aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa
Commit message (Expand)AuthorAgeFilesLines
...
* ike-sa-manager: Make sure the message ID of initial messages is 0Tobias Brunner2015-03-041-1/+2
* ikev2: Don't destroy the SA if an IKE_SA_INIT with unexpected MID is receivedTobias Brunner2015-03-041-4/+0
* ikev2: Don't adopt any CHILD_SA during make-before-break reauthenticationMartin Willi2015-03-041-1/+2
* ikev2: Merge EAP client authentication details if EAP methods provides themMartin Willi2015-03-031-0/+7
* eap: Add an optional authentication details getter to the EAP method interfaceMartin Willi2015-03-031-0/+12
* ikev2: Schedule a timeout for the delete message following passive IKE rekeyingMartin Willi2015-03-031-0/+6
* bus: Add an ike_update() hook invoked when peer endpoints changeMartin Willi2015-02-201-0/+2
* ikev2: Schedule a make-before-break completion task to delete old IKE_SAMartin Willi2015-02-206-1/+172
* ikev2: Allow task to skip exchange by setting undefined exchange typeMartin Willi2015-02-201-0/+5
* ikev2: Trigger make-before-break reauthentication instead of reauth taskMartin Willi2015-02-202-2/+79
* ike-sa-manager: Use IKEv1 uniqueness reauthentication detection for IKEv2, tooMartin Willi2015-02-201-12/+8
* attribute-manager: Pass full IKE_SA to handler methodsMartin Willi2015-02-203-9/+5
* attribute-manager: Pass the full IKE_SA to provider methodsMartin Willi2015-02-203-10/+8
* attributes: Move the configuration attributes framework to libcharonMartin Willi2015-02-203-25/+24
* ike: Consistently log CHILD_SAs with their unique_id instead of their reqidMartin Willi2015-02-205-8/+10
* ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqidMartin Willi2015-02-202-36/+13
* inactivity-job: Schedule job by CHILD_SA unique ID instead of reqidMartin Willi2015-02-202-13/+7
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-201-2/+2
* ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA managerMartin Willi2015-02-202-15/+77
* child-sa-manager: Add a global manager storing CHILD_SA relationsMartin Willi2015-02-202-0/+422
* child-sa: Replace reqid based marks by "unique" marksMartin Willi2015-02-209-10/+108
* child-sa: Introduce a unique CHILD_SA identifierMartin Willi2015-02-202-0/+24
* child-sa: Delegate reqid allocation to the kernel interfaceMartin Willi2015-02-201-15/+46
* child-sa: Sort traffic selectors after adding CHILD_SA policiesMartin Willi2015-02-201-0/+3
* child-sa: Remove the obsolete update logicMartin Willi2015-02-201-6/+1
* kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-201-8/+6
* kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-201-2/+2
* ikev2: Only touch the DH object if we have a matching proposalTobias Brunner2014-12-231-11/+17
* apple: Redefine some additional clashing Mach typesMartin Willi2014-12-161-0/+2
* ike: Make check for known payloads depend on IKE versionTobias Brunner2014-12-051-1/+1
* ikev2: Fix handling of more than one hash-and-URL certificate payloadsTobias Brunner2014-12-041-2/+2
* Implemented full BLISS support for IKEv2 public key authentication and the pk...Andreas Steffen2014-11-293-3/+26
* ikev2: Fix ike_rekey switch statement broken with last commitMartin Willi2014-11-241-1/+1
* ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekeyMartin Willi2014-11-211-0/+1
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-213-0/+7
* ikev1: Don't inherit children if INITITAL_CONTACT was seenThomas Egerer2014-10-301-1/+4
* ikev1: Send INITIAL_CONTACT notify in Main ModeThomas Egerer2014-10-301-0/+28
* ike: Do remote address updates also when behind static NATsTobias Brunner2014-10-131-4/+7
* ikev1: Add fragmentation support for Windows peersVolker RĂ¼melin2014-10-103-13/+58
* ikev2: Send retransmits using the latest known addressesTobias Brunner2014-10-101-1/+3
* ikev2: Send and receive fragmented IKE messagesTobias Brunner2014-10-101-44/+169
* ike: IKE_SA may fragment IKEv2 messagesTobias Brunner2014-10-101-1/+1
* ike: Do not cache MID of IKEv2 fragmentsTobias Brunner2014-10-101-2/+3
* ikev2: Negotiate support for IKEv2 fragmentationTobias Brunner2014-10-102-1/+24
* ikev1: Move defragmentation to message_tTobias Brunner2014-10-101-167/+16
* ike: Move fragmentation to ike_sa_tTobias Brunner2014-10-103-62/+94
* message: fragment() generates message and fragments and caches themTobias Brunner2014-10-101-31/+11
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-132/+118
* ikev1: Fix handling of UNITY_LOAD_BALANCETobias Brunner2014-10-071-3/+3
* ikev1: Don't queue more than one mode config or XAuth taskTobias Brunner2014-10-071-7/+22