aboutsummaryrefslogtreecommitdiffstats
path: root/src/plugins/ikev2/ikev2.c
AgeCommit message (Expand)AuthorFilesLines
2022-08-18ikev2: accept key exchange on CREATE_CHILD_SAAtzm Watanabe1-63/+125
2022-08-18ikev2: fix possible SEGVAtzm Watanabe1-3/+3
2022-08-10ikev2: do not accept rekey until old SA is deletedAtzm Watanabe1-14/+35
2022-08-08ikev2: fix rekeying with multiple notify payloadsAtzm Watanabe1-5/+8
2022-05-19ikev2: fix tunnel directionStanislav Zaikin1-4/+4
2021-10-08ikev2: lazy initializationBenoît Ganne1-46/+101
2021-10-07ikev2: do not require optional IDr on IKE AUTHBenoît Ganne1-8/+26
2021-10-07ikev2: add logs in case of parsing errorsBenoît Ganne1-6/+24
2021-10-07ikev2: do not send IDi on responder AUTHBenoît Ganne1-1/+0
2021-09-27ikev2: support variable-length noncesBenoît Ganne1-21/+34
2021-08-26ikev2: check for valid cipher + integrityBenoît Ganne1-6/+6
2021-08-26ikev2: fix DNS resolution overflowBenoît Ganne1-1/+7
2021-08-20ikev2: fix use-after-freeBenoît Ganne1-2/+3
2021-08-20ikev2: decrease inliningBenoît Ganne1-26/+26
2021-03-15ikev2: support responder hostnameFilip Tehlar1-28/+119
2021-03-02ikev2: fix authFilip Tehlar1-1/+1
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-4/+4
2021-02-25ikev2: Use the IPSec functions for UDP port managementNeale Ranns1-43/+2
2021-02-19ikev2: start counting msgid from 0Filip Tehlar1-2/+2
2021-02-16ikev2: fix coverity warningsFilip Tehlar1-81/+85
2021-02-15ikev2: fix rekey against strongSwanFilip Tehlar1-52/+92
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-23/+37
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-37/+23
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-23/+37
2021-02-05ikev2: fix bad ip in logsFilip Tehlar1-5/+9
2021-02-04ikev2: add hint to the log when IDs do not matchFilip Tehlar1-1/+10
2021-02-04ikev2: fix msgidFilip Tehlar1-0/+1
2021-01-27ikev2: add per SA statsFilip Tehlar1-13/+11
2021-01-21ip: Use correct enum type in ip_address_setNeale Ranns1-2/+2
2021-01-20ikev2: use new counters data model & add more countersFilip Tehlar1-44/+59
2021-01-13ikev2: remove assert conditionFilip Tehlar1-19/+36
2021-01-08ikev2: fix lookup in wrong ip tableFilip Tehlar1-4/+6
2020-12-14ikev2: add reason for deleted sa debug logBenoît Ganne1-5/+5
2020-12-14misc: move to new pool_foreach macrosDamjan Marion1-30/+30
2020-12-02ikev2: fix nat traversalFilip Tehlar1-1/+2
2020-11-26ikev2: better handling when no IKE DH configuredFilip Tehlar1-17/+76
2020-11-25ikev2: fix issue when sending multiple requests at onceFilip Tehlar1-1/+4
2020-11-19ikev2: respect punting only for ipv4Benoît Ganne1-1/+7
2020-11-18ikev2: fix memleak when tunnel protect failsFilip Tehlar1-20/+37
2020-11-09ikev2: fix msg IDs generationFilip Tehlar1-14/+16
2020-11-09ikev2: fix udp encapFilip Tehlar1-5/+4
2020-10-31ikev2: add option to disable NAT traversalFilip Tehlar1-11/+29
2020-11-04ikev2: fix reply during rekeyFilip Tehlar1-1/+1
2020-11-04ikev2: increase tick interval in process nodeFilip Tehlar1-13/+2
2020-11-02ikev2: cli for disabling dead peer detectionFilip Tehlar1-1/+8
2020-10-30ikev2: fix memory leakFilip Tehlar1-2/+7
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-2/+6
2020-10-21ikev2: support sending requests from responderFilip Tehlar1-11/+17
2020-10-21ikev2: fix setting responder/initiator addressesFilip Tehlar1-55/+27
2020-10-21ikev2: prevent crash after no IP addressFilip Tehlar1-196/+345