denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,614 Commits 1 Branch 0 Tags
421a529f8838606d955529f0de39d495906a3f72
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi bda7d9d940 Added generic TLS purposes 2010-08-24 08:45:49 +02:00
Martin Willi f55f9c4e1e Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS 2010-08-24 08:45:49 +02:00
Martin Willi c5142f110e Check if the application layer has completed successfully 2010-08-24 08:45:49 +02:00
Martin Willi 1475800080 Moved TLS record parsing/generation to tls.c 2010-08-24 08:45:49 +02:00
Martin Willi c310881a11 Added a TLS purpose for EAP-TTLS with client authentication 2010-08-23 15:13:48 +02:00
Martin Willi 5ff8c62707 EAP-TLS clients send an empty packet on failure to properly shut down a TLS session 2010-08-23 15:13:41 +02:00
Martin Willi e6f3ef1330 Implemented TLS Alert handling 2010-08-23 15:13:37 +02:00
Martin Willi 908e752201 Rebuild library.lo after changing ./configure options 2010-08-23 12:01:48 +02:00
Martin Willi e0fcf43cf8 Build a trustchain even if no trust anchor is given 2010-08-23 12:01:43 +02:00
Martin Willi c49475dae1 Accept encryption payloads with no wrapped payloads 2010-08-23 11:30:36 +02:00
Martin Willi 4f60466a01 Fall back to shifting with 32-bit words if 64-bit byte order conversion function missing 2010-08-23 10:10:36 +02:00
Martin Willi 835ec23aff Use enum mappings to resolve debug group 2010-08-23 09:47:04 +02:00
Martin Willi f9efac2ba3 Implemented generic enum name to enum value mapping 2010-08-23 09:47:03 +02:00
Martin Willi f154e30431 Verify negotiated TLS version 2010-08-23 09:47:03 +02:00
Martin Willi 3c19b3461f Introducing a dedicated debug message group for libtls 2010-08-23 09:47:03 +02:00
Martin Willi 0bcef5fe7a Streamlined TLS debugging output 2010-08-23 09:45:33 +02:00
Martin Willi 96b2fbcc2c Introducing simple purposes for the TLS stack, switches various options 2010-08-20 15:09:08 +02:00
Martin Willi 6291fbedcb Fixed compiler warning 2010-08-20 15:09:08 +02:00
Martin Willi cb3f0c9b31 Register missing SHA256 authenticator with no truncation, as used by TLS 2010-08-20 12:11:21 +02:00
Martin Willi 6e413d9ce9 Added more TLS cipher suites we already support 2010-08-20 12:11:21 +02:00
Martin Willi a2bfc45bfd Build TLS cipher suite list in a generic fashion 2010-08-20 12:11:21 +02:00
Martin Willi 2e64455ee1 Fixed crypter keymat derivation bug 2010-08-19 19:28:08 +02:00
Martin Willi 44582075e0 Added ctr, ccm, gcm plugin NEWS 2010-08-19 19:09:01 +02:00
Martin Willi 23cf96773a Improve GCM performance by factor 2-3 by shifting full 32/64 bit words 2010-08-19 19:08:57 +02:00
Martin Willi 1a64981048 Implemented a gcm plugin providing GCM mode based on CBC crypters 2010-08-19 19:05:15 +02:00
Martin Willi 026355af42 Added AES-GCM test vectors 2010-08-19 19:05:15 +02:00
Martin Willi 37e52c3fbf Added a crypto transform stress test for profiling 2010-08-19 19:05:14 +02:00
Martin Willi 9d3e174a1e Give a benchmark point for each operation to compare different transforms 2010-08-19 19:05:14 +02:00
Martin Willi 80a93a1335 Implemented a ccm plugin providing CCM mode based on CBC crypters 2010-08-19 19:05:14 +02:00
Martin Willi 7ba89ccd7f Added helper macros to define portable bitfields with gcc 2010-08-19 19:05:14 +02:00
Martin Willi f9277ac426 Added AES-CCM test vectors 2010-08-19 19:05:14 +02:00
Martin Willi 8ca9e255d8 Added support for AEAD test vectors to test-vectors plugin 2010-08-19 19:05:13 +02:00
