aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1/tasks
Commit message (Expand)AuthorAgeFilesLines
* ikev1: Allow late connection switching based on XAuth usernameTobias Brunner2014-06-181-6/+0
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+2
* ikev1: Invoke the assign_vips() bus hook for IKEv1 as wellMartin Willi2014-06-161-0/+4
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-5/+2
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-0413-68/+68
* ikev1: Fix debugging log when remote traffic selector selection failsMartin Willi2014-05-141-1/+1
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-123-4/+4
* ikev1: Fix config switching due to failed authentication during Aggressive modeTobias Brunner2014-02-121-3/+1
* ikev1: Delete quick modes with the negotiated SA protocolMartin Willi2013-10-111-1/+1
* ikev1: Negotiate SPI with the first/negotiated proposal protocolMartin Willi2013-10-111-3/+18
* ikev1: For PFS prefer DH group from IKE_SA over first configuredThomas Egerer2013-09-101-18/+54
* ikev1: implement mode config push modeMartin Willi2013-09-044-68/+337
* xauth: add a configuration string option to be passed to XAuth instancesMartin Willi2013-09-031-1/+1
* ikev1: Always send ID payloads (traffic selectors) during Quick ModeTobias Brunner2013-07-251-26/+4
* ikev1: Reestablish IKE_SA/CHILD_SAs if it gets deleted by the peerTobias Brunner2013-07-171-0/+5
* ikev1: Support closeaction of CHILD_SA.Oliver Smith2013-07-171-7/+49
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-172-9/+19
* ike: Force NAT-T/UDP encapsulation if kernel interface requires itTobias Brunner2013-06-211-2/+16
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+12
* ikev1: keep vendor ID task alive during full Main/Aggressive ModeMartin Willi2013-06-111-8/+75
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-26/+10
* Refactor check_for_rekeyed_child() in quick_mode taskMartin Willi2013-04-031-18/+24
* Reuse reqid of an existing Quick Mode, even if it has been rekeyedMartin Willi2013-04-031-1/+2
* Delete IKE_SAs if responder does not initiate XAuth exchange within a certain...Tobias Brunner2013-03-192-2/+16
* Added xauth-noauth pluginTobias Brunner2013-03-191-29/+37
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-2/+2
* As Quick Mode initiator, select a subset of the proposed and the returned TSMartin Willi2013-03-071-4/+11
* Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+2
* Merge branch 'ikev1-fragmentation'Tobias Brunner2013-01-121-5/+44
|\
| * Properly detect fragmentation capabilitiesTobias Brunner2013-01-121-3/+27
| * Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-1/+1
| * Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-2/+4
| * Add an option to en-/disable IKE fragmentationTobias Brunner2012-12-241-4/+12
| * Log added NAT-T vendor IDsTobias Brunner2012-12-241-0/+1
| * Detect a peer's support for IKE fragmentationTobias Brunner2012-12-241-0/+4
* | Streamline debug output when receiving intermediate CA certificates in IKEv1Martin Willi2013-01-111-1/+1
* | Refactored IKEv1 cert payload processing to multiple functionsMartin Willi2013-01-111-73/+102
* | IKEv1 support for PKCS#7 wrapped certificatesVolker Rümelin2013-01-111-0/+70
* | Fixed some typos in commentsVolker Rümelin2013-01-111-1/+1
|/
* Add parantheses to avoid compiler warningMartin Willi2012-12-241-1/+1
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-201-1/+1
* Add support for draft-ietf-ipsec-nat-t-ike-03 and earlierVolker Rümelin2012-12-195-36/+204
* Fix traffic selectors also as initiator in case of transport mode over NATTobias Brunner2012-12-131-1/+1
* Fix debug output if responder selected invalid traffic selectors during QMTobias Brunner2012-12-131-2/+2
* Log sent vendor IDs for IKEv1Tobias Brunner2012-11-021-0/+1
* Remove all ESP proposals with non-matching DH group during Quick ModeTobias Brunner2012-10-241-10/+22
* Missed one in 6c10ceceTobias Brunner2012-09-281-0/+2
* Completed state handling in isakmp_cert_preTobias Brunner2012-09-281-0/+4
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-23/+28
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-16 17:11:46 +0000