Fixed some typos, courtesy of codespell

src/libcharon/config/ike_cfg.h

@@ -61,7 +61,7 @@ enum fragmentation_t {
 };
 
 /**
- * enum strings fro ike_version_t
+ * enum strings for ike_version_t
  */
 extern enum_name_t *ike_version_names;
 

src/libcharon/encoding/generator.h

@@ -35,8 +35,8 @@ typedef struct generator_t generator_t;
  * method. The generated bytes are appended. After all payloads are added,
  * the write_to_chunk method writes out all generated data since
  * the creation of the generator.
- * The generater uses a set of encoding rules, which it can get from
- * the supplied payload. With this rules, the generater can generate
+ * The generator uses a set of encoding rules, which it can get from
+ * the supplied payload. With this rules, the generator can generate
  * the payload and all substructures automatically.
  */
 struct generator_t {

src/libcharon/kernel/kernel_interface.c

@@ -351,7 +351,7 @@ METHOD(kernel_interface_t, alloc_reqid, status_t,
 	if (entry)
 	{
 		/* we don't require a traffic selector match for explicit reqids,
-		 * as we wan't to reuse a reqid for trap-triggered policies that
+		 * as we want to reuse a reqid for trap-triggered policies that
 		 * got narrowed during negotiation. */
 		reqid_entry_destroy(tmpl);
 	}

src/libcharon/plugins/certexpire/certexpire_cron.h

@@ -38,7 +38,7 @@ struct certexpire_cron_t {
 	/**
 	 * Destroy a certexpire_cron_t.
 	 *
-	 * It currently is not possible to savely cancel a cron job. Make sure
+	 * It currently is not possible to safely cancel a cron job. Make sure
 	 * any scheduled jobs have been canceled before cleaning up.
 	 */
 	void (*destroy)(certexpire_cron_t *this);

src/libcharon/plugins/eap_radius/eap_radius_provider.c

@@ -92,7 +92,7 @@ static void destroy_attr(attr_t *this)
  * Hashtable entry with leases and attributes
  */
 typedef struct {
-	/** IKE_SA uniqe id we assign the IP lease */
+	/** IKE_SA unique id we assign the IP lease */
 	uintptr_t id;
 	/** list of IP leases received from AAA, as host_t */
 	linked_list_t *addrs;

src/libcharon/plugins/eap_radius/eap_radius_xauth.c

@@ -72,7 +72,7 @@ struct private_eap_radius_xauth_t {
 	xauth_round_t round;
 
 	/**
-	 * Concatentated password of all rounds
+	 * Concatenated password of all rounds
 	 */
 	chunk_t pass;
 };

src/libcharon/plugins/ha/ha_ike.c

@@ -335,7 +335,7 @@ METHOD(listener_t, message_hook, bool,
 		chunk_t iv;
 
 		/* we need the last block (or expected next IV) of Phase 1, which gets
-		 * upated after successful en-/decryption depending on direction */
+		 * updated after successful en-/decryption depending on direction */
 		if (incoming == plain)
 		{
 			if (message->get_message_id(message) == 0)

src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c

@@ -1982,7 +1982,7 @@ METHOD(kernel_ipsec_t, get_spi, status_t,
 	private_kernel_wfp_ipsec_t *this, host_t *src, host_t *dst,
 	uint8_t protocol, uint32_t *spi)
 {
-	/* To avoid sequencial SPIs, we use a one-to-one permuation function on
+	/* To avoid sequential SPIs, we use a one-to-one permutation function on
 	 * an incrementing counter, that is a full period PRNG for the range we
 	 * allocate SPIs in. We add some randomness using a fixed XOR and start
 	 * the counter at random position. This is not cryptographically safe,

src/libcharon/plugins/lookip/lookip_plugin.c

@@ -33,7 +33,7 @@ struct private_lookip_plugin_t {
 	lookip_plugin_t public;
 
