 Martin Willi
|
a347c1ac43
|
Fix sending of CERTREQ/CERT payloads in aggressive mode
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
ee325b555f
|
Implemented aggressive mode using Phase 1 helper class
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
b4bd875612
|
Make use of the new Phase 1 helper class in main mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
44dcd5944a
|
Fix error handling if no PSK found for main mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
90731f38c9
|
Install quick mode CHILD_SAs with negotiated encapsulation mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
b147679a2c
|
Try to detect reauthentication as responder and adopt children to new SA
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
c9d68d17f0
|
Include peer config overtime in negotiated ISAKMP SA lifetime
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
17c64d5ff9
|
Establish IKE_SA only once as XAuth responder
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
2da3ff7a52
|
Set a condition flag if peer has been authenticated using XAuth
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
54773729a8
|
Queue Mode Config tasks after main mode as initiator, not as responder
|
2012-03-20 17:31:32 +01:00 |
|
|
Clavister OpenSource
|
d71092ceed
|
Setting Mode Cfg identifier for CFG_ACK messages.
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
f56c3c53f6
|
As responder, try to reuse the reqid of the CHILD_SA the initiator is rekeying
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
31bd5c8c0e
|
Reply quick mode with the same SA lifetime that we received
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
3a925f74ab
|
Do not query CHILD_SA during delete if they already expired
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
634ac410a2
|
Don't return FAILED if a CHILD_SA to delete could not be found
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
14dc794165
|
Support installing of quick mode SAs with a specific reqid
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
5f1df0a060
|
Double check that we could select a TS as quick mode responder
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
253d7e3eff
|
Don't process notifies in quick mode task when we get an INFORMATIONAL
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
94450913ef
|
Fixed migration of NATD task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
bce22af29e
|
Implemented migration of quick mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
ca037076bf
|
Implemented migration of XAuth task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
5903acd0ff
|
Implemented migration of certificate handling tasks
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
451ebecc85
|
Implemented migration of Main Mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
28e3c6595d
|
Check if a config has been selected before narrowing selectors in quick mode
|
2012-03-20 17:31:28 +01:00 |
|
|
Martin Willi
|
15a682f4c2
|
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
|
2012-03-20 17:31:26 +01:00 |
|