Martin Willi 08a5a708fc Include CCM/GCM algorithms in IKEv2 proposals, if supported 2010-08-19 19:05:05 +02:00
Martin Willi 3f6a2d3343 Added proposal strings for Camellia CCM algorithm identifiers 2010-08-19 19:02:34 +02:00
Martin Willi 84eb3aa456 Implemented IKEv2 keymat derivation for AEAD algorithms 2010-08-19 19:02:34 +02:00
Martin Willi 9d49f79f55 List registered AEAD algorithms in listalgs 2010-08-19 19:02:34 +02:00
Martin Willi 77b55e8a96 Added support for AEAD algorithms to crypto factory 2010-08-19 19:02:34 +02:00
Martin Willi e09a87d652 Added AEAD support to crypto tester 2010-08-19 19:02:33 +02:00
Martin Willi b519071299 Use AEAD wrapper for encryption payload encryption/decryption 2010-08-19 19:02:33 +02:00
Martin Willi 7fc4b0814f Make function to test if an encryption algorithm is an AEAD alg public 2010-08-19 19:02:16 +02:00
Martin Willi df8d0d8703 Implemented an AEAD wrapper for traditional crypter/signer transforms 2010-08-19 12:35:54 +02:00
Martin Willi 92a4540aca Migrated generator_t to INIT/METHOD macros 2010-08-19 12:35:53 +02:00
Martin Willi 0cca7427c7 Migrated encryption_payload to INIT/METHOD macros 2010-08-19 12:35:53 +02:00
Martin Willi 7c9d8e1476 Migrated message_t to INIT/METHOD macros 2010-08-19 12:35:53 +02:00
Martin Willi 5555b900b2 Migrated keymat to INIT/METHOD macros 2010-08-19 12:35:53 +02:00
Martin Willi 6c620d5ee0 Test append mode for signers verify_signature 2010-08-19 12:35:53 +02:00
Martin Willi ba31fe1fd6 Use a seperate section for each nested struct member in INIT macro 2010-08-18 12:15:03 +02:00
Martin Willi a369a5ece9 Do not free registered algorithms, plugins are responsible for unregistering 2010-08-16 17:06:28 +02:00
Martin Willi 1b0eff58e0 Implemented algorithm benchmarking during registration 2010-08-16 17:06:28 +02:00
Martin Willi e2c3b4820b Variable key length crypters use default key length if zero given 2010-08-16 17:06:27 +02:00
Martin Willi 806ec8b1d6 Properly handle zero length in chunk_alloc[a]/chunk_clone[a] 2010-08-16 17:06:27 +02:00
Martin Willi e8bf9d6e16 Migrated crypto_factory to INIT/METHOD macros 2010-08-16 17:06:27 +02:00
Martin Willi aed2bf0bd9 Migrated crypto_tester to INIT/METHOD macros 2010-08-16 17:06:27 +02:00
Martin Willi 714d0bfd37 Only include certificates with CA flag in TLS cert request 2010-08-16 09:20:19 +02:00
Martin Willi 272f0e1ae4 Added a counter mode wrapper plugin operating on existing CBC crypters 2010-08-13 19:39:59 +02:00
Martin Willi c03b0d7e6b Added support for Camellia cipher to xcbc 2010-08-13 17:11:54 +02:00
Martin Willi c7776e0aa8 Support Camellia XCBC algorithms in proposal 2010-08-13 17:11:54 +02:00
Martin Willi 5a2dbd5c37 Added private Camellia XCBC identifiers for PRFs and signers 2010-08-13 17:11:53 +02:00
Martin Willi a57b63c940 Added Camellia XCBC test vectors 2010-08-13 17:11:53 +02:00
Martin Willi 42cbe87fc7 Implemented AES/Camellia counter mode in gcrypt 2010-08-13 17:11:53 +02:00
Martin Willi 3b77c27a5b Added Camellia, AES-CTR to default IKE proposal, if supported 2010-08-13 17:11:53 +02:00
Martin Willi 1ee98dbb4a Added Camellia CTR mode proposal keywords 2010-08-13 17:11:53 +02:00
Martin Willi 3102d8669d Use IV length of a crypter instead of block size for IV calculations 2010-08-13 17:11:53 +02:00
Martin Willi f7c04c5b37 Add dedicated getter for the IV size to the crypter_t interface 2010-08-13 17:11:53 +02:00
