Commit Graph
101 Commits
Author SHA1 Message Date
Tobias Brunner 4c57c63062 Added possibility to register custom proposal keywords
Keyword lookup and registration are handled via the new lib->proposal object.
2012-09-13 15:44:46 +02:00
Tobias Brunner 995875210a Removed len argument from proposal_get_token()
Also use enumerators instead of lexparser.h to parse proposal strings.
2012-09-13 15:44:01 +02:00
Martin Willi 497ce2cf51 Support multiple address pools configured on a peer_cfg 2012-08-30 16:43:42 +02:00
Martin Willi 101d26babe Support multiple virtual IPs on peer_cfg and ike_sa classes 2012-08-30 16:43:42 +02:00
Martin Willi 71c41410fc Initialize conftest with the same plugins as charon 2012-07-16 14:53:37 +02:00
Martin Willi a6733d8e85 Remove unused replay variable in conftests seq number reset hook 2012-07-16 14:53:37 +02:00
Martin Willi 172fdf8bd1 Update conftest to use splitted listener/logger interfaces 2012-07-16 14:53:37 +02:00
Martin Willi bb1e0c59e1 Add a return value to keymat_v2_t.get_auth_octets() 2012-07-16 14:53:34 +02:00
Andreas Steffen 1d315bddd3 implemented the right|leftallowany feature 2012-06-08 21:24:41 +02:00
Andreas Steffen 80c5b17d1a make IKEv1 DPD timeout configurable in charon 2012-05-17 19:49:22 +02:00
Tobias Brunner 18758e3d2e Store the name of the binary using libcharon to enable specific settings. 2012-05-03 13:57:04 +02:00
Martin Willi 5aef6bd0f3 Accept NULL auth_cfg_t passed to credential_manager_t.get_private() 2012-03-20 17:31:39 +01:00
Martin Willi 47b8f6ef4b Invoke bus_t.message hook twice, once plain and parsed, once encoded and encrypted 2012-03-20 17:31:37 +01:00
Martin Willi 5ce59d4c06 Added an aggressive mode peer_cfg option 2012-03-20 17:31:34 +01:00
Martin Willi 15a682f4c2 Separated libcharon/sa directory with ikev1 and ikev2 subfolders 2012-03-20 17:31:26 +01:00
Martin Willi 9ad5b8fa95 Cleanup CERT payload constructors 2012-03-20 17:31:13 +01:00
Martin Willi e174e0d445 Added not-yet used sa_payload parameters used in IKEv1 2012-03-20 17:30:52 +01:00
Tobias Brunner d6cec44b24 Fixed conftests after extending CERT payload. 2012-03-20 17:30:50 +01:00
Tobias Brunner a0563846b0 Moved version specific keymat functions to specific interfaces. 2012-03-20 17:30:45 +01:00
Martin Willi c311d22d0f Don't clone chunk in message.get_packet_data 2012-03-20 17:30:44 +01:00
Martin Willi 04ee2b7fed Added IKEv1 support to notify payload 2012-03-20 17:30:43 +01:00
Martin Willi 38fb67fbf1 Add a payload.get_header_length() method, remove header length definitions 2012-03-20 17:30:42 +01:00
Martin Willi e9b55b8325 Simplify signature of get_encoding_rules(), make all rules static 2012-03-20 17:30:42 +01:00
Tobias Brunner f7a8fcedc0 Use enum to define IKE version on peer_cfg_t.
Replaced all those magic numbers.
2012-03-20 17:30:41 +01:00
Tobias Brunner 4ed52db2bb Allow creation of message_t objects for IKEv1 packets. 2012-03-20 17:30:40 +01:00
Martin Willi b0b9d18593 Extend sa_payload for IKEv1 support 2012-03-20 17:30:40 +01:00
Martin Willi 8e3f14baab bus->listen() and the controller wrappers accept a timeout to wait for callbacks 2011-08-26 10:44:25 +02:00
Tobias Brunner 4bbce1ef37 Replaced ike_sa_t.create_child_sa_iterator with enumerator.
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
2011-07-06 09:43:45 +02:00
Martin Willi 69c3eca0e9 Added a non-blocking, skipping variant of IKE_SA enumerator 2011-05-16 15:24:13 +02:00
Martin Willi 32973044b0 Added a merge option to optionally reload files instead of merging them 2011-04-15 10:07:13 +02:00
Martin Willi 2a277867be Show full blown traffic selector in log_ts hook 2011-04-14 09:21:58 +02:00
Tobias Brunner 84545f6e7c Some typos fixed. 2011-02-07 11:39:41 +01:00
Andreas Steffen a226307f13 suiteb directory hasn't been moved to Master yet 2011-01-08 02:17:42 +01:00
Martin Willi 5b0e6c593a Added option to use a different key when rebuilding AUTH 2011-01-05 16:46:07 +01:