index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libcharon
Commit message (
Collapse
)
Author
Age
Files
Lines
...
|
|
*
As responder, try to reuse the reqid of the CHILD_SA the initiator is rekeying
Martin Willi
2012-03-20
1
-0
/
+38
|
|
|
|
|
*
Reply quick mode with the same SA lifetime that we received
Martin Willi
2012-03-20
1
-4
/
+4
|
|
|
|
|
*
Do not query CHILD_SA during delete if they already expired
Martin Willi
2012-03-20
18
-46
/
+99
|
|
|
|
|
*
Implemented CHILD_SA rekeying
Martin Willi
2012-03-20
1
-1
/
+18
|
|
|
|
|
*
Don't return FAILED if a CHILD_SA to delete could not be found
Martin Willi
2012-03-20
1
-1
/
+1
|
|
|
|
|
*
Support installing of quick mode SAs with a specific reqid
Martin Willi
2012-03-20
3
-3
/
+27
|
|
|
|
|
*
Double check that we could select a TS as quick mode responder
Martin Willi
2012-03-20
1
-3
/
+3
|
|
|
|
|
*
Implemented responder retransmission, currently enabled for quick mode only
Martin Willi
2012-03-20
2
-57
/
+117
|
|
|
|
|
*
Queue IKEv1 INFORMATIONALS with higher priority to process notifies first
Martin Willi
2012-03-20
1
-2
/
+2
|
|
|
|
|
*
Accept IKEv1 INVALID_KE_INFORMATION notifies without data
Martin Willi
2012-03-20
1
-2
/
+2
|
|
|
|
|
*
Don't process notifies in quick mode task when we get an INFORMATIONAL
Martin Willi
2012-03-20
1
-1
/
+2
|
|
|
|
|
*
Always queue a new passive task when receiving an IKEv1 INFORMATIONAL
Martin Willi
2012-03-20
1
-1
/
+2
|
|
|
|
|
*
IKEv1 ATTRIBUTES_NOT_SUPPORTED error notify added.
Tobias Brunner
2012-03-20
2
-2
/
+7
|
|
|
|
|
*
Fixed leak of a hash when checking out by hash
Martin Willi
2012-03-20
1
-0
/
+1
|
|
|
|
|
*
Give a hint that decryption failed if payload length invalid
Martin Willi
2012-03-20
1
-0
/
+7
|
|
|
|
|
*
Cast keymat safely, not based on external input
Martin Willi
2012-03-20
1
-36
/
+44
|
|
|
|
|
*
Added a keymat_t version to cast it safely
Martin Willi
2012-03-20
3
-0
/
+21
|
|
|
|
|
*
Handle initiation of not supported IKE versions properly
Martin Willi
2012-03-20
9
-47
/
+111
|
|
|
|
|
*
Send a delete for every CHILD_SA before deleting IKE_SA
Martin Willi
2012-03-20
1
-3
/
+15
|
|
|
|
|
*
Set used auth_class in PSKv1 authenticator to comply to constraints
Martin Willi
2012-03-20
4
-6
/
+20
|
|
|
|
|
*
Fixed scheduling of IKEv2 init tasks in a second keyingtry
Martin Willi
2012-03-20
1
-20
/
+42
|
|
|
|
|
*
Don't requeue IKEv1 init tasks if they already exist in a second keyingtry
Martin Willi
2012-03-20
1
-5
/
+42
|
|
|
|
|
*
Use IPSEC DOI also for ISAKMP SA deletes.
Tobias Brunner
2012-03-20
1
-1
/
+1
|
|
|
|
|
*
Implemented resetting of IKEv1 task manager, enabling additional keyingtries
Martin Willi
2012-03-20
2
-1
/
+29
|
|
|
|
|
*
Fixed migration of NATD task
Martin Willi
2012-03-20
1
-0
/
+1
|
|
|
|
|
*
Implemented migration of quick mode task
Martin Willi
2012-03-20
1
-5
/
+23
|
|
|
|
|
*
Implemented migration of XAuth task
Martin Willi
2012-03-20
1
-0
/
+18
|
|
|
|
|
*
Implemented migration of certificate handling tasks
Martin Willi
2012-03-20
2
-0
/
+3
|
|
|
|
|
*
Implemented migration of Main Mode task
Martin Willi
2012-03-20
1
-0
/
+13
|
|
|
|
|
*
Check message version before processing it on an IKE_SA
Martin Willi
2012-03-20
1
-0
/
+10
|
|
|
|
|
*
Fix ike_version_t enum names
Martin Willi
2012-03-20
1
-1
/
+1
|
|
|
|
|
*
Accept NULL as keymat when generating a message
Martin Willi
2012-03-20
1
-4
/
+10
|
|
|
|
|
*
Send correct INVALID_MAJOR_VERSION when receiving packet with unsupported ↵
Martin Willi
2012-03-20
1
-39
/
+62
|
|
|
|
|
|
|
|
|
|
|
|
protocol
|
|
*
Drop IKEv1 main/aggressive modes if peer to aggressive
Martin Willi
2012-03-20
1
-4
/
+17
|
|
|
|
|
*
Added description for the xauth-eap plugin
Martin Willi
2012-03-20
1
-2
/
+8
|
|
|
|
|
*
Check if a config has been selected before narrowing selectors in quick mode
Martin Willi
2012-03-20
1
-2
/
+5
|
|
|
|
|
*
Added an XAuth plugin that forwards authentication to EAP methods
Martin Willi
2012-03-20
6
-0
/
+458
|
|
|
|
|
*
Added a flag to register local credential sets exclusively, disabling all others
Martin Willi
2012-03-20
1
-4
/
+4
|
|
|
|
|
*
Added a TODO for creating IKE_SAs with unsupported protocol version
Martin Willi
2012-03-20
1
-5
/
+3
|
|
|
|
|
*
Don't accept IKEv2 packets if IKEv2 disabled
Martin Willi
2012-03-20
1
-0
/
+2
|
|
|
|
|
*
Don't include ikev1/ikev2 subfolders in build when using --disable-ikev1/ikev2
Martin Willi
2012-03-20
1
-2
/
+10
|
|
|
|
|
*
Moved eap/xauth classes out of protocol specific subdirectories
Martin Willi
2012-03-20
29
-27
/
+27
|
|
|
|
|
*
Removed obsolete task header inclusion in IKE_SA
Martin Willi
2012-03-20
1
-24
/
+0
|
|
|
|
|
*
Moved MOBIKE task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-10
/
+35
|
|
|
|
|
*
Check in task manager if we have to requeue IKE tasks in a non-first keyingtry
Martin Willi
2012-03-20
2
-48
/
+43
|
|
|
|
|
*
Moved IKE_SA reauth task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-5
/
+21
|
|
|
|
|
*
Moved IKE_SA rekey task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-5
/
+20
|
|
|
|
|
*
Moved IKE_SA delete task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-11
/
+21
|
|
|
|
|
*
Moved CHILD_SA delete task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-11
/
+26
|
|
|
|
|
*
Moved CHILD_SA rekey task creation to protocol specific task manager
Martin Willi
2012-03-20
4
-4
/
+24
|
|
|
[prev]
[next]