Martin Willi 758dc8a953 child-sa: Set replay window on both inbound and outbound SA ...

While the outbound SA actually does not need a replay window, the kernel rejects
zero replay windows on SAs using ESN. The ESN flag is required to use the full
sequence number in ICV calculation, hence we set the replay window.

This restores the behavior we had before 30c009c2.

2014-06-18 16:54:19 +02:00

..

_copyright

lib: Add global config namespace

2014-02-12 14:34:31 +01:00

_updown

updown: Allow IPIP traffic if IPComp was negotiated

2014-01-23 10:27:12 +01:00

_updown_espmark

…

aikgen

aikgen generates AIK private/public key pairs

2014-05-03 15:28:17 +02:00

charon

settings: strongswan.conf must be loaded explicitly

2014-05-15 11:28:10 +02:00

charon-cmd

Make sure getpass() is available

2014-05-29 12:28:53 +02:00

charon-nm

ike: Add an additional but separate AEAD proposal to CHILD config

2014-05-16 16:51:19 +02:00

charon-svc

windows: Use WINAPI call convention for Windows API callbacks

2014-06-06 16:28:28 +02:00

charon-tkm

kernel-interface: Add a replay_window parameter to add_sa()

2014-06-17 16:41:30 +02:00

checksum

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

conftest

payload: Use common prefixes for all payload type identifiers

2014-06-04 15:53:03 +02:00

dumm

Fixed some typos

2014-02-18 10:36:25 +01:00

frontends

kernel-interface: Add a replay_window parameter to add_sa()

2014-06-17 16:41:30 +02:00

include

…

ipsec

aikgen generates AIK private/public key pairs

2014-05-03 15:28:17 +02:00

libcharon

child-sa: Set replay window on both inbound and outbound SA

2014-06-18 16:54:19 +02:00

libfast

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

libhydra

kernel-netlink: Never use XFRMA_REPLAY_ESN_VAL to configure zero replay windows

2014-06-18 15:04:57 +02:00

libimcv

The policy_started check is not needed any more

2014-06-18 14:01:02 +02:00

libipsec

libipsec: Avoid name clash with sched.h clone()

2014-06-04 15:53:01 +02:00

libpts

Allow multiple hash values in the file reference database

2014-06-10 16:48:15 +02:00

libpttls

libpttls: Link against ws_w32 on Windows

2014-06-04 15:53:05 +02:00

libradius

…

libsimaka

enum: Don't directly include enum.h

2014-05-16 15:42:07 +02:00

libstrongswan

identification: Only use either , or / to separate RDNs

2014-06-18 09:24:03 +02:00

libtls

libtls: Link against ws_w32 on Windows

2014-06-04 15:53:05 +02:00

libtnccs

libnccs: Fix casts between integers and pointers

2014-06-04 15:53:07 +02:00

libtncif

android: Remove dependency on libvstr

2013-11-13 11:40:47 +01:00

manager

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

medsrv

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

pki

pki: Support complex trustchain and revocation checking in --verify

2014-06-04 16:34:16 +02:00

pool

attr-sql: Use namespace for attr-sql config, with fallback

2014-02-12 14:34:32 +01:00

pt-tls-client

Extended pt-tls-client PLUGINS list

2014-06-06 11:18:17 +02:00

scepclient

android: Add all Android.mk files to the tarball

2014-06-06 10:12:26 +02:00

starter

starter: Add a replay_window connection option

2014-06-17 16:41:31 +02:00

stroke

starter: Add a replay_window connection option

2014-06-17 16:41:31 +02:00

swanctl

swanctl: Add a --stats command to print daemon infos and statistics

2014-06-17 17:55:45 +02:00

Makefile.am

configure: Separate pki from --disable-tools

2014-06-04 15:53:08 +02:00