tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-1/+1
\|
*	libhydra: Move kernel interface to libcharon	Tobias Brunner	2016-03-03	1	-8/+5
\| \| \| \|	This moves hydra->kernel_interface to charon->kernel.
*	ike-mobike: Send retransmits to the current local and remote addresses	Tobias Brunner	2015-10-30	1	-1/+5
\| \| \| \| \| \|	These might have changed by a peer-initiated MOBIKE address update. Fixes #1125.
*	utils: Use chunk_equals_const() for all cryptographic purposes	Martin Willi	2015-04-14	1	-1/+1
\|
*	ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA manager	Martin Willi	2015-02-20	1	-8/+19
\|
*	ike-mobike: Allow calling transmit() even when not currently path probing	Tobias Brunner	2014-09-12	1	-5/+17
\| \| \| \|	Path probing is enabled if the current path is not available anymore.
*	ike-mobike: Return FALSE in transmit() if no path was available	Tobias Brunner	2014-09-12	1	-2/+5
\|
*	ike-mobike: Add method to enable path probing	Tobias Brunner	2014-09-12	1	-0/+7
\|
*	ike-mobike: Skip peer addresses we can't send packets to when checking paths	Tobias Brunner	2014-09-12	1	-5/+18
\|
*	ikev2: Migrate number of pending MOBIKE updates	Tobias Brunner	2014-09-12	1	-0/+5
\| \| \| \| \|	This will probably never be more than 1 since we only have one task queued at a time and we don't migrate running tasks.
*	ikev2: Properly keep track of pending MOBIKE updates	Tobias Brunner	2014-09-12	1	-8/+27
\| \| \| \| \| \| \| \|	Because we only queue one MOBIKE task at a time, but destroy superfluous ones only after we already increased the counter for pending MOBIKE updates, we have to reduce the counter when such tasks are destroyed. Otherwise, the queued task would assume another task is queued when it is running and ignore any successful response.
*	payload: Use common prefixes for all payload type identifiers	Martin Willi	2014-06-04	1	-1/+1
\| \| \| \| \|	The old identifiers did not use a proper namespace and often clashed with other defines.
*	Made IP address enumeration more flexible	Tobias Brunner	2012-09-21	1	-1/+1
\| \| \| \|	Also added an option to enumerate addresses on ignored interfaces.
*	Don't ignore loopback devices and allow addresses on them being enumerated	Tobias Brunner	2012-09-21	1	-1/+1
\|
*	Support multiple virtual IPs on peer_cfg and ike_sa classes	Martin Willi	2012-08-30	1	-3/+16
\|
*	Replaced usages of CHARON_*_PORT with calls to get_port().	Tobias Brunner	2012-08-08	1	-2/+6
\|
*	Make the UDP ports charon listens for packets on (and uses as source ports) ↵	Tobias Brunner	2012-08-08	1	-5/+5
\| \| \| \|	configurable.
*	Check rng return value when generating COOKIE2 during MOBIKE	Tobias Brunner	2012-07-16	1	-6/+11
\|
*	Fix MOBIKE address update if responder address changed.	Tobias Brunner	2012-05-25	1	-2/+2
\| \| \| \| \|	Use the source address of the current MOBIKE message as peer address instead of assuming the address cached on the IKE_SA is still valid.
*	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	1	-15/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
*	Separated libcharon/sa directory with ikev1 and ikev2 subfolders	Martin Willi	2012-03-20	1	-0/+651