aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1
Commit message (Expand)AuthorAgeFilesLines
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-101-12/+27
* ikev1: Move defragmentation to message_tTobias Brunner2014-10-101-167/+16
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-101-55/+6
* message: fragment() generates message and fragments and caches themTobias Brunner2014-10-101-31/+11
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-132/+118
* ikev1: Fix handling of UNITY_LOAD_BALANCETobias Brunner2014-10-071-3/+3
* ikev1: Don't queue more than one mode config or XAuth taskTobias Brunner2014-10-071-7/+22
* ikev1: Be more verbose if a peer config would match, but is unusable for ModeMartin Willi2014-09-251-0/+12
* ikev1: Make sure proposed IPsec mode matches our ownTobias Brunner2014-09-091-1/+2
* ikev1: Defer Mode Config push after CHILD adoption when using XAuthMartin Willi2014-08-254-6/+40
* ikev1: Defer Mode Config push after CHILD adoption and reauth detectionMartin Willi2014-08-252-10/+35
* ikev1: Accept Quick Mode DELETES while Quick Mode rekeying is activeMartin Willi2014-08-251-2/+21
* ikev1: Allow late connection switching based on XAuth usernameTobias Brunner2014-06-181-6/+0
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+2
* ikev1: Invoke the assign_vips() bus hook for IKEv1 as wellMartin Willi2014-06-161-0/+4
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-5/+2
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-0418-84/+84
* ikev1: Fix debugging log when remote traffic selector selection failsMartin Willi2014-05-141-1/+1
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-124-10/+10
* ikev1: Fix config switching due to failed authentication during Aggressive modeTobias Brunner2014-02-121-3/+1
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-161-4/+3
* ikev1: Properly initialize list of fragments in case fragment ID is 0Volker RĂ¼melin2013-10-311-1/+1
* iv_gen: aead_t implementations provide an IV generatorTobias Brunner2013-10-111-0/+8
* ikev1: Delete quick modes with the negotiated SA protocolMartin Willi2013-10-111-1/+1
* ikev1: Negotiate SPI with the first/negotiated proposal protocolMartin Willi2013-10-111-3/+18
* ikev1: Fix double free when searching for redundant CHILD_SAsTobias Brunner2013-09-131-1/+1
* ikev1: For PFS prefer DH group from IKE_SA over first configuredThomas Egerer2013-09-101-18/+54
* ikev1: implement mode config push modeMartin Willi2013-09-045-76/+363
* xauth: add a configuration string option to be passed to XAuth instancesMartin Willi2013-09-031-1/+1
* ikev1: Fix calculation of the number of fragmentsTobias Brunner2013-08-151-1/+1
* ikev1: When sending fragments, use ports to decide if a non-ESP marker is addedTobias Brunner2013-08-151-6/+8
* ikev1: Always send ID payloads (traffic selectors) during Quick ModeTobias Brunner2013-07-251-26/+4
* ikev1: Reestablish IKE_SA/CHILD_SAs if it gets deleted by the peerTobias Brunner2013-07-171-0/+5
* ike: Migrate queued CHILD_SA-creating tasks when reestablishing an IKE_SATobias Brunner2013-07-171-0/+34
* ikev1: Support closeaction of CHILD_SA.Oliver Smith2013-07-171-7/+49
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-173-27/+37
* ike: Force NAT-T/UDP encapsulation if kernel interface requires itTobias Brunner2013-06-211-2/+16
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+12
* ikev1: keep vendor ID task alive during full Main/Aggressive ModeMartin Willi2013-06-111-8/+75
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-26/+10
* Refactor check_for_rekeyed_child() in quick_mode taskMartin Willi2013-04-031-18/+24
* Reuse reqid of an existing Quick Mode, even if it has been rekeyedMartin Willi2013-04-031-1/+2
* Fixed some typos, courtesy of codespellTobias Brunner2013-03-251-1/+1
* Delete IKE_SAs if responder does not initiate XAuth exchange within a certain...Tobias Brunner2013-03-192-2/+16
* Added xauth-noauth pluginTobias Brunner2013-03-191-29/+37
* Make check whether to use IKEv1 fragmentation more readableMartin Willi2013-03-141-5/+14
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-2/+2
* Add missing XAuthRespPSK switch case to IKEv1 key derivationMartin Willi2013-03-121-0/+1
* Ignore fourth Qick Mode message sent by Windows servers.Martin Willi2013-03-111-0/+9
* As Quick Mode initiator, select a subset of the proposed and the returned TSMartin Willi2013-03-071-4/+11