Tobias Brunner 31be582399 ikev1: Adopt virtual IPs on new IKE_SA during re-authentication ...

Some clients like iOS/Mac OS X don't do a mode config exchange on the
new SA during re-authentication.  If we don't adopt the previous virtual
IP Quick Mode rekeying will later fail.

If a client does do Mode Config we directly reassign the VIPs we migrated
from the old SA, without querying the attributes framework.

Fixes #807, #810.

2015-03-19 10:32:06 +01:00

..

authenticators

payload: Use common prefixes for all payload type identifiers

2014-06-04 15:53:03 +02:00

tasks

ikev1: Adopt virtual IPs on new IKE_SA during re-authentication

2015-03-19 10:32:06 +01:00

keymat_v1.c

payload: Use common prefixes for all payload type identifiers

2014-06-04 15:53:03 +02:00

keymat_v1.h

Cleaned up memory management and return values for encryption payload

2012-07-16 14:55:07 +02:00

phase1.c

ikev1: Be more verbose if a peer config would match, but is unusable for Mode

2014-09-25 17:21:54 +02:00

phase1.h

Support multiple address pools configured on a peer_cfg

2012-08-30 16:43:42 +02:00

task_manager_v1.c

ike: Consistently log CHILD_SAs with their unique_id instead of their reqid

2015-02-20 13:34:52 +01:00

task_manager_v1.h

…