aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Expand)AuthorAgeFilesLines
* unit-tests: Add tests for expires after CHILD_SA rekeyingTobias Brunner2016-06-171-0/+129
* child-rekey: Only rekey installed CHILD_SAsTobias Brunner2016-06-171-7/+14
* Report test coverage of libcharon and starterTobias Brunner2016-06-171-0/+3
* unit-tests: Add test for CHILD_SA rekey if a retry due to an INVALID_KE_PAYLO...Tobias Brunner2016-06-171-0/+143
* child-rekey: Ignore failed colliding CHILD_SA rekeyingsTobias Brunner2016-06-171-1/+10
* unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creationTobias Brunner2016-06-173-0/+108
* child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is receivedTobias Brunner2016-06-171-4/+33
* ikev2: Add possibility to delay initiation of a queued taskTobias Brunner2016-06-175-66/+189
* ike: Reduce RETRY_INTERVAL a bitTobias Brunner2016-06-171-2/+2
* ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SATobias Brunner2016-06-171-14/+35
* unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are rec...Tobias Brunner2016-06-171-0/+470
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-175-10/+21
* child-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-174-23/+38
* ike-cfg: Add option to prefer supplied proposals over locally configured onesTobias Brunner2016-06-175-32/+48
* proposal: Remove MODP_NONE from IKE proposals parsed from stringsTobias Brunner2016-06-171-0/+10
* proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-174-6/+97
* ike-rekey: Make sure to ignore task when detecting collisions if ike-init sub...Tobias Brunner2016-06-171-1/+2
* unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is d...Tobias Brunner2016-06-171-0/+221
* unit-tests: Add tests for IKE_SA rekeying if collision is not detected by one...Tobias Brunner2016-06-171-0/+340
* ike-rekey: Handle undetected collisions also if delete is delayedTobias Brunner2016-06-171-16/+26
* ike-rekey: There is no passive reauth task, so it will never collide with oneTobias Brunner2016-06-172-7/+4
* ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SATobias Brunner2016-06-171-56/+64
* ike-rekey: Properly handle situation if the peer did not notice the rekey col...Tobias Brunner2016-06-171-0/+11
* ike-delete: Handle deletes while rekeying differently if there was a collisionTobias Brunner2016-06-171-2/+40
* ike-rekey: Add method to check if there was a rekey collisionTobias Brunner2016-06-172-1/+17
* ikev2: Check for collisions after handling IKE deletionTobias Brunner2016-06-171-1/+5
* unit-tests: Add tests for IKE/CHILD delete collisionsTobias Brunner2016-06-171-0/+165
* child-delete: Reply as usual when concurrently rekeying the IKE_SATobias Brunner2016-06-171-5/+1
* unit-tests: Add tests for IKE/CHILD rekey collisionsTobias Brunner2016-06-171-0/+170
* child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SATobias Brunner2016-06-171-2/+2
* ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...Tobias Brunner2016-06-171-1/+8
* unit-tests: Add tests for collisions between IKE_SA rekeying and deletionTobias Brunner2016-06-171-0/+174
* ike-rekey: Handle TEMPORARY_FAILURE notifyTobias Brunner2016-06-171-8/+22
* ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SATobias Brunner2016-06-171-0/+5
* unit-tests: Add tests for IKE SA deletionTobias Brunner2016-06-173-0/+139
* ike-delete: No need to wait for a response in case of concurrent deletesTobias Brunner2016-06-171-14/+0
* unit-tests: Only deliver messages to the SA they are addressed toTobias Brunner2016-06-171-4/+12
* unit-tests: Add test for simple IKE rekey collisionTobias Brunner2016-06-171-5/+171
* ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-177-44/+53
* ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messagesTobias Brunner2016-06-171-8/+13
* unit-tests: Add tests for IKE_SA rekeyingTobias Brunner2016-06-173-0/+111
* unit-tests: Add asserts against IKE_SAsTobias Brunner2016-06-171-0/+45
* unit-tests: Make sure to flush the IKE_SA manager before destroying the senderTobias Brunner2016-06-171-1/+3
* unit-tests: Return status from process_message()Tobias Brunner2016-06-172-4/+8
* unit-tests: Use wrapper for add_listener in bus_t related assertsTobias Brunner2016-06-171-2/+2
* unit-tests: Provide a wrapper around bus_t::add_listener and unregister them ...Tobias Brunner2016-06-172-0/+32
* ike-sa-manager: Make sure rng is defined before destroying it in flush()Tobias Brunner2016-06-171-1/+1
* ike-rekey: Establish new IKE_SA earlier as responder, but only if no collisionTobias Brunner2016-06-171-3/+8
* unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collisionTobias Brunner2016-06-171-1/+354
* child-delete: Check if the deleted CHILD_SA is the redundant SA of a collisionTobias Brunner2016-06-171-4/+39