aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa
Commit message (Expand)AuthorAgeFilesLines
...
* ike: Keep track of send keepalive jobs to avoid scheduling more than one per ...Tobias Brunner2016-03-032-10/+23
* ike: Don't send NAT keepalives if we have no path to the other peerTobias Brunner2016-03-031-3/+9
* ikev2: Use config value for sending of vendor IDsThomas Egerer2016-03-011-13/+43
* ike-sa-manager: Store a reference to the thread that checked out an IKE_SATobias Brunner2016-02-171-13/+14
* ikev2: Add debug message about failed IKE authenticationThomas Egerer2016-02-021-0/+4
* ikev1: Log successful authentication with signature schemeThomas Egerer2016-02-011-1/+1
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-2/+2
* child-rekey: Suppress updown event when deleting redundant CHILD_SAsTobias Brunner2016-02-011-1/+10
* ike-sa-manager: Don't update entries for init messages after unlocking segmentTobias Brunner2016-02-011-3/+2
* mode-config: Reassign migrated virtual IP if client requests %anyTobias Brunner2015-11-121-1/+3
* ike-sa-manager: Allow plugins to provide IKE SPIs via a callbackTobias Brunner2015-11-112-11/+54
* ikev1: Also use message hashes for Quick Mode for the early retransmission checkTobias Brunner2015-11-111-4/+8
* kernel-interface: Pass the same data to del_policy() that was passed to add_p...Tobias Brunner2015-11-102-98/+107
* trap-manager: Also clean up remote address in error casesTobias Brunner2015-11-101-0/+2
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-104-7/+7
* ike-natd: Create fake NAT-D payloads in a more static wayTobias Brunner2015-11-091-20/+8
* ike-sa-manager: Signal entries that we don't actually check outTobias Brunner2015-11-091-1/+8
* ike-sa-manager: Signal waiting threads after check out/in for uniqueness checkTobias Brunner2015-11-091-0/+3
* ikev1: Fix calculation of DPD timeoutTobias Brunner2015-11-091-0/+2
* xauth: Call authorize() hook also when xauth-noauth is usedTobias Brunner2015-11-091-2/+8
* ikev2: Fix size of key material for CAMELLIA-CTRTobias Brunner2015-10-301-0/+1
* ike-mobike: Send retransmits to the current local and remote addressesTobias Brunner2015-10-301-1/+5
* ikev1: Handle queued INFORMATIONAL message after receiving the last AM requestTobias Brunner2015-10-301-0/+16
* ikev1: Queue INFORMATIONAL request if AM is not complete yetTobias Brunner2015-10-301-6/+13
* ikev1: Handle queued TRANSACTION messages only after processing repliesTobias Brunner2015-10-301-1/+2
* ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yetTobias Brunner2015-10-301-17/+27
* ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM mes...Tobias Brunner2015-10-301-0/+32
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-9/+11
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Prevent deadlock when checking for duplicate IKEv1 SAsTobias Brunner2015-10-291-0/+16
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
* shunt-manager: Don't install policies in case of an address family or IP prot...Tobias Brunner2015-09-161-0/+20
* trap-manager: Cleanup local address in error casesTobias Brunner2015-08-271-0/+2
* ike: Fix half-open count for initiating SAs when initially checked inTobias Brunner2015-08-271-0/+6
* ike: Only consider number of half-open SAs as responder when deciding whether...Tobias Brunner2015-08-272-11/+35
* ike: Also track initiating IKE_SAs as half-openTobias Brunner2015-08-211-1/+0
* child-rekey: Don't add a REKEY_SA notify if the child-create task is deleting...Tobias Brunner2015-08-211-6/+9
* child-create: Cache proposed IPsec protocolTobias Brunner2015-08-211-10/+13
* child-create: Don't attempt to delete the SA if we don't have all the informa...Tobias Brunner2015-08-211-8/+10
* child-rekey: Remove redundant migrate() call for child-create sub-taskTobias Brunner2015-08-211-2/+1
* child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mis...Tobias Brunner2015-08-211-0/+1
* ikev1: Fix handling of overlapping Quick Mode exchangesTobias Brunner2015-08-203-2/+70
* ikev2: Compare initiator flag again, partially reverts 17ec1c74deTobias Brunner2015-08-202-1/+5
* ikev1: Pass current auth-cfg when looking for key to determine auth methodTobias Brunner2015-08-191-1/+1
* ikev2: Store outer EAP method used to authenticate remote peer in auth-cfgTobias Brunner2015-08-191-0/+9
* ike: Use the original port when remote resolves to %anyTobias Brunner2015-08-191-1/+3
* trap-manager: Enable auto=route with right=%any for transport mode connectionsTobias Brunner2015-08-191-27/+118
* child-sa: Fix refcounting of allocated reqidsTobias Brunner2015-08-171-3/+12
* plugin-feature: Add vendor specific EAP method registration macrosTobias Brunner2015-08-171-1/+2
* Initialize variables that some compilers seem to warn aboutTobias Brunner2015-08-131-1/+1