Tobias Brunner 47ee60177e ikev1: Pass current auth-cfg when looking for key to determine auth method ...

If multiple certificates use the same subjects we might choose the wrong
one otherwise. This way we use the one referenced with leftcert and
stored in the auth-cfg and we actually do the same thing later in the
pubkey authenticator.

Fixes #1077.

2015-08-19 17:39:01 +02:00

..

attributes

mem-pool: Remove entries without online or offline leases

2015-03-19 09:55:56 +01:00

bus

bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SA

2015-05-21 15:38:31 +02:00

config

ike-cfg: Add helper function to determine address family of IP addresses

2015-07-27 11:59:37 +02:00

control

ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid

2015-02-20 13:34:51 +01:00

encoding

ikev1: Assume a default key length of 128-bit for AES-CBC

2015-08-17 17:13:50 +02:00

kernel

kernel-handler: Log new endpoint if NAT mapping changed

2015-03-19 09:54:10 +01:00

network

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

plugins

sql: Also do a reversed ID match

2015-08-17 18:58:14 +02:00

processing/jobs

jobs: Don't execute rekey CHILD_SA job on passive IKE_SAs

2015-08-04 11:16:13 +02:00

sa

ikev1: Pass current auth-cfg when looking for key to determine auth method

2015-08-19 17:39:01 +02:00

tests

ike-cfg: Add unit tests for ike_cfg_get_family() helper

2015-07-27 12:08:45 +02:00

Android.mk

ikev2: Immediately initiate queued tasks after establishing rekeyed IKE_SA

2015-03-18 13:28:34 +01:00

daemon.c

daemon: Flush shunts before unloading plugins

2015-07-27 13:51:17 +02:00

daemon.h

attributes: Move the configuration attributes framework to libcharon

2015-02-20 13:34:55 +01:00

debug

…

Makefile.am

ikev2: Immediately initiate queued tasks after establishing rekeyed IKE_SA

2015-03-18 13:28:34 +01:00