aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2/tasks/child_create.c
Commit message (Expand)AuthorAgeFilesLines
* child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTHTobias Brunner2016-03-041-0/+4
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-2/+1
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-2/+2
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* child-create: Destroy nonceg in migrate()Tobias Brunner2015-05-051-1/+2
* child-create: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-14/+12
* child-create: Make nonceg a member of child_create structReto Buerki2015-05-041-12/+16
* Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-041-2/+6
* diffie-hellman: Add a bool return value to set_other_public_value()Martin Willi2015-03-231-2/+22
* encoding: Allow ke_payload_create_from_diffie_hellman() to failMartin Willi2015-03-231-3/+17
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-201-1/+1
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-7/+4
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-201-2/+24
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-041-11/+11
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-121-2/+2
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-18/+16
* ikev2: use protocol of selected proposal to delete a failed CHILD_SAMartin Willi2013-06-201-2/+2
* ikev2: properly fall back to tunnel mode if transport/BEET mode not configuredMartin Willi2013-06-191-2/+8
* ikev2: support transport mode over NATMartin Willi2013-06-191-36/+150
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+8
* ikev2: if installing a CHILD_SA as initiator fails, notify the responderMartin Willi2013-06-111-2/+36
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-7/+0
* Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSENMartin Willi2013-05-061-0/+20
* Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-201-1/+1
* Raise an alert if IKE SA is keptAdrian-Ken Rueegsegger2012-12-201-0/+1
* Raise an alert if kernel policy installation failsMartin Willi2012-12-191-0/+2
* Raise an alert if kernel SA installation failsMartin Willi2012-12-191-0/+2
* Raise an alert on traffic selector mismatchMartin Willi2012-12-191-0/+2
* Raise an alert if CHILD_SA proposals mismatchMartin Willi2012-12-191-0/+2
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-39/+61
* Don't use host address for dynamic TS in IKEv2 if a virtual IP was expectedMartin Willi2012-09-111-1/+33
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-1/+26
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-47/+40
* Nonce: Let get_nonce, allocate_nonce return booleanReto Buerki2012-07-161-1/+7
* Try to rekey without KE exchange if peer returns INVALID_KE_PAYLOAD(NONE)Martin Willi2012-06-081-1/+8
* As responder, enforce the same configuration while rekeying CHILD_SAsMartin Willi2012-06-061-1/+9
* Use nonce_gen instead of rng to generate noncesAdrian-Ken Rueegsegger2012-05-181-9/+9
* Use name from initialization to access settings in libcharon.Tobias Brunner2012-05-031-2/+2
* Separated libcharon/sa directory with ikev1 and ikev2 subfoldersMartin Willi2012-03-201-0/+1333
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-05 06:55:08 +0000