aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ike_sa.h
Commit message (Collapse)AuthorAgeFilesLines
...
| * IKEv1 XAuth: Added temporary "initiate_xauth" public method to ike_sa_t. ↵Clavister OpenSource2012-03-201-0/+5
| | | | | | | | This allows us to initiate an XAuth password authentication exchange after responding to the final message of Main Mode. This change should be reverted once we have a better method to initiate this exchange.
| * XAUTH is initiated based on configuration, no need to call externallyMartin Willi2012-03-201-5/+0
| |
| * IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵Clavister OpenSource2012-03-201-0/+10
| | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response.
| * Don't compare initiator flag in IKE_SA manager, pass initiator parameter to ↵Martin Willi2012-03-201-1/+3
| | | | | | | | IKE_SA constructor
| * Store IKE version of an SA on ike_sa_t.Tobias Brunner2012-03-201-4/+10
| |
* | Renamed list of additional peer addresses as it now stores all known addresses.Tobias Brunner2012-03-091-6/+6
| |
* | Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth ↵Martin Willi2012-03-051-2/+6
|/ | | | actively
* Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attributeMartin Willi2011-08-191-0/+5
|
* Fixed common misspellings.Tobias Brunner2011-07-201-1/+1
| | | | Mostly found by 'codespell'.
* Replaced ike_sa_t.create_additional_address_iterator with enumerator.Tobias Brunner2011-07-061-3/+8
|
* Replaced ike_sa_t.create_child_sa_iterator with enumerator.Tobias Brunner2011-07-061-43/+57
| | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA.
* Move establish/inherit of rekeyed IKE_SAs to delete messagesMartin Willi2011-03-151-2/+1
| | | | | | | | Having the inherit() function delayed to the IKE_SA establish procedure was problematic. The task destroy function was never a good place and results in locking/cleanup problems. After establishing the SA, it should be really checked in ASAP to avoid any triggered DPD checks to get lost.
* Force port update as responder when initiator switches to 4500 in IKE_AUTHMartin Willi2011-01-121-1/+2
|
* Slightly refactored port floating.Tobias Brunner2010-08-301-0/+8
| | | | In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
* Moved credential manager to libstrongswanMartin Willi2010-07-131-1/+1
|
* Wrap task enumerator in ike_saMartin Willi2010-06-071-1/+9
|
* Release virtual IPs with the same identity as we acquired itMartin Willi2010-03-251-0/+7
|
* Changed all usages of lib->attributes to hydra->attributes.Tobias Brunner2010-03-241-0/+1
|
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+913