aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Collapse)AuthorAgeFilesLines
...
| | * As responder, try to reuse the reqid of the CHILD_SA the initiator is rekeyingMartin Willi2012-03-201-0/+38
| | |
| | * Reply quick mode with the same SA lifetime that we receivedMartin Willi2012-03-201-4/+4
| | |
| | * Do not query CHILD_SA during delete if they already expiredMartin Willi2012-03-2018-46/+99
| | |
| | * Implemented CHILD_SA rekeyingMartin Willi2012-03-201-1/+18
| | |
| | * Don't return FAILED if a CHILD_SA to delete could not be foundMartin Willi2012-03-201-1/+1
| | |
| | * Support installing of quick mode SAs with a specific reqidMartin Willi2012-03-203-3/+27
| | |
| | * Double check that we could select a TS as quick mode responderMartin Willi2012-03-201-3/+3
| | |
| | * Implemented responder retransmission, currently enabled for quick mode onlyMartin Willi2012-03-202-57/+117
| | |
| | * Queue IKEv1 INFORMATIONALS with higher priority to process notifies firstMartin Willi2012-03-201-2/+2
| | |
| | * Accept IKEv1 INVALID_KE_INFORMATION notifies without dataMartin Willi2012-03-201-2/+2
| | |
| | * Don't process notifies in quick mode task when we get an INFORMATIONALMartin Willi2012-03-201-1/+2
| | |
| | * Always queue a new passive task when receiving an IKEv1 INFORMATIONALMartin Willi2012-03-201-1/+2
| | |
| | * IKEv1 ATTRIBUTES_NOT_SUPPORTED error notify added.Tobias Brunner2012-03-202-2/+7
| | |
| | * Fixed leak of a hash when checking out by hashMartin Willi2012-03-201-0/+1
| | |
| | * Give a hint that decryption failed if payload length invalidMartin Willi2012-03-201-0/+7
| | |
| | * Cast keymat safely, not based on external inputMartin Willi2012-03-201-36/+44
| | |
| | * Added a keymat_t version to cast it safelyMartin Willi2012-03-203-0/+21
| | |
| | * Handle initiation of not supported IKE versions properlyMartin Willi2012-03-209-47/+111
| | |
| | * Send a delete for every CHILD_SA before deleting IKE_SAMartin Willi2012-03-201-3/+15
| | |
| | * Set used auth_class in PSKv1 authenticator to comply to constraintsMartin Willi2012-03-204-6/+20
| | |
| | * Fixed scheduling of IKEv2 init tasks in a second keyingtryMartin Willi2012-03-201-20/+42
| | |
| | * Don't requeue IKEv1 init tasks if they already exist in a second keyingtryMartin Willi2012-03-201-5/+42
| | |
| | * Use IPSEC DOI also for ISAKMP SA deletes.Tobias Brunner2012-03-201-1/+1
| | |
| | * Implemented resetting of IKEv1 task manager, enabling additional keyingtriesMartin Willi2012-03-202-1/+29
| | |
| | * Fixed migration of NATD taskMartin Willi2012-03-201-0/+1
| | |
| | * Implemented migration of quick mode taskMartin Willi2012-03-201-5/+23
| | |
| | * Implemented migration of XAuth taskMartin Willi2012-03-201-0/+18
| | |
| | * Implemented migration of certificate handling tasksMartin Willi2012-03-202-0/+3
| | |
| | * Implemented migration of Main Mode taskMartin Willi2012-03-201-0/+13
| | |
| | * Check message version before processing it on an IKE_SAMartin Willi2012-03-201-0/+10
| | |
| | * Fix ike_version_t enum namesMartin Willi2012-03-201-1/+1
| | |
| | * Accept NULL as keymat when generating a messageMartin Willi2012-03-201-4/+10
| | |
| | * Send correct INVALID_MAJOR_VERSION when receiving packet with unsupported ↵Martin Willi2012-03-201-39/+62
| | | | | | | | | | | | protocol
| | * Drop IKEv1 main/aggressive modes if peer to aggressiveMartin Willi2012-03-201-4/+17
| | |
| | * Added description for the xauth-eap pluginMartin Willi2012-03-201-2/+8
| | |
| | * Check if a config has been selected before narrowing selectors in quick modeMartin Willi2012-03-201-2/+5
| | |
| | * Added an XAuth plugin that forwards authentication to EAP methodsMartin Willi2012-03-206-0/+458
| | |
| | * Added a flag to register local credential sets exclusively, disabling all othersMartin Willi2012-03-201-4/+4
| | |
| | * Added a TODO for creating IKE_SAs with unsupported protocol versionMartin Willi2012-03-201-5/+3
| | |
| | * Don't accept IKEv2 packets if IKEv2 disabledMartin Willi2012-03-201-0/+2
| | |
| | * Don't include ikev1/ikev2 subfolders in build when using --disable-ikev1/ikev2Martin Willi2012-03-201-2/+10
| | |
| | * Moved eap/xauth classes out of protocol specific subdirectoriesMartin Willi2012-03-2029-27/+27
| | |
| | * Removed obsolete task header inclusion in IKE_SAMartin Willi2012-03-201-24/+0
| | |
| | * Moved MOBIKE task creation to protocol specific task managerMartin Willi2012-03-204-10/+35
| | |
| | * Check in task manager if we have to requeue IKE tasks in a non-first keyingtryMartin Willi2012-03-202-48/+43
| | |
| | * Moved IKE_SA reauth task creation to protocol specific task managerMartin Willi2012-03-204-5/+21
| | |
| | * Moved IKE_SA rekey task creation to protocol specific task managerMartin Willi2012-03-204-5/+20
| | |
| | * Moved IKE_SA delete task creation to protocol specific task managerMartin Willi2012-03-204-11/+21
| | |
| | * Moved CHILD_SA delete task creation to protocol specific task managerMartin Willi2012-03-204-11/+26
| | |
| | * Moved CHILD_SA rekey task creation to protocol specific task managerMartin Willi2012-03-204-4/+24
| | |