 Andreas Steffen
|
fd86fb5183
|
removed debug output for TLS application data
|
2010-08-19 07:27:30 +02:00 |
|
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
|
Andreas Steffen
|
5ae4292cb9
|
added TLS record debug output
|
2010-08-18 22:52:42 +02:00 |
|
|
Andreas Steffen
|
ee346b54c1
|
add TLS handshake packet size to debug output
|
2010-08-18 22:07:27 +02:00 |
|
|
Andreas Steffen
|
53115857ae
|
some simplifications using the INIT macro
|
2010-08-17 20:09:32 +02:00 |
|
|
Andreas Steffen
|
f9a2d4bfcb
|
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
|
2010-08-16 19:29:39 +02:00 |
|
|
Andreas Steffen
|
cf95e162f2
|
added ikev2/rw-eap-ttls-phase2-piggyback scenario
|
2010-08-16 18:32:00 +02:00 |
|
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
f2b9b9725c
|
changed ikev2/rw-eap-ttls-only description
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
d2be215a99
|
added ikev2/rw-eap-ttls-only scenario
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
06a207480e
|
fixed typo in eap-mschapv2 plugin
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
|
Andreas Steffen
|
758d7283fb
|
used default ipsec.secrets
|
2010-08-15 12:49:14 +02:00 |
|
|
Andreas Steffen
|
d662a7ffad
|
included bad case in ikev2/rw-eap-ttls-radius scenario
|
2010-08-15 11:13:41 +02:00 |
|
|
Andreas Steffen
|
eb4c9c609c
|
version bumps in testing.conf
|
2010-08-14 21:41:52 +02:00 |
|
|
Andreas Steffen
|
4618430f83
|
enable the eap-ttls and ctr plugins in the uml scenarios
|
2010-08-14 21:40:05 +02:00 |
|
|
Andreas Steffen
|
e8f971ee4e
|
added rw-eap-ttls-radius scenario
|
2010-08-14 20:05:21 +02:00 |
|
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|
|
Andreas Steffen
|
004b226bb8
|
use EAP plugin for tunneled client authentication
|
2010-08-14 01:14:28 +02:00 |
|
|
Andreas Steffen
|
6659c61335
|
send tunneled EAP Identity response using eap-identity plugin
|
2010-08-13 22:45:22 +02:00 |
|
|
Andreas Steffen
|
486893ee52
|
allow to send an EAP Identity response without matching request
|
2010-08-13 22:41:00 +02:00 |
|
|
Andreas Steffen
|
c4347aa86e
|
do not dump tls application data any more
|
2010-08-13 21:21:49 +02:00 |
|
|
Andreas Steffen
|
683a912eab
|
implement AVP EAP message building and processing
|
2010-08-13 21:21:49 +02:00 |
|
|
Andreas Steffen
|
71efe40077
|
Migrated eap_identity plugin to INIT/METHOD macros
|
2010-08-13 16:57:01 +02:00 |
|
|
Andreas Steffen
|
a568897011
|
Migrated eap_md5 plugin to INIT/METHOD macros
|
2010-08-13 16:33:26 +02:00 |
|
|
Andreas Steffen
|
45c4021bd0
|
Migrated eap_authenticator to INIT/METHOD macros
|
2010-08-13 15:58:53 +02:00 |
|
|
Andreas Steffen
|
fe6ae23d1f
|
Migrated eap_manager to INIT/METHOD macros
|
2010-08-13 15:32:37 +02:00 |
|
|
Andreas Steffen
|
87799b0c00
|
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
|
2010-08-13 15:07:53 +02:00 |
|
|
Andreas Steffen
|
e643da585b
|
fixed typo
|
2010-08-13 12:24:54 +02:00 |
|
|
Andreas Steffen
|
3a15a02a58
|
set TLS record type before state change to STATE_FINISHED_SENT
|
2010-08-13 00:31:45 +02:00 |
|
|
Andreas Steffen
|
b62e9a30ce
|
fixed sequence numbering and iv of TLS protection layer
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
4412ee86c5
|
recognize eap-ttls method
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
1327839da8
|
added generic TLS application data handler and specific EAP-TTLS instantiation
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
133accfcfd
|
differentiate between TLS messages and EAP-[T]TLS packets in the debug output
|
2010-08-10 19:02:05 +02:00 |
|
|
