strongswan/src/libcharon/sa/ikev2/tasks
Tobias Brunner 44107cb7b7 child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs
After deleting a rekeyed CHILD_SA we uninstall the outbound SA but don't
destroy the CHILD_SA (and the inbound SA) immediately.  We delay it
a few seconds or until the SA expires to allow delayed packets to get
processed. The CHILD_SA remains in state CHILD_DELETING until it finally
gets destroyed.
2017-05-23 18:46:49 +02:00
..
child_create.c child-sa: Remove state to track installation of half the SA again 2017-05-23 18:46:49 +02:00
child_create.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_delete.c child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs 2017-05-23 18:46:49 +02:00
child_delete.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_rekey.c child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs 2017-05-23 18:46:49 +02:00
child_rekey.h child-rekey: Add method to check for the redundant SA created in a collision 2016-06-17 18:48:04 +02:00
ike_auth.c ikev2: Negotiate support for IKE message ID synchronisation during IKE_AUTH 2017-02-08 15:03:25 +01:00
ike_auth.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_auth_lifetime.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_auth_lifetime.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_cert_post.c payload: Use common prefixes for all payload type identifiers 2014-06-04 15:53:03 +02:00
ike_cert_post.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_cert_pre.c ikev2: Fix handling of more than one hash-and-URL certificate payloads 2014-12-04 11:33:38 +01:00
ike_cert_pre.h Fix various API doc issues and typos 2013-07-18 18:30:36 +02:00
ike_config.c ike-config: Do not assign attributes for redirected IKE_SAs 2016-03-04 16:02:59 +01:00
ike_config.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_delete.c ike-delete: Handle deletes while rekeying differently if there was a collision 2016-06-17 18:48:06 +02:00
ike_delete.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_dpd.c Add a global return_success() method implementation 2013-02-14 17:17:45 +01:00
ike_dpd.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_init.c Implemented EdDSA for IKEv2 using a pro forma Identity hash function 2016-12-14 11:15:48 +01:00
ike_init.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_me.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_me.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_mid_sync.c ikev2: Ignore IKEV2_MESSAGE_ID_SYNC notifies if extension is disabled 2017-02-08 15:10:51 +01:00
ike_mid_sync.h ikev2: Add task to handle IKEV2_MESSAGE_ID_SYNC notifies as responder 2017-02-08 15:03:25 +01:00
ike_mobike.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_mobike.h ike-mobike: Return FALSE in transmit() if no path was available 2014-09-12 10:29:36 +02:00
ike_natd.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_natd.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_reauth.c Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. 2012-05-25 17:05:53 +02:00
ike_reauth.h ikev2: Schedule a make-before-break completion task to delete old IKE_SA 2015-02-20 13:34:57 +01:00
ike_reauth_complete.c ikev2: Schedule a make-before-break completion task to delete old IKE_SA 2015-02-20 13:34:57 +01:00
ike_reauth_complete.h ikev2: Schedule a make-before-break completion task to delete old IKE_SA 2015-02-20 13:34:57 +01:00
ike_redirect.c ike-redirect: Add task to redirect active IKE_SAs 2016-03-04 16:02:59 +01:00
ike_redirect.h ike-redirect: Add task to redirect active IKE_SAs 2016-03-04 16:02:59 +01:00
ike_rekey.c ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SA 2016-06-17 18:48:07 +02:00
ike_rekey.h ike-rekey: Add method to check if there was a rekey collision 2016-06-17 18:48:06 +02:00
ike_vendor.c ikev2: Use config value for sending of vendor IDs 2016-03-01 10:52:59 +01:00
ike_vendor.h Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). 2012-05-18 10:04:08 +02:00
ike_verify_peer_cert.c ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00
ike_verify_peer_cert.h ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00