denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f634a3300c9611b5ce4be945d6a606f5a0a1c5bb
strongswan-ext/src/libcharon/sa
T
History
Martin Willi f634a3300c ike-sa: Handle IKE_SA unique identifier refcount overflow gracefully 
IKE_SA unique identifier allocation starts at 1. If the counter overflows,
a unique ID of 0 is assigned to an IKE_SA, which may have unclear consequences.

Overflowing the unique ID counter is theoretical for most setups, but on
a Gateway terminating 100'000 tunnels and rekeying the IKE_SA every 60s
overflows the counter after a month uptime. So avoid a 0 unique identifier
by using ref_get_nonzero().
2024-02-16 10:11:11 +01:00
..
eap
eap: Use pen_t instead of uint32_t for vendor ID
2022-09-21 13:53:44 +02:00
ikev1
quick-delete: Correctly maintain allocated reqid when recreating CHILD_SA
2023-11-13 12:02:11 +01:00
ikev2
ikev2: Correctly maintain allocated reqid during make-before-break reauth
2023-11-13 12:02:11 +01:00
xauth
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
authenticator.c
Rename diffie_hellman_t to key_exchange_t and change the interface etc.
2022-06-29 10:28:50 +02:00
authenticator.h
Rename diffie_hellman_t to key_exchange_t and change the interface etc.
2022-06-29 10:28:50 +02:00
child_sa_manager.c
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
child_sa_manager.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
child_sa.c
child-sa: Add method that returns a reference to an allocated reqid
2023-11-13 12:02:11 +01:00
child_sa.h
child-sa: Add method that returns a reference to an allocated reqid
2023-11-13 12:02:11 +01:00
ike_sa_id.c
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
ike_sa_id.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
ike_sa_manager.c
ike: Fix untracking IKE_SA_INITs with non-zero MIDs and SPIs as half-open SAs
2023-07-26 15:13:43 +02:00
ike_sa_manager.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
ike_sa.c
ike-sa: Handle IKE_SA unique identifier refcount overflow gracefully
2024-02-16 10:11:11 +01:00
ike_sa.h
ikev2: Trigger ike_updown() event after all IKE-specific tasks ran
2022-09-23 16:28:35 +02:00
keymat.c
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
keymat.h
Rename diffie_hellman_t to key_exchange_t and change the interface etc.
2022-06-29 10:28:50 +02:00
redirect_manager.c
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
redirect_manager.h
doxygen: Fix syntax for some output parameters
2023-05-04 16:35:47 +02:00
redirect_provider.h
doxygen: Fix syntax for some output parameters
2023-05-04 16:35:47 +02:00
shunt_manager.c
shunt-manager: Pass HW offload mode when installing policies
2023-02-16 13:25:34 +01:00
shunt_manager.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
task_manager.c
ike: Use a struct to store retransmission settings
2023-05-17 15:58:28 +02:00
task_manager.h
Fixed some typos, courtesy of codespell
2023-06-02 10:36:47 +02:00
task.c
ikev2: Trigger ike_updown() event after all IKE-specific tasks ran
2022-09-23 16:28:35 +02:00
task.h
ikev2: Trigger ike_updown() event after all IKE-specific tasks ran
2022-09-23 16:28:35 +02:00
trap_manager.c
trap-manager: Maintain allocated reqids when handling acquires
2023-11-13 12:02:11 +01:00
trap_manager.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00