tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Do not add additional addresses to MOBIKE path probing messages.	Tobias Brunner	2010-10-12	1	-10/+12
\|
*	Allow responder to use ike_mobike_t.roam.	Tobias Brunner	2010-10-12	1	-1/+7
\| \| \| \|	After getting a response the responder updates the IPsec SAs.
*	Added support for responders to change their address via MOBIKE.	Tobias Brunner	2010-10-12	1	-0/+20
\| \| \| \| \| \| \|	If the original responder updates its list of additional addresses we check if the remote endpoint changed and update the IPsec SAs if it did, as we assume the original address became unavailable and the responder already updated the SAs on its side.
*	Explicitly configure MOBIKE tasks to update the list of additional addresses.	Tobias Brunner	2010-10-12	2	-2/+14
\|
*	Improved check for first IKE_AUTH message in ike_mobike task.	Tobias Brunner	2010-10-12	1	-3/+6
\| \| \| \| \|	If the original responder initiated a MOBIKE exchange, the previous check was not always correct.
*	Migrated ike_mobike task to INIT/METHOD macros.	Tobias Brunner	2010-10-12	1	-67/+46
\|
*	Simplified apply_port function in mobike task.	Tobias Brunner	2010-10-12	1	-16/+9
\|
*	NOTIFY error message types include 16383	Andreas Steffen	2010-09-29	1	-1/+1
\|
*	Refer to scheduler and processor via lib and not hydra.	Tobias Brunner	2010-09-02	4	-11/+8
\|
*	Refer to kernel interface via hydra and not charon.	Tobias Brunner	2010-09-02	3	-12/+14
\|
*	Refer to scheduler via hydra and not charon.	Tobias Brunner	2010-09-02	3	-5/+6
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	3	-3/+6
\|
*	Use the AAA Identity for EAP authentication, if given	Martin Willi	2010-08-31	1	-0/+5
\|
*	Port floating patch partially reversed.	Tobias Brunner	2010-08-30	2	-12/+8
\| \| \| \| \| \|	If MOBIKE is enabled, we do have to switch to port 4500 with the IKE_AUTH request, that is, before we know whether the other peer actually supports MOBIKE or not.
*	Slightly refactored port floating.	Tobias Brunner	2010-08-30	3	-35/+16
\| \| \| \|	In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
*	Migrated delete_payload to INIT/METHOD macros, replaced iterator	Martin Willi	2010-08-25	1	-9/+8
\|
*	Check if colliding rekey actually created an IKE_INIT	Thomas Egerer	2010-08-25	1	-37/+42
\| \| \| \| \| \|	In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-6/+8
\|
*	fix error-type range in parsing of NOTIFY payloads	Jiri Bohac	2010-08-06	1	-1/+1
\|
*	Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA ↵	Tobias Brunner	2010-08-04	1	-3/+2
\| \| \| \|	allocated an ID.
*	Do not touch child from collision if peer deleted it	Thomas Egerer	2010-08-03	1	-3/+24
\|
*	Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter	Martin Willi	2010-07-26	1	-2/+2
\|
*	Added log statement if peer requests EAP, but current config does not allow it	Martin Willi	2010-07-21	1	-0/+1
\|
*	Support different encoding types in certificate.get_encoding()	Martin Willi	2010-07-13	1	-1/+6
\|
*	Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵	Martin Willi	2010-07-13	1	-1/+1
\| \| \| \|	encoding
*	Moved X509 ipAddrBlock checking to the addrblock plugin	Martin Willi	2010-07-13	1	-60/+0
\|
*	Added a hook to narrow traffic selectors for CHILD_SAs	Martin Willi	2010-07-13	1	-5/+38
\|
*	Moved credential manager to libstrongswan	Martin Willi	2010-07-13	2	-8/+7
\|
*	Added support for named attribute groups	Heiko Hund	2010-07-09	1	-1/+1
\| \| \| \| \| \|	Add the possibility to group attributes by a name and assign these groups to connections. This allows a more granular configuration of which client will receive what atrributes.
*	Print identity to a lease address on the same line for simpler greping	Martin Willi	2010-07-08	1	-1/+1
\|
*	Copy EAP specific attributes to auth config only	Martin Willi	2010-07-05	1	-1/+10
\|
*	Correct check of traffic selectors before destruction	Thomas Egerer	2010-06-29	1	-2/+2
\|
*	Reacquire keymat from new IKE_SA during task migration	Martin Willi	2010-06-07	1	-0/+1
\|
*	Disable close action for a redundant CHILD_SA resulting from a rekey collision	Martin Willi	2010-06-02	1	-0/+5
\| \| \| \| \| \| \| \|	If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset.
*	Use wrapped getters for close/dpd action	Martin Willi	2010-06-02	1	-1/+3
\|
*	Handle collisions between rekey and the following delete properly	Martin Willi	2010-05-18	1	-27/+63
\|
*	Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no ↵	Martin Willi	2010-04-21	1	-5/+5
\| \| \| \|	DH group
*	Release virtual IPs with the same identity as we acquired it	Martin Willi	2010-03-25	1	-33/+1
\|
*	Changed all usages of lib->attributes to hydra->attributes.	Tobias Brunner	2010-03-24	1	-5/+6
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	36	-0/+9579