Martin Willi 8503077175 ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAs ...

Prevents a responder peer to trick us into established state by starting
IKE_SA rekeying before the IKE_SA has been authenticated during IKE_AUTH.

Fixes CVE-2014-2338.

2014-04-14 13:29:49 +02:00

..

_copyright

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

_updown

updown: Allow IPIP traffic if IPComp was negotiated

2014-01-23 10:27:12 +01:00

_updown_espmark

…

charon

libcharon: Remove unused charon->name

2014-02-12 14:34:33 +01:00

charon-cmd

libcharon: Remove unused charon->name

2014-02-12 14:34:33 +01:00

charon-nm

nm: Fix NULL-pointer dereference when handling TUN device failure

2014-04-09 16:35:46 +02:00

charon-tkm

libcharon: Remove unused charon->name

2014-02-12 14:34:33 +01:00

checksum

openac: Remove obsolete openac utility

2014-03-31 11:39:25 +02:00

conftest

conftest: Use path_dirname()

2014-02-24 12:04:11 +01:00

dumm

Fixed some typos

2014-02-18 10:36:25 +01:00

frontends

android: Don't limit number to packets during EAP-TTLS

2014-02-18 11:32:37 +01:00

include

…

ipsec

openac: Remove obsolete openac utility

2014-03-31 11:39:25 +02:00

libcharon

ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAs

2014-04-14 13:29:49 +02:00

libfast

libfast: Use chunk_map() instead of non-portable mmap()

2014-01-23 15:55:32 +01:00

libhydra

attr: Don't shift the 32-bit netmask by 32

2014-04-09 17:09:55 +02:00

libimcv

Added Ubuntu 14.04 to IMV database

2014-03-31 22:22:58 +02:00

libipsec

aead: Support custom AEAD salt sizes

2014-03-31 15:56:12 +02:00

libpts

pts: Make sure the complete AIK blob has been read

2014-04-09 17:47:32 +02:00

libpttls

tls: Support a maximum TLS version to negotiate using TLS socket abstraction

2014-04-01 14:28:55 +02:00

libradius

…

libsimaka

…

libstrongswan

x509: Don't include authKeyIdentifier in self-signed certificates

2014-04-09 16:06:18 +02:00

libtls

tls: Add a test case to check correct enum name mapping of cipher suites

2014-04-01 14:52:18 +02:00

libtnccs

uclibc only defines strndup(3) if _GNU_SOURCE is defined

2014-02-19 16:11:47 +01:00

libtncif

android: Remove dependency on libvstr

2013-11-13 11:40:47 +01:00

manager

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

medsrv

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

pki

pki: Fix memory leak when printing unknown AC group OIDs

2014-04-09 15:56:11 +02:00

pool

attr-sql: Use namespace for attr-sql config, with fallback

2014-02-12 14:34:32 +01:00

pt-tls-client

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

scepclient

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

starter

libhydra: Remove unused hydra->daemon

2014-02-12 14:34:32 +01:00

stroke

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

Makefile.am

openac: Remove obsolete openac utility

2014-03-31 11:39:25 +02:00