aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1/tasks/quick_mode.c
Commit message (Expand)AuthorAgeFilesLines
* support gre key in ikev1tterasTimo Teräs2017-11-201-7/+9
* ike: Trigger CHILD_INSTALLED state change after corresponding log messageTobias Brunner2017-07-271-4/+3
* child-sa: Change API used to set/install policiesTobias Brunner2017-05-231-16/+17
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-231-2/+2
* quick-mode: Correctly prepare NAT-OA payloads as responderTobias Brunner2017-03-061-8/+13
* ikev1: Send derived CHILD_SA keys to the busTobias Brunner2016-10-041-14/+26
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-171-2/+4
* child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-171-4/+4
* quick-mode: Fix reporting lifebytes if lifetime is configuredTobias Brunner2016-06-171-2/+2
* ikev1: Don't use rekeyed CHILD_SAs for rekey detectionTobias Brunner2016-05-061-4/+4
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-041-1/+1
* Use standard unsigned integer typesAndreas Steffen2016-03-241-17/+17
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-1/+17
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-1/+1
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-291-2/+2
* ikev1: Fix handling of overlapping Quick Mode exchangesTobias Brunner2015-08-201-1/+25
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-251-1/+2
* ikev1: Inverse check when applying received KE value during Quick Mode5.3.0rc1Martin Willi2015-03-241-1/+1
* diffie-hellman: Add a bool return value to set_other_public_value()Martin Willi2015-03-231-2/+6
* encoding: Allow ke_payload_create_from_diffie_hellman() to failMartin Willi2015-03-231-4/+17
* ikev1: Mark rekeyed CHILD_SAs as INSTALLEDTobias Brunner2015-03-191-0/+2
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-201-2/+3
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-6/+3
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-2/+28
* ikev1: Make sure proposed IPsec mode matches our ownTobias Brunner2014-09-091-1/+2
* ikev1: Accept Quick Mode DELETES while Quick Mode rekeying is activeMartin Willi2014-08-251-2/+21
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-041-11/+11
* ikev1: Fix debugging log when remote traffic selector selection failsMartin Willi2014-05-141-1/+1
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-1/+1
* ikev1: Negotiate SPI with the first/negotiated proposal protocolMartin Willi2013-10-111-3/+18
* ikev1: For PFS prefer DH group from IKE_SA over first configuredThomas Egerer2013-09-101-18/+54
* ikev1: Always send ID payloads (traffic selectors) during Quick ModeTobias Brunner2013-07-251-26/+4
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-4/+10
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+12
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-26/+10
* Refactor check_for_rekeyed_child() in quick_mode taskMartin Willi2013-04-031-18/+24
* Reuse reqid of an existing Quick Mode, even if it has been rekeyedMartin Willi2013-04-031-1/+2
* As Quick Mode initiator, select a subset of the proposed and the returned TSMartin Willi2013-03-071-4/+11
* Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+2
* Add support for draft-ietf-ipsec-nat-t-ike-03 and earlierVolker Rümelin2012-12-191-4/+61
* Fix traffic selectors also as initiator in case of transport mode over NATTobias Brunner2012-12-131-1/+1
* Fix debug output if responder selected invalid traffic selectors during QMTobias Brunner2012-12-131-2/+2
* Remove all ESP proposals with non-matching DH group during Quick ModeTobias Brunner2012-10-241-10/+22
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-23/+28
* Use the vararg list constructor in quick mode taskMartin Willi2012-09-181-16/+8
* Change traffic selectors during Quick Mode in case of a NAT in transport modeTobias Brunner2012-09-141-9/+19
* Don't use host address for dynamic TS in IKEv1 if a virtual IP was expectedMartin Willi2012-09-111-40/+57
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-2/+20
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-14/+30