Martin Willi
|
6261c0c3b7
|
Support encoding of IKEv1 ECDSA proposals
|
2012-03-20 17:31:38 +01:00 |
|
Martin Willi
|
c390569a76
|
Renamed CONFIGURATION_ATTRIBUTE_LENGTH to streamline it with other ATTRIBUTE rules
|
2012-03-20 17:31:38 +01:00 |
|
Martin Willi
|
05cb240215
|
Use ATTRIBUTE_VALUE rule in configuration attribute to parse it with correct length
|
2012-03-20 17:31:38 +01:00 |
|
Martin Willi
|
5ac4c2e1a9
|
Added missing short enum names for DPD notify types
|
2012-03-20 17:31:35 +01:00 |
|
Martin Willi
|
bb2d4e1882
|
Print IKEv1 notify types in message summary
|
2012-03-20 17:31:35 +01:00 |
|
Martin Willi
|
5f2f864efc
|
Support IKEv1 notifies in message_t.get_notify()
|
2012-03-20 17:31:35 +01:00 |
|
Clavister OpenSource
|
36c8169629
|
DPD_R_U_THERE defines added
|
2012-03-20 17:31:35 +01:00 |
|
Tobias Brunner
|
bd8d1f1d9c
|
Accept unencrypted Aggressive Mode messages.
Racoon does not encrypt the third message during Aggressive Mode.
|
2012-03-20 17:31:34 +01:00 |
|
Martin Willi
|
ebc7bcb550
|
Encrypt payloads of third aggressive mode message
|
2012-03-20 17:31:33 +01:00 |
|
Martin Willi
|
927c1dd9d2
|
Support IKEv1 proposal encodings having both lifebytes and a lifetime
|
2012-03-20 17:31:33 +01:00 |
|
Clavister OpenSource
|
e32820f593
|
Add functions to set mode cfg identifier
|
2012-03-20 17:31:32 +01:00 |
|
Martin Willi
|
96f98a8c11
|
Accept IKEv1 INVALID_KE_INFORMATION notifies without data
|
2012-03-20 17:31:30 +01:00 |
|
Tobias Brunner
|
db1dc81329
|
IKEv1 ATTRIBUTES_NOT_SUPPORTED error notify added.
|
2012-03-20 17:31:30 +01:00 |
|
Martin Willi
|
dd5c3787dc
|
Give a hint that decryption failed if payload length invalid
|
2012-03-20 17:31:30 +01:00 |
|
Martin Willi
|
07b8ec7c00
|
Cast keymat safely, not based on external input
|
2012-03-20 17:31:30 +01:00 |
|
Tobias Brunner
|
fd5d6bb08e
|
Use IPSEC DOI also for ISAKMP SA deletes.
|
2012-03-20 17:31:29 +01:00 |
|
Martin Willi
|
82b1e5e270
|
Accept NULL as keymat when generating a message
|
2012-03-20 17:31:29 +01:00 |
|
Martin Willi
|
15a682f4c2
|
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
|
2012-03-20 17:31:26 +01:00 |
|
Martin Willi
|
8833068877
|
Doxygen fixes
|
2012-03-20 17:31:25 +01:00 |
|
Martin Willi
|
26b02f50f4
|
Always use a transform number of 1 when encoding a single transform
|
2012-03-20 17:31:25 +01:00 |
|
Martin Willi
|
5d0458af0a
|
Another set of cleanups in message.c
|
2012-03-20 17:31:25 +01:00 |
|
Martin Willi
|
b9a707e696
|
Some coding style cleanups
|
2012-03-20 17:31:25 +01:00 |
|
Martin Willi
|
2f58f6cba1
|
Fixed notify enum names
|
2012-03-20 17:31:25 +01:00 |
|
Tobias Brunner
|
b46b56fac1
|
Log parsed unsigned ints with proper format strings.
