aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev1
Commit message (Expand)AuthorAgeFilesLines
* ikev1: Activate DELETE tasks before other tasks in state ESTABLISHEDTobias Brunner2016-05-061-7/+7
* ikev1: Don't use rekeyed CHILD_SAs for rekey detectionTobias Brunner2016-05-061-4/+4
* ikev1: Don't call updown hook etc. when deleting redundant CHILD_SAsTobias Brunner2016-05-061-0/+1
* vici list-conns sends reauthentication and rekeying time informationAndreas Steffen2016-05-041-1/+1
* Use standard unsigned integer typesAndreas Steffen2016-03-2416-99/+99
* credential-manager: Make online revocation checks optional for public key enu...Tobias Brunner2016-03-101-1/+1
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-032-3/+1
* ikev1: Send and verify IPv6 addresses correctlyTobias Brunner2016-03-031-26/+11
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-1/+17
* ikev1: Avoid modifying local auth config when detecting pubkey methodTobias Brunner2016-03-031-1/+1
* ikev1: Log successful authentication with signature schemeThomas Egerer2016-02-011-1/+1
* mode-config: Reassign migrated virtual IP if client requests %anyTobias Brunner2015-11-121-1/+3
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-102-3/+3
* ikev1: Fix calculation of DPD timeoutTobias Brunner2015-11-091-0/+2
* xauth: Call authorize() hook also when xauth-noauth is usedTobias Brunner2015-11-091-2/+8
* ikev1: Handle queued INFORMATIONAL message after receiving the last AM requestTobias Brunner2015-10-301-0/+16
* ikev1: Queue INFORMATIONAL request if AM is not complete yetTobias Brunner2015-10-301-6/+13
* ikev1: Handle queued TRANSACTION messages only after processing repliesTobias Brunner2015-10-301-1/+2
* ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yetTobias Brunner2015-10-301-17/+27
* ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM mes...Tobias Brunner2015-10-301-0/+32
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-9/+11
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Fix handling of overlapping Quick Mode exchangesTobias Brunner2015-08-203-2/+70
* ikev1: Pass current auth-cfg when looking for key to determine auth methodTobias Brunner2015-08-191-1/+1
* ikev1: Trigger children_migrate event if CHILD_SAs are adoptedTobias Brunner2015-05-211-0/+5
* utils: Use chunk_equals_const() for all cryptographic purposesMartin Willi2015-04-141-1/+1
* child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAsTobias Brunner2015-03-252-2/+3
* ikev1: Inverse check when applying received KE value during Quick Mode5.3.0rc1Martin Willi2015-03-241-1/+1
* diffie-hellman: Add a bool return value to set_other_public_value()Martin Willi2015-03-232-3/+11
* diffie-hellman: Add a bool return value to get_my_public_value()Martin Willi2015-03-233-5/+21
* encoding: Allow ke_payload_create_from_diffie_hellman() to failMartin Willi2015-03-232-5/+24
* diffie-hellman: Use bool instead of status_t as get_shared_secret() return valueMartin Willi2015-03-231-2/+2
* ikev1: Make sure SPIs in an IKEv1 DELETE payload match the current SATobias Brunner2015-03-231-0/+39
* ikev1: Adopt virtual IPs on new IKE_SA during re-authenticationTobias Brunner2015-03-191-29/+83
* ikev1: Mark rekeyed CHILD_SAs as INSTALLEDTobias Brunner2015-03-191-0/+2
* ikev1: Set protocol ID and SPIs in INITIAL-CONTACT notification payloadsTobias Brunner2015-03-061-2/+13
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-201-4/+2
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-201-5/+5
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-14/+13
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-203-5/+7
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-6/+3
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-203-2/+38
* ikev1: Send INITIAL_CONTACT notify in Main ModeThomas Egerer2014-10-301-0/+28
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-101-12/+27
* ikev1: Move defragmentation to message_tTobias Brunner2014-10-101-167/+16
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-101-55/+6
* message: fragment() generates message and fragments and caches themTobias Brunner2014-10-101-31/+11
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-132/+118
* ikev1: Fix handling of UNITY_LOAD_BALANCETobias Brunner2014-10-071-3/+3
* ikev1: Don't queue more than one mode config or XAuth taskTobias Brunner2014-10-071-7/+22