Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are ↵ | Tobias Brunner | 2016-06-17 | 1 | -0/+470 |
| | | | | received | ||||
* | unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is ↵ | Tobias Brunner | 2016-06-17 | 1 | -0/+221 |
| | | | | delayed | ||||
* | unit-tests: Add tests for IKE_SA rekeying if collision is not detected by ↵ | Tobias Brunner | 2016-06-17 | 1 | -0/+340 |
| | | | | one peer | ||||
* | unit-tests: Add tests for collisions between IKE_SA rekeying and deletion | Tobias Brunner | 2016-06-17 | 1 | -0/+174 |
| | |||||
* | unit-tests: Add test for simple IKE rekey collision | Tobias Brunner | 2016-06-17 | 1 | -5/+171 |
| | |||||
* | ikev2: Add a new state to track rekeyed IKE_SAs | Tobias Brunner | 2016-06-17 | 1 | -1/+1 |
| | | | | | | | | | This makes handling such IKE_SAs more specifically compared to keeping them in state IKE_CONNECTING or IKE_ESTABLISHED (which we did when we lost a collision - even triggering the ike_updown event), or using IKE_REKEYING for them, which would also be ambiguous. For instance, we can now reject anything but DELETES for such SAs. | ||||
* | unit-tests: Add tests for IKE_SA rekeying | Tobias Brunner | 2016-06-17 | 1 | -0/+109 |