aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ike_sa.c
Commit message (Expand)AuthorAgeFilesLines
* ike-sa: Add limit for the number of redirects within a defined time periodTobias Brunner2016-03-041-0/+44
* ike-sa: Reauthenticate to the same addresses we currently useTobias Brunner2016-03-041-2/+5
* ike-sa: Add redirect() method to actively redirect an IKE_SATobias Brunner2016-03-041-0/+41
* ike-sa: Handle redirect requests for established SAs as reestablishmentTobias Brunner2016-03-041-82/+174
* ike-sa: Keep track of the address of the gateway that redirected usTobias Brunner2016-03-041-1/+20
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-041-0/+12
* ikev2: Handle REDIRECT notifies during IKE_SA_INITTobias Brunner2016-03-041-0/+32
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-14/+11
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-031-9/+20
* ike: Don't send NAT keepalives if we have no path to the other peerTobias Brunner2016-03-031-3/+9
* ike: Use the original port when remote resolves to %anyTobias Brunner2015-08-191-1/+3
* ike: Disable NAT keepalives in state PASSIVEThomas Egerer2015-08-041-3/+12
* ike: Fix memory leak if remote address is keptTobias Brunner2015-07-271-0/+4
* ike: Fall back to the current remote IP if it resolves to %anyTobias Brunner2015-07-271-1/+6
* ike: Use address family of local address when resolving remote hostTobias Brunner2015-07-271-1/+14
* ikev2: Migrate MOBIKE additional peer addresses to new SA after IKE_SA rekeyingMartin Willi2015-03-181-0/+6
* bus: Add an ike_update() hook invoked when peer endpoints changeMartin Willi2015-02-201-0/+2
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-201-1/+1
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-201-3/+1
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-3/+4
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-201-7/+58
* ike: Do remote address updates also when behind static NATsTobias Brunner2014-10-131-4/+7
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-101-0/+30
* ike: IKE_SA may fragment IKEv2 messagesTobias Brunner2014-10-101-1/+1
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-101-1/+64
* ikev2: Skip peer addresses we can't send packets to when looking for valid pathsTobias Brunner2014-09-121-0/+18
* ike: Reset IKE_SA in state CONNECTING instead of reauthenticatingTobias Brunner2014-09-091-0/+8
* bus: Add ike_reestablish_pre hook, called before DNS resolutionTobias Brunner2014-07-221-1/+5
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+1
* ike: Create an enumerator for (un-)handled configuration attributes on IKE_SAMartin Willi2014-06-161-0/+21
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-2/+5
* ikev2: Apply extensions and conditions before starting rekeyingMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-171-2/+14
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-3/+3
* ike: Simplify error handling if name resolution failedTobias Brunner2014-01-231-16/+3
* ike: Use proper hostname(s) when name resolution failedTobias Brunner2014-01-231-1/+1
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-161-1/+5
* ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeyingMartin Willi2013-11-011-0/+8
* ike-sa: Resolve hosts before reestablishing an IKE_SATobias Brunner2013-09-231-0/+2
* ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addrMartin Willi2013-09-041-1/+1
* ike-sa: use ike_cfg resolver functionsMartin Willi2013-09-041-16/+12
* ike: Fix reestablishing SAs if no child-creating tasks are queuedTobias Brunner2013-07-181-2/+5
* ike-sa: uninstall CHILD_SAs before removing virtual IPsMartin Willi2013-07-181-1/+8
* ike: Migrate queued CHILD_SA-creating tasks when reestablishing an IKE_SATobias Brunner2013-07-171-1/+39
* ike-sa: use arrays instead of linked lists in long lived collectionsMartin Willi2013-07-171-116/+98
* ike: Resolve hosts only for address families currently supportedTobias Brunner2013-07-051-3/+16
* Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restartTobias Brunner2013-07-011-1/+2
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-011-1/+2
* Use ref_get() to make sure IKE_SA unique IDs are uniqueMartin Willi2013-06-111-2/+2
* Don't unset IKE_SA on bus before we released virtual IPs and attributesMartin Willi2013-05-061-10/+8