tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Initiate quick mode rekeying with narrowed traffic selectors	Martin Willi	2012-06-08	1	-1/+18
\|
*	Use traffic selectors passed to quick mode constructor as initiator	Martin Willi	2012-06-08	1	-2/+10
\|
*	Instead of rekeying, delete a quick mode if we have a fresher instance	Martin Willi	2012-06-08	1	-6/+42
\| \| \| \| \| \| \| \|	If both peers initiate quick mode rekeying simultaneously, we end up with duplicate SAs for a configuration. This can't be avoided, nor do the standards provide an appropriate solution. Instead of closing one SA immediately, we keep both. But once rekeying triggers, we don't refresh the SA with the shorter soft lifetime, but delete it.
*	Added log message if peer does not accept/provide IPComp proposal.	Tobias Brunner	2012-05-24	1	-2/+12
\|
*	Added support to negotiate IPComp during Quick Mode.	Tobias Brunner	2012-05-24	1	-11/+91
\|
*	Added support for IKEv1 IPComp proposals in SA payload.	Tobias Brunner	2012-05-24	3	-6/+6
\|
*	Fix memleak during Quick Mode in case no SPI can be allocated from kernel.	Tobias Brunner	2012-05-24	1	-8/+8
\|
*	Apply IDir before deriving keys as aggressive initiator	Martin Willi	2012-05-23	1	-4/+4
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Check if we actually have an initiating packet to free while processing ↵	Martin Willi	2012-05-23	1	-1/+1
\| \| \| \|	responses
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	4	-24/+85
\|
*	Cancel pending retransmits when flushing active task queue	Martin Willi	2012-05-21	1	-0/+4
\|
*	Cancel active quick mode task when receiving INFORMATIONAL error	Martin Willi	2012-05-21	1	-0/+30
\|
*	Flush task queues explicitly, not implicitly if task returns ALREADY_DONE	Martin Willi	2012-05-21	5	-10/+18
\|
*	Make task managers flush_queue() method public	Martin Willi	2012-05-21	1	-11/+25
\|
*	Remove executable flag from source files.	Tobias Brunner	2012-05-18	11	-0/+0
\|
*	Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵	Tobias Brunner	2012-05-18	18	-19/+19
\| \| \| \|	tasks etc.).
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	2	-12/+12
\| \| \| \| \|	Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
*	Add create_nonce_gen function to keymat interface	Adrian-Ken Rueegsegger	2012-05-18	1	-0/+7
\| \| \| \|	This function returns a nonce generator object.
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	1	-6/+14
\|
*	Moved IKEv1 DPD processing to task manager, fix sequence issues	Martin Willi	2012-05-15	3	-73/+72
\|
*	Schedule a DPD timeout job that enforces the IKE message timeout policy	Martin Willi	2012-05-15	1	-0/+13
\|
*	Send unanswered follow up R_U_THERE messages with the same DPD seq	Martin Willi	2012-05-15	1	-1/+7
\|
*	Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL	Martin Willi	2012-05-15	1	-11/+0
\|
*	allow private algorithms	Andreas Steffen	2012-05-05	2	-4/+16
\|
*	vendor ID cosmetics	Andreas Steffen	2012-05-05	1	-2/+2
\|
*	Use name from initialization to access settings in libcharon.	Tobias Brunner	2012-05-03	3	-6/+7
\| \| \| \|	Also fixes several whitespace errors.
*	Added another bunch of commonly used IKEv1 NATT vendor IDs	Martin Willi	2012-04-04	1	-1/+19
\|
*	Store authentication info of a XAUTH round on IKE_SA	Martin Willi	2012-03-22	1	-0/+16
\|
*	Reply with received configuration payload identifier in Mode Config	Martin Willi	2012-03-20	1	-0/+8
\|
*	Implemented handling of UNITY_LOAD_BALANCE as reauthentication.	Tobias Brunner	2012-03-20	2	-3/+28
\|
*	Parse IKEv1 Cisco Load Balancing notify (can't act on it yet).	Tobias Brunner	2012-03-20	1	-2/+19
\|
*	Compiler warning fixed.	Tobias Brunner	2012-03-20	1	-2/+6
\|
*	Use correct enum values to detect three message tasks for retransmission	Martin Willi	2012-03-20	1	-2/+2
\|
*	Use UDP encapsulation even in non-NAT situation if initiator requests it	Martin Willi	2012-03-20	1	-13/+14
\|
*	Support inactivity timeout in IKEv1 CHILD_SAs	Martin Willi	2012-03-20	1	-1/+24
\|
*	Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasher	Martin Willi	2012-03-20	1	-14/+37
\|
*	Select public key auth method by checking what key we have	Martin Willi	2012-03-20	2	-4/+99
\|
*	Support ECDSA signatures in IKEv1 pubkey authenticator	Martin Willi	2012-03-20	2	-17/+25
\|
*	Exchange certificates when using IKEv1 ECDSA authentication	Martin Willi	2012-03-20	2	-0/+6
\|
*	Setting message ID on task manager sets DPD sequence numbers in IKEv1	Martin Willi	2012-03-20	1	-0/+8
\|
*	Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵	Martin Willi	2012-03-20	1	-2/+4
\| \| \| \|	encrypted
*	Pass IKEv1 specific keymat to ike_keys hook	Martin Willi	2012-03-20	1	-2/+2
\|
*	Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper	Martin Willi	2012-03-20	4	-21/+20
\|
*	Invoke bus_t.narrow hook in quick mode exchange	Martin Willi	2012-03-20	1	-7/+36
\|
*	Invoke authorization hooks for IKEv1 connections	Martin Willi	2012-03-20	3	-25/+95
\|
*	Don't invoke a child_updown hook when a quick mode to delete has been rekeyed	Martin Willi	2012-03-20	1	-1/+6
\|
*	Invoke child_rekey hook instead of child_updown when rekeying a quick mode	Martin Willi	2012-03-20	3	-2/+36
\|
*	Fix "incoming" flag passed to bus_t.message() hook	Martin Willi	2012-03-20	1	-1/+1
\|
*	Continue with next exchange after sending an INFORMATIONAL	Martin Willi	2012-03-20	1	-1/+2
\|