denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,100 Commits 1 Branch 0 Tags
35a1986142365654663980b4914e9dff8ce6b9d3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi f8b2906929 Use the TLS socket splicing in tls_test script 2011-12-31 13:14:49 +01:00
Martin Willi 3a87c89b1b Added a tls_socket_t.splice method to wrap a file descriptor into TLS 2011-12-31 13:14:49 +01:00
Martin Willi 6a5c86b7ad Implemented TLS session resumption both as client and as server 2011-12-31 13:14:49 +01:00
Martin Willi ca5767621b Implemented a TLS session cache 2011-12-31 13:14:49 +01:00
Martin Willi 703c0db894 Check for cipherspec changes after each handshake message 2011-12-31 13:14:49 +01:00
Martin Willi 4caa380625 Separated cipherspec checking and switching, allowing us to defer the second 2011-12-31 13:14:49 +01:00
Martin Willi 84da59f609 Be less verbose about TLS extensions 2011-12-24 14:14:25 +01:00
Martin Willi ed57dfca3f In TLS 1.2, PRF and HASH function use at least SHA-256, not the MAC hash function 2011-12-24 12:42:28 +01:00
Martin Willi 6b01216422 Added a getter for the tls_socket file descriptor 2011-12-24 12:42:25 +01:00
Martin Willi 8b8fcfd631 Be less verbose if plugin dependecy not satisfied 2011-12-07 13:42:10 +01:00
Martin Willi 005b02cbe3 Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries mangle it 2011-12-07 13:42:07 +01:00
Martin Willi b2e493ab58 Fixed proposal numbering check in sa_payload 2011-11-21 09:12:00 +01:00
Martin Willi 3fcacd283e Fix unaligned aliasing warning in raw socket 2011-11-17 18:22:07 +01:00
Martin Willi 37276728f3 Added some NEWS for 4.6.0 2011-10-14 10:29:01 +02:00
Martin Willi 58fcdc4f06 Don't enforce features with soft dependencies before all plugins are loaded 2011-10-14 10:05:49 +02:00
Martin Willi 67c1d36554 Add features support tp eap-simaka-reauth plugin 2011-10-14 10:05:49 +02:00
Martin Willi e9655e7417 Add features support to eap-simaka-pseudonym plugin 2011-10-14 10:05:49 +02:00
Martin Willi f91cba1874 Add features support to eap-simaka-sql plugin 2011-10-14 10:05:49 +02:00
Martin Willi a07f2a4b9b Don't try to load a feature again after failure 2011-10-14 10:05:49 +02:00
Martin Willi 9894b91ca9 Don't load eap-sim-file plugin if no valid triplet file found 2011-10-14 10:05:49 +02:00
Martin Willi 59c4e88b16 Reset registration function for each plugin during feature loading 2011-10-14 10:05:49 +02:00
Martin Willi 9099e4fd3c Add features support to eap-sim-pcsc plugin 2011-10-14 10:05:49 +02:00
Martin Willi 5f17a09323 Add features support to eap-sim-file plugin 2011-10-14 10:05:48 +02:00
Martin Willi 49458758f6 Add features support to eap-sim plugin 2011-10-14 10:05:48 +02:00
Martin Willi 1cb9a6d8ba Add features support to eap-aka-3gpp2 plugin 2011-10-14 10:05:48 +02:00
Martin Willi c12c334925 Add a plugin feature registration callback for SIM/AKA backends 2011-10-14 10:05:48 +02:00
Martin Willi 4ae99247b5 Add features support to eap-aka plugin 2011-10-14 10:05:48 +02:00
Martin Willi e64d1141ff Add features support to fips-prf plugin 2011-10-14 10:05:48 +02:00
Martin Willi 756b504e40 Add features support to socket-raw plugin 2011-10-14 10:05:48 +02:00
Martin Willi 85d11ce9bd Add features support to socket-dynamic plugin 2011-10-14 10:05:48 +02:00
Martin Willi 8c5aacc270 Add features support to socket-default plugin 2011-10-14 10:05:48 +02:00
Martin Willi 8b6881cfc5 Added socket plugin feature loading callback 2011-10-14 10:05:48 +02:00
Martin Willi 3b62d5bad8 Add features support to kernel-klips plugin 2011-10-14 10:05:48 +02:00
Martin Willi 8da1f9f25d Add features support to kernel-pfroute plugin 2011-10-14 10:05:48 +02:00
Martin Willi e99cb0673d Add features support to kernel-pfkey plugin 2011-10-14 10:05:47 +02:00
Martin Willi 278e5f3d7a Add features support to kernel-netlink plugin 2011-10-14 10:05:47 +02:00
Martin Willi 33a8860eac Added macro to define CUSTOM plugin features 2011-10-14 10:05:47 +02:00
Martin Willi 29d30991f3 Added kernel_ipsec/net plugin feature loading callbacks 2011-10-14 10:05:47 +02:00
Martin Willi 036b88ec76 Doxygen fixups 2011-10-14 10:05:47 +02:00
Martin Willi 61c1dec8d4 Fixed memleak in plugin unloading 2011-10-14 10:05:47 +02:00
Martin Willi 2feed2f3fe Load features after each plugin loaded until all plugins have feature support 2011-10-14 10:05:47 +02:00
Martin Willi 927bc3b5b8 Fixed compiler warning 2011-10-14 10:05:47 +02:00
Martin Willi f5c574e17b Fixed AES key length in openssl plugin 2011-10-14 10:05:47 +02:00
Martin Willi d965872d66 Implemented feature unloading, moved feature registration plugin_features.c 2011-10-14 10:05:47 +02:00
Martin Willi d29d63c2cb Add features support to ctr plugin 2011-10-14 10:05:46 +02:00
Martin Willi 5cb10a22a3 Add features support to gcm plugin 2011-10-14 10:05:46 +02:00
Martin Willi cf268dc4f2 Add features support to ccm plugin 2011-10-14 10:05:46 +02:00
Martin Willi 3cd28acce0 Add aead plugin features 2011-10-14 10:05:46 +02:00
Martin Willi 02572b84f9 Announce openssl features only if actually supported 2011-10-14 10:05:46 +02:00
Martin Willi 516246490f Add features support to des plugin 2011-10-14 10:05:46 +02:00
Martin Willi 4489ece2db Add features support to soup plugin 2011-10-14 10:05:46 +02:00
Martin Willi 6c3a0b9bf5 Add features support to ldap plugin 2011-10-14 10:05:46 +02:00
Martin Willi ecb40b4ccb Add features support to curl plugin 2011-10-14 10:05:46 +02:00
Martin Willi 3d4f0f7646 Add features support to mysql plugin 2011-10-14 10:05:46 +02:00
Martin Willi 9f2a81f341 Add features support to sqlite plugin 2011-10-14 10:05:45 +02:00
Martin Willi f85a4310cb Added database and fetcher plugin features 2011-10-14 10:05:45 +02:00
Martin Willi 48b7234f58 Add features support to eap-mschapv2 2011-10-14 10:05:45 +02:00
Martin Willi 9dc54fc56a Add features support to openssl plugin 2011-10-14 10:05:45 +02:00
Martin Willi b2c44ace17 Add features support to random plugin 2011-10-14 10:05:45 +02:00
Martin Willi 6853e9732e Add features support to gmp plugin 2011-10-14 10:05:45 +02:00
Martin Willi d6c7b30cad Add features support to af_alg plugin 2011-10-14 10:05:45 +02:00
Martin Willi 3bc79461cd Add features support to xcbc plugin 2011-10-14 10:05:45 +02:00
Martin Willi 5c630f54f0 Add features support to aes plugin 2011-10-14 10:05:45 +02:00
Martin Willi 33f6b3d6d0 Add features support to hmac plugin 2011-10-14 10:05:45 +02:00
Martin Willi 130661b275 Add features support to md5 plugin 2011-10-14 10:05:45 +02:00
Martin Willi 30ab1a6ed9 Add features support to sha2 plugin 2011-10-14 10:05:44 +02:00
Martin Willi cec7dd14eb Add features support to sha1 plugin 2011-10-14 10:05:44 +02:00
Martin Willi 2d2ffa58f6 Added a listplugins stroke command to show plugin features 2011-10-14 10:05:44 +02:00
Martin Willi fa7c8338ca Plugin enumerator enumerates over loaded features, too 2011-10-14 10:05:44 +02:00
Martin Willi 36b4f05b14 Added a generic callback to register EAP methods using plugin features 2011-10-14 10:05:44 +02:00
Martin Willi 62b9e2f938 Added support for plugin features 2011-10-14 10:05:44 +02:00
Martin Willi 658c993c78 Include KEY_ANY in key_type_names 2011-10-14 10:04:45 +02:00
Martin Willi e3edd7e75e Add enum names for database drivers 2011-10-14 10:04:45 +02:00
Martin Willi 9cd7f384ba Include library.h in plugin.h 2011-10-14 10:04:45 +02:00
Martin Willi dc299da8e5 Added additional debug info to peer config matching 2011-10-11 09:46:24 +02:00
Martin Willi 5976e149eb Don't allocate extra memory to MAC the TLS header 2011-09-28 17:32:23 +02:00
Martin Willi b79bb79a66 Verify TLS MAC even if padding is invalid to prevent timing attacks 2011-09-28 17:16:09 +02:00
Martin Willi 3946821937 Load eap-aka plugin before shared simaka helpers depending on it 2011-09-26 13:43:38 +00:00
Martin Willi e3c881aff9 Return allocated variable in INIT() 2011-09-12 13:03:20 +02:00
Martin Willi f8437dd8d2 Clear traps during shutdown before unloading kernel plugins 2011-09-12 13:02:51 +02:00
Martin Willi 40e53c40d4 Destroy kernel interface during deregistration, as the plugin goes afterwards 2011-09-12 13:02:15 +02:00
Martin Willi e6816e4670 Add missing semicolon 2011-09-12 13:01:40 +02:00
Martin Willi 6fde6cfaf8 NetworkManager-strongSwan Debian release 1.3.0 2011-09-07 16:09:18 +02:00
Martin Willi 24fa80ac91 Fixed compiler warnings in openssl plugin 2011-09-07 14:23:27 +02:00
Martin Willi 791c93f3ea Migrated NM frontend plugin to NetworkManager 0.9 
Use GtkBuilder, drop gconf dependency.
 2011-09-05 17:14:28 +02:00
Martin Willi 40921edc38 Support resolution of "allow_any" DNS names in charon (%hostname) 2011-09-02 13:42:45 +02:00
Martin Willi f9a0f55657 Check if ClearSilver actually requires zlib 2011-09-02 13:40:38 +02:00
Martin Willi d0e1b237be Properly remove listener when listen() times out 2011-08-31 16:50:06 +02:00
Martin Willi e59a50009c starter passes unresolved DNS names to charon 
Based on an initial patch by Mirko Parthey.
 2011-08-29 09:58:18 +02:00
Martin Willi 8e3f14baab bus->listen() and the controller wrappers accept a timeout to wait for callbacks 2011-08-26 10:44:25 +02:00
Martin Willi 071903235a Register manager of pkcs11 plugin as library object 2011-08-24 15:45:59 +02:00
Martin Willi 3f455c739d Added a certexpire empty_string option 2011-08-22 18:42:33 +02:00
Martin Willi e64fdfa172 Implemented CSV export functionality in certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi d2aeb8fdfd Added generic cron style callback execution to certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi f4bdc6a3aa Cache trustchain lifetimes for export 2011-08-22 18:42:33 +02:00
Martin Willi b274f20a1d Register a certexpire listener collecting trustchain information 2011-08-22 18:42:33 +02:00
Martin Willi 87ddfcc655 Added missing auth_rule_names 2011-08-22 18:42:32 +02:00
Martin Willi c991645ff5 Moved auth_rule_names back to auth_cfg.c 2011-08-22 18:42:32 +02:00
Martin Willi ba2201edf0 Added plugin stub of certexpire plugin 2011-08-22 18:42:32 +02:00
Martin Willi bff1025201 Don't rekey but delete CHILD_SA to resying against NATed Windows clients 2011-08-19 09:16:17 +02:00