tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Add a return value to keymat_v1_t.get_hash()	Martin Willi	2012-07-16	4	-17/+35
\|
*	Add a return value to prf_t.get_bytes()	Martin Willi	2012-07-16	1	-9/+19
\|
*	prf_plus_create() can return NULL on failure	Martin Willi	2012-07-16	1	-0/+10
\|
*	Add a return value to prf_plus_t.allocate_bytes()	Martin Willi	2012-07-16	1	-4/+14
\|
*	Add a return value to aead_t.set_key()	Martin Willi	2012-07-16	1	-1/+2
\|
*	Add a return value to aead_t.encrypt()	Martin Willi	2012-07-16	1	-1/+2
\|
*	Send cert request based on peers configured authentication class	Martin Willi	2012-07-10	1	-3/+30
\|
*	Don't send CERTREQs when initiating aggressive mode PSK	Martin Willi	2012-07-09	1	-0/+4
\|
*	As a responder, don't start a TRANSACTION request if we expect one from the ↵	Martin Willi	2012-06-29	2	-2/+4
\| \| \| \|	initiator
*	Defer quick mode initiation if we expect a mode config request	Martin Willi	2012-06-27	1	-1/+20
\|
*	Queue a mode config task as responder if we need a virtual IP	Martin Willi	2012-06-27	2	-4/+16
\|
*	Add basic support for XAuth responder authentication	Martin Willi	2012-06-27	2	-8/+10
\|
*	support Cisco Unity VID	Andreas Steffen	2012-06-25	1	-3/+6
\|
*	Enforce uniqueids=keep based on XAuth identity	Martin Willi	2012-06-25	1	-0/+6
\|
*	Don't send XAUTH_OK if a hook prevents SA to establish	Martin Willi	2012-06-25	1	-4/+14
\|
*	Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes	Martin Willi	2012-06-25	2	-28/+28
\|
*	Add missing XAuth name variable when complaining about missing XAuth backend	Martin Willi	2012-06-25	1	-1/+1
\|
*	Fix SIGSEGV if kernel install fails during Quick Mode as responder.	Tobias Brunner	2012-06-22	1	-4/+8
\|
*	Adopt children as XAuth initiator (which is IKE responder)	Martin Willi	2012-06-14	1	-2/+2
\|
*	Require a scary option to respond to Aggressive Mode PSK requests	Martin Willi	2012-06-14	1	-0/+17
\| \| \| \| \| \| \| \|	While Aggressive Mode PSK is widely used, it is known to be subject to dictionary attacks by passive attackers. We don't complain as initiator to be compatible with existing (insecure) setups, but require a scary strongswan.conf option if someone wants to use it as responder.
*	Enforce uniqueness policy in IKEv1 main and aggressive modes	Martin Willi	2012-06-08	2	-0/+29
\|
*	While checking for redundant quick modes, compare traffic selectors	Martin Willi	2012-06-08	1	-0/+22
\| \| \| \| \|	If a configuration is instanced more than once using narrowing, we should keep all unique quick modes up during rekeying.
*	Initiate quick mode rekeying with narrowed traffic selectors	Martin Willi	2012-06-08	1	-1/+18
\|
*	Use traffic selectors passed to quick mode constructor as initiator	Martin Willi	2012-06-08	1	-2/+10
\|
*	Instead of rekeying, delete a quick mode if we have a fresher instance	Martin Willi	2012-06-08	1	-6/+42
\| \| \| \| \| \| \| \|	If both peers initiate quick mode rekeying simultaneously, we end up with duplicate SAs for a configuration. This can't be avoided, nor do the standards provide an appropriate solution. Instead of closing one SA immediately, we keep both. But once rekeying triggers, we don't refresh the SA with the shorter soft lifetime, but delete it.
*	Added log message if peer does not accept/provide IPComp proposal.	Tobias Brunner	2012-05-24	1	-2/+12
\|
*	Added support to negotiate IPComp during Quick Mode.	Tobias Brunner	2012-05-24	1	-11/+91
\|
*	Added support for IKEv1 IPComp proposals in SA payload.	Tobias Brunner	2012-05-24	3	-6/+6
\|
*	Fix memleak during Quick Mode in case no SPI can be allocated from kernel.	Tobias Brunner	2012-05-24	1	-8/+8
\|
*	Apply IDir before deriving keys as aggressive initiator	Martin Willi	2012-05-23	1	-4/+4
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Check if we actually have an initiating packet to free while processing ↵	Martin Willi	2012-05-23	1	-1/+1
\| \| \| \|	responses
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	4	-24/+85
\|
*	Cancel pending retransmits when flushing active task queue	Martin Willi	2012-05-21	1	-0/+4
\|
*	Cancel active quick mode task when receiving INFORMATIONAL error	Martin Willi	2012-05-21	1	-0/+30
\|
*	Flush task queues explicitly, not implicitly if task returns ALREADY_DONE	Martin Willi	2012-05-21	5	-10/+18
\|
*	Make task managers flush_queue() method public	Martin Willi	2012-05-21	1	-11/+25
\|
*	Remove executable flag from source files.	Tobias Brunner	2012-05-18	11	-0/+0
\|
*	Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵	Tobias Brunner	2012-05-18	18	-19/+19
\| \| \| \|	tasks etc.).
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	2	-12/+12
\| \| \| \| \|	Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
*	Add create_nonce_gen function to keymat interface	Adrian-Ken Rueegsegger	2012-05-18	1	-0/+7
\| \| \| \|	This function returns a nonce generator object.
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-6/+14
\|
*	Moved IKEv1 DPD processing to task manager, fix sequence issues	Martin Willi	2012-05-15	3	-73/+72
\|
*	Schedule a DPD timeout job that enforces the IKE message timeout policy	Martin Willi	2012-05-15	1	-0/+13
\|
*	Send unanswered follow up R_U_THERE messages with the same DPD seq	Martin Willi	2012-05-15	1	-1/+7
\|
*	Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL	Martin Willi	2012-05-15	1	-11/+0
\|
*	allow private algorithms	Andreas Steffen	2012-05-05	2	-4/+16
\|
*	vendor ID cosmetics	Andreas Steffen	2012-05-05	1	-2/+2
\|
*	Use name from initialization to access settings in libcharon.	Tobias Brunner	2012-05-03	3	-6/+7
\| \| \| \|	Also fixes several whitespace errors.
*	Added another bunch of commonly used IKEv1 NATT vendor IDs	Martin Willi	2012-04-04	1	-1/+19
\|