Andreas Steffen
|
3810afa9f9
|
log final TLS acknowledgement packet
|
2010-08-08 19:14:53 +02:00 |
|
|
Andreas Steffen
|
ded59df4fc
|
added level 2 debug info on sent TLS packets
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
ab47a7924b
|
log EAP-TTLS version
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
a622c6d019
|
fixed typo
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
a6444fcdd4
|
EAP-TLS and EAP-TTLS use different constant MSK PRF label
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
b4d30a425e
|
support server authentication only for EAP-TTLS
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
26eb9b2d17
|
added eap_ttls plugin configuration
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
fd8ad4198d
|
added TTLS to EAP short names, too
|
2010-08-06 06:06:40 +02:00 |
|
|
Andreas Steffen
|
f32e56bbce
|
added EAP_TTLS method
|
2010-08-05 21:01:39 +02:00 |
|
|
Andreas Steffen
|
6ac797ad3a
|
added ikev2/rw-eap-tls-radius
|
2010-08-05 19:28:06 +02:00 |
|
|
Andreas Steffen
|
6b717cc28d
|
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
|
2010-08-05 12:47:09 +02:00 |
|
|
Andreas Steffen
|
7ea87db00d
|
added some more TLS debug output
|
2010-08-05 09:51:05 +02:00 |
|
|
Andreas Steffen
|
7030e3950a
|
fixed type in cipher suite list build
|
2010-08-05 01:26:10 +02:00 |
|
|
Andreas Steffen
|
4657b3a42a
|
log selected TLS version and cipher suite
|
2010-08-05 01:21:59 +02:00 |
|
|
Andreas Steffen
|
289c9ac3d7
|
log TLS handshake messages in debug level 2
|
2010-08-04 16:55:55 +02:00 |
|
|
Andreas Steffen
|
8e7920eea1
|
generated aaa certificate
|
2010-08-04 12:44:47 +02:00 |
|
|
Andreas Steffen
|
f8bb082f1f
|
added ikev2/rw-eap-tls-only scenario
|
2010-08-04 08:36:27 +02:00 |
|
|
Andreas Steffen
|
9dffc26b73
|
--enable eap-tls and --disable-load-warning in uml build
|
2010-08-04 07:48:19 +02:00 |
|
|
Andreas Steffen
|
50fb724ddd
|
delete tarball files
|
2010-07-30 22:27:41 +02:00 |
|
|
Andreas Steffen
|
b599b80013
|
version bump to 4.4.2
|
2010-07-30 22:26:14 +02:00 |
|
|
Andreas Steffen
|
ff7b0dd289
|
added NETMAP rules for the reverse direction
|
2010-07-27 21:16:44 +02:00 |
|
|
Andreas Steffen
|
c100dd6b5f
|
fixed description of ikev2/net2net-same-nets scenario
|
2010-07-27 20:50:28 +02:00 |
|
|
Andreas Steffen
|
c74c4c2a20
|
added net2net-same-nets
|
2010-07-25 11:56:33 +02:00 |
|
|
Andreas Steffen
|
b59340a2c3
|
NEWS cosmetics
|
2010-07-21 21:43:43 +02:00 |
|
|
Andreas Steffen
|
e93f452825
|
remove the private updown scripts after use
|
2010-07-17 23:25:15 +02:00 |
|
|
Andreas Steffen
|
15fd135564
|
minor fixes in the ikev2/rw-mark-in-out scenarios
|
2010-07-17 17:36:04 +02:00 |
|
|
Andreas Steffen
|
b22bb9f21c
|
updated NEWS
|
2010-07-17 17:25:01 +02:00 |
|
|
Andreas Steffen
|
f5baa5c4cf
|
some reformulations
|
2010-07-17 17:19:26 +02:00 |
|
|
Andreas Steffen
|
d2d7ed9227
|
the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
|
2010-07-17 16:32:47 +02:00 |
|
|
Andreas Steffen
|
16c97c8e59
|
documented the new PLUTO environment variables available in the updown script
|
2010-07-17 13:41:40 +02:00 |
|
|
Andreas Steffen
|
ae0e3b03b7
|
in a ESP_IN_UDP situation make UDP port available in the updown script
|
2010-07-17 13:27:19 +02:00 |
|
|
Andreas Steffen
|
34e93c0280
|
fix html error in scenario description
|
2010-07-17 13:09:28 +02:00 |
|
|
Andreas Steffen
|
14665981a5
|
make xfrm marks available in the updown scripts
|
2010-07-17 13:08:50 +02:00 |
|
|
Andreas Steffen
|
ff090f8781
|
check for mark changes in ipsec update
|
2010-07-17 09:13:48 +02:00 |
|
