index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libcharon
/
sa
/
ikev2
/
tasks
Commit message (
Expand
)
Author
Age
Files
Lines
*
child-create: Don't log CHILD_SA initiation until we know the unique ID
Tobias Brunner
2017-08-07
1
-11
/
+13
*
child-rekey: Add CHILD_SA name and unique ID to collision log messages
Tobias Brunner
2017-08-07
1
-8
/
+13
*
child-rekey: Don't install outbound SA in case of lost collisions
Tobias Brunner
2017-08-07
3
-21
/
+66
*
child-sa: Install outbound SA immediately if kernel supports SPIs on policies
Tobias Brunner
2017-08-07
1
-3
/
+3
*
ike: Trigger CHILD_INSTALLED state change after corresponding log message
Tobias Brunner
2017-07-27
1
-6
/
+6
*
linked-list: Change return value of find_first() and signature of its callback
Tobias Brunner
2017-05-26
1
-6
/
+7
*
child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs
Tobias Brunner
2017-05-23
2
-6
/
+50
*
child-sa: Remove state to track installation of half the SA again
Tobias Brunner
2017-05-23
3
-11
/
+2
*
child-delete: Track flags per individual CHILD_SA
Tobias Brunner
2017-05-23
1
-47
/
+78
*
ikev2: Delay installation of outbound SAs during rekeying on the responder
Tobias Brunner
2017-05-23
3
-10
/
+92
*
child-sa: Change API used to set/install policies
Tobias Brunner
2017-05-23
1
-12
/
+14
*
child-create: Trigger NARROW_RESPONDER_POST hook before installing SAs
Tobias Brunner
2017-05-23
1
-25
/
+21
*
child-cfg: Use flags for boolean options
Tobias Brunner
2017-05-23
1
-3
/
+3
*
ikev2: Ignore IKEV2_MESSAGE_ID_SYNC notifies if extension is disabled
Tobias Brunner
2017-02-08
1
-0
/
+7
*
ikev2: Don't increase expected MID after handling MID sync message
Tobias Brunner
2017-02-08
1
-3
/
+1
*
ikev2: Negotiate support for IKE message ID synchronisation during IKE_AUTH
Tobias Brunner
2017-02-08
1
-0
/
+7
*
ikev2: Add task to handle IKEV2_MESSAGE_ID_SYNC notifies as responder
Tobias Brunner
2017-02-08
2
-0
/
+333
*
ike-auth: Don't send INITIAL_CONTACT if remote ID contains wildcards
Tobias Brunner
2017-02-06
1
-1
/
+2
*
Implemented EdDSA for IKEv2 using a pro forma Identity hash function
Andreas Steffen
2016-12-14
1
-0
/
+32
*
ikev2: Respond with NO_PROPOSAL_CHOSEN if proposal without DH group was selected
Tobias Brunner
2016-10-05
1
-0
/
+1
*
ikev2: Send derived CHILD_SA keys to the bus
Tobias Brunner
2016-10-04
1
-26
/
+43
*
ikev2: Store proposal on IKE_SA before creating DH object
Tobias Brunner
2016-09-06
1
-2
/
+5
*
child-rekey: Only rekey installed CHILD_SAs
Tobias Brunner
2016-06-17
1
-7
/
+14
*
child-rekey: Ignore failed colliding CHILD_SA rekeyings
Tobias Brunner
2016-06-17
1
-1
/
+10
*
child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is received
Tobias Brunner
2016-06-17
1
-4
/
+33
*
ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SA
Tobias Brunner
2016-06-17
1
-14
/
+35
*
ike: Add configuration option to switch to preferring supplied proposals over...
Tobias Brunner
2016-06-17
2
-4
/
+8
*
child-cfg: Add option to prefer supplied proposals over locally configured ones
Tobias Brunner
2016-06-17
1
-1
/
+1
*
ike-cfg: Add option to prefer supplied proposals over locally configured ones
Tobias Brunner
2016-06-17
1
-1
/
+1
*
ike-rekey: Make sure to ignore task when detecting collisions if ike-init sub...
Tobias Brunner
2016-06-17
1
-1
/
+2
*
ike-rekey: Handle undetected collisions also if delete is delayed
Tobias Brunner
2016-06-17
1
-16
/
+26
*
ike-rekey: There is no passive reauth task, so it will never collide with one
Tobias Brunner
2016-06-17
1
-3
/
+2
*
ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SA
Tobias Brunner
2016-06-17
1
-56
/
+64
*
ike-rekey: Properly handle situation if the peer did not notice the rekey col...
Tobias Brunner
2016-06-17
1
-0
/
+11
*
ike-delete: Handle deletes while rekeying differently if there was a collision
Tobias Brunner
2016-06-17
1
-2
/
+40
*
ike-rekey: Add method to check if there was a rekey collision
Tobias Brunner
2016-06-17
2
-1
/
+17
*
child-delete: Reply as usual when concurrently rekeying the IKE_SA
Tobias Brunner
2016-06-17
1
-5
/
+1
*
child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SA
Tobias Brunner
2016-06-17
1
-2
/
+2
*
ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...
Tobias Brunner
2016-06-17
1
-1
/
+8
*
ike-rekey: Handle TEMPORARY_FAILURE notify
Tobias Brunner
2016-06-17
1
-8
/
+22
*
ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SA
Tobias Brunner
2016-06-17
1
-0
/
+5
*
ike-delete: No need to wait for a response in case of concurrent deletes
Tobias Brunner
2016-06-17
1
-14
/
+0
*
ikev2: Add a new state to track rekeyed IKE_SAs
Tobias Brunner
2016-06-17
2
-31
/
+16
*
ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messages
Tobias Brunner
2016-06-17
1
-8
/
+13
*
ike-rekey: Establish new IKE_SA earlier as responder, but only if no collision
Tobias Brunner
2016-06-17
1
-3
/
+8
*
child-delete: Check if the deleted CHILD_SA is the redundant SA of a collision
Tobias Brunner
2016-06-17
1
-4
/
+39
*
child-rekey: Add method to check for the redundant SA created in a collision
Tobias Brunner
2016-06-17
2
-18
/
+37
*
child-rekey: Don't change state to INSTALLED if it was already REKEYING
Tobias Brunner
2016-06-17
1
-3
/
+5
*
ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeying
Tobias Brunner
2016-06-17
2
-9
/
+12
*
child-rekey: Use more appropriate error notifies if CHILD_SA is not found or ...
Tobias Brunner
2016-06-17
1
-3
/
+8
[next]