denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

implemented IKE_SA rekeying

Browse Source 
uses ikelifetime, rekeymargin and rekeyfuzz config settings
	no handling of simultaneus exchanges yet!
This commit is contained in:
Martin Willi
2006-07-27 12:18:40 +00:00
parent 45f76a7ddd
commit fe04e93a8b
30 changed files with 1696 additions and 317 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/doc/Todo-list.txt
+3 -3
View File
@@ -50,7 +50,7 @@
- implement 3DES to load encrypted pem files
+ ipsec.secrets parsing
/ trapping
+ trapping
+ proper delete messages
- notifys on connection setup failure
+ create child sa message/rekeying
@@ -59,7 +59,7 @@
when a blocked IKE_SA receives a lot of messages
- add a crl fetch mechanism which synchronizes equal fetches
- replace state machine with something more transaction oriented
- find existing IKE_SA on CHILD_SA initiation
+ replace state machine with something more transaction oriented
+ find existing IKE_SA on CHILD_SA initiation
- configure flag which allows to ommit vendor id in pluto