aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2/tasks
Commit message (Expand)AuthorAgeFilesLines
* Defer CHILD_SA rekeying if allocating an SPI failsMartin Willi2013-04-031-12/+25
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-2/+2
* Merge branch 'multi-eap'Martin Willi2013-03-011-28/+40
|\
| * Apply a mutual EAP auth_cfg not before the EAP method completesMartin Willi2013-02-261-1/+8
| * Be a little more verbose why a peer_cfg is inacceptableMartin Willi2013-02-261-8/+16
| * Refactor auth_cfg applying to a common functionMartin Willi2013-02-261-20/+17
* | Merge branch 'tfc-notify'Martin Willi2013-03-011-0/+9
|\ \ | |/ |/|
| * Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
* | Add a global return_success() method implementationMartin Willi2013-02-141-8/+2
|/
* Refactored IKEv2 cert/certreq payload processing to multiple functionsMartin Willi2013-01-111-112/+141
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-202-2/+2
* Raise an alert if IKE SA is keptAdrian-Ken Rueegsegger2012-12-201-0/+1
* Raise an alert if allocating virtual IPs failsMartin Willi2012-12-191-0/+2
* Raise an alert if kernel policy installation failsMartin Willi2012-12-191-0/+2
* Raise an alert if kernel SA installation failsMartin Willi2012-12-191-0/+2
* Raise an alert on traffic selector mismatchMartin Willi2012-12-191-0/+2
* Raise alerts when enforcing IKE_SA unique policyMartin Willi2012-12-191-0/+1
* Raise an alert if CHILD_SA proposals mismatchMartin Willi2012-12-191-0/+2
* Raise an alert if IKE proposals mismatchMartin Willi2012-12-191-0/+5
* Raise an alert of generating local authentication data failsMartin Willi2012-12-191-6/+10
* Fix GPL license header to properly "sed" itMartin Willi2012-11-301-1/+1
* Moved packet_t and tun_device_t to networking folderTobias Brunner2012-10-241-1/+1
* Made IP address enumeration more flexibleTobias Brunner2012-09-213-3/+3
* Don't ignore loopback devices and allow addresses on them being enumeratedTobias Brunner2012-09-213-3/+3
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-39/+61
* Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiatorTobias Brunner2012-09-181-1/+2
* Don't use host address for dynamic TS in IKEv2 if a virtual IP was expectedMartin Willi2012-09-111-1/+33
* Send FAILED_CP_REQUIRED if a configuration payload was expected, but not rece...Martin Willi2012-09-111-0/+9
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-111-20/+6
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-1/+26
* Add uniqueids=never to ignore INITIAL_CONTACT notifiesTobias Brunner2012-09-101-1/+2
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-051-0/+4
* Request and acquire multiple virtual IPs in IKEv2 configuration payloadMartin Willi2012-08-301-49/+67
* Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-301-2/+9
* Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-301-11/+36
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-3/+11
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-303-55/+68
* Moved packet_t to libstrongswanTobias Brunner2012-08-081-1/+1
* Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-2/+6
* Make the UDP ports charon listens for packets on (and uses as source ports) c...Tobias Brunner2012-08-081-5/+5
* Add a return value to hasher_t.allocate_hash()Martin Willi2012-07-162-9/+38
* Check rng return value when generating ME CONNECT_ID and KEYTobias Brunner2012-07-161-2/+14
* Check rng return value when generating COOKIE2 during MOBIKETobias Brunner2012-07-161-6/+11
* Check rng return value when generating fake NAT detection payloadsTobias Brunner2012-07-161-2/+2
* Nonce: Let get_nonce, allocate_nonce return booleanReto Buerki2012-07-162-3/+19
* Simplify NAT-D payload creation if UDP encapsulation is forcedTobias Brunner2012-07-131-2/+2
* Ignore a received %any virtual IP for installationMartin Willi2012-06-261-1/+2
* Try to rekey without KE exchange if peer returns INVALID_KE_PAYLOAD(NONE)Martin Willi2012-06-081-1/+8
* As responder, enforce the same configuration while rekeying CHILD_SAsMartin Willi2012-06-063-1/+19
* Fix MOBIKE address update if responder address changed.Tobias Brunner2012-05-251-2/+2
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-16 12:09:41 +0000