aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1/tasks
Commit message (Expand)AuthorAgeFilesLines
* Log sent vendor IDs for IKEv1Tobias Brunner2012-11-021-0/+1
* Remove all ESP proposals with non-matching DH group during Quick ModeTobias Brunner2012-10-241-10/+22
* Missed one in 6c10ceceTobias Brunner2012-09-281-0/+2
* Completed state handling in isakmp_cert_preTobias Brunner2012-09-281-0/+4
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-23/+28
* Use the vararg list constructor in quick mode taskMartin Willi2012-09-181-16/+8
* Change traffic selectors during Quick Mode in case of a NAT in transport modeTobias Brunner2012-09-141-9/+19
* Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is emptyMartin Willi2012-09-111-29/+14
* Don't use host address for dynamic TS in IKEv1 if a virtual IP was expectedMartin Willi2012-09-111-40/+57
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-111-20/+6
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-2/+20
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-051-0/+4
* In mode_config, destroy temporary pool list instead of the virtual IP list twiceMartin Willi2012-09-051-1/+1
* Request and acquire multiple virtual IPs in IKEv1 Mode ConfigMartin Willi2012-08-301-47/+61
* Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-301-2/+9
* Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-301-11/+35
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-303-5/+12
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-304-23/+46
* Merge branch 'android-ndk'Tobias Brunner2012-08-131-1/+2
|\
| * Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-1/+2
| * Make the UDP ports charon listens for packets on (and uses as source ports) c...Tobias Brunner2012-08-081-1/+1
* | Use actual daemon name to enable XAuth/PSK with aggressive modeMartin Willi2012-08-101-2/+3
|/
* Implement late peer config switching after XAuth authenticationMartin Willi2012-07-261-15/+80
* Check if XAuth round complies to configured authentication roundMartin Willi2012-07-261-7/+18
* Merge auth config items added from XAuth backends to IKE_SAMartin Willi2012-07-261-0/+1
* Add a return value to hasher_t.allocate_hash()Martin Willi2012-07-161-3/+17
* Check rng return value when generating fake NAT detection payloadsTobias Brunner2012-07-161-2/+3
* Nonce: Let get_nonce, allocate_nonce return booleanReto Buerki2012-07-161-1/+6
* Send cert request based on peers configured authentication classMartin Willi2012-07-101-3/+30
* Don't send CERTREQs when initiating aggressive mode PSKMartin Willi2012-07-091-0/+4
* As a responder, don't start a TRANSACTION request if we expect one from the i...Martin Willi2012-06-292-2/+4
* Queue a mode config task as responder if we need a virtual IPMartin Willi2012-06-272-4/+16
* Add basic support for XAuth responder authenticationMartin Willi2012-06-272-8/+10
* support Cisco Unity VIDAndreas Steffen2012-06-251-3/+6
* Enforce uniqueids=keep based on XAuth identityMartin Willi2012-06-251-0/+6
* Don't send XAUTH_OK if a hook prevents SA to establishMartin Willi2012-06-251-4/+14
* Enforce uniqueids=keep only for non-XAuth Main/Agressive ModesMartin Willi2012-06-252-28/+28
* Add missing XAuth name variable when complaining about missing XAuth backendMartin Willi2012-06-251-1/+1
* Fix SIGSEGV if kernel install fails during Quick Mode as responder.Tobias Brunner2012-06-221-4/+8
* Adopt children as XAuth initiator (which is IKE responder)Martin Willi2012-06-141-2/+2
* Require a scary option to respond to Aggressive Mode PSK requestsMartin Willi2012-06-141-0/+17
* Enforce uniqueness policy in IKEv1 main and aggressive modesMartin Willi2012-06-082-0/+29
* Use traffic selectors passed to quick mode constructor as initiatorMartin Willi2012-06-081-2/+10
* Added log message if peer does not accept/provide IPComp proposal.Tobias Brunner2012-05-241-2/+12
* Added support to negotiate IPComp during Quick Mode.Tobias Brunner2012-05-241-11/+91
* Added support for IKEv1 IPComp proposals in SA payload.Tobias Brunner2012-05-243-6/+6
* Fix memleak during Quick Mode in case no SPI can be allocated from kernel.Tobias Brunner2012-05-241-8/+8
* Apply IDir before deriving keys as aggressive initiatorMartin Willi2012-05-231-4/+4
* Switch to alternative peer config in IKEv1 Main and Aggressive Mode.Tobias Brunner2012-05-212-18/+35