tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Migrated ike_me to INIT/METHOD macros	Andreas Steffen	2011-10-03	1	-88/+61
\|
*	Migrated ike_natd to INIT/METHOD macros	Andreas Steffen	2011-10-03	1	-55/+38
\|
*	Migrated ike_reauth to INIT/METHOD macros	Andreas Steffen	2011-10-03	1	-30/+25
\|
*	log entry for outbound hash-and-url	Andreas Steffen	2011-08-24	1	-0/+1
\|
*	Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute	Martin Willi	2011-08-19	1	-0/+5
\|
*	fix double delete of old IKE_SA during reauthentication	Andreas Steffen	2011-08-16	1	-2/+2
\|
*	some more typos	Andreas Steffen	2011-08-15	7	-7/+7
\|
*	typos: initator->initiator, authenticaion->authentication.	Tobias Brunner	2011-08-15	7	-7/+7
\|
*	If we close a duplicate SA, it is also no authentication failure.	Tobias Brunner	2011-08-12	1	-2/+4
\|
*	If local authentication fails, it is not really a peer auth failure.	Tobias Brunner	2011-08-12	1	-1/+1
\|
*	Throw an alert if authentication of the peer fails (not only for initiator).	Tobias Brunner	2011-08-12	1	-34/+27
\|
*	Throw an alert via bus_t when remote authentication fails.	Tobias Brunner	2011-08-12	1	-9/+14
\|
*	Fixed common misspellings.	Tobias Brunner	2011-07-20	3	-5/+5
\| \| \| \|	Mostly found by 'codespell'.
*	Replaced ike_sa_t.create_additional_address_iterator with enumerator.	Tobias Brunner	2011-07-06	1	-24/+6
\|
*	Replaced ike_sa_t.create_child_sa_iterator with enumerator.	Tobias Brunner	2011-07-06	3	-17/+16
\| \| \| \| \|	This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA.
*	Replaced simple iterator usages.	Tobias Brunner	2011-07-06	4	-23/+23
\|
*	Check if colliding task has actually a CHILD, i.e. after a migrate	Martin Willi	2011-06-03	1	-1/+4
\|
*	Remove superfluous test for peer_cfg on established IKE_SAs	Martin Willi	2011-04-20	1	-1/+1
\|
*	Clearly mark switch cases that fall through.	Tobias Brunner	2011-04-19	1	-0/+1
\|
*	Neither rekey nor del can be NULL.	Tobias Brunner	2011-04-14	1	-2/+2
\|
*	Move establish/inherit of rekeyed IKE_SAs to delete messages	Martin Willi	2011-03-15	2	-48/+40
\| \| \| \| \| \| \| \|	Having the inherit() function delayed to the IKE_SA establish procedure was problematic. The task destroy function was never a good place and results in locking/cleanup problems. After establishing the SA, it should be really checked in ASAP to avoid any triggered DPD checks to get lost.
*	Wrap IKE delete after rekey into rekey task for responder, too	Martin Willi	2011-03-15	1	-1/+18
\|
*	Migrated ike_rekey task to INIT/METHOD macros	Martin Willi	2011-03-15	1	-59/+40
\|
*	Some typos fixed.	Tobias Brunner	2011-02-07	1	-1/+1
\|
*	Invoke the per-round authorize() hook before purging current auth info on IKE_SA	Martin Willi	2011-02-03	1	-10/+10
\|
*	Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact ↵	Martin Willi	2011-02-02	1	-56/+34
\| \| \| \|	initialization
*	Do not log potentially hundreds of cert requests for unknown CAs at level 1	Martin Willi	2011-01-28	1	-1/+8
\|
*	Revert "Send INITIAL_CONTACT even if we have a unique policy"	Martin Willi	2011-01-13	1	-1/+2
\| \| \| \| \| \| \| \|	It makes sense to omit INITIAL_CONTACT if don't have a unique policy, as a client might want to connect from different devices to the same account. This reverts commit 719c33b41a1f9fe9b2585df3e7aa804a760c361c.
*	Send INITIAL_CONTACT even if we have a unique policy	Martin Willi	2011-01-10	1	-2/+1
\|
*	Fix nonce comparison in rekey collisions, lowest nonce loses	Martin Willi	2011-01-07	2	-7/+7
\|
*	Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACT	Martin Willi	2011-01-05	1	-1/+21
\|
*	Send INITIAL_CONTACT for the first IKE_SA if it has a unique policy	Martin Willi	2011-01-05	1	-9/+22
\|
*	Provide CRLs received in CERT payloads to trustchain verification	Martin Willi	2011-01-05	1	-1/+9
\|
*	Include the used reserved bytes from ID payloads in AUTH calculation	Martin Willi	2011-01-05	1	-4/+35
\|
*	Handle all error notifies in CREATE_CHILD_SA exchanges	Martin Willi	2011-01-05	1	-0/+14
\|
*	eliminated whitespace	Andreas Steffen	2010-12-21	1	-1/+1
\|
*	Migrated child_create_t to INIT/METHOD macros	Andreas Steffen	2010-12-21	1	-83/+55
\|
*	Do not use TFC padding if peer does not support ESPv3	Martin Willi	2010-12-20	1	-8/+24
\|
*	Do not add additional addresses to MOBIKE path probing messages.	Tobias Brunner	2010-10-12	1	-10/+12
\|
*	Allow responder to use ike_mobike_t.roam.	Tobias Brunner	2010-10-12	1	-1/+7
\| \| \| \|	After getting a response the responder updates the IPsec SAs.
*	Added support for responders to change their address via MOBIKE.	Tobias Brunner	2010-10-12	1	-0/+20
\| \| \| \| \| \| \|	If the original responder updates its list of additional addresses we check if the remote endpoint changed and update the IPsec SAs if it did, as we assume the original address became unavailable and the responder already updated the SAs on its side.
*	Explicitly configure MOBIKE tasks to update the list of additional addresses.	Tobias Brunner	2010-10-12	2	-2/+14
\|
*	Improved check for first IKE_AUTH message in ike_mobike task.	Tobias Brunner	2010-10-12	1	-3/+6
\| \| \| \| \|	If the original responder initiated a MOBIKE exchange, the previous check was not always correct.
*	Migrated ike_mobike task to INIT/METHOD macros.	Tobias Brunner	2010-10-12	1	-67/+46
\|
*	Simplified apply_port function in mobike task.	Tobias Brunner	2010-10-12	1	-16/+9
\|
*	NOTIFY error message types include 16383	Andreas Steffen	2010-09-29	1	-1/+1
\|
*	Refer to scheduler and processor via lib and not hydra.	Tobias Brunner	2010-09-02	4	-11/+8
\|
*	Refer to kernel interface via hydra and not charon.	Tobias Brunner	2010-09-02	3	-12/+14
\|
*	Refer to scheduler via hydra and not charon.	Tobias Brunner	2010-09-02	3	-5/+6
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	3	-3/+6
\|