Martin Willi 1a31fe5580 ikev2: Don't adopt any CHILD_SA during make-before-break reauthentication ...

While the comment is rather clear that we should not adopt live CHILD_SAs
during reauthentication in IKEv2, the code does nonetheless. Add an additional
version check to fix reauthentication if the reauth responder has a replace
uniqueids policy.

Fixes #871.

2015-03-04 11:18:42 +01:00

..

eap

eap: Add an optional authentication details getter to the EAP method interface

2015-03-03 14:08:00 +01:00

ikev1

attribute-manager: Pass full IKE_SA to handler methods

2015-02-20 13:34:56 +01:00

ikev2

ikev2: Merge EAP client authentication details if EAP methods provides them

2015-03-03 14:08:00 +01:00

xauth

uclibc only defines strndup(3) if _GNU_SOURCE is defined

2014-02-19 16:11:47 +01:00

authenticator.c

Implemented full BLISS support for IKEv2 public key authentication and the pki tool

2014-11-29 14:51:18 +01:00

authenticator.h

Implemented full BLISS support for IKEv2 public key authentication and the pki tool

2014-11-29 14:51:18 +01:00

child_sa_manager.c

child-sa-manager: Add a global manager storing CHILD_SA relations

2015-02-20 13:34:49 +01:00

child_sa_manager.h

child-sa-manager: Add a global manager storing CHILD_SA relations

2015-02-20 13:34:49 +01:00

child_sa.c

child-sa: Replace reqid based marks by "unique" marks

2015-02-20 13:34:49 +01:00

child_sa.h

child-sa: Replace reqid based marks by "unique" marks

2015-02-20 13:34:49 +01:00

ike_sa_id.c

…

ike_sa_id.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

ike_sa_manager.c

ikev2: Don't adopt any CHILD_SA during make-before-break reauthentication

2015-03-04 11:18:42 +01:00

ike_sa_manager.h

ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid

2015-02-20 13:34:51 +01:00

ike_sa.c

bus: Add an ike_update() hook invoked when peer endpoints change

2015-02-20 15:33:59 +01:00

ike_sa.h

ikev2: Trigger make-before-break reauthentication instead of reauth task

2015-02-20 13:34:57 +01:00

keymat.c

ike: Define keylength for aescmac algorithm

2013-10-11 10:15:21 +02:00

keymat.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

shunt_manager.c

shunt-manager: Install passthrough policies with highest priority

2014-06-19 14:20:33 +02:00

shunt_manager.h

Moved data structures to new collections subfolder

2012-10-24 16:00:49 +02:00

task_manager.c

…

task_manager.h

ike_sa: Defer task manager destruction after child destruction

2014-01-16 14:16:13 +01:00

task.c

ikev2: Schedule a make-before-break completion task to delete old IKE_SA

2015-02-20 13:34:57 +01:00

task.h

ikev2: Schedule a make-before-break completion task to delete old IKE_SA

2015-02-20 13:34:57 +01:00

trap_manager.c

child-sa: Replace reqid based marks by "unique" marks

2015-02-20 13:34:49 +01:00

trap_manager.h

Reuse reqid for trap policies installed for dpd|closeaction=hold

2013-07-01 09:58:25 +02:00