Martin Willi b31a56f128 Require a scary option to respond to Aggressive Mode PSK requests ...

While Aggressive Mode PSK is widely used, it is known to be subject
to dictionary attacks by passive attackers. We don't complain as
initiator to be compatible with existing (insecure) setups, but
require a scary strongswan.conf option if someone wants to use it
as responder.

2012-06-14 10:25:48 +02:00

..

eap

Moved eap/xauth classes out of protocol specific subdirectories

2012-03-20 17:31:27 +01:00

ikev1

Require a scary option to respond to Aggressive Mode PSK requests

2012-06-14 10:25:48 +02:00

ikev2

Try to rekey without KE exchange if peer returns INVALID_KE_PAYLOAD(NONE)

2012-06-08 10:35:02 +02:00

xauth

Moved eap/xauth classes out of protocol specific subdirectories

2012-03-20 17:31:27 +01:00

authenticator.c

Merge branch 'ikev1'

2012-05-02 11:12:31 +02:00

authenticator.h

Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.).

2012-05-18 10:04:08 +02:00

child_sa.c

Store shorter soft lifetime of in- and outbound SAs only

2012-06-08 10:22:03 +02:00

child_sa.h

Added a getter for CHILD_SA marks

2012-03-22 09:06:12 +01:00

ike_sa_id.c

Store the major IKE version on ike_sa_id_t.

2012-03-20 17:31:40 +01:00

ike_sa_id.h

Store the major IKE version on ike_sa_id_t.

2012-03-20 17:31:40 +01:00

ike_sa_manager.c

Use name from initialization to access settings in libcharon.

2012-05-03 13:57:04 +02:00

ike_sa_manager.h

Added an IKE_SA manager method to enumerate IKE_SA IDs filtered by identities

2012-03-20 17:31:33 +01:00

ike_sa.c

implemented the right|leftallowany feature

2012-06-08 21:24:41 +02:00

ike_sa.h

Avoid queueing more than one retry initiate job.

2012-05-30 15:32:52 +02:00

keymat.c

Merge branch 'ikev1-clean' into ikev1-master

2012-03-20 17:57:53 +01:00

keymat.h

Add create_nonce_gen function to keymat interface

2012-05-18 08:15:41 +02:00

shunt_manager.c

…

shunt_manager.h

…

task_manager.c

Don't invoke child_updown hook twice as responder

2012-04-11 17:45:12 +02:00

task_manager.h

Make task managers flush_queue() method public

2012-05-21 14:02:35 +02:00

task.c

Added missing DPD task name

2012-03-20 17:31:35 +01:00

task.h

Flush task queues explicitly, not implicitly if task returns ALREADY_DONE

2012-05-21 14:17:09 +02:00

trap_manager.c

implemented the right|leftallowany feature

2012-06-08 21:24:41 +02:00

trap_manager.h

…