aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1
Commit message (Expand)AuthorAgeFilesLines
* Add alerts for sent/received message retransmissions and timeoutMartin Willi2012-11-291-0/+3
* Log sent vendor IDs for IKEv1Tobias Brunner2012-11-021-0/+1
* Fixed log message when no shared secret is found during IKEv1 Main ModeTobias Brunner2012-10-291-1/+1
* Remove all ESP proposals with non-matching DH group during Quick ModeTobias Brunner2012-10-241-10/+22
* Moved data structures to new collections subfolderTobias Brunner2012-10-242-2/+2
* Raise a bus alert when IKE message body parsing failsMartin Willi2012-10-241-0/+2
* Respect IKE version while selecting an ike_cfg as responderMartin Willi2012-10-241-1/+2
* Missed one in 6c10ceceTobias Brunner2012-09-281-0/+2
* Request is never NULL when responding with an INFORMATIONAL messageTobias Brunner2012-09-281-1/+1
* Completed state handling in isakmp_cert_preTobias Brunner2012-09-281-0/+4
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-23/+28
* Use the vararg list constructor in quick mode taskMartin Willi2012-09-181-16/+8
* Change traffic selectors during Quick Mode in case of a NAT in transport modeTobias Brunner2012-09-141-9/+19
* Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is emptyMartin Willi2012-09-111-29/+14
* Don't use host address for dynamic TS in IKEv1 if a virtual IP was expectedMartin Willi2012-09-111-40/+57
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-111-20/+6
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-2/+20
* Trigger ike_updown event caused by retransmits only after reestablish() has b...Tobias Brunner2012-09-061-5/+1
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-051-0/+4
* In mode_config, destroy temporary pool list instead of the virtual IP list twiceMartin Willi2012-09-051-1/+1
* Merge branch 'multi-vip'Martin Willi2012-08-317-62/+199
|\
| * Request and acquire multiple virtual IPs in IKEv1 Mode ConfigMartin Willi2012-08-301-47/+61
| * Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-301-2/+9
| * Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-301-11/+35
| * Support multiple address pools configured on a peer_cfgMartin Willi2012-08-306-6/+45
| * Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-307-28/+81
* | Fall back to local address as IKEv1 identity if nothing else is configuredTobias Brunner2012-08-241-2/+14
|/
* Merge branch 'android-ndk'Tobias Brunner2012-08-131-1/+2
|\
| * Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-1/+2
| * Make the UDP ports charon listens for packets on (and uses as source ports) c...Tobias Brunner2012-08-081-1/+1
* | Use actual daemon name to enable XAuth/PSK with aggressive modeMartin Willi2012-08-101-2/+3
|/
* Remove queued IKEv1 message before processing itMartin Willi2012-08-081-3/+5
* Block XAuth transaction on established IKE_SAs, but allow Mode ConfigMartin Willi2012-08-031-1/+1
* Lookup IKEv1 PSK even if the peer identity is not knownMartin Willi2012-07-311-1/+1
* Implement late peer config switching after XAuth authenticationMartin Willi2012-07-261-15/+80
* Check if XAuth round complies to configured authentication roundMartin Willi2012-07-261-7/+18
* Merge auth config items added from XAuth backends to IKE_SAMartin Willi2012-07-261-0/+1
* Refactored error handling in keymat_v1_tMartin Willi2012-07-161-25/+27
* Cleaned up memory management and return values for encryption payloadMartin Willi2012-07-161-1/+4
* Add a return value to hasher_t.allocate_hash()Martin Willi2012-07-162-8/+31
* Add a return value to keymat_v1_t.{get,update,confirm}_ivMartin Willi2012-07-162-13/+31
* Add a return value to crypter_t.set_key()Martin Willi2012-07-161-3/+6
* Add a return value to crypter_t.decrypt()Martin Willi2012-07-161-2/+1
* Add a return value to crypter_t.encryptMartin Willi2012-07-161-2/+1
* Check rng return value when generating IKEv1 message IDsTobias Brunner2012-07-161-8/+20
* Check rng return value when generating fake NAT detection payloadsTobias Brunner2012-07-161-2/+3
* Nonce: Let get_nonce, allocate_nonce return booleanReto Buerki2012-07-162-2/+12
* Add a return value to prf_t.set_key()Martin Willi2012-07-161-10/+25
* Add a return value to prf_t.allocate_bytes()Martin Willi2012-07-161-11/+45