aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/tasks
Commit message (Expand)AuthorAgeFilesLines
* Remove superfluous test for peer_cfg on established IKE_SAsMartin Willi2011-04-201-1/+1
* Clearly mark switch cases that fall through.Tobias Brunner2011-04-191-0/+1
* Neither rekey nor del can be NULL.Tobias Brunner2011-04-141-2/+2
* Move establish/inherit of rekeyed IKE_SAs to delete messagesMartin Willi2011-03-152-48/+40
* Wrap IKE delete after rekey into rekey task for responder, tooMartin Willi2011-03-151-1/+18
* Migrated ike_rekey task to INIT/METHOD macrosMartin Willi2011-03-151-59/+40
* Some typos fixed.Tobias Brunner2011-02-071-1/+1
* Invoke the per-round authorize() hook before purging current auth info on IKE_SAMartin Willi2011-02-031-10/+10
* Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact initia...Martin Willi2011-02-021-56/+34
* Do not log potentially hundreds of cert requests for unknown CAs at level 1Martin Willi2011-01-281-1/+8
* Revert "Send INITIAL_CONTACT even if we have a unique policy"Martin Willi2011-01-131-1/+2
* Send INITIAL_CONTACT even if we have a unique policyMartin Willi2011-01-101-2/+1
* Fix nonce comparison in rekey collisions, lowest nonce losesMartin Willi2011-01-072-7/+7
* Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACTMartin Willi2011-01-051-1/+21
* Send INITIAL_CONTACT for the first IKE_SA if it has a unique policyMartin Willi2011-01-051-9/+22
* Provide CRLs received in CERT payloads to trustchain verificationMartin Willi2011-01-051-1/+9
* Include the used reserved bytes from ID payloads in AUTH calculationMartin Willi2011-01-051-4/+35
* Handle all error notifies in CREATE_CHILD_SA exchangesMartin Willi2011-01-051-0/+14
* eliminated whitespaceAndreas Steffen2010-12-211-1/+1
* Migrated child_create_t to INIT/METHOD macrosAndreas Steffen2010-12-211-83/+55
* Do not use TFC padding if peer does not support ESPv3Martin Willi2010-12-201-8/+24
* Do not add additional addresses to MOBIKE path probing messages.Tobias Brunner2010-10-121-10/+12
* Allow responder to use ike_mobike_t.roam.Tobias Brunner2010-10-121-1/+7
* Added support for responders to change their address via MOBIKE.Tobias Brunner2010-10-121-0/+20
* Explicitly configure MOBIKE tasks to update the list of additional addresses.Tobias Brunner2010-10-122-2/+14
* Improved check for first IKE_AUTH message in ike_mobike task.Tobias Brunner2010-10-121-3/+6
* Migrated ike_mobike task to INIT/METHOD macros.Tobias Brunner2010-10-121-67/+46
* Simplified apply_port function in mobike task.Tobias Brunner2010-10-121-16/+9
* NOTIFY error message types include 16383Andreas Steffen2010-09-291-1/+1
* Refer to scheduler and processor via lib and not hydra.Tobias Brunner2010-09-024-11/+8
* Refer to kernel interface via hydra and not charon.Tobias Brunner2010-09-023-12/+14
* Refer to scheduler via hydra and not charon.Tobias Brunner2010-09-023-5/+6
* Refer to processor via hydra and not charon.Tobias Brunner2010-09-023-3/+6
* Use the AAA Identity for EAP authentication, if givenMartin Willi2010-08-311-0/+5
* Port floating patch partially reversed.Tobias Brunner2010-08-302-12/+8
* Slightly refactored port floating.Tobias Brunner2010-08-303-35/+16
* Migrated delete_payload to INIT/METHOD macros, replaced iteratorMartin Willi2010-08-251-9/+8
* Check if colliding rekey actually created an IKE_INITThomas Egerer2010-08-251-37/+42
* Use a seperate section for each nested struct member in INIT macroMartin Willi2010-08-181-6/+8
* fix error-type range in parsing of NOTIFY payloadsJiri Bohac2010-08-061-1/+1
* Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA alloca...Tobias Brunner2010-08-041-3/+2
* Do not touch child from collision if peer deleted itThomas Egerer2010-08-031-3/+24
* Pass the CREATE_CHILD_SA initiator flag to the child_keys parameterMartin Willi2010-07-261-2/+2
* Added log statement if peer requests EAP, but current config does not allow itMartin Willi2010-07-211-0/+1
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-131-1/+6
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential en...Martin Willi2010-07-131-1/+1
* Moved X509 ipAddrBlock checking to the addrblock pluginMartin Willi2010-07-131-60/+0
* Added a hook to narrow traffic selectors for CHILD_SAsMartin Willi2010-07-131-5/+38
* Moved credential manager to libstrongswanMartin Willi2010-07-132-8/+7
* Added support for named attribute groupsHeiko Hund2010-07-091-1/+1