0/+4
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-1/+1
* Without MOBIKE, update remote host only if it is behind NATMartin Willi2013-03-011-2/+3
* Move initial message dropping to task managerMartin Willi2013-02-251-18/+0
* Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
* Allow ID_PROT/AGGRESSIVE messages for established IKE_SAs if they contain fra...Tobias Brunner2012-12-241-1/+2
* Inherit virtual IP and attributes from old to new, not from new to oldMartin Willi2012-12-101-5/+5
* Don't wait while removing external IPs used for load testingMartin Willi2012-11-291-2/+3
* Install virtual IPs via interface name, and use an interface lookup where req...Martin Willi2012-11-291-5/+16
* Add an optional kernel-interface parameter to install IPs with a custom prefixMartin Willi2012-11-291-4/+4
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
* Added a new alert that is raised if peer does not respond to initial IKE messageTobias Brunner2012-10-161-0/+2
* IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabledTobias Brunner2012-09-251-1/+4
* Pass full pool list to release_addressMartin Willi2012-09-111-13/+8
* Only initiate an exchange from send_dpd() if a task was actually queuedTobias Brunner2012-09-071-2/+8
* Trigger ike_updown event caused by retransmits only after reestablish() has b...Tobias Brunner2012-09-061-0/+4
* Add ike_reestablish() event that is triggered when an IKE_SA is reestablishedTobias Brunner2012-09-061-0/+1
* Add a new condition to mark IKE_SAs that are currently being reauthenticatedTobias Brunner2012-09-061-9/+4
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-051-0/+18
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-4/+14