aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2
Commit message (Expand)AuthorAgeFilesLines
* ikev2: Send retransmits using the latest known addressesTobias Brunner2014-10-101-1/+3
* ikev2: Send and receive fragmented IKE messagesTobias Brunner2014-10-101-44/+169
* ikev2: Negotiate support for IKEv2 fragmentationTobias Brunner2014-10-101-0/+23
* ikev2: Reorder task activation for established IKE SAsTobias Brunner2014-09-251-11/+11
* Revert "ikev2: Insert MOBIKE tasks at the front of the queue"Tobias Brunner2014-09-251-6/+1
* ikev2: Don't treat initial messages as MOBIKE exchangesTobias Brunner2014-09-161-6/+9
* ikev2: Reduce timeout if path probing was enabledTobias Brunner2014-09-121-6/+13
* ikev2: Defer MOBIKE updates if no path is availableTobias Brunner2014-09-121-7/+14
* ike-mobike: Allow calling transmit() even when not currently path probingTobias Brunner2014-09-121-5/+17
* ikev2: Defer path probing if no path is currently availableTobias Brunner2014-09-121-1/+20
* ike-mobike: Return FALSE in transmit() if no path was availableTobias Brunner2014-09-122-3/+7
* ikev2: Enable path probing for currently active MOBIKE taskTobias Brunner2014-09-121-0/+18
* ike-mobike: Add method to enable path probingTobias Brunner2014-09-122-0/+12
* ike-mobike: Skip peer addresses we can't send packets to when checking pathsTobias Brunner2014-09-121-5/+18
* ikev2: Insert MOBIKE tasks at the front of the queueTobias Brunner2014-09-121-1/+6
* ikev2: Migrate number of pending MOBIKE updatesTobias Brunner2014-09-121-0/+5
* ikev2: Properly keep track of pending MOBIKE updatesTobias Brunner2014-09-121-8/+27
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-171-0/+2
* ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-161-5/+2
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-0418-79/+79
* ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SAMartin Willi2014-04-171-0/+6
* ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeyingMartin Willi2014-04-171-11/+3
* ikev2: Fix reauthentication if peer assigns a different virtual IPTobias Brunner2014-04-151-1/+1
* ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAsMartin Willi2014-04-141-0/+9
* aead: Support custom AEAD salt sizesMartin Willi2014-03-311-2/+27
* ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeyingMartin Willi2014-03-311-0/+12
* ikev2: Cache all received attribute certificates to auth configMartin Willi2014-03-311-1/+27
* ikev2: Send all known and valid attribute certificates for subject certMartin Willi2014-03-311-0/+46
* ikev2: Slightly refactor certificate payload construction to separate functionsMartin Willi2014-03-311-37/+56
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-125-9/+9
* ikev2: Add Cisco FRAGMENTATION vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Copyright vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Add Cisco Delete Reason vendor IDMartin Willi2014-01-231-0/+2
* ikev2: Use a more dynamic vendor ID database, as we use with IKEv1Martin Willi2014-01-231-16/+57
* ikev2: Wipe (optional) shared secret during CHILD_SA key derivationTobias Brunner2014-01-231-11/+14
* ike_sa: Defer task manager destruction after child destructionThomas Egerer2014-01-161-4/+3
* ike: Log SK_p consistently on level 4Tobias Brunner2013-11-281-1/+1
* ikev2: Properly free DH secret in case of errors during IKE key derivationTobias Brunner2013-11-061-0/+3
* Fixed some typosTobias Brunner2013-10-291-1/+1
* ikev2: Allocate SPI with the protocol of the first/negotiated proposalMartin Willi2013-10-111-2/+16
* ikev2: Force an update of the host addresses on the first responseTobias Brunner2013-09-231-11/+9
* ikev2: Fix segfault when reestablishing CHILD_SAs due to closeaction=restart|...Tobias Brunner2013-08-131-3/+4
* ikev2: Only schedule half-open-timeout delete job after successfully handling...Tobias Brunner2013-07-291-8/+16
* Fix various API doc issues and typosTobias Brunner2013-07-181-1/+1
* ike: Migrate queued CHILD_SA-creating tasks when reestablishing an IKE_SATobias Brunner2013-07-171-0/+34
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-172-23/+25
* ikev2: replace linked lists by arrays in task managerMartin Willi2013-07-171-70/+76
* Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restartTobias Brunner2013-07-011-2/+2
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-011-1/+2
* ikev2: keep the CHILD_SA we delete as initiator in the list to destroyMartin Willi2013-06-251-6/+5