|
Andreas Steffen
|
cde633d632
|
all x509 based sql scenarios require the revocation plugin
|
2010-07-15 23:19:52 +02:00 |
|
|
Andreas Steffen
|
c349a68b2e
|
all x509 based pfkey scenarios require the revocation plugin
|
2010-07-15 23:17:37 +02:00 |
|
|
Andreas Steffen
|
f5731b4579
|
all x509 based p2pnat scenarios require the revocation plugin
|
2010-07-15 23:07:12 +02:00 |
|
|
Andreas Steffen
|
295d9cc313
|
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
|
2010-07-15 23:02:17 +02:00 |
|
|
Andreas Steffen
|
84fe65bd43
|
all x509 based ike scenarios require the revocation plugin
|
2010-07-15 22:40:20 +02:00 |
|
|
Andreas Steffen
|
001787b3eb
|
all x509 based openssl-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:33:05 +02:00 |
|
|
Andreas Steffen
|
6c2bd2a7d8
|
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:03:16 +02:00 |
|
|
Andreas Steffen
|
2cf4d34f2f
|
all x509 based ikev2 scenarios require the revocation plugin
|
2010-07-15 21:39:01 +02:00 |
|
|
Andreas Steffen
|
afe5d482db
|
ikev2/net2net-psk-dscp does not need certificate support
|
2010-07-15 21:37:45 +02:00 |
|
|
Andreas Steffen
|
a3527c39dd
|
add revocation plugin to ikev2/rw-cert scenario
|
2010-07-15 20:03:11 +02:00 |
|
|
Andreas Steffen
|
3de510ca43
|
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
|
2010-07-15 06:29:26 +02:00 |
|
|
Andreas Steffen
|
fccf00576f
|
activate --enable-addrblock configure option in UML scenarios
|
2010-07-13 21:04:20 +02:00 |
|
|
Andreas Steffen
|
d5f29da3d2
|
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
|
2010-07-13 09:15:53 +02:00 |
|
|
Andreas Steffen
|
c1918dc28f
|
we need some ordering
|
2010-07-12 22:44:27 +02:00 |
|
|
Andreas Steffen
|
c13a4b4030
|
changed ordering of statusattr output
|
2010-07-12 22:38:18 +02:00 |
|
|
Andreas Steffen
|
bb021fbbc9
|
updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes
|
2010-07-12 20:54:40 +02:00 |
|
|
Andreas Steffen
|
1cecc6a6ef
|
fixed alignment of caption
|
2010-07-12 20:48:14 +02:00 |
|
|
Andreas Steffen
|
ab635e029e
|
updated SQL templates to support attribute pool and identity parameters
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
cb0a9d58a3
|
output identities correctly
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
5047fe7ad3
|
added second example scenario
|
2010-07-12 20:28:34 +02:00 |
|
|
Andreas Steffen
|
db4ad736be
|
transport reqid, mark_in and mark_out in whack message
|
2010-07-09 12:19:39 +02:00 |
|
|
Andreas Steffen
|
f65e0dc80f
|
added ikev2/net2net-psk-dscp2 DiffServ scenario
|
2010-07-09 11:55:01 +02:00 |
|
|
Andreas Steffen
|
9f94906815
|
added ikev2/nat-two-rw-mark-in-out scenario
|
2010-07-09 09:36:03 +02:00 |
|
|
Andreas Steffen
|
bcf608c848
|
some changes to the ikev2/nat-two-rw-mark scenario
|
2010-07-09 09:35:02 +02:00 |
|
|
Andreas Steffen
|
26c4d0102a
|
configuration of different marks for inbound and outbound direction
|
2010-07-09 09:06:07 +02:00 |
|
|
Andreas Steffen
|
a729d17afa
|
added req parameter to ipsec.conf man page
|
2010-07-06 20:32:33 +02:00 |
|
|
Andreas Steffen
|
ec40c02ad2
|
added IKEv2 xfrm marks support to NEWS
|
2010-07-03 22:14:45 +02:00 |
|
|
Andreas Steffen
|
36b3c0a8dd
|
regenerated loop intermediate CA certificates
|
2010-07-03 18:18:30 +02:00 |
|
|
Andreas Steffen
|
342fc85e9e
|
added ikev2/nat-two-rw-mark scenario
|
2010-07-03 13:25:09 +02:00 |
|
|
Andreas Steffen
|
ee26c537d7
|
support of xfrm marks for IKEv2
|
2010-07-02 23:46:09 +02:00 |
|
|
Andreas Steffen
|
b3f65304ba
|
check for installed aead algorithms in kernel
|
2010-06-27 22:26:00 +02:00 |
|