tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	unit-tests: Add tests for expires after CHILD_SA rekeying	Tobias Brunner	2016-06-17	1	-0/+129
\|
*	unit-tests: Add test for CHILD_SA rekey if a retry due to an ↵	Tobias Brunner	2016-06-17	1	-0/+143
\| \| \| \|	INVALID_KE_PAYLOAD is delayed
*	unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creation	Tobias Brunner	2016-06-17	1	-0/+106
\|
*	unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are ↵	Tobias Brunner	2016-06-17	1	-0/+470
\| \| \| \|	received
*	proposal: Handle MODP_NONE in both directions when selecting proposals	Tobias Brunner	2016-06-17	1	-0/+81
\|
*	unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is ↵	Tobias Brunner	2016-06-17	1	-0/+221
\| \| \| \|	delayed
*	unit-tests: Add tests for IKE_SA rekeying if collision is not detected by ↵	Tobias Brunner	2016-06-17	1	-0/+340
\| \| \| \|	one peer
*	unit-tests: Add tests for IKE/CHILD delete collisions	Tobias Brunner	2016-06-17	1	-0/+165
\|
*	unit-tests: Add tests for IKE/CHILD rekey collisions	Tobias Brunner	2016-06-17	1	-0/+170
\|
*	unit-tests: Add tests for collisions between IKE_SA rekeying and deletion	Tobias Brunner	2016-06-17	1	-0/+174
\|
*	unit-tests: Add tests for IKE SA deletion	Tobias Brunner	2016-06-17	1	-0/+137
\|
*	unit-tests: Add test for simple IKE rekey collision	Tobias Brunner	2016-06-17	1	-5/+171
\|
*	ikev2: Add a new state to track rekeyed IKE_SAs	Tobias Brunner	2016-06-17	1	-1/+1
\| \| \| \| \| \| \| \| \|	This makes handling such IKE_SAs more specifically compared to keeping them in state IKE_CONNECTING or IKE_ESTABLISHED (which we did when we lost a collision - even triggering the ike_updown event), or using IKE_REKEYING for them, which would also be ambiguous. For instance, we can now reject anything but DELETES for such SAs.
*	unit-tests: Add tests for IKE_SA rekeying	Tobias Brunner	2016-06-17	1	-0/+109
\|
*	unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collision	Tobias Brunner	2016-06-17	1	-1/+354
\|
*	unit-tests: Test for rekeying if INVALID_KE_PAYLOAD notifies are received	Tobias Brunner	2016-06-17	1	-0/+253
\|
*	unit-tests: Make IKE and ESP proposals configurable	Tobias Brunner	2016-06-17	2	-13/+13
\|
*	unit-tests: Add tests for CHILD_SA rekeying/deletion collisions	Tobias Brunner	2016-06-17	1	-1/+288
\|
*	ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeying	Tobias Brunner	2016-06-17	1	-6/+5
\| \| \| \|	This allows handling collisions better, in particular with deletions.
*	unit-tests: Add unit tests for basic CHILD_SA rekeying	Tobias Brunner	2016-06-17	1	-0/+235
\|
*	unit-tests: Add another CHILD_SA delete collision	Tobias Brunner	2016-06-17	1	-1/+56
\|
*	unit-tests: Call methods on IKE_SAs in their context	Tobias Brunner	2016-06-17	1	-7/+7
\|
*	unit-tests: Add a unit test for CHILD_SA DELETE collisions	Tobias Brunner	2016-06-17	1	-0/+146
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-4/+4
\|
*	ike-cfg: Add unit tests for ike_cfg_get_family() helper	Tobias Brunner	2015-07-27	1	-0/+118
\|
*	unit-tests: Add a IKEv2 message encryption test case	Martin Willi	2015-07-12	1	-0/+138
\| \| \| \| \|	It uses the ChaCha20Poly1305 test vectors from draft-ietf-ipsecme-chacha20-poly1305-06.
*	mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth	Martin Willi	2015-02-20	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	With make-before-break IKEv2 re-authentication, virtual IP addresses must be assigned overlapping to the same peer. With the remote IKE address, the backend can detect re-authentication attempts by comparing the remote host address and port. This allows proper reassignment of the virtual IP if it is re-requested. This change removes the mem-pool.reassign_online option, as it is obsolete now. IPs get automatically reassigned if a peer re-requests the same address, and additionally connects from the same address and port.
*	attributes: Move the configuration attributes framework to libcharon	Martin Willi	2015-02-20	1	-0/+230