aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'ikev1'Martin Willi2012-05-02295-5119/+21909
|\
| * Fixed Android null terminated password fixup in xauth-eapMartin Willi2012-04-261-2/+2
| * Fix iteration through half-open IKE_SA tableMartin Willi2012-04-161-0/+1
| * Added another bunch of commonly used IKEv1 NATT vendor IDsMartin Willi2012-04-041-1/+19
| * Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value).Tobias Brunner2012-03-271-86/+26
| * Fix null-terminated XAuth passwords, as sent by Android 4Martin Willi2012-03-222-0/+8
| * Store authentication info of a XAUTH round on IKE_SAMartin Willi2012-03-221-0/+16
| * Added a getter for CHILD_SA marksMartin Willi2012-03-222-0/+19
| * Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqidMartin Willi2012-03-222-0/+14
| * Reply with received configuration payload identifier in Mode ConfigMartin Willi2012-03-201-0/+8
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-20293-5024/+21793
| |\
| | * Properly handle retransmitted initial IKE messages.Tobias Brunner2012-03-201-58/+74
| | * Implemented table of init hashes without linked_list_t.Tobias Brunner2012-03-201-30/+30
| | * Implemented table of connected peers without linked_list_t.Tobias Brunner2012-03-201-63/+75
| | * Implemented table of half open IKE_SAs without linked_list_t.Tobias Brunner2012-03-201-52/+47
| | * Don't use linked_list_t for buckets in main IKE_SA hash table.Tobias Brunner2012-03-201-57/+82
| | * Fixed deadlock if checkin_and_destroy is called during shutdown.Tobias Brunner2012-03-201-0/+10
| | * Do not clone hashes of initial IKE messages when storing them in the hash table.Tobias Brunner2012-03-201-7/+6
| | * Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table.Tobias Brunner2012-03-201-2/+13
| | * Added separate hashtable for hashes of initial IKE messages.Tobias Brunner2012-03-201-64/+139
| | * chunk_equals_ptr added to compare chunks given as pointers.Tobias Brunner2012-03-201-0/+9
| | * Store the major IKE version on ike_sa_id_t.Tobias Brunner2012-03-207-32/+60
| | * Implemented handling of UNITY_LOAD_BALANCE as reauthentication.Tobias Brunner2012-03-202-3/+28
| | * Check if we actually have a packet before retransmitting itMartin Willi2012-03-201-1/+1
| | * Use a single set of FDs for all random plugin RNG instancesMartin Willi2012-03-203-36/+89
| | * Parse IKEv1 Cisco Load Balancing notify (can't act on it yet).Tobias Brunner2012-03-203-4/+27
| | * Fixed transform numbering in IKEv1 proposal.Tobias Brunner2012-03-201-0/+1
| | * Compiler warning fixed.Tobias Brunner2012-03-201-2/+6
| | * Use correct enum values to detect three message tasks for retransmissionMartin Willi2012-03-201-2/+2
| | * Trigger DPD not before IKE_SA state gets updatedMartin Willi2012-03-201-13/+15
| | * Fix mapping of IKEv1 encapsulation modeMartin Willi2012-03-201-1/+1
| | * Use UDP encapsulation even in non-NAT situation if initiator requests itMartin Willi2012-03-201-13/+14
| | * Support inactivity timeout in IKEv1 CHILD_SAsMartin Willi2012-03-201-1/+24
| | * Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasherMartin Willi2012-03-201-14/+37
| | * Select public key auth method by checking what key we haveMartin Willi2012-03-202-4/+99
| | * Support ECDSA signatures in IKEv1 pubkey authenticatorMartin Willi2012-03-203-18/+32
| | * Exchange certificates when using IKEv1 ECDSA authenticationMartin Willi2012-03-202-0/+6
| | * Accept NULL auth_cfg_t passed to credential_manager_t.get_private()Martin Willi2012-03-203-34/+34
| | * Support encoding of IKEv1 ECDSA proposalsMartin Willi2012-03-201-6/+16
| | * Dropped support of deprecated authby=eap and eap= optionsMartin Willi2012-03-207-43/+1
| | * Added support for authby/xauth_server legacy optionsMartin Willi2012-03-202-62/+40
| | * Renamed CONFIGURATION_ATTRIBUTE_LENGTH to streamline it with other ATTRIBUTE ...Martin Willi2012-03-205-10/+10
| | * Use ATTRIBUTE_VALUE rule in configuration attribute to parse it with correct ...Martin Willi2012-03-201-1/+1
| | * Don't re-resolve addresses during initiate if they have already been setMartin Willi2012-03-201-1/+5
| | * Adopt children after syncing a rekeyed IKEv1 SAMartin Willi2012-03-203-2/+10
| | * Synchronize IKEv1 DPD sequence numbersMartin Willi2012-03-201-0/+30
| | * Setting message ID on task manager sets DPD sequence numbers in IKEv1Martin Willi2012-03-202-2/+12
| | * Update state before triggering DPD, as we cancel it if PASSIVEMartin Willi2012-03-201-0/+1
| | * Set thread specific SA on bus for each enumerated IKE_SAMartin Willi2012-03-201-1/+11
| | * Sync remote virtual IP for IKEv1 SAsMartin Willi2012-03-201-0/+13