Tobias Brunner 15cea08adc child-rekey: Only rekey installed CHILD_SAs ...

Depending on the lifetimes a CHILD_SA we rekeyed as responder might
expire shortly afterwards.  We don't want to rekey it again.

When retrying due to an INVALID_KE_PAYLOAD notify the expected state
is CHILD_REKEYING if it is anything else (e.g. due to a collision) we
ignore it.

We also abort the exchange properly if we don't find the CHILD_SA, no
need for an empty INFORMATIONAL exchange anymore.

2016-06-17 18:48:08 +02:00

..

eap

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

ikev1

ikev2: Add possibility to delay initiation of a queued task

2016-06-17 18:48:07 +02:00

ikev2

child-rekey: Only rekey installed CHILD_SAs

2016-06-17 18:48:08 +02:00

xauth

uclibc only defines strndup(3) if _GNU_SOURCE is defined

2014-02-19 16:11:47 +01:00

authenticator.c

ikev2: Remove private AUTH_BLISS method

2015-03-04 13:54:09 +01:00

authenticator.h

ikev2: Remove private AUTH_BLISS method

2015-03-04 13:54:09 +01:00

child_sa_manager.c

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

child_sa_manager.h

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

child_sa.c

child-sa: Use non-static variable to store generated unique mark

2016-06-06 14:17:11 +02:00

child_sa.h

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

ike_sa_id.c

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

ike_sa_id.h

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

ike_sa_manager.c

ikev2: Add a new state to track rekeyed IKE_SAs

2016-06-17 18:48:05 +02:00

ike_sa_manager.h

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

ike_sa.c

ikev2: Add possibility to delay initiation of a queued task

2016-06-17 18:48:07 +02:00

ike_sa.h

ikev2: Add possibility to delay initiation of a queued task

2016-06-17 18:48:07 +02:00

keymat.c

…

keymat.h

…

redirect_manager.c

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00

redirect_manager.h

Fix some Doxygen issues

2016-03-11 12:25:14 +01:00

redirect_provider.h

redirect-provider: Add interface to redirect clients during initial messages

2016-03-04 16:02:57 +01:00

shunt_manager.c

Implemented IPsec policies restricted to given network interface

2016-04-09 16:51:02 +02:00

shunt_manager.h

shunt-manager: Add flush() method to properly uninstall shunts

2015-07-27 13:51:10 +02:00

task_manager.c

…

task_manager.h

ikev2: Add possibility to delay initiation of a queued task

2016-06-17 18:48:07 +02:00

task.c

ikev2: Add task that verifies a peer's certificate

2016-03-10 11:07:15 +01:00

task.h

ikev2: Add task that verifies a peer's certificate

2016-03-10 11:07:15 +01:00

trap_manager.c

trap-manager: Allow local address to be unspecified

2016-05-06 15:56:19 +02:00

trap_manager.h

Use standard unsigned integer types

2016-03-24 18:52:48 +01:00