Martin Willi 7156b951f5 Migrated xcbc plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi 5ab7d9c296 Migrated hmac plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi af403cafa1 Migrated des plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi 00c7e9af17 Migrated blowfish plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi 1fff2afe57 Migrated the aes plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi 619f9a4ef1 Migrated padlock plugin to INIT/METHOD macros 2010-08-13 17:11:53 +02:00
Martin Willi bfe4d08c20 Report the symbol name of a failed test vector 2010-08-13 17:11:53 +02:00
Martin Willi 84135e7772 Added Camellia-CTR test vectors 2010-08-13 17:11:53 +02:00
Martin Willi bc4978c786 Added AES-CTR test vectors 2010-08-13 17:11:53 +02:00
Martin Willi 123a84d3db Use an explicit plugin list instead of the unrealible "find" to build checksums 2010-08-12 16:07:24 +02:00
Martin Willi 8f01815143 Build dedicated plugin lists for each strongSwan component 2010-08-12 14:46:57 +02:00
Martin Willi 9e2c88b98d Use a m4 helper macro to build plugin lists 2010-08-12 13:14:32 +02:00
Martin Willi 8bec0f5153 Implemented Smartcard support in NetworkManager frontend 2010-08-11 16:32:04 +02:00
Martin Willi 01e4f5f32f Implemented public key encryption/private key decryption in PKCS#11 2010-08-11 12:12:37 +02:00
Martin Willi aea735ef63 Discard a packet that exceeds the receive buffer 2010-08-11 10:52:59 +02:00
Martin Willi 10a2e09b55 Added a strongswan.conf option to change socket receive buffer size 2010-08-11 10:48:17 +02:00
Martin Willi 4ec53e95f5 Double check that the OpenSSL RNG has been seeded, do so otherwise 2010-08-11 10:12:50 +02:00
Martin Willi d775af9d18 Implemented RSA en-/decryption in openssl plugin 2010-08-11 09:53:45 +02:00
Martin Willi 07d2b39123 Parse important extendedKeyUsage flags in openssl plugin 2010-08-10 18:46:31 +02:00
Martin Willi a0a8aaaf4f Parse UPN subjectAltName in openssl plugin 2010-08-10 18:46:31 +02:00
Martin Willi 772cba39e4 Parse UPN subjectAltNames in x509 plugin 2010-08-10 18:46:31 +02:00
Martin Willi 82f62a7447 Added Microsoft OID for user principal name (UPN) subjectAltNames 2010-08-10 18:46:31 +02:00
Martin Willi 3d711a68fb Added a stroke command to export cached x509 certificates to the console 2010-08-10 18:46:30 +02:00
Martin Willi a944d2092b Use bits instead of bytes for a private/public key 2010-08-10 18:46:30 +02:00
Martin Willi 33ddaaabec Added support for different encryption schemes to private/public keys 2010-08-10 18:46:30 +02:00
Martin Willi 3547a9b87d Migrated agent plugin to INIT/METHOD macros 2010-08-10 18:46:30 +02:00
Martin Willi 57202484e4 Migrated remaining classes in openssl plugin to INIT/METHOD macros 2010-08-10 18:46:30 +02:00
Martin Willi 646babd354 Migraded gcrypt plugin to INIT/METHOD macros 2010-08-10 18:46:30 +02:00
Martin Willi 876b61e132 Migrated gmp plugin to INIT/METHOD macros 2010-08-10 18:46:30 +02:00
Martin Willi 478eb66030 Fixed settings lookup if the section/key contains dots, second try 2010-08-09 14:30:16 +02:00
Martin Willi 7c03d707a5 Create a PKCS#11 session public key if we don't find one 2010-08-06 17:32:32 +02:00
Martin Willi fed9407bb1 Implemented PKCS#11 RSA public key for keys found on a token 2010-08-06 17:02:41 +02:00
Martin Willi babed73257 Export scheme_to_mechanism conversion function 2010-08-06 17:02:01 +02:00
Martin Willi a02784da5d Load certificate after enumeration 2010-08-06 17:00:23 +02:00
Martin Willi 37d2d7e158 Whitespace cleanups 2010-08-05 13:58:49 +02:00
Martin Willi e85bca7f22 Use certificate subject to get a public key of the TLS server 2010-08-05 13:13:45 +02:00