 	/**
-	 * Listener collecting virtual IP assignements
+	 * Listener collecting virtual IP assignments
 	 */
 	lookip_listener_t *listener;
 

src/libcharon/plugins/osx_attr/osx_attr_handler.c

@@ -150,7 +150,7 @@ static bool manage_dns(private_osx_attr_handler_t *this,
 		if (add)
 		{
 			if (!this->append && !this->original)
-			{	/* backup orignal config, start with empty set */
+			{	/* backup original config, start with empty set */
 				this->original = arr;
 				arr = CFArrayCreateMutable(NULL, 0, &kCFTypeArrayCallBacks);
 			}

src/libcharon/plugins/stroke/stroke_config.c

@@ -519,7 +519,7 @@ static auth_cfg_t *build_auth_cfg(private_stroke_config_t *this,
 		enumerator->destroy(enumerator);
 	}
 
-	/* authentication metod (class, actually) */
+	/* authentication method (class, actually) */
 	if (strpfx(auth, "ike:") ||
 		strpfx(auth, "pubkey") ||
 		strpfx(auth, "rsa") ||

src/libcharon/plugins/stroke/stroke_list.c

@@ -693,7 +693,7 @@ METHOD(stroke_list_t, status, void,
 
 /**
  * create a unique certificate list without duplicates
- * certicates having the same issuer are grouped together.
+ * certificates having the same issuer are grouped together.
  */
 static linked_list_t* create_unique_cert_list(certificate_type_t type)
 {

src/libcharon/plugins/uci/uci_parser.c

@@ -112,7 +112,7 @@ METHOD(uci_parser_t, create_section_enumerator, enumerator_t*,
 	va_list args;
 	int i;
 
-	/* allocate enumerator large enought to hold keyword pointers */
+	/* allocate enumerator large enough to hold keyword pointers */
 	i = 1;
 	va_start(args, this);
 	while (va_arg(args, char*))

src/libcharon/plugins/vici/libvici.h

@@ -43,7 +43,7 @@
  * thread pool.
  *
  * Connecting requires an uri, which is currently either a UNIX socket path
- * prefixed with unix://, or a hostname:port touple prefixed with tcp://.
+ * prefixed with unix://, or a hostname:port tuple prefixed with tcp://.
  * Passing NULL takes the system default socket path.
  *
  * After the connection has been established, request messages can be sent.

src/libcharon/sa/child_sa.h

@@ -145,7 +145,7 @@ extern enum_name_t *child_sa_outbound_state_names;
  * - B allocates an SPI for the selected protocol
  * - B calls child_sa_t.install for both, the allocated and received SPI
  * - B sends the proposal with the allocated SPI to A
- * - A calls child_sa_t.install for both, the allocated and recevied SPI
+ * - A calls child_sa_t.install for both, the allocated and received SPI
  *
  * Once SAs are set up, policies can be added using add_policies.
  */
@@ -254,7 +254,7 @@ struct child_sa_t {
 	/**
 	 * Set the negotiated IPsec mode to use.
 	 *
-	 * @param mode		TUNNEL | TRANPORT | BEET
+	 * @param mode		TUNNEL | TRANSPORT | BEET
 	 */
 	void (*set_mode)(child_sa_t *this, ipsec_mode_t mode);
 

src/libcharon/sa/eap/eap_manager.h

@@ -30,7 +30,7 @@ typedef struct eap_manager_t eap_manager_t;
  * The EAP manager manages all EAP implementations and creates instances.
  *
  * A plugin registers it's implemented EAP method at the manager by
- * providing type and a contructor function. The manager then instanciates
+ * providing type and a constructor function. The manager then instantiates
  * eap_method_t instances through the provided constructor to handle
  * EAP authentication.
  */

src/libcharon/sa/eap/eap_method.h

@@ -64,7 +64,7 @@ struct eap_method_t {
 	/**
 	 * Initiate the EAP exchange.
 	 *
-	 * initiate() is only useable for server implementations, as clients only
+	 * initiate() is only usable for server implementations, as clients only
 	 * reply to server requests.
 	 * A eap_payload is created in "out" if result is NEED_MORE.
 	 *

src/libcharon/sa/ike_sa.h

@@ -855,7 +855,7 @@ struct ike_sa_t {
 	 * @param message_id	ID of the request to retransmit
 	 * @return
 	 *						- SUCCESS
-	 *						- NOT_FOUND if request doesn't have to be retransmited
+	 *						- NOT_FOUND if request doesn't have to be retransmitted
 	 */
 	status_t (*retransmit) (ike_sa_t *this, uint32_t message_id);
 
