summaryrefslogtreecommitdiff
path: root/sbin/iked/ikev2.c
AgeCommit message (Expand)Author
2011-01-17Add initial acquire mode support and use it whenever Windows peers decideMike Belopuhov
2011-01-12decouple flow deletion from the ikev2_childsa_delete; ok reykMike Belopuhov
2011-01-12fixup bogus check; ok reykMike Belopuhov
2011-01-12don't forget to specify spi sizes; ok reykMike Belopuhov
2010-12-23always add a none payload, should fix ike sa rekeying for responders; ok reykMike Belopuhov
2010-12-22move and rename util.c:print_id() to ikev2.c:ikev2_print_id() becauseReyk Floeter
2010-12-22child sa rekeying revamp plus numerous bugfixes;Mike Belopuhov
2010-12-01Clarify the internal ibuf API: rename ibuf_copy() to ibuf_get() becauseReyk Floeter
2010-09-22support INVALID_KE_PAYLOAD notification sent by the responder in caseMike Belopuhov
2010-09-09- allow esp proposals without integrity and ah proposals withoutMike Belopuhov
2010-07-29some error cases returned 01 when they should have been returning -1Jonathan Gray
2010-07-20two iterators should be u_int; ok jsgTheo de Raadt
2010-07-03Better non-debug logging messages when a session is established/closed.Reyk Floeter
2010-06-27fix possible double free of the initiator certReyk Floeter
2010-06-27Instead of modifying and fiddling with the IKE SA in the payloadReyk Floeter
2010-06-26revert the files that have been accidentally committed with myReyk Floeter
2010-06-26mixing any (AF_UNSPEC) with AF_INET/INET6 is not an address family mismatchReyk Floeter
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
2010-06-23further cleanup of the dh code:Reyk Floeter
2010-06-14Initiator mode with certificates; needs more work but works.Reyk Floeter
2010-06-14Initial support for initiator mode which allows to run iked as aReyk Floeter
2010-06-14fix EAP responder modeReyk Floeter
2010-06-14NAT detection again: make it work in initiator and responder modeReyk Floeter
2010-06-14NAT detection with SPIr is always 0Reyk Floeter
2010-06-14restructure code a bit to move closer to initiator mode:Reyk Floeter
2010-06-14cleanup messages and parsed information correctlyReyk Floeter
2010-06-14More code for initiator mode (not finished yet)Reyk Floeter
2010-06-11add some infrastructure to support timers and initiator mode later.Reyk Floeter
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
2010-06-10Add another tree to lookup policy SAs by peer address.Reyk Floeter
2010-06-10i don't like splitting source code in too many source files but ikev2.cReyk Floeter
2010-06-04Fix NAT-T detection to enable UDP encapsulation. It was done before,Reyk Floeter
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter