aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa
Commit message (Expand)AuthorAgeFilesLines
...
* Update routed connections in trap managerTobias Brunner2012-10-181-37/+39
* Added a new alert that is raised if peer does not respond to initial IKE messageTobias Brunner2012-10-161-0/+2
* Ensure UNSUPPORTED_CRITICAL_PAYLOAD notify contains correct payload typeTobias Brunner2012-09-281-0/+1
* Missed one in 6c10ceceTobias Brunner2012-09-281-0/+2
* Request is never NULL when responding with an INFORMATIONAL messageTobias Brunner2012-09-281-1/+1
* Completed state handling in isakmp_cert_preTobias Brunner2012-09-281-0/+4
* IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabledTobias Brunner2012-09-251-1/+4
* Made IP address enumeration more flexibleTobias Brunner2012-09-213-3/+3
* Don't ignore loopback devices and allow addresses on them being enumeratedTobias Brunner2012-09-213-3/+3
* Don't complain about multiple TS in IKEv1, as it supported with UnityMartin Willi2012-09-181-5/+0
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-184-70/+105
* Use the vararg list constructor in quick mode taskMartin Willi2012-09-181-16/+8
* Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiatorTobias Brunner2012-09-181-1/+2
* Change traffic selectors during Quick Mode in case of a NAT in transport modeTobias Brunner2012-09-141-9/+19
* Always send a configuration payload in IKEv1 TRANSACTIONs, even if it is emptyMartin Willi2012-09-111-29/+14
* Don't use host address for dynamic TS in IKEv1 if a virtual IP was expectedMartin Willi2012-09-111-40/+57
* Don't use host address for dynamic TS in IKEv2 if a virtual IP was expectedMartin Willi2012-09-111-1/+33
* Send FAILED_CP_REQUIRED if a configuration payload was expected, but not rece...Martin Willi2012-09-111-0/+9
* Pass full pool list to release_addressMartin Willi2012-09-111-13/+8
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-112-40/+12
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-112-3/+46
* Add uniqueids=never to ignore INITIAL_CONTACT notifiesTobias Brunner2012-09-102-2/+3
* Only initiate an exchange from send_dpd() if a task was actually queuedTobias Brunner2012-09-071-2/+8
* Trigger ike_updown event caused by retransmits only after reestablish() has b...Tobias Brunner2012-09-063-10/+5
* Add ike_reestablish() event that is triggered when an IKE_SA is reestablishedTobias Brunner2012-09-061-0/+1
* Add a new condition to mark IKE_SAs that are currently being reauthenticatedTobias Brunner2012-09-062-9/+9
* Clear virtual IPs before storing assigned ones on the IKE_SATobias Brunner2012-09-054-0/+33
* In mode_config, destroy temporary pool list instead of the virtual IP list twiceMartin Willi2012-09-051-1/+1
* Merge branch 'multi-vip'Martin Willi2012-08-3114-214/+429
|\
| * Request and acquire multiple virtual IPs in IKEv1 Mode ConfigMartin Willi2012-08-301-47/+61
| * Request and acquire multiple virtual IPs in IKEv2 configuration payloadMartin Willi2012-08-301-49/+67
| * Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-302-4/+18
| * Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-302-22/+71
| * Support multiple address pools configured on a peer_cfgMartin Willi2012-08-308-13/+70
| * Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-3014-144/+207
* | Merge branch 'eap-client-select'Tobias Brunner2012-08-313-10/+100
|\ \
| * | Log the proper type for virtual EAP methodsTobias Brunner2012-08-311-1/+5
| * | Encode EAP-Naks in expanded format if we got an expanded type requestTobias Brunner2012-08-311-2/+2
| * | Allow clients to request a configured EAP method via EAP-NakTobias Brunner2012-08-311-4/+24
| * | Virtual EAP methods handle EAP-Naks themselvesTobias Brunner2012-08-311-5/+17
| * | Send EAP-Nak with supported types if requested type is unsupportedTobias Brunner2012-08-311-2/+4
| * | Filter invalid EAP authentication types when enumerating themTobias Brunner2012-08-312-1/+10
| * | Added a method to enumerate registered EAP methodsTobias Brunner2012-08-212-0/+43
| |/
* / Fall back to local address as IKEv1 identity if nothing else is configuredTobias Brunner2012-08-241-2/+14
|/
* Remove the unused second IKE_SA entry match function argumentMartin Willi2012-08-201-4/+4
* Add keymat_t constructor registration functionAdrian-Ken Rueegsegger2012-08-202-3/+45
* Merge branch 'android-app'Tobias Brunner2012-08-133-2/+3
|\
| * Moved packet_t to libstrongswanTobias Brunner2012-08-082-1/+2
| * Increase log verbosity when sending NAT keep-alivesTobias Brunner2012-08-081-1/+1
* | Merge branch 'android-ndk'Tobias Brunner2012-08-133-10/+18
|\|