Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ikev1: Ignore the last two bytes of the Cisco Unity vendor ID | Tobias Brunner | 2016-08-24 | 1 | -0/+3 |
| | | | | | | | | | These seem to indicate the major and minor version of the protocol, like e.g. for the DPD vendor ID. Some implementations seem to send versions other than 1.0 so we just ignore these for now when checking for known vendor IDs. Fixes #2088. | ||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | |||||
* | ikev1: Add fragmentation support for Windows peers | Volker RĂ¼melin | 2014-10-10 | 1 | -12/+27 |
| | | | | | | | | I still think ipsec/l2tp with fragmentation support is a useful fallback option in case the Windows IKEv2 connection fails because of fragmentation problems. Tested with Windows XP, 7 and 8.1. | ||||
* | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 1 | -3/+3 |
| | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | ||||
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 1 | -2/+2 |
| | |||||
* | ikev1: keep vendor ID task alive during full Main/Aggressive Mode | Martin Willi | 2013-06-11 | 1 | -8/+75 |
| | | | | Fixes DPD with Cisco IOS sending the DPD vendor ID not in the first message. | ||||
* | Properly detect fragmentation capabilities | Tobias Brunner | 2013-01-12 | 1 | -3/+27 |
| | | | | Cisco sends 0xc0000000 so we check that part of the VID separately. | ||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+1 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -2/+4 |
| | |||||
* | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -4/+12 |
| | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | ||||
* | Log added NAT-T vendor IDs | Tobias Brunner | 2012-12-24 | 1 | -0/+1 |
| | |||||
* | Detect a peer's support for IKE fragmentation | Tobias Brunner | 2012-12-24 | 1 | -0/+4 |
| | | | | Fragments are accepted even if this vendor ID is not seen. | ||||
* | Add parantheses to avoid compiler warning | Martin Willi | 2012-12-24 | 1 | -1/+1 |
| | |||||
* | Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier | Volker RĂ¼melin | 2012-12-19 | 1 | -26/+98 |
| | | | | | This adds support for early versions of the draft that eventually resulted in RFC 3947. | ||||
* | Log sent vendor IDs for IKEv1 | Tobias Brunner | 2012-11-02 | 1 | -0/+1 |
| | |||||
* | support Cisco Unity VID | Andreas Steffen | 2012-06-25 | 1 | -3/+6 |
| | |||||
* | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 |
| | |||||
* | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 1 | -2/+2 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | | | | Also fixes several whitespace errors. | ||||
* | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 |
| | |||||
* | Disable DPD checking for peers not supporting it | Martin Willi | 2012-03-20 | 1 | -2/+2 |
| | |||||
* | Send DPD vendor ID | Clavister OpenSource | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -0/+204 |