tteras/strongswan - tteras' strongSwan tree

	Commit message (Expand)	Author	Age	Files	Lines
...
*	ikev2: Schedule a timeout for the delete message following passive IKE rekeying	Martin Willi	2015-03-03	1	-0/+6
*	ikev2: Schedule a make-before-break completion task to delete old IKE_SA	Martin Willi	2015-02-20	4	-0/+168
*	ikev2: Allow task to skip exchange by setting undefined exchange type	Martin Willi	2015-02-20	1	-0/+5
*	ikev2: Trigger make-before-break reauthentication instead of reauth task	Martin Willi	2015-02-20	1	-0/+76
*	attribute-manager: Pass full IKE_SA to handler methods	Martin Willi	2015-02-20	1	-4/+2
*	attribute-manager: Pass the full IKE_SA to provider methods	Martin Willi	2015-02-20	1	-2/+2
*	attributes: Move the configuration attributes framework to libcharon	Martin Willi	2015-02-20	1	-8/+7
*	ike: Consistently log CHILD_SAs with their unique_id instead of their reqid	Martin Willi	2015-02-20	2	-3/+3
*	inactivity-job: Schedule job by CHILD_SA unique ID instead of reqid	Martin Willi	2015-02-20	1	-7/+4
*	kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid	Martin Willi	2015-02-20	1	-2/+2
*	ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA manager	Martin Willi	2015-02-20	1	-8/+19
*	child-sa: Replace reqid based marks by "unique" marks	Martin Willi	2015-02-20	3	-2/+38
*	ikev2: Only touch the DH object if we have a matching proposal	Tobias Brunner	2014-12-23	1	-11/+17
*	ike: Make check for known payloads depend on IKE version	Tobias Brunner	2014-12-05	1	-1/+1
*	ikev2: Fix handling of more than one hash-and-URL certificate payloads	Tobias Brunner	2014-12-04	1	-2/+2
*	Implemented full BLISS support for IKEv2 public key authentication and the pk...	Andreas Steffen	2014-11-29	1	-0/+9
*	ikev2: Fix ike_rekey switch statement broken with last commit	Martin Willi	2014-11-24	1	-1/+1
*	ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey	Martin Willi	2014-11-21	1	-0/+1
*	child-sa: Introduce a CHILD_RETRYING state to detect DH group retries	Martin Willi	2014-11-21	1	-0/+1
*	ikev2: Send retransmits using the latest known addresses	Tobias Brunner	2014-10-10	1	-1/+3
*	ikev2: Send and receive fragmented IKE messages	Tobias Brunner	2014-10-10	1	-44/+169
*	ikev2: Negotiate support for IKEv2 fragmentation	Tobias Brunner	2014-10-10	1	-0/+23
*	ikev2: Reorder task activation for established IKE SAs	Tobias Brunner	2014-09-25	1	-11/+11
*	Revert "ikev2: Insert MOBIKE tasks at the front of the queue"	Tobias Brunner	2014-09-25	1	-6/+1
*	ikev2: Don't treat initial messages as MOBIKE exchanges	Tobias Brunner	2014-09-16	1	-6/+9
*	ikev2: Reduce timeout if path probing was enabled	Tobias Brunner	2014-09-12	1	-6/+13
*	ikev2: Defer MOBIKE updates if no path is available	Tobias Brunner	2014-09-12	1	-7/+14
*	ike-mobike: Allow calling transmit() even when not currently path probing	Tobias Brunner	2014-09-12	1	-5/+17
*	ikev2: Defer path probing if no path is currently available	Tobias Brunner	2014-09-12	1	-1/+20
*	ike-mobike: Return FALSE in transmit() if no path was available	Tobias Brunner	2014-09-12	2	-3/+7
*	ikev2: Enable path probing for currently active MOBIKE task	Tobias Brunner	2014-09-12	1	-0/+18
*	ike-mobike: Add method to enable path probing	Tobias Brunner	2014-09-12	2	-0/+12
*	ike-mobike: Skip peer addresses we can't send packets to when checking paths	Tobias Brunner	2014-09-12	1	-5/+18
*	ikev2: Insert MOBIKE tasks at the front of the queue	Tobias Brunner	2014-09-12	1	-1/+6
*	ikev2: Migrate number of pending MOBIKE updates	Tobias Brunner	2014-09-12	1	-0/+5
*	ikev2: Properly keep track of pending MOBIKE updates	Tobias Brunner	2014-09-12	1	-8/+27
*	bus: Add a handle_vips() hook invoked after handling configuration attributes	Martin Willi	2014-06-17	1	-0/+2
*	ike: Store unhandled attributes on IKE_SA as well	Martin Willi	2014-06-16	1	-5/+2
*	payload: Use common prefixes for all payload type identifiers	Martin Willi	2014-06-04	18	-79/+79
*	ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SA	Martin Willi	2014-04-17	1	-0/+6
*	ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeying	Martin Willi	2014-04-17	1	-11/+3
*	ikev2: Fix reauthentication if peer assigns a different virtual IP	Tobias Brunner	2014-04-15	1	-1/+1
*	ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAs	Martin Willi	2014-04-14	1	-0/+9
*	aead: Support custom AEAD salt sizes	Martin Willi	2014-03-31	1	-2/+27
*	ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeying	Martin Willi	2014-03-31	1	-0/+12
*	ikev2: Cache all received attribute certificates to auth config	Martin Willi	2014-03-31	1	-1/+27
*	ikev2: Send all known and valid attribute certificates for subject cert	Martin Willi	2014-03-31	1	-0/+46
*	ikev2: Slightly refactor certificate payload construction to separate functions	Martin Willi	2014-03-31	1	-37/+56
*	libcharon: Use lib->ns instead of charon->name	Tobias Brunner	2014-02-12	5	-9/+9
*	ikev2: Add Cisco FRAGMENTATION vendor ID	Martin Willi	2014-01-23	1	-0/+2