aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2/tasks
Commit message (Expand)AuthorAgeFilesLines
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-102-4/+4
* ike-natd: Create fake NAT-D payloads in a more static wayTobias Brunner2015-11-091-20/+8
* ike-mobike: Send retransmits to the current local and remote addressesTobias Brunner2015-10-301-1/+5
* child-rekey: Don't add a REKEY_SA notify if the child-create task is deleting...Tobias Brunner2015-08-211-6/+9
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-rekey: Remove redundant migrate() call for child-create sub-taskTobias Brunner2015-08-211-2/+1
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* ike-rekey: Fix cleanup() callTobias Brunner2015-07-271-2/+2
* ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA responseTobias Brunner2015-07-271-1/+2
* ike-rekey: Reset IKE_SA on the bus after destroying new IKE_SATobias Brunner2015-07-271-16/+15
* ikev2: Enforce remote authentication config before proceeding with own authen...Martin Willi2015-06-051-0/+44
* child-create: Destroy nonceg in migrate()Tobias Brunner2015-05-051-1/+2
* child-create: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-14/+12
* ike-init: Fix error handling if nonceg can't be createdTobias Brunner2015-05-051-13/+21
* ike-init: Fix compiler warningTobias Brunner2015-05-051-2/+0
* ike-init: Make nonceg a member of ike_init structReto Buerki2015-05-041-20/+17
* child-create: Make nonceg a member of child_create structReto Buerki2015-05-041-12/+16
* Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-041-2/+6
* ike-vendor: Add some Microsoft vendor IDsTobias Brunner2015-04-211-0/+10
* utils: Use chunk_equals_const() for all cryptographic purposesMartin Willi2015-04-141-1/+1
* diffie-hellman: Add a bool return value to set_other_public_value()Martin Willi2015-03-232-3/+42
* diffie-hellman: Add a bool return value to get_my_public_value()Martin Willi2015-03-231-0/+1
* encoding: Allow ke_payload_create_from_diffie_hellman() to failMartin Willi2015-03-232-7/+34
* ikev2: Immediately initiate queued tasks after establishing rekeyed IKE_SAMartin Willi2015-03-181-0/+29
* ikev2: Consider signature schemes in rightauth when sending hash algorithmsTobias Brunner2015-03-041-14/+54
* ikev2: Add a global option to disable RFC 7427 signature authenticationTobias Brunner2015-03-041-2/+12
* ikev2: Enable signature authentication by transmitting supported hash algorithmsTobias Brunner2015-03-041-4/+83
* ikev2: Schedule a timeout for the delete message following passive IKE rekeyingMartin Willi2015-03-031-0/+6
* ikev2: Schedule a make-before-break completion task to delete old IKE_SAMartin Willi2015-02-203-0/+160
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-201-4/+2
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-201-2/+2
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-8/+7
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-202-3/+3
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-7/+4
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-201-2/+2
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-201-8/+19
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-203-2/+38
* ikev2: Only touch the DH object if we have a matching proposalTobias Brunner2014-12-231-11/+17
* ikev2: Fix handling of more than one hash-and-URL certificate payloadsTobias Brunner2014-12-041-2/+2
* ikev2: Fix ike_rekey switch statement broken with last commitMartin Willi2014-11-241-1/+1
* ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekeyMartin Willi2014-11-211-0/+1
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* ikev2: Negotiate support for IKEv2 fragmentationTobias Brunner2014-10-101-0/+23
* ike-mobike: Allow calling transmit() even when not currently path probingTobias Brunner2014-09-121-5/+17
* ike-mobike: Return FALSE in transmit() if no path was availableTobias Brunner2014-09-122-3/+7
* ike-mobike: Add method to enable path probingTobias Brunner2014-09-122-0/+12
* ike-mobike: Skip peer addresses we can't send packets to when checking pathsTobias Brunner2014-09-121-5/+18
* ikev2: Migrate number of pending MOBIKE updatesTobias Brunner2014-09-121-0/+5
* ikev2: Properly keep track of pending MOBIKE updatesTobias Brunner2014-09-121-8/+27