strongswan/src/libcharon/sa
Tobias Brunner 1b4e7fe1e8 ikev1: Queue INFORMATIONAL messages during XAuth
Some peers send an INITIAL_CONTACT notify after they received our XAuth
username.  The XAuth task waiting for the third XAuth message handles
this incorrectly and closes the IKE_SA as no configuration payloads are
contained in the message.  We queue the INFORMATIONAL until the XAuth
exchange is complete to avoid this issue.

Fixes #1434.
2016-06-06 13:52:58 +02:00
..
eap Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ikev1 ikev1: Queue INFORMATIONAL messages during XAuth 2016-06-06 13:52:58 +02:00
ikev2 ikev2: Handle INITIAL_CONTACT notifies also when peer is authenticated with EAP 2016-06-06 13:49:21 +02:00
xauth uclibc only defines strndup(3) if _GNU_SOURCE is defined 2014-02-19 16:11:47 +01:00
authenticator.c ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
authenticator.h ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
child_sa.c child-sa: Install "outbound" FWD policy with lower priority 2016-05-06 20:27:18 +02:00
child_sa.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_sa_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_sa_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_id.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_id.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
keymat.c ike: Define keylength for aescmac algorithm 2013-10-11 10:15:21 +02:00
keymat.h Fix various API doc issues and typos 2013-07-18 18:30:36 +02:00
redirect_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
redirect_manager.h Fix some Doxygen issues 2016-03-11 12:25:14 +01:00
redirect_provider.h redirect-provider: Add interface to redirect clients during initial messages 2016-03-04 16:02:57 +01:00
shunt_manager.c Implemented IPsec policies restricted to given network interface 2016-04-09 16:51:02 +02:00
shunt_manager.h shunt-manager: Add flush() method to properly uninstall shunts 2015-07-27 13:51:10 +02:00
task.c ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00
task.h ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00
task_manager.c Don't invoke child_updown hook twice as responder 2012-04-11 17:45:12 +02:00
task_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
trap_manager.c trap-manager: Allow local address to be unspecified 2016-05-06 15:56:19 +02:00
trap_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00