tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-1/+1
\|
*	ikev1: Send and verify IPv6 addresses correctly	Tobias Brunner	2016-03-03	1	-26/+11
\| \| \| \| \| \| \| \|	According to the mode-config draft there is no prefix sent for IPv6 addresses in IKEv1. We still accept 17 bytes long addresses for backwards compatibility with older strongSwan releases. Fixes #1304.
*	mode-config: Reassign migrated virtual IP if client requests %any	Tobias Brunner	2015-11-12	1	-1/+3
\| \| \| \| \| \| \| \| \|	If we mistakenly detect a new IKE_SA as a reauthentication the client won't request the previous virtual IP, but since we already migrated it we already triggered the assign_vips() hook, so we should reassign the migrated virtual IP. Fixes #1152.
*	ikev1: Adopt virtual IPs on new IKE_SA during re-authentication	Tobias Brunner	2015-03-19	1	-29/+83
\| \| \| \| \| \| \| \| \| \| \|	Some clients like iOS/Mac OS X don't do a mode config exchange on the new SA during re-authentication. If we don't adopt the previous virtual IP Quick Mode rekeying will later fail. If a client does do Mode Config we directly reassign the VIPs we migrated from the old SA, without querying the attributes framework. Fixes #807, #810.
*	attribute-manager: Pass full IKE_SA to handler methods	Martin Willi	2015-02-20	1	-4/+2
\|
*	attribute-manager: Pass the full IKE_SA to provider methods	Martin Willi	2015-02-20	1	-5/+5
\|
*	attributes: Move the configuration attributes framework to libcharon	Martin Willi	2015-02-20	1	-14/+13
\|
*	bus: Add a handle_vips() hook invoked after handling configuration attributes	Martin Willi	2014-06-17	1	-0/+2
\| \| \| \| \| \| \| \| \|	Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet.
*	ikev1: Invoke the assign_vips() bus hook for IKEv1 as well	Martin Willi	2014-06-16	1	-0/+4
\|
*	ike: Store unhandled attributes on IKE_SA as well	Martin Willi	2014-06-16	1	-5/+2
\|
*	payload: Use common prefixes for all payload type identifiers	Martin Willi	2014-06-04	1	-10/+10
\| \| \| \| \|	The old identifiers did not use a proper namespace and often clashed with other defines.
*	ikev1: implement mode config push mode	Martin Willi	2013-09-04	1	-37/+232
\|
*	Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is empty	Martin Willi	2012-09-11	1	-29/+14
\|
*	Pass the full list of pools to acquire_address, enumerate in providers	Martin Willi	2012-09-11	1	-20/+6
\| \| \| \| \| \| \| \|	If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools.
*	Clear virtual IPs before storing assigned ones on the IKE_SA	Tobias Brunner	2012-09-05	1	-0/+4
\| \| \| \| \|	Otherwise we'll end up with duplicate or invalid VIPs stored on the IKE_SA.
*	In mode_config, destroy temporary pool list instead of the virtual IP list twice	Martin Willi	2012-09-05	1	-1/+1
\|
*	Request and acquire multiple virtual IPs in IKEv1 Mode Config	Martin Willi	2012-08-30	1	-47/+61
\|
*	Pass all configured pool names to attribute provider enumerator	Martin Willi	2012-08-30	1	-2/+9
\|
*	Pass a list instead of a single virtual IP to attribute enumerators	Martin Willi	2012-08-30	1	-11/+35
\|
*	Support multiple address pools configured on a peer_cfg	Martin Willi	2012-08-30	1	-3/+10
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-5/+12
\|
*	Reply with received configuration payload identifier in Mode Config	Martin Willi	2012-03-20	1	-0/+8
\|
*	Separated libcharon/sa directory with ikev1 and ikev2 subfolders	Martin Willi	2012-03-20	1	-0/+417