aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
...
* ike-rekey: Properly handle situation if the peer did not notice the rekey col...Tobias Brunner2016-06-171-0/+11
* ike-delete: Handle deletes while rekeying differently if there was a collisionTobias Brunner2016-06-171-2/+40
* ike-rekey: Add method to check if there was a rekey collisionTobias Brunner2016-06-172-1/+17
* ikev2: Check for collisions after handling IKE deletionTobias Brunner2016-06-171-1/+5
* unit-tests: Add tests for IKE/CHILD delete collisionsTobias Brunner2016-06-171-0/+165
* child-delete: Reply as usual when concurrently rekeying the IKE_SATobias Brunner2016-06-171-5/+1
* unit-tests: Add tests for IKE/CHILD rekey collisionsTobias Brunner2016-06-171-0/+170
* child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SATobias Brunner2016-06-171-2/+2
* ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/...Tobias Brunner2016-06-171-1/+8
* unit-tests: Add tests for collisions between IKE_SA rekeying and deletionTobias Brunner2016-06-171-0/+174
* ike-rekey: Handle TEMPORARY_FAILURE notifyTobias Brunner2016-06-171-8/+22
* ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SATobias Brunner2016-06-171-0/+5
* unit-tests: Add tests for IKE SA deletionTobias Brunner2016-06-173-0/+139
* ike-delete: No need to wait for a response in case of concurrent deletesTobias Brunner2016-06-171-14/+0
* unit-tests: Only deliver messages to the SA they are addressed toTobias Brunner2016-06-171-4/+12
* unit-tests: Add test for simple IKE rekey collisionTobias Brunner2016-06-171-5/+171
* ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-177-44/+53
* ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messagesTobias Brunner2016-06-171-8/+13
* unit-tests: Add tests for IKE_SA rekeyingTobias Brunner2016-06-173-0/+111
* unit-tests: Add asserts against IKE_SAsTobias Brunner2016-06-171-0/+45
* unit-tests: Make sure to flush the IKE_SA manager before destroying the senderTobias Brunner2016-06-171-1/+3
* unit-tests: Return status from process_message()Tobias Brunner2016-06-172-4/+8
* unit-tests: Use wrapper for add_listener in bus_t related assertsTobias Brunner2016-06-171-2/+2
* unit-tests: Provide a wrapper around bus_t::add_listener and unregister them ...Tobias Brunner2016-06-172-0/+32
* ike-sa-manager: Make sure rng is defined before destroying it in flush()Tobias Brunner2016-06-171-1/+1
* ike-rekey: Establish new IKE_SA earlier as responder, but only if no collisionTobias Brunner2016-06-171-3/+8
* unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collisionTobias Brunner2016-06-171-1/+354
* child-delete: Check if the deleted CHILD_SA is the redundant SA of a collisionTobias Brunner2016-06-171-4/+39
* child-rekey: Add method to check for the redundant SA created in a collisionTobias Brunner2016-06-172-18/+37
* unit-tests: Test for rekeying if INVALID_KE_PAYLOAD notifies are receivedTobias Brunner2016-06-171-0/+253
* child-rekey: Don't change state to INSTALLED if it was already REKEYINGTobias Brunner2016-06-171-3/+5
* unit-tests: Make IKE and ESP proposals configurableTobias Brunner2016-06-174-44/+116
* unit-tests: Add tests for CHILD_SA rekeying/deletion collisionsTobias Brunner2016-06-171-1/+288
* unit-tests: Add asserts against job schedulingTobias Brunner2016-06-172-0/+60
* ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeyingTobias Brunner2016-06-173-15/+17
* unit-tests: Add asserts against task queues of IKE_SAsTobias Brunner2016-06-171-0/+32
* child-rekey: Use more appropriate error notifies if CHILD_SA is not found or ...Tobias Brunner2016-06-171-3/+8
* child-rekey: Recreate the CHILD_SA if we receive a CHILD_SA_NOT_FOUND notifyTobias Brunner2016-06-171-0/+28
* child-create: Handle TEMPORARY_FAILURE notify as failureTobias Brunner2016-06-172-4/+5
* unit-tests: Add unit tests for basic CHILD_SA rekeyingTobias Brunner2016-06-173-0/+237
* unit-tests: Add asserts against ike|child_rekey hooksTobias Brunner2016-06-172-0/+82
* unit-tests: Match in and outbound SPIs in SA assertsTobias Brunner2016-06-171-2/+15
* unit-tests: Register nonce generator and make first nonce byte configurableTobias Brunner2016-06-172-1/+19
* crypto-factory: Stop after successfully creating one nonce generatorTobias Brunner2016-06-171-0/+4
* unit-tests: Add mock nonce generatorTobias Brunner2016-06-173-0/+129
* unit-tests: Make message asserts more flexibleTobias Brunner2016-06-172-26/+106
* unit-tests: Add another CHILD_SA delete collisionTobias Brunner2016-06-171-1/+56
* unit-tests: Register mock DH implementation as static plugin featureTobias Brunner2016-06-171-0/+11
* unit-tests: Add mock DH implementation that's basically a noopTobias Brunner2016-06-173-0/+125
* unit-tests: Make IKE SPIs predictableTobias Brunner2016-06-171-0/+14