Tobias Brunner dd0ebb5483 ikev2: Only accept initial messages in specific states ...

The previous code allowed an attacker to slip in an IKE_SA_INIT with
both SPIs and MID 1 set when an IKE_AUTH would be expected instead.

References #816.

2015-03-04 13:47:53 +01:00

..

attributes

mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth

2015-02-20 13:34:57 +01:00

bus

bus: Add an ike_update() hook invoked when peer endpoints change

2015-02-20 15:33:59 +01:00

config

proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algorithms

2014-10-31 10:09:54 +01:00

control

ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid

2015-02-20 13:34:51 +01:00

encoding

ike: Allow creation of internally used payloads

2014-12-12 13:10:26 +01:00

kernel

kernel-interface: Raise mapping event with a proto/SPI/dst tuple

2015-02-20 13:34:51 +01:00

network

receiver: Send a single INVALID_MAJOR_VERSION notify for IKE version > 2

2014-07-17 09:35:49 +02:00

plugins

stroke: Support public key constraints for EAP methods

2015-03-03 14:08:01 +01:00

processing/jobs

migrate-job: Do CHILD_SA reqid lookup locally

2015-02-20 13:34:51 +01:00

sa

ikev2: Only accept initial messages in specific states

2015-03-04 13:47:53 +01:00

tests

mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth

2015-02-20 13:34:57 +01:00

Android.mk

ikev2: Schedule a make-before-break completion task to delete old IKE_SA

2015-02-20 13:34:57 +01:00

daemon.c

attributes: Move the configuration attributes framework to libcharon

2015-02-20 13:34:55 +01:00

daemon.h

attributes: Move the configuration attributes framework to libcharon

2015-02-20 13:34:55 +01:00

debug

…

Makefile.am

forecast: Add the broadcast/multicast forwarding plugin called forecast

2015-02-20 16:34:55 +01:00