tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Mark CHILD_SAs used for trap policies to uninstall them properly.	Tobias Brunner	2012-06-04	1	-6/+13
\| \| \| \| \| \| \|	If the installation failed the state is not CHILD_ROUTED which means the wrong priority is used to uninstall the policies. This is a problem for kernel interfaces that keep track of installed policies as now the proper policy is not found (if the priority is considered).
*	Avoid queueing more than one retry initiate job.	Tobias Brunner	2012-05-30	3	-4/+35
\|
*	Retry IKE_SA initiation if DNS resolution failed.	Tobias Brunner	2012-05-30	1	-4/+39
\| \| \| \| \|	This is disabled by default and can be enabled with the charon.retry_initiate_interval option in strongswan.conf.
*	Job added to re-initiate an IKE_SA.	Tobias Brunner	2012-05-30	3	-0/+144
\|
*	Fix MOBIKE address update if responder address changed.	Tobias Brunner	2012-05-25	1	-2/+2
\| \| \| \| \|	Use the source address of the current MOBIKE message as peer address instead of assuming the address cached on the IKE_SA is still valid.
*	Resolve hosts before reauthenticating due to address change.	Tobias Brunner	2012-05-25	1	-0/+2
\|
*	Don't queue delete_ike_sa job when setting IKE_DELETING.	Tobias Brunner	2012-05-25	2	-9/+1
\| \| \| \| \|	This avoids deleting IKE_SAs during reauthentication (without trying to reestablish them).
*	During reauthentication reestablish IKE_SA even if deleting the old one fails.	Tobias Brunner	2012-05-25	1	-0/+6
\|
*	Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish.	Tobias Brunner	2012-05-25	2	-115/+77
\|
*	Fixed route lookup in case MOBIKE is not enabled.	Tobias Brunner	2012-05-25	1	-3/+9
\|
*	Added encapsulation mode transform attribute to IPComp proposal.	Tobias Brunner	2012-05-25	3	-5/+10
\|
*	Add an additional proposal without IPComp to SA payload.	Tobias Brunner	2012-05-24	1	-17/+15
\|
*	Added log message if peer does not accept/provide IPComp proposal.	Tobias Brunner	2012-05-24	1	-2/+12
\|
*	Added support to negotiate IPComp during Quick Mode.	Tobias Brunner	2012-05-24	1	-11/+91
\|
*	Added support for IKEv1 IPComp proposals in SA payload.	Tobias Brunner	2012-05-24	5	-14/+98
\|
*	Added support for IKEv1 IPComp proposals in proposal substructure.	Tobias Brunner	2012-05-24	4	-10/+129
\|
*	Fix memleak during Quick Mode in case no SPI can be allocated from kernel.	Tobias Brunner	2012-05-24	1	-8/+8
\|
*	Properly filter IKEv1 proposals consisting of multiple proposal payloads.	Tobias Brunner	2012-05-24	1	-9/+15
\| \| \| \| \| \| \|	Since a proposal_t object is created for each transform contained in the proposal payload, it does not work to simply remove the last proposal_t object added to the list (there may be several other extracted from the previous proposal payload).
*	Apply IDir before deriving keys as aggressive initiator	Martin Willi	2012-05-23	1	-4/+4
\|
*	Use received identity to look up PSK as aggressive responder	Martin Willi	2012-05-23	1	-2/+9
\|
*	Check if we actually have an initiating packet to free while processing ↵	Martin Willi	2012-05-23	1	-1/+1
\| \| \| \|	responses
*	list IKEv1 Aggressive Mode in ipsec statusall	Andreas Steffen	2012-05-23	1	-2/+9
\|
*	Switch to alternative peer config in IKEv1 Main and Aggressive Mode.	Tobias Brunner	2012-05-21	4	-24/+85
\|
*	Cancel pending retransmits when flushing active task queue	Martin Willi	2012-05-21	1	-0/+4
\|
*	Cancel active quick mode task when receiving INFORMATIONAL error	Martin Willi	2012-05-21	1	-0/+30
\|
*	Flush task queues explicitly, not implicitly if task returns ALREADY_DONE	Martin Willi	2012-05-21	6	-12/+20
\|
*	Wrap task managers flush_queue() in IKE_SA	Martin Willi	2012-05-21	2	-0/+14
\|
*	Make task managers flush_queue() method public	Martin Willi	2012-05-21	3	-20/+62
\|
*	Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed	Martin Willi	2012-05-21	1	-9/+3
\|
*	Remove executable flag from source files.	Tobias Brunner	2012-05-18	13	-0/+0
\|
*	Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵	Tobias Brunner	2012-05-18	45	-49/+64
\| \| \| \|	tasks etc.).
*	Removed superfluous @param in bus.h.	Tobias Brunner	2012-05-18	1	-1/+0
\|
*	whitelist: Make sure listed IDs are null-terminated.	Tobias Brunner	2012-05-18	1	-0/+1
\|
*	List registered nonce generators in statusall output.	Tobias Brunner	2012-05-18	1	-2/+18
\|
*	Use nonce_gen instead of rng to generate nonces	Adrian-Ken Rueegsegger	2012-05-18	4	-34/+34
\| \| \| \| \|	Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
*	Add create_nonce_gen function to keymat interface	Adrian-Ken Rueegsegger	2012-05-18	3	-0/+24
\| \| \| \|	This function returns a nonce generator object.
*	make IKEv1 DPD timeout configurable in charon	Andreas Steffen	2012-05-17	14	-22/+70
\|
*	Moved IKEv1 DPD processing to task manager, fix sequence issues	Martin Willi	2012-05-15	3	-73/+72
\|
*	Consider inbound ESP as a sign of liveness for DPD timeout	Martin Willi	2012-05-15	1	-2/+15
\|
*	Schedule a DPD timeout job that enforces the IKE message timeout policy	Martin Willi	2012-05-15	4	-0/+177
\|
*	Send unanswered follow up R_U_THERE messages with the same DPD seq	Martin Willi	2012-05-15	1	-1/+7
\|
*	Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL	Martin Willi	2012-05-15	1	-11/+0
\|
*	Free name of application using libcharon.	Tobias Brunner	2012-05-15	1	-0/+1
\|
*	Register load-tester faked kernel interface before other kernel interfaces	Martin Willi	2012-05-14	1	-8/+9
\|
*	Load tester can enforce a local IP to use	Martin Willi	2012-05-14	1	-2/+9
\|
*	Add plugin features support to load-tester plugin	Martin Willi	2012-05-14	1	-48/+76
\|
*	Fixed #include in tnc-ifmap plugin.	Tobias Brunner	2012-05-07	1	-0/+1
\|
*	allow private algorithms	Andreas Steffen	2012-05-05	2	-4/+16
\|
*	fixed mapping of IKEv1 algorithms	Andreas Steffen	2012-05-05	1	-29/+184
\|
*	vendor ID cosmetics	Andreas Steffen	2012-05-05	2	-4/+4
\|