tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
\| \| *	Added a "aggressive" ipsec.conf connection option	Martin Willi	2012-03-20	1	-1/+1
\| \| \|
\| \| *	Handle aggressive mode task in IKEv1 task manager	Martin Willi	2012-03-20	1	-6/+36
\| \| \|
\| \| *	Select IKEv1 configurations by main/aggressive mode option	Martin Willi	2012-03-20	4	-5/+8
\| \| \|
\| \| *	Added an aggressive mode peer_cfg option	Martin Willi	2012-03-20	12	-18/+40
\| \| \|
\| \| *	Fix sending of CERTREQ/CERT payloads in aggressive mode	Martin Willi	2012-03-20	2	-2/+12
\| \| \|
\| \| *	Encrypt payloads of third aggressive mode message	Martin Willi	2012-03-20	1	-3/+3
\| \| \|
\| \| *	Implemented aggressive mode using Phase 1 helper class	Martin Willi	2012-03-20	5	-0/+683
\| \| \|
\| \| *	Make use of the new Phase 1 helper class in main mode	Martin Willi	2012-03-20	1	-579/+73
\| \| \|
\| \| *	Implemented a common Phase 1 helper class to use by main and aggressive modes	Martin Willi	2012-03-20	3	-0/+754
\| \| \|
\| \| *	Fix error handling if no PSK found for main mode	Martin Willi	2012-03-20	1	-5/+9
\| \| \|
\| \| *	Install quick mode CHILD_SAs with negotiated encapsulation mode	Martin Willi	2012-03-20	1	-12/+17
\| \| \|
\| \| *	Support IKEv1 proposal encodings having both lifebytes and a lifetime	Martin Willi	2012-03-20	1	-67/+58
\| \| \|
\| \| *	Try to detect reauthentication as responder and adopt children to new SA	Martin Willi	2012-03-20	5	-1/+233
\| \| \|
\| \| *	Destroy IKE_SA after reauthentication initiatend and lifetime limit reached	Martin Willi	2012-03-20	1	-1/+6
\| \| \|
\| \| *	Added an IKE_SA manager method to enumerate IKE_SA IDs filtered by identities	Martin Willi	2012-03-20	2	-34/+59
\| \| \|
\| \| *	Query for XAuth identity in get_other_eap_id(), too	Martin Willi	2012-03-20	1	-0/+4
\| \| \|
\| \| *	Set ISAKMP SA state to rekeying after triggering reauthentication	Martin Willi	2012-03-20	1	-0/+1
\| \| \|
\| \| *	Include peer config overtime in negotiated ISAKMP SA lifetime	Martin Willi	2012-03-20	1	-2/+3
\| \| \|
\| \| *	Initiate IKEv1 reauthentication, take over all children	Martin Willi	2012-03-20	1	-4/+44
\| \| \|
\| \| *	Establish IKE_SA only once as XAuth responder	Martin Willi	2012-03-20	1	-1/+0
\| \| \|
\| \| *	Support initiation of childless IKEv1 ISAKMP SAs	Martin Willi	2012-03-20	1	-1/+2
\| \| \|
\| \| *	Don't trigger reauthentication if initiator authenticated using XAuth	Martin Willi	2012-03-20	1	-0/+1
\| \| \|
\| \| *	Set a condition flag if peer has been authenticated using XAuth	Martin Willi	2012-03-20	2	-0/+6
\| \| \|
\| \| *	Queue Mode Config tasks after main mode as initiator, not as responder	Martin Willi	2012-03-20	1	-6/+6
\| \| \|
\| \| *	Setting Mode Cfg identifier for CFG_ACK messages.	Clavister OpenSource	2012-03-20	1	-0/+7
\| \| \|
\| \| *	Add functions to set mode cfg identifier	Clavister OpenSource	2012-03-20	2	-0/+27
\| \| \|
\| \| *	Try all matching XAuth secrets we find, not only the first one	Martin Willi	2012-03-20	1	-11/+23
\| \| \|
\| \| *	As responder, try to reuse the reqid of the CHILD_SA the initiator is rekeying	Martin Willi	2012-03-20	1	-0/+38
\| \| \|
\| \| *	Reply quick mode with the same SA lifetime that we received	Martin Willi	2012-03-20	1	-4/+4
\| \| \|
\| \| *	Do not query CHILD_SA during delete if they already expired	Martin Willi	2012-03-20	18	-46/+99
\| \| \|
\| \| *	Implemented CHILD_SA rekeying	Martin Willi	2012-03-20	1	-1/+18
\| \| \|
\| \| *	Don't return FAILED if a CHILD_SA to delete could not be found	Martin Willi	2012-03-20	1	-1/+1
\| \| \|
\| \| *	Support installing of quick mode SAs with a specific reqid	Martin Willi	2012-03-20	3	-3/+27
\| \| \|
\| \| *	Double check that we could select a TS as quick mode responder	Martin Willi	2012-03-20	1	-3/+3
\| \| \|
\| \| *	Implemented responder retransmission, currently enabled for quick mode only	Martin Willi	2012-03-20	2	-57/+117
\| \| \|
\| \| *	Queue IKEv1 INFORMATIONALS with higher priority to process notifies first	Martin Willi	2012-03-20	1	-2/+2
\| \| \|
\| \| *	Accept IKEv1 INVALID_KE_INFORMATION notifies without data	Martin Willi	2012-03-20	1	-2/+2
\| \| \|
\| \| *	Don't process notifies in quick mode task when we get an INFORMATIONAL	Martin Willi	2012-03-20	1	-1/+2
\| \| \|
\| \| *	Always queue a new passive task when receiving an IKEv1 INFORMATIONAL	Martin Willi	2012-03-20	1	-1/+2
\| \| \|
\| \| *	IKEv1 ATTRIBUTES_NOT_SUPPORTED error notify added.	Tobias Brunner	2012-03-20	2	-2/+7
\| \| \|
\| \| *	Fixed leak of a hash when checking out by hash	Martin Willi	2012-03-20	1	-0/+1
\| \| \|
\| \| *	Give a hint that decryption failed if payload length invalid	Martin Willi	2012-03-20	1	-0/+7
\| \| \|
\| \| *	Cast keymat safely, not based on external input	Martin Willi	2012-03-20	1	-36/+44
\| \| \|
\| \| *	Added a keymat_t version to cast it safely	Martin Willi	2012-03-20	3	-0/+21
\| \| \|
\| \| *	Handle initiation of not supported IKE versions properly	Martin Willi	2012-03-20	9	-47/+111
\| \| \|
\| \| *	Send a delete for every CHILD_SA before deleting IKE_SA	Martin Willi	2012-03-20	1	-3/+15
\| \| \|
\| \| *	Set used auth_class in PSKv1 authenticator to comply to constraints	Martin Willi	2012-03-20	4	-6/+20
\| \| \|
\| \| *	Fixed scheduling of IKEv2 init tasks in a second keyingtry	Martin Willi	2012-03-20	1	-20/+42
\| \| \|
\| \| *	Don't requeue IKEv1 init tasks if they already exist in a second keyingtry	Martin Willi	2012-03-20	1	-5/+42
\| \| \|
\| \| *	Use IPSEC DOI also for ISAKMP SA deletes.	Tobias Brunner	2012-03-20	1	-1/+1
\| \| \|