aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/ikev2
Commit message (Expand)AuthorAgeFilesLines
...
* ikev2: Try all eligible signature schemesTobias Brunner2015-03-091-34/+71
* ikev2: Try all RSA signature schemes if none is configuredTobias Brunner2015-03-041-4/+19
* ikev2: Consider signature schemes in rightauth when sending hash algorithmsTobias Brunner2015-03-041-14/+54
* keymat: Use hash algorithm setTobias Brunner2015-03-041-29/+7
* ikev2: Add an option to disable constraints against signature schemesTobias Brunner2015-03-041-1/+11
* ikev2: Fall back to SHA-1 signatures for RSATobias Brunner2015-03-041-0/+7
* ikev2: Select a signature scheme appropriate for the given keyTobias Brunner2015-03-041-18/+13
* ikev2: Log the actual signature scheme used for RFC 7427 authenticationTobias Brunner2015-03-041-4/+6
* ikev2: Store signature scheme used to verify peer in auth_cfgTobias Brunner2015-03-041-0/+1
* ikev2: Add a global option to disable RFC 7427 signature authenticationTobias Brunner2015-03-041-2/+12
* ikev2: Remove private AUTH_BLISS methodTobias Brunner2015-03-041-9/+0
* ikev2: Handle RFC 7427 signature authentication in pubkey authenticatorTobias Brunner2015-03-041-49/+178
* ikev2: Enable signature authentication by transmitting supported hash algorithmsTobias Brunner2015-03-041-4/+83
* keymat: Add facility to store supported hash algorithmsTobias Brunner2015-03-042-1/+70
* ikev2: Only accept initial messages in specific statesTobias Brunner2015-03-041-10/+9
* ikev2: Don't destroy the SA if an IKE_SA_INIT with unexpected MID is receivedTobias Brunner2015-03-041-4/+0
* ikev2: Merge EAP client authentication details if EAP methods provides themMartin Willi2015-03-031-0/+7
* ikev2: Schedule a timeout for the delete message following passive IKE rekeyingMartin Willi2015-03-031-0/+6
* ikev2: Schedule a make-before-break completion task to delete old IKE_SAMartin Willi2015-02-204-0/+168
* ikev2: Allow task to skip exchange by setting undefined exchange typeMartin Willi2015-02-201-0/+5
* ikev2: Trigger make-before-break reauthentication instead of reauth taskMartin Willi2015-02-201-0/+76
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-201-4/+2
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-201-2/+2
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-201-8/+7
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-202-3/+3
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-201-7/+4
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-201-2/+2
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-201-8/+19
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-203-2/+38
* ikev2: Only touch the DH object if we have a matching proposalTobias Brunner2014-12-231-11/+17
* ike: Make check for known payloads depend on IKE versionTobias Brunner2014-12-051-1/+1
* ikev2: Fix handling of more than one hash-and-URL certificate payloadsTobias Brunner2014-12-041-2/+2
* Implemented full BLISS support for IKEv2 public key authentication and the pk...Andreas Steffen2014-11-291-0/+9
* ikev2: Fix ike_rekey switch statement broken with last commitMartin Willi2014-11-241-1/+1
* ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekeyMartin Willi2014-11-211-0/+1
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-211-0/+1
* ikev2: Send retransmits using the latest known addressesTobias Brunner2014-10-101-1/+3
* ikev2: Send and receive fragmented IKE messagesTobias Brunner2014-10-101-44/+169
* ikev2: Negotiate support for IKEv2 fragmentationTobias Brunner2014-10-101-0/+23
* ikev2: Reorder task activation for established IKE SAsTobias Brunner2014-09-251-11/+11
* Revert "ikev2: Insert MOBIKE tasks at the front of the queue"Tobias Brunner2014-09-251-6/+1
* ikev2: Don't treat initial messages as MOBIKE exchangesTobias Brunner2014-09-161-6/+9
* ikev2: Reduce timeout if path probing was enabledTobias Brunner2014-09-121-6/+13
* ikev2: Defer MOBIKE updates if no path is availableTobias Brunner2014-09-121-7/+14
* ike-mobike: Allow calling transmit() even when not currently path probingTobias Brunner2014-09-121-5/+17
* ikev2: Defer path probing if no path is currently availableTobias Brunner2014-09-121-1/+20
* ike-mobike: Return FALSE in transmit() if no path was availableTobias Brunner2014-09-122-3/+7
* ikev2: Enable path probing for currently active MOBIKE taskTobias Brunner2014-09-121-0/+18
* ike-mobike: Add method to enable path probingTobias Brunner2014-09-122-0/+12
* ike-mobike: Skip peer addresses we can't send packets to when checking pathsTobias Brunner2014-09-121-5/+18
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-30 05:01:18 +0000