|
2012-03-20 17:31:24 +01:00 |
|
Martin Willi
|
ca26065745
|
Add some additional IKEv1 notify types
|
2012-03-20 17:31:23 +01:00 |
|
Martin Willi
|
a4cc071364
|
Do not trust unprotected INFORMATIONALS, just print that we got one
|
2012-03-20 17:31:23 +01:00 |
|
Martin Willi
|
3ba15819ed
|
Remove executable flag from source code files
|
2012-03-20 17:31:22 +01:00 |
|
Martin Willi
|
51da01a722
|
Support encoding of Hybrid initiator authentication method
|
2012-03-20 17:31:21 +01:00 |
|
Tobias Brunner
|
33493a5253
|
Added method to get encoded version if ID_V1 payload.
|
2012-03-20 17:31:21 +01:00 |
|
Martin Willi
|
226b0f36c7
|
Fixed SPI size calculation in DELETE payload
|
2012-03-20 17:31:19 +01:00 |
|
Martin Willi
|
0acb520758
|
Support IKEv1 SPIs in IKEv1 delete payload
|
2012-03-20 17:31:19 +01:00 |
|
Martin Willi
|
9626164e9a
|
Don't complain when receiving XAuth or Unity configuration attributes
|
2012-03-20 17:31:16 +01:00 |
|
Martin Willi
|
c9e5998d7f
|
Interpret attribute format correctly in IKEv1 configuration format
|
2012-03-20 17:31:16 +01:00 |
|
Clavister OpenSource
|
b8383f1f2d
|
Encrypt INFORMATIONAL exchange if needed
|
2012-03-20 17:31:14 +01:00 |
|
Clavister OpenSource
|
9ce5d0c0e8
|
added functions for getting/setting ISAKMP SPI to notify payload
|
2012-03-20 17:31:14 +01:00 |
|
Martin Willi
|
9bb4de1d83
|
En- and decode DH group attribute in quick mode SA payloads
|
2012-03-20 17:31:14 +01:00 |
|
Clavister OpenSource
|
5d1eeec297
|
Handle incoming delete messages
|
2012-03-20 17:31:13 +01:00 |
|
Andreas Steffen
|
6f6380e670
|
use untoh64 instead of non-portable be64toh
|
2012-03-20 17:31:13 +01:00 |
|
Martin Willi
|
9ad5b8fa95
|
Cleanup CERT payload constructors
|
2012-03-20 17:31:13 +01:00 |
|
Martin Willi
|
df06ef2098
|
Cleaned up certreq payload for IKEv2/IKEv1 use
|
2012-03-20 17:31:13 +01:00 |
|
Martin Willi
|
695aff41f5
|
Encode a single IP traffic selector as ID_IPV?_ADDRESS identity
|
2012-03-20 17:31:12 +01:00 |
|
Martin Willi
|
caa6f772c8
|
Added missing break;s when converting ID_IP_ADDRESS types to ts, extracted function
|
2012-03-20 17:31:12 +01:00 |
|
Martin Willi
|
bd8700f055
|
Don't use unportable htobe64 macro directly
|
2012-03-20 17:31:12 +01:00 |
|
Clavister OpenSource
|
7d9269bfce
|
certificate handling for XAuth responder.
|
2012-03-20 17:31:11 +01:00 |
|
Clavister OpenSource
|
e102f86e88
|
Setting transform number in esp proposal.
iPhone (racoon) fails quick mode when transform number is 0
|
2012-03-20 17:31:11 +01:00 |
|
Clavister OpenSource
|
8a9ab2035f
|
ID_IPV4_ADDR and ID_IPV6_ADDR cases added to get_ts
|
2012-03-20 17:31:11 +01:00 |
|
Clavister OpenSource
|
07abb470c6
|
IKEv1: Added basic support for INFORMATIONAL exchange types, and for NOTIFY_V1 messages in the 3rd message in quick_mode.
|
2012-03-20 17:31:11 +01:00 |
|
Tobias Brunner
|
a0bea44a97
|
Message rules for IKEv1 NAT-T payloads added.
|
2012-03-20 17:31:10 +01:00 |
|
Tobias Brunner
|
1e97783c99
|
Added payloads for IKEv1 NAT-Traversal negotiation.
|
2012-03-20 17:31:09 +01:00 |
|
Tobias Brunner
|
24ddf03f52
|
Added an option to create a generator that does not log debug messages.
|
2012-03-20 17:31:09 +01:00 |
|