| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | ike: Add configuration option to switch to preferring supplied proposals ↵ | Tobias Brunner | 2016-06-17 | 1 | -1/+4 |
| | | | | | over local ones | ||||
| * | ike-cfg: Add option to prefer supplied proposals over locally configured ones | Tobias Brunner | 2016-06-17 | 1 | -2/+2 |
| | | |||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -5/+5 |
| | | |||||
| * | ikev1: Defer Mode Config push after CHILD adoption when using XAuth | Martin Willi | 2014-08-25 | 1 | -2/+7 |
| | | |||||
| * | ikev1: Defer Mode Config push after CHILD adoption and reauth detection | Martin Willi | 2014-08-25 | 1 | -5/+18 |
| | | | | | | | | | When an initiator starts reauthentication on a connection that uses push mode to assign a virtual IP, we can't execute the Mode Config before releasing the virtual IP. Otherwise we would request a new and different lease, which the client probably can't handle. Defer Mode Config execution, so the same IP gets first released then reassigned during reauthentication. | ||||
| * | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 1 | -8/+8 |
| | | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | ||||
| * | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | | |||||
| * | ikev1: Fix config switching due to failed authentication during Aggressive mode | Tobias Brunner | 2014-02-12 | 1 | -3/+1 |
| | | | | | | | | The encoded ID payload gets destroyed by the authenticator, which caused a segmentation fault after the switch. Fixes #501. | ||||
| * | ikev1: implement mode config push mode | Martin Willi | 2013-09-04 | 1 | -15/+52 |
| | | |||||
| * | Delete IKE_SAs if responder does not initiate XAuth exchange within a ↵ | Tobias Brunner | 2013-03-19 | 1 | -1/+8 |
| | | | | | certain time frame | ||||
| * | Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier | Volker Rümelin | 2012-12-19 | 1 | -2/+4 |
| | | | | | | This adds support for early versions of the draft that eventually resulted in RFC 3947. | ||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | | |||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -2/+2 |
| | | |||||
| * | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 |
| | | |||||
| * | As a responder, don't start a TRANSACTION request if we expect one from the ↵ | Martin Willi | 2012-06-29 | 1 | -1/+2 |
| | | | | | initiator | ||||
| * | Queue a mode config task as responder if we need a virtual IP | Martin Willi | 2012-06-27 | 1 | -2/+8 |
| | | |||||
| * | Add basic support for XAuth responder authentication | Martin Willi | 2012-06-27 | 1 | -4/+5 |
| | | |||||
| * | Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes | Martin Willi | 2012-06-25 | 1 | -16/+14 |
| | | |||||
| * | Require a scary option to respond to Aggressive Mode PSK requests | Martin Willi | 2012-06-14 | 1 | -0/+17 |
| | | | | | | | | | While Aggressive Mode PSK is widely used, it is known to be subject to dictionary attacks by passive attackers. We don't complain as initiator to be compatible with existing (insecure) setups, but require a scary strongswan.conf option if someone wants to use it as responder. | ||||
| * | Enforce uniqueness policy in IKEv1 main and aggressive modes | Martin Willi | 2012-06-08 | 1 | -0/+16 |
| | | |||||
| * | Added support for IKEv1 IPComp proposals in SA payload. | Tobias Brunner | 2012-05-24 | 1 | -2/+2 |
| | | |||||
| * | Apply IDir before deriving keys as aggressive initiator | Martin Willi | 2012-05-23 | 1 | -4/+4 |
| | | |||||
| * | Switch to alternative peer config in IKEv1 Main and Aggressive Mode. | Tobias Brunner | 2012-05-21 | 1 | -5/+18 |
| | | |||||
| * | Flush task queues explicitly, not implicitly if task returns ALREADY_DONE | Martin Willi | 2012-05-21 | 1 | -0/+4 |
| | | |||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 |
| | | |||||
| * | Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper | Martin Willi | 2012-03-20 | 1 | -6/+6 |
| | | |||||
| * | Invoke authorization hooks for IKEv1 connections | Martin Willi | 2012-03-20 | 1 | -11/+39 |
| | | |||||
| * | Simplified DPD handling by using a task for a single message only | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Isakmp_dpd task added. | Clavister OpenSource | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Streamlined debug output when initiating IKEv1 IKE_SAs | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Select IKEv1 configurations by main/aggressive mode option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Implemented aggressive mode using Phase 1 helper class | Martin Willi | 2012-03-20 | 1 | -0/+629 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |