denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,701 Commits 1 Branch 0 Tags
12fca6cc9f3a88348c01fc242a840d02ba106b7c
Commit Graph
588 Commits
Author SHA1 Message Date
Martin Willi 12fca6cc9f Indicate and dected support for EAP-only authentication 2010-01-07 14:30:28 +01:00
Martin Willi 023fd8f135 Match to private use algorithms only if we know we are talking to strongSwan 2010-01-07 11:07:53 +01:00
Martin Willi b3349c5694 Interpret private use BEET mode notify only if we know we are talking to strongSwan 2010-01-07 09:37:38 +00:00
Martin Willi a5a0bcaa04 Add an option to send a vendor ID, allows us to properly support private extensions 2010-01-07 09:37:27 +00:00
Andreas Steffen 83c282ebb4 differentiate EAP method initialization errors 2009-12-30 21:34:59 +01:00
Andreas Steffen d002c62347 enforce RFC 3779 address constraints on traffic selectors 2009-12-25 11:20:58 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Martin Willi 6ec949e022 Fixed BEET mode by installing SAs with negotiated address in traffic selector 2009-12-17 10:52:07 +01:00
Andreas Steffen a461e20dd8 provide attributes from SQL database 2009-12-16 12:31:41 +01:00
Martin Willi 5b4d0de7d4 Prefer EAP-Identity for provider attribute/address lookup 2009-12-01 14:24:07 +01:00
Martin Willi f6116e61fc Save EAP-Identity on auth config 2009-12-01 14:24:06 +01:00
Martin Willi 44ce749360 Store completed authentication rounds permanently on IKE_SA, with flush option 2009-12-01 11:35:30 +01:00
Martin Willi 5b2b4d190a Removed obsolete and unused [gs]et_eap_identity() methods 2009-11-30 16:59:23 +01:00
Martin Willi 5351e51951 Do not propose transport mode as initiator if connection is NATed 2009-11-30 11:32:26 +01:00
Martin Willi 8434c88b5e Extended SIM manager by hooks, currently featuring attribute and key hooks 2009-11-30 09:27:26 +01:00
Martin Willi c56d958243 Handle NOT_SUPPORTED or other errors properly in get_quintuplet 2009-11-30 09:26:35 +01:00
Martin Willi 6546482a68 Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword 2009-11-26 10:39:25 +01:00
Martin Willi 387a6e6c32 Check existing path in mobike probing only if we still have a route 2009-11-26 10:30:59 +01:00
Andreas Steffen 653da7c907 added more debugging in configuration attribute handling 2009-11-24 23:17:07 +01:00
Martin Willi 06f02f993c Do not recreate existing create_child subtask when retrying with different DH group 2009-11-23 13:50:01 +01:00
Martin Willi 0d1d19b99d Avoid potentially unaligned half-word read 2009-11-23 13:49:19 +01:00
Martin Willi 80b44cd71a Message stringification supports more detailed EAP payload information 2009-11-18 10:37:46 +01:00
Martin Willi 1427c93fcd Fixed memleak in attribute handling 2009-11-17 15:55:45 +00:00
Martin Willi b5a2055fb1 Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler 2009-11-17 14:51:50 +01:00
Martin Willi 20d144e72f Invoke message hook before generation, allowing plugins to mangle it 2009-11-12 13:37:06 +00:00
Martin Willi 1a86be6e48 Support variable RES length in AKA quintuplets 2009-11-12 10:34:02 +01:00
Martin Willi 15b65bf15d Ported pseudonym/reauth functionality to EAP-AKA 2009-11-12 10:34:01 +01:00
Martin Willi 947b03fd09 Use new identity constructor in EAP-SIM 2009-11-12 10:34:01 +01:00
Martin Willi 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins 2009-11-12 10:34:01 +01:00
Martin Willi c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, 
extended sim_provider with a is_pseudonym() function.
 2009-11-12 10:34:00 +01:00
Martin Willi bcf8a0ff94 Added missing hasher include 2009-11-12 10:33:59 +01:00
Martin Willi 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 4952dc11da Fixed all doxygen warnings 2009-10-22 14:34:10 +02:00
Andreas Steffen 930443afff moved attribute_manager to libstrongswan 2009-10-13 13:46:27 +02:00
Martin Willi 073e7dc062 Merged SIM/USIM manager/card/provider, avoids code duplication 2009-10-12 14:40:21 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00
Martin Willi 31f5280cee Fixed USIM parameter description 2009-10-09 13:02:20 +02:00
Martin Willi 53a16b72ab Separated 3gpp2 USIM card and provider functionality 2009-10-09 13:02:20 +02:00
Martin Willi 36a3bccfcf Implemented a manager for USIM cards/providers very similar to the SIM manager 2009-10-09 13:02:19 +02:00
Martin Willi 991f7ccd6c Catch CHILD_SA state changes during acquire 
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
 2009-10-07 13:09:59 +02:00
Martin Willi f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts 2009-09-24 14:49:41 +02:00
Martin Willi cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only 2009-09-24 14:49:41 +02:00
Tobias Brunner 6e6975395e Using the correct type for ME_ENDPOINT payloads in connectivity checks. 2009-09-24 11:29:34 +02:00
Martin Willi f1092e20f4 Fixed encoding of hash-and-url cert payload 2009-09-22 10:07:04 +02:00
Martin Willi c6a8990bc5 Enforce a local address of the same family as remote address 2009-09-21 15:30:40 +02:00
Tobias Brunner 0755e98e5c Cleaned up some code of the mediation extension. 2009-09-04 15:48:30 +02:00
Tobias Brunner f4b975a65d Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA. 2009-09-04 15:13:12 +02:00