@@ -1155,7 +1155,7 @@ struct ike_sa_t {
 	void (*inherit_post) (ike_sa_t *this, ike_sa_t *other);
 
 	/**
-	 * Reset the IKE_SA, useable when initiating fails.
+	 * Reset the IKE_SA, usable when initiating fails.
 	 *
 	 * @param new_spi		TRUE to allocate a new initiator SPI
 	 */

src/libcharon/sa/ikev1/tasks/mode_config.c

@@ -547,7 +547,7 @@ static status_t build_reply(private_mode_config_t *this, message_t *message)
 												 type, value));
 	}
 	enumerator->destroy(enumerator);
-	/* if a client did not re-request all adresses, release them */
+	/* if a client did not re-request all addresses, release them */
 	enumerator = migrated->create_enumerator(migrated);
 	while (enumerator->enumerate(enumerator, &found))
 	{

src/libcharon/sa/ikev1/tasks/quick_mode.c

@@ -1330,7 +1330,7 @@ METHOD(task_t, process_i, status_t,
 														&this->cpi_r);
 				if (!list->get_count(list))
 				{
-					DBG1(DBG_IKE, "peer did not acccept our IPComp proposal, "
+					DBG1(DBG_IKE, "peer did not accept our IPComp proposal, "
 						 "IPComp disabled");
 					this->cpi_i = 0;
 				}

src/libcharon/sa/ikev2/task_manager_v2.c

@@ -737,7 +737,7 @@ static status_t process_response(private_task_manager_t *this,
 		charon->bus->alert(charon->bus, ALERT_RETRANSMIT_SEND_CLEARED, packet);
 	}
 
-	/* catch if we get resetted while processing */
+	/* catch if we get reset while processing */
 	this->reset = FALSE;
 	enumerator = array_create_enumerator(this->active_tasks);
 	while (enumerator->enumerate(enumerator, &task))

src/libcharon/sa/ikev2/tasks/child_create.c

@@ -414,7 +414,7 @@ static linked_list_t *get_dynamic_hosts(ike_sa_t *ike_sa, bool local)
 }
 
 /**
- * Substitude any host address with NATed address in traffic selector
+ * Substitute any host address with NATed address in traffic selector
  */
 static linked_list_t* get_transport_nat_ts(private_child_create_t *this,
 										   bool local, linked_list_t *in)

src/libcharon/sa/task_manager.h

@@ -86,7 +86,7 @@ enum task_queue_t {
  * completed.
  * For the initial IKE_SA setup, several tasks are queued: One for the
  * unauthenticated IKE_SA setup, one for authentication, one for CHILD_SA setup
- * and maybe one for virtual IP assignement.
+ * and maybe one for virtual IP assignment.
  * The task manager is also responsible for retransmission. It uses a backoff
  * algorithm. The timeout is calculated using
  * RETRANSMIT_TIMEOUT * (RETRANSMIT_BASE ** try).

src/libcharon/sa/xauth/xauth_manager.h

@@ -29,7 +29,7 @@ typedef struct xauth_manager_t xauth_manager_t;
  * The XAuth manager manages all XAuth implementations and creates instances.
  *
  * A plugin registers it's implemented XAuth method at the manager by
- * providing type and a contructor function. The manager then instanciates
+ * providing type and a constructor function. The manager then instantiates
  * xauth_method_t instances through the provided constructor to handle
  * XAuth authentication.
  */

src/libcharon/sa/xauth/xauth_method.h

@@ -54,7 +54,7 @@ struct xauth_method_t {
 	/**
 	 * Initiate the XAuth exchange.
 	 *
-	 * initiate() is only useable for server implementations, as clients only
+	 * initiate() is only usable for server implementations, as clients only
 	 * reply to server requests.
 	 * A cp_payload is created in "out" if result is NEED_MORE.
 	 *