Tobias Brunner a213944d4a proposal: Don't fail DH proposal matching if peer includes NONE ...

The DH transform is optional for ESP/AH proposals. The initiator can
include NONE (0) in its proposal to indicate that while it prefers to
do a DH exchange, the responder may still decide to not do so.

Fixes #532.

2014-03-31 14:32:44 +02:00

..

backend_manager.c

ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addr

2013-09-04 10:38:37 +02:00

backend_manager.h

Moved host_t and host_resolver_t to a new networking subfolder

2012-10-24 15:06:18 +02:00

backend.h

Moved data structures to new collections subfolder

2012-10-24 16:00:49 +02:00

child_cfg.c

Raise an alert if the responding peer narrowed traffic selectors

2013-06-19 16:11:46 +02:00

child_cfg.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

ike_cfg.c

uclibc only defines strndup(3) if _GNU_SOURCE is defined

2014-02-19 16:11:47 +01:00

ike_cfg.h

ike: support multiple addresses, ranges and subnets in IKE address config

2013-09-04 10:38:37 +02:00

peer_cfg.c

peer-cfg: add a pull/push mode option to use with mode config

2013-09-04 10:33:37 +02:00

peer_cfg.h

Doxygen fixes

2013-10-15 11:25:55 +02:00

proposal.c

proposal: Don't fail DH proposal matching if peer includes NONE

2014-03-31 14:32:44 +02:00

proposal.h

proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove all

2012-10-24 16:09:42 +02:00