aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2/tasks/child_create.c
Commit message (Expand)AuthorAgeFilesLines
* child-create: Don't consider a DH group mismatch as failure as responderTobias Brunner2017-09-181-1/+0
* child-create: Don't log CHILD_SA initiation until we know the unique IDTobias Brunner2017-08-071-11/+13
* child-rekey: Don't install outbound SA in case of lost collisionsTobias Brunner2017-08-071-15/+30
* child-sa: Install outbound SA immediately if kernel supports SPIs on policiesTobias Brunner2017-08-071-3/+3
* ike: Trigger CHILD_INSTALLED state change after corresponding log messageTobias Brunner2017-07-271-6/+6
* child-sa: Remove state to track installation of half the SA againTobias Brunner2017-05-231-8/+1
* ikev2: Delay installation of outbound SAs during rekeying on the responderTobias Brunner2017-05-231-7/+24
* child-sa: Change API used to set/install policiesTobias Brunner2017-05-231-12/+14
* child-create: Trigger NARROW_RESPONDER_POST hook before installing SAsTobias Brunner2017-05-231-25/+21
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-231-3/+3
* ikev2: Send derived CHILD_SA keys to the busTobias Brunner2016-10-041-26/+43
* child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is receivedTobias Brunner2016-06-171-4/+33
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-171-2/+4
* child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-171-1/+1
* child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SATobias Brunner2016-06-171-2/+2
* child-create: Handle TEMPORARY_FAILURE notify as failureTobias Brunner2016-06-171-0/+1
* Use standard unsigned integer typesAndreas Steffen2016-03-241-14/+14
* child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTHTobias Brunner2016-03-041-0/+4
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-2/+1
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-2/+2
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* child-create: Destroy nonceg in migrate()Tobias Brunner2015-05-051-1/+2
* child-create: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-14/+12
* child-create: Make nonceg a member of child_create structReto Buerki2015-05-041-12/+16
* Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-041-2/+6
* diffie-hellman: Add a bool return value to set_other_public_value()Martin Willi2015-03-231-2/+22
* encoding: Allow ke_payload_create_from_diffie_hellman() to failMartin Willi2015-03-231-3/+17
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-201-1/+1
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-7/+4
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-2/+24
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-041-11/+11
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-2/+2
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-18/+16
* ikev2: use protocol of selected proposal to delete a failed CHILD_SAMartin Willi2013-06-201-2/+2
* ikev2: properly fall back to tunnel mode if transport/BEET mode not configuredMartin Willi2013-06-191-2/+8
* ikev2: support transport mode over NATMartin Willi2013-06-191-36/+150
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+8
* ikev2: if installing a CHILD_SA as initiator fails, notify the responderMartin Willi2013-06-111-2/+36
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-7/+0
* Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSENMartin Willi2013-05-061-0/+20
* Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-201-1/+1
* Raise an alert if IKE SA is keptAdrian-Ken Rueegsegger2012-12-201-0/+1
* Raise an alert if kernel policy installation failsMartin Willi2012-12-191-0/+2
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-28 08:21:46 +0000