| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 3 | -73/+72 | |
| | | ||||||
| * | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 1 | -0/+13 | |
| | | ||||||
| * | Send unanswered follow up R_U_THERE messages with the same DPD seq | Martin Willi | 2012-05-15 | 1 | -1/+7 | |
| | | ||||||
| * | Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL | Martin Willi | 2012-05-15 | 1 | -11/+0 | |
| | | ||||||
| * | allow private algorithms | Andreas Steffen | 2012-05-05 | 2 | -4/+16 | |
| | | ||||||
| * | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 2 | -4/+4 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 10 | -22/+27 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 111 | -2690/+14683 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Fix iteration through half-open IKE_SA table | Martin Willi | 2012-04-16 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 | |
| | | | ||||||
| | * | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 | |
| | | | ||||||
| | * | Added a getter for CHILD_SA marks | Martin Willi | 2012-03-22 | 2 | -0/+19 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+9 | |
| | | | ||||||
| | * | Reply with received configuration payload identifier in Mode Config | Martin Willi | 2012-03-20 | 1 | -0/+8 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 109 | -2685/+14608 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Properly handle retransmitted initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -58/+74 | |
| | | | | | | | | | | | | | | | | | | | This change allows to properly handle retransmits of initial IKE messages when we've already processed them (i.e. our response is now resent immediately). | |||||
| | | * | Implemented table of init hashes without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -30/+30 | |
| | | | | ||||||
| | | * | Implemented table of connected peers without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -63/+75 | |
| | | | | ||||||
| | | * | Implemented table of half open IKE_SAs without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -52/+47 | |
| | | | | ||||||
| | | * | Don't use linked_list_t for buckets in main IKE_SA hash table. | Tobias Brunner | 2012-03-20 | 1 | -57/+82 | |
| | | | | ||||||
| | | * | Fixed deadlock if checkin_and_destroy is called during shutdown. | Tobias Brunner | 2012-03-20 | 1 | -0/+10 | |
| | | | | ||||||
| | | * | Do not clone hashes of initial IKE messages when storing them in the hash table. | Tobias Brunner | 2012-03-20 | 1 | -7/+6 | |
| | | | | ||||||
| | | * | Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table. | Tobias Brunner | 2012-03-20 | 1 | -2/+13 | |
| | | | | | | | | | | | | | | | | For IKEv1 the previous behavior of always using the initiator's SPI as key is maintained. | |||||
| | | * | Added separate hashtable for hashes of initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -64/+139 | |
| | | | | | | | | | | | | | This does not require us to do a lookup for an SA by SPI first. | |||||
| | | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 4 | -29/+53 | |
| | | | | ||||||
| | | * | Implemented handling of UNITY_LOAD_BALANCE as reauthentication. | Tobias Brunner | 2012-03-20 | 2 | -3/+28 | |
| | | | | ||||||
| | | * | Check if we actually have a packet before retransmitting it | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Parse IKEv1 Cisco Load Balancing notify (can't act on it yet). | Tobias Brunner | 2012-03-20 | 1 | -2/+19 | |
| | | | | ||||||
| | | * | Compiler warning fixed. | Tobias Brunner | 2012-03-20 | 1 | -2/+6 | |
| | | | | ||||||
| | | * | Use correct enum values to detect three message tasks for retransmission | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-03-20 | 1 | -13/+15 | |
| | | | | ||||||
| | | * | Use UDP encapsulation even in non-NAT situation if initiator requests it | Martin Willi | 2012-03-20 | 1 | -13/+14 | |
| | | | | ||||||
| | | * | Support inactivity timeout in IKEv1 CHILD_SAs | Martin Willi | 2012-03-20 | 1 | -1/+24 | |
| | | | | ||||||
| | | * | Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasher | Martin Willi | 2012-03-20 | 1 | -14/+37 | |
| | | | | ||||||
| | | * | Select public key auth method by checking what key we have | Martin Willi | 2012-03-20 | 2 | -4/+99 | |
| | | | | ||||||
| | | * | Support ECDSA signatures in IKEv1 pubkey authenticator | Martin Willi | 2012-03-20 | 3 | -18/+32 | |
| | | | | ||||||
| | | * | Exchange certificates when using IKEv1 ECDSA authentication | Martin Willi | 2012-03-20 | 2 | -0/+6 | |
| | | | | ||||||
| | | * | Don't re-resolve addresses during initiate if they have already been set | Martin Willi | 2012-03-20 | 1 | -1/+5 | |
| | | | | ||||||
| | | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Setting message ID on task manager sets DPD sequence numbers in IKEv1 | Martin Willi | 2012-03-20 | 2 | -2/+12 | |
| | | | | ||||||
| | | * | Update state before triggering DPD, as we cancel it if PASSIVE | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Set thread specific SA on bus for each enumerated IKE_SA | Martin Willi | 2012-03-20 | 1 | -1/+11 | |
| | | | | ||||||
| | | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 3 | -6/+16 | |
| | | | | | | | | | | | | | encrypted | |||||
| | | * | Clear initiator flag when checking out initial IKEv1 SA from message | Martin Willi | 2012-03-20 | 1 | -0/+4 | |
| | | | | ||||||
| | | * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 2 | -4/+4 | |
| | | | | ||||||
| | | * | Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper | Martin Willi | 2012-03-20 | 4 | -21/+20 | |
| | | | | ||||||
| | | * | Get a reference for the child_cfg passed to child_create_create() | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Invoke bus_t.narrow hook in quick mode exchange | Martin Willi | 2012-03-20 | 1 | -7/+36 | |
| | | | | ||||||
| | | * | Invoke authorization hooks for IKEv1 connections | Martin Willi | 2012-03-20 | 3 | -25/+95 | |
| | | | | ||||||
| | | * | Invoke ike_updown hooks for reauthenticated IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |