Martin Willi
3690d31a2a
Added .gitignore for NM Debian package build
2009-10-12 14:06:51 +02:00
Andreas Steffen
a86d534b4c
prepended all ISAKMP notification message types with ISAKMP_
2009-10-12 13:47:22 +02:00
Martin Willi
68d23d2401
Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins
2009-10-12 09:51:46 +02:00
Martin Willi
9b2942f68d
Stroke plugin interprets NULL identities as ID_ANY in shared key lookup
2009-10-12 09:51:45 +02:00
Andreas Steffen
295e92fe36
fixed output of offered CA
2009-10-11 21:24:39 +02:00
Andreas Steffen
e8e2a147db
fixed broken smartcard support (bug #91 )
2009-10-11 21:14:05 +02:00
Andreas Steffen
1c75e3404d
some missing refactoring changes
2009-10-11 20:14:18 +02:00
Andreas Steffen
d4acf1dd3c
myids might not be defined yet
2009-10-11 18:05:38 +02:00
Andreas Steffen
0004ee1687
fixed refactoring bug
2009-10-11 16:34:04 +02:00
Andreas Steffen
40441ddd39
removed orphaned sha1.c
2009-10-10 22:05:59 +02:00
Andreas Steffen
17722d4489
replaced struct id by identification_t
2009-10-10 21:19:38 +02:00
Martin Willi
5d5e2853b6
SIM card interface takes IMSI as parameter (same as in USIM)
2009-10-09 13:02:20 +02:00
Martin Willi
31f5280cee
Fixed USIM parameter description
2009-10-09 13:02:20 +02:00
Martin Willi
424ddf801c
Do not use monotonic time for AKA sequence numbers, it has an undefined starting point
2009-10-09 13:02:20 +02:00
Martin Willi
655728621b
Use constants instead of sizeof(), sizeof() does not work for function arguments
2009-10-09 13:02:20 +02:00
Martin Willi
aba93dcc32
Calculate missing CK/IK values in USIM
2009-10-09 13:02:20 +02:00
Martin Willi
aca7ba0ffc
Link 3gpp2 EAP-AKA plugin to libgmp
2009-10-09 13:02:20 +02:00
Martin Willi
53a16b72ab
Separated 3gpp2 USIM card and provider functionality
2009-10-09 13:02:20 +02:00
Martin Willi
0030880c6b
Ported AKA functions to 3gpp2 plugin
2009-10-09 13:02:19 +02:00
Martin Willi
4720815774
Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software
2009-10-09 13:02:19 +02:00
Martin Willi
36a3bccfcf
Implemented a manager for USIM cards/providers very similar to the SIM manager
2009-10-09 13:02:19 +02:00
Andreas Steffen
c6b2b2aae2
corrected caption
2009-10-09 00:16:33 +02:00
Andreas Steffen
4b4f8bd732
created identification_create_from_sockaddr() function
2009-10-09 00:13:28 +02:00
Martin Willi
a4eb37eed0
Added medsrv.fcgi to gitignore
2009-10-08 13:10:02 +02:00
Andreas Steffen
5026519057
medsrv.fcgi is not part of the git tree
2009-10-08 13:05:27 +02:00
Andreas Steffen
878fc472e9
hex_str() isn't used externally any more
2009-10-08 13:04:07 +02:00
Andreas Steffen
e64b4e96c9
parsing of generalNames is not needed any more
2009-10-08 12:42:29 +02:00
Andreas Steffen
88212ee6e7
use of asn1_build_known_oid()
2009-10-08 12:35:36 +02:00
Andreas Steffen
0354d5703d
migrated public key IDs to identification_t
2009-10-08 11:25:43 +02:00
Martin Willi
4b1cd5a367
Reenabled acq_expires SA timer using rekey timeout
...
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
2009-10-07 13:09:59 +02:00
Martin Willi
991f7ccd6c
Catch CHILD_SA state changes during acquire
...
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
2009-10-07 13:09:59 +02:00
Andreas Steffen
84e390fdc4
list subjectAltNames
2009-10-06 23:50:26 +02:00
Andreas Steffen
20afe5e9f5
some ipsec listall finetuning
2009-10-06 23:19:46 +02:00
Andreas Steffen
ce2f2461e0
pluto and charon now have the same ipsec listall output format
2009-10-06 16:49:46 +02:00
Andreas Steffen
cf85e1319b
streamlined output from get_validity()
2009-10-06 14:22:27 +02:00
Andreas Steffen
afdaa9e5bf
fixed serial number conversion from hex
2009-10-05 23:52:35 +02:00
Andreas Steffen
0da0f3fc3f
delete group attributes after use
2009-10-05 23:17:36 +02:00
Andreas Steffen
a9fe23cf53
stroke_list outputs group attributes
2009-10-05 23:13:51 +02:00
Andreas Steffen
408e46a324
ipsec pki --issue suports --flag authServer option
2009-10-05 22:44:01 +02:00
Andreas Steffen
ce40bf5def
ipsec pki --issue supports --flag ocspSigning option
2009-10-05 21:20:42 +02:00
Martin Willi
6eacaffc72
Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads
2009-10-05 14:06:32 +02:00
Martin Willi
3b836fc759
Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads
2009-10-05 13:32:41 +02:00
Martin Willi
587ebae722
Distinguish invalid free()s between corrupted magic and invalid pointer
2009-10-05 11:02:54 +02:00
Andreas Steffen
fc12e3cd2e
pluto now uses x509 plugin for attribute certificate handling
2009-10-05 07:24:28 +02:00
Andreas Steffen
0ea9cbc6e9
fixed output of authKeyID
2009-10-02 21:20:45 +02:00
Andreas Steffen
0aa5cea248
mark embedded parsing in debug mode
2009-10-02 20:54:15 +02:00
Andreas Steffen
ec0abe4ab5
added some notBefore/notAfter debugging info
2009-10-02 20:14:09 +02:00
Andreas Steffen
daaedcb9c2
verify correctness of X.509 versions
2009-10-02 17:49:51 +02:00
Andreas Steffen
6f2f08fb8d
added all missing RFC 5280 OIDs
2009-10-02 14:10:27 +02:00
Andreas Steffen
eb4544f773
fixes multiple IPsec SAs with IKEv1 Mode Config
2009-10-01 09:41:35 +02:00
Martin Willi