| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. | Tobias Brunner | 2012-05-25 | 2 | -115/+77 | |
| | | ||||||
| * | Fixed route lookup in case MOBIKE is not enabled. | Tobias Brunner | 2012-05-25 | 1 | -3/+9 | |
| | | ||||||
| * | Added log message if peer does not accept/provide IPComp proposal. | Tobias Brunner | 2012-05-24 | 1 | -2/+12 | |
| | | ||||||
| * | Added support to negotiate IPComp during Quick Mode. | Tobias Brunner | 2012-05-24 | 1 | -11/+91 | |
| | | ||||||
| * | Added support for IKEv1 IPComp proposals in SA payload. | Tobias Brunner | 2012-05-24 | 3 | -6/+6 | |
| | | ||||||
| * | Fix memleak during Quick Mode in case no SPI can be allocated from kernel. | Tobias Brunner | 2012-05-24 | 1 | -8/+8 | |
| | | ||||||
| * | Apply IDir before deriving keys as aggressive initiator | Martin Willi | 2012-05-23 | 1 | -4/+4 | |
| | | ||||||
| * | Use received identity to look up PSK as aggressive responder | Martin Willi | 2012-05-23 | 1 | -2/+9 | |
| | | ||||||
| * | Check if we actually have an initiating packet to free while processing ↵ | Martin Willi | 2012-05-23 | 1 | -1/+1 | |
| | | | | | responses | |||||
| * | Switch to alternative peer config in IKEv1 Main and Aggressive Mode. | Tobias Brunner | 2012-05-21 | 4 | -24/+85 | |
| | | ||||||
| * | Cancel pending retransmits when flushing active task queue | Martin Willi | 2012-05-21 | 1 | -0/+4 | |
| | | ||||||
| * | Cancel active quick mode task when receiving INFORMATIONAL error | Martin Willi | 2012-05-21 | 1 | -0/+30 | |
| | | ||||||
| * | Flush task queues explicitly, not implicitly if task returns ALREADY_DONE | Martin Willi | 2012-05-21 | 6 | -12/+20 | |
| | | ||||||
| * | Wrap task managers flush_queue() in IKE_SA | Martin Willi | 2012-05-21 | 2 | -0/+14 | |
| | | ||||||
| * | Make task managers flush_queue() method public | Martin Willi | 2012-05-21 | 3 | -20/+62 | |
| | | ||||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 12 | -0/+0 | |
| | | ||||||
| * | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 44 | -46/+46 | |
| | | | | | tasks etc.). | |||||
| * | Use nonce_gen instead of rng to generate nonces | Adrian-Ken Rueegsegger | 2012-05-18 | 4 | -34/+34 | |
| | | | | | | Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper. | |||||
| * | Add create_nonce_gen function to keymat interface | Adrian-Ken Rueegsegger | 2012-05-18 | 3 | -0/+24 | |
| | | | | | This function returns a nonce generator object. | |||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -6/+14 | |
| | | ||||||
| * | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 3 | -73/+72 | |
| | | ||||||
| * | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 1 | -0/+13 | |
| | | ||||||
| * | Send unanswered follow up R_U_THERE messages with the same DPD seq | Martin Willi | 2012-05-15 | 1 | -1/+7 | |
| | | ||||||
| * | Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL | Martin Willi | 2012-05-15 | 1 | -11/+0 | |
| | | ||||||
| * | allow private algorithms | Andreas Steffen | 2012-05-05 | 2 | -4/+16 | |
| | | ||||||
| * | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 2 | -4/+4 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 10 | -22/+27 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 111 | -2690/+14683 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Fix iteration through half-open IKE_SA table | Martin Willi | 2012-04-16 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 | |
| | | | ||||||
| | * | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 | |
| | | | ||||||
| | * | Added a getter for CHILD_SA marks | Martin Willi | 2012-03-22 | 2 | -0/+19 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+9 | |
| | | | ||||||
| | * | Reply with received configuration payload identifier in Mode Config | Martin Willi | 2012-03-20 | 1 | -0/+8 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 109 | -2685/+14608 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Properly handle retransmitted initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -58/+74 | |
| | | | | | | | | | | | | | | | | | | | This change allows to properly handle retransmits of initial IKE messages when we've already processed them (i.e. our response is now resent immediately). | |||||
| | | * | Implemented table of init hashes without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -30/+30 | |
| | | | | ||||||
| | | * | Implemented table of connected peers without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -63/+75 | |
| | | | | ||||||
| | | * | Implemented table of half open IKE_SAs without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -52/+47 | |
| | | | | ||||||
| | | * | Don't use linked_list_t for buckets in main IKE_SA hash table. | Tobias Brunner | 2012-03-20 | 1 | -57/+82 | |
| | | | | ||||||
| | | * | Fixed deadlock if checkin_and_destroy is called during shutdown. | Tobias Brunner | 2012-03-20 | 1 | -0/+10 | |
| | | | | ||||||
| | | * | Do not clone hashes of initial IKE messages when storing them in the hash table. | Tobias Brunner | 2012-03-20 | 1 | -7/+6 | |
| | | | | ||||||
| | | * | Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table. | Tobias Brunner | 2012-03-20 | 1 | -2/+13 | |
| | | | | | | | | | | | | | | | | For IKEv1 the previous behavior of always using the initiator's SPI as key is maintained. | |||||
| | | * | Added separate hashtable for hashes of initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -64/+139 | |
| | | | | | | | | | | | | | This does not require us to do a lookup for an SA by SPI first. | |||||
| | | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 4 | -29/+53 | |
| | | | | ||||||
| | | * | Implemented handling of UNITY_LOAD_BALANCE as reauthentication. | Tobias Brunner | 2012-03-20 | 2 | -3/+28 | |
| | | | | ||||||
| | | * | Check if we actually have a packet before retransmitting it | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Parse IKEv1 Cisco Load Balancing notify (can't act on it yet). | Tobias Brunner | 2012-03-20 | 1 | -2/+19 | |
| | | | | ||||||
| | | * | Compiler warning fixed. | Tobias Brunner | 2012-03-20 | 1 | -2/+6 | |
| | | | | ||||||
| | | * | Use correct enum values to detect three message tasks for retransmission | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |