aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa
Commit message (Collapse)AuthorAgeFilesLines
...
| | * Check authorization constraints after main mode completedMartin Willi2012-03-201-5/+48
| | |
| | * Save authentication info collected during main mode authenticationMartin Willi2012-03-201-1/+26
| | |
| | * Flush auth configs, if enabled, for both IKEv1 and IKEv2Martin Willi2012-03-201-5/+15
| | |
| | * Fixed return value if SIG payload missingMartin Willi2012-03-201-1/+1
| | |
| | * Show auth method of config we are looking for in main modeMartin Willi2012-03-201-1/+2
| | |
| | * Remove executable flag from source code filesMartin Willi2012-03-2010-0/+0
| | |
| | * Removed IKEv1 specific code from child_delete taskMartin Willi2012-03-201-17/+3
| | |
| | * Use IKEv1 specific tasks to close Quick Mode SAsMartin Willi2012-03-203-6/+14
| | |
| | * Added a dedicated IKEv1 task to delete CHILD_SAsMartin Willi2012-03-204-0/+272
| | |
| | * Close IKE_SA directly after sending the deleteMartin Willi2012-03-201-4/+12
| | |
| | * Removed IKEv1 specific code from ike_delete taskMartin Willi2012-03-201-21/+2
| | |
| | * Use the IKEv1 specific delete in IKEv1 SAsMartin Willi2012-03-203-7/+15
| | |
| | * Added a dedicated delete task for IKEv1 IKE_SAsMartin Willi2012-03-204-0/+200
| | |
| | * Use a single task_type_t enum name for ME and non-ME variantMartin Willi2012-03-201-30/+2
| | |
| | * Send certificates and requests when using Hybrid authenticationMartin Willi2012-03-202-1/+19
| | |
| | * Look for an XAuth authentication config both in the first and the second roundMartin Willi2012-03-201-4/+8
| | |
| | * Added hybrid authentication support to Main ModeMartin Willi2012-03-202-1/+11
| | |
| | * Added a IKEv1 hybrid authenticator based on Pubkey/PSK authenticatorsMartin Willi2012-03-203-0/+175
| | |
| | * Use real ID payload to build HASH_I|R for Main Mode authentication.Tobias Brunner2012-03-209-27/+60
| | | | | | | | | | | | | | | This is required for clients like the iPhone which set the protocol and/or port fields of the ID payload.
| | * Create authenticators right when they are used during Main Mode.Tobias Brunner2012-03-201-24/+43
| | |
| | * Ignore additional TRANSACTION request if we already queued oneMartin Willi2012-03-201-2/+7
| | |
| | * Keep a history of received response hashes to detect late retransmissionsMartin Willi2012-03-201-4/+33
| | | | | | | | | | | | | | | | | | If we receive an old response and we already sent out the next request, we must be able to identify that it is not the response to the new request.
| | * Narrow down received and configured traffic selector to a common subsetMartin Willi2012-03-201-11/+15
| | |
| | * Don't send a retransmit for a request we never have sent a responseMartin Willi2012-03-201-12/+19
| | |
| | * Print unsigned IKEv1 message IDsMartin Willi2012-03-201-3/+3
| | |
| | * Log selected peer config during Main Mode.Tobias Brunner2012-03-201-0/+4
| | |
| | * Added a bunch of well known IKEv1 vendor IDs to databaseMartin Willi2012-03-201-0/+25
| | |
| | * Use a generic IKEv1 vendor ID database to send and receive vendor IDsMartin Willi2012-03-201-54/+54
| | |
| | * Fixed compiler warning (set but unused variable)Martin Willi2012-03-201-1/+1
| | |
| | * Queue a TRANSACTION message for later processing if Main Mode not yet completedMartin Willi2012-03-201-0/+36
| | |
| | * Reset task manager state when build() completes an exchange (quick mode)Martin Willi2012-03-201-3/+5
| | |
| | * Include COOKIES in IKEv1 delete payloadsMartin Willi2012-03-201-0/+4
| | |
| | * Fixed missing shared_key initialization in main_mode task.Tobias Brunner2012-03-201-1/+1
| | |
| | * Use version specific DELETE payload identifier in ike_delete taskMartin Willi2012-03-201-1/+8
| | |
| | * Activate DELETE tasks when queuedMartin Willi2012-03-201-0/+10
| | |
| | * Fix IKEv1 DELETE subtask creation and processingMartin Willi2012-03-201-9/+13
| | |
| | * Handle DELETE as responder as INFORMATIONAL subtaskMartin Willi2012-03-202-3/+29
| | |
| | * Close SA immediately after sending an INFORMATIONAL errorMartin Willi2012-03-201-0/+7
| | |
| | * Moved responder informational handling to taskMartin Willi2012-03-202-54/+46
| | |
| | * Check if IKEv1 exchange type matches before handling it as responseMartin Willi2012-03-201-0/+1
| | |
| | * Use informational task in quick mode to send notifiesMartin Willi2012-03-201-21/+13
| | |
| | * Cleaned up notification sending in IKEv1 task managerMartin Willi2012-03-201-39/+11
| | |
| | * Use informational taks to send notify errorsMartin Willi2012-03-202-44/+29
| | |
| | * Added a task stub to create and process IKEv1 informational exchangesMartin Willi2012-03-204-0/+173
| | |
| | * Allow IKEv1 tasks to return ALREADY_DONE to flush all active or passive tasksMartin Willi2012-03-202-10/+23
| | |
| | * Support flushing of single tasks queues in IKEv1 task managerMartin Willi2012-03-201-9/+16
| | |
| | * Double check if we have a packet before retransmitting itMartin Willi2012-03-201-2/+2
| | |
| | * Fixed memory leak when handling IKEv1 error notifications.Tobias Brunner2012-03-201-0/+1
| | |
| | * Destroy IKE_SA after failed XAuth authentication.Tobias Brunner2012-03-201-2/+5
| | |
| | * Added generic XAuth backend, using secrets provided by credential sets.Tobias Brunner2012-03-201-1/+1
| | |