index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libcharon
/
sa
/
ikev2
/
tasks
Commit message (
Expand
)
Author
Age
Files
Lines
*
ikev2: Store proposal on IKE_SA before creating DH object
Tobias Brunner
2016-09-06
1
-2
/
+5
*
child-rekey: Only rekey installed CHILD_SAs
Tobias Brunner
2016-06-17
1
-7
/
+14
*
child-rekey: Ignore failed colliding CHILD_SA rekeyings
Tobias Brunner
2016-06-17
1
-1
/
+10
*
child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is received
Tobias Brunner
2016-06-17
1
-4
/
+33
*
ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SA
Tobias Brunner
2016-06-17
1
-14
/
+35
*
ike: Add configuration option to switch to preferring supplied proposals over...
Tobias Brunner
2016-06-17
2
-4
/
+8
*
child-cfg: Add option to prefer supplied proposals over locally configured ones
Tobias Brunner
2016-06-17
1
-1
/
+1
*
ike-cfg: Add option to prefer supplied proposals over locally configured ones
Tobias Brunner
2016-06-17
1
-1
/
+1
*
ike-rekey: Make sure to ignore task when detecting collisions if ike-init sub...
Tobias Brunner
2016-06-17
1
-1
/
+2
*
ike-rekey: Handle undetected collisions also if delete is delayed
Tobias Brunner
2016-06-17
1
-16
/
+26
*
ike-rekey: There is no passive reauth task, so it will never collide with one
Tobias Brunner
2016-06-17
1
-3
/
+2
*
ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SA
Tobias Brunner
2016-06-17
1
-56
/
+64
*
ike-rekey: Properly handle situation if the peer did not notice the rekey col...
Tobias Brunner
2016-06-17
1
-0
/
+11
*
ike-delete: Handle deletes while rekeying differently if there was a collision
Tobias Brunner
2016-06-17
1
-2
/
+40
*
ike-rekey: Add method to check if there was a rekey collision
Tobias Brunner
2016-06-17
2
-1
/
+17
*
child-delete: Reply as usual when concurrently rekeying the IKE_SA
Tobias Brunner
2016-06-17
1
-5
/
+1
*
child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SA
Tobias Brunner
2016-06-17
1
-2
/
+2
*
ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...
Tobias Brunner
2016-06-17
1
-1
/
+8
*
ike-rekey: Handle TEMPORARY_FAILURE notify
Tobias Brunner
2016-06-17
1
-8
/
+22
*
ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SA
Tobias Brunner
2016-06-17
1
-0
/
+5
*
ike-delete: No need to wait for a response in case of concurrent deletes
Tobias Brunner
2016-06-17
1
-14
/
+0
*
ikev2: Add a new state to track rekeyed IKE_SAs
Tobias Brunner
2016-06-17
2
-31
/
+16
*
ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messages
Tobias Brunner
2016-06-17
1
-8
/
+13
*
ike-rekey: Establish new IKE_SA earlier as responder, but only if no collision
Tobias Brunner
2016-06-17
1
-3
/
+8
*
child-delete: Check if the deleted CHILD_SA is the redundant SA of a collision
Tobias Brunner
2016-06-17
1
-4
/
+39
*
child-rekey: Add method to check for the redundant SA created in a collision
Tobias Brunner
2016-06-17
2
-18
/
+37
*
child-rekey: Don't change state to INSTALLED if it was already REKEYING
Tobias Brunner
2016-06-17
1
-3
/
+5
*
ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeying
Tobias Brunner
2016-06-17
2
-9
/
+12
*
child-rekey: Use more appropriate error notifies if CHILD_SA is not found or ...
Tobias Brunner
2016-06-17
1
-3
/
+8
*
child-rekey: Recreate the CHILD_SA if we receive a CHILD_SA_NOT_FOUND notify
Tobias Brunner
2016-06-17
1
-0
/
+28
*
child-create: Handle TEMPORARY_FAILURE notify as failure
Tobias Brunner
2016-06-17
2
-4
/
+5
*
child-delete: Remove unnecessary call to destroy_child_sa()
Tobias Brunner
2016-06-17
1
-2
/
+0
*
ikev2: Handle INITIAL_CONTACT notifies also when peer is authenticated with EAP
Tobias Brunner
2016-06-06
1
-16
/
+5
*
Use standard unsigned integer types
Andreas Steffen
2016-03-24
13
-44
/
+44
*
ikev2: Add task that verifies a peer's certificate
Tobias Brunner
2016-03-10
2
-0
/
+171
*
ikev2: Diversify signature scheme rule
Thomas Egerer
2016-03-04
1
-1
/
+1
*
ike-init: Verify REDIRECT notify before processing IKE_SA_INIT message
Tobias Brunner
2016-03-04
1
-7
/
+51
*
ike-init: Ignore notifies related to redirects during rekeying
Tobias Brunner
2016-03-04
1
-3
/
+13
*
ike-redirect: Add task to redirect active IKE_SAs
Tobias Brunner
2016-03-04
2
-0
/
+204
*
ike-auth: Handle REDIRECT notifies during IKE_AUTH
Tobias Brunner
2016-03-04
1
-22
/
+44
*
ike-auth: Send REDIRECT notify during IKE_AUTH if requested by providers
Tobias Brunner
2016-03-04
1
-27
/
+51
*
ike-config: Do not assign attributes for redirected IKE_SAs
Tobias Brunner
2016-03-04
1
-0
/
+5
*
child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTH
Tobias Brunner
2016-03-04
1
-0
/
+4
*
ike-init: Handle REDIRECTED_FROM similar to REDIRECT_SUPPORTED as server
Tobias Brunner
2016-03-04
1
-0
/
+17
*
ike-init: Send REDIRECTED_FROM instead of REDIRECT_SUPPORTED if appropriate
Tobias Brunner
2016-03-04
1
-1
/
+19
*
ikev2: Add option to disable following redirects as client
Tobias Brunner
2016-03-04
1
-1
/
+8
*
ikev2: Handle REDIRECT notifies during IKE_SA_INIT
Tobias Brunner
2016-03-04
1
-0
/
+22
*
ike-init: Send REDIRECT notify during IKE_SA_INIT if requested by providers
Tobias Brunner
2016-03-04
1
-0
/
+17
*
ike-init: Send REDIRECT_SUPPORTED as initiator
Tobias Brunner
2016-03-04
1
-0
/
+5
*
ike-init: Enable redirection extension if client sends REDIRECT_SUPPORTED notify
Tobias Brunner
2016-03-04
1
-0
/
+4
[next]