aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2/tasks
Commit message (Expand)AuthorAgeFilesLines
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-171-11/+3
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeyingMartin Willi2014-03-311-0/+12
* ikev2: Cache all received attribute certificates to auth configMartin Willi2014-03-311-1/+27
* ikev2: Send all known and valid attribute certificates for subject certMartin Willi2014-03-311-0/+46
* ikev2: Slightly refactor certificate payload construction to separate functionsMartin Willi2014-03-311-37/+56
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-124-5/+5
* ikev2: Add Cisco FRAGMENTATION vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Copyright vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Delete Reason vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Use a more dynamic vendor ID database, as we use with IKEv1Martin Willi2014-01-231-16/+57
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* ikev2: Fix segfault when reestablishing CHILD_SAs due to closeaction=restart|...Tobias Brunner2013-08-131-3/+4
* Fix various API doc issues and typosTobias Brunner2013-07-181-1/+1
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-172-23/+25
* Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restartTobias Brunner2013-07-011-2/+2
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-011-1/+2
* ikev2: keep the CHILD_SA we delete as initiator in the list to destroyMartin Willi2013-06-251-6/+5
* ike: Force NAT-T/UDP encapsulation if kernel interface requires itTobias Brunner2013-06-211-3/+16
* ikev2: use protocol of selected proposal to delete a failed CHILD_SAMartin Willi2013-06-201-2/+2
* ikev2: properly fall back to tunnel mode if transport/BEET mode not configuredMartin Willi2013-06-191-2/+8
* ikev2: support transport mode over NATMartin Willi2013-06-191-36/+150
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-8/+8
* ikev2: if installing a CHILD_SA as initiator fails, notify the responderMartin Willi2013-06-111-2/+36
* ikev2: raise LOCAL_AUTH_FAILED when receiving INFORMATIONAL with AUTH_FAILEDMartin Willi2013-06-111-0/+8
* ikev2: if responder authentication fails, send AUTHENTICATION_FAILEDMartin Willi2013-06-111-0/+29
* Allow IPComp on NATed connections, both for IKEv1 and IKEv2Martin Willi2013-06-111-7/+0
* Properly compare CHILD_SAs during rekey collisionTobias Brunner2013-06-111-5/+12
* Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILUREMartin Willi2013-05-151-0/+1
* Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSENMartin Willi2013-05-061-0/+20
* Raise an ALERT_PROPOSAL_MISMATCH_IKE also when receiving NO_PROPOSAL_CHOSENMartin Willi2013-05-061-0/+20
* emit a single assig_vips bus message for all VIPsAndreas Steffen2013-04-061-0/+2
* Defer CHILD_SA rekeying if allocating an SPI failsMartin Willi2013-04-031-12/+25
* child_sa_t.get_usestats() can additionally return the number of processed pac...Martin Willi2013-03-141-2/+2
* Merge branch 'multi-eap'Martin Willi2013-03-011-28/+40
|\
| * Apply a mutual EAP auth_cfg not before the EAP method completesMartin Willi2013-02-261-1/+8
| * Be a little more verbose why a peer_cfg is inacceptableMartin Willi2013-02-261-8/+16
| * Refactor auth_cfg applying to a common functionMartin Willi2013-02-261-20/+17
* | Merge branch 'tfc-notify'Martin Willi2013-03-011-0/+9
|\ \ | |/ |/|
| * Send ESP_TFC_PADDING_NOT_SUPPORTED if the used kernel doesn't support itMartin Willi2013-03-011-0/+9
* | Add a global return_success() method implementationMartin Willi2013-02-141-8/+2
|/
* Refactored IKEv2 cert/certreq payload processing to multiple functionsMartin Willi2013-01-111-112/+141
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-202-2/+2
* Raise an alert if IKE SA is keptAdrian-Ken Rueegsegger2012-12-201-0/+1
* Raise an alert if allocating virtual IPs failsMartin Willi2012-12-191-0/+2
* Raise an alert if kernel policy installation failsMartin Willi2012-12-191-0/+2
* Raise an alert if kernel SA installation failsMartin Willi2012-12-191-0/+2
* Raise an alert on traffic selector mismatchMartin Willi2012-12-191-0/+2
* Raise alerts when enforcing IKE_SA unique policyMartin Willi2012-12-191-0/+1
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-19 16:40:09 +0000