Andreas Steffen
|
4da597631f
|
fixed memory leak in EAP-TTLS piggy-back mode
|
2010-11-09 20:35:53 +01:00 |
|
Andreas Steffen
|
260d056170
|
suport certificate-based client authentication with EAP-TTLS
|
2010-10-14 21:00:41 +02:00 |
|
Andreas Steffen
|
04d000210b
|
deactivate start_phase2_tnc flag after start
|
2010-10-07 15:42:00 +02:00 |
|
Andreas Steffen
|
888455587b
|
added server side support for EAP-TNC
|
2010-10-07 15:02:51 +02:00 |
|
Andreas Steffen
|
20ad62026e
|
support non EAP-TTLS conformant RADIUS-type attribute segmentation
|
2010-09-09 11:15:08 +02:00 |
|
Andreas Steffen
|
3b7eb3a9f4
|
added explanatory comments
|
2010-09-09 08:57:13 +02:00 |
|
Andreas Steffen
|
de29e3a683
|
max max_message_count configurable and move it into tls_eap_t
|
2010-09-08 12:58:45 +02:00 |
|
Andreas Steffen
|
51b385d44d
|
moved tls_t existance test into tls_eap_create() again
|
2010-09-08 11:09:11 +02:00 |
|
Andreas Steffen
|
d2b1d4378e
|
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
|
2010-09-08 11:01:53 +02:00 |
|
Martin Willi
|
f9fc5f2045
|
Added strongswan.conf options for EAP-TLS/TTLS fragment size
|
2010-08-31 16:17:01 +02:00 |
|
Martin Willi
|
1cf8c5f746
|
Migrated EAP-TTLS to the generic TLS helper
|
2010-08-31 16:17:01 +02:00 |
|
Martin Willi
|
ecd98efa9d
|
Support output fragmentation of TLS records
|
2010-08-31 15:54:37 +02:00 |
|
Andreas Steffen
|
577893612f
|
for the time being assume a single request/response exchange for a given EAP method
|
2010-08-30 15:36:34 +02:00 |
|
Andreas Steffen
|
d9b85e28b9
|
removed tls_record_t definition
|
2010-08-24 19:19:13 +02:00 |
|
Martin Willi
|
69e8bb2e8d
|
Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option
|
2010-08-24 11:34:43 +02:00 |
|
Andreas Steffen
|
79a5e391f8
|
support fragmentation in AVPs
|
2010-08-24 09:02:51 +02:00 |
|
Martin Willi
|
f55f9c4e1e
|
Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS
|
2010-08-24 08:45:49 +02:00 |
|
Martin Willi
|
1475800080
|
Moved TLS record parsing/generation to tls.c
|
2010-08-24 08:45:49 +02:00 |
|
Martin Willi
|
96b2fbcc2c
|
Introducing simple purposes for the TLS stack, switches various options
|
2010-08-20 15:09:08 +02:00 |
|
Martin Willi
|
6291fbedcb
|
Fixed compiler warning
|
2010-08-20 15:09:08 +02:00 |
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
Martin Willi
|
ba31fe1fd6
|
Use a seperate section for each nested struct member in INIT macro
|
2010-08-18 12:15:03 +02:00 |
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|
Andreas Steffen
|
004b226bb8
|
use EAP plugin for tunneled client authentication
|
2010-08-14 01:14:28 +02:00 |
|
Andreas Steffen
|
6659c61335
|
send tunneled EAP Identity response using eap-identity plugin
|
2010-08-13 22:45:22 +02:00 |
|
Andreas Steffen
|
683a912eab
|
implement AVP EAP message building and processing
|
2010-08-13 21:21:49 +02:00 |
|
Andreas Steffen
|
1327839da8
|
added generic TLS application data handler and specific EAP-TTLS instantiation
|
2010-08-12 23:58:54 +02:00 |
|
Andreas Steffen
|
133accfcfd
|
differentiate between TLS messages and EAP-[T]TLS packets in the debug output
|
2010-08-10 19:02:05 +02:00 |
|
Andreas Steffen
|
3810afa9f9
|
log final TLS acknowledgement packet
|
2010-08-08 19:14:53 +02:00 |
|
Andreas Steffen
|
ded59df4fc
|
added level 2 debug info on sent TLS packets
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
ab47a7924b
|
log EAP-TTLS version
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
a6444fcdd4
|
EAP-TLS and EAP-TTLS use different constant MSK PRF label
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
26eb9b2d17
|
added eap_ttls plugin configuration
|
2010-08-07 11:26:04 +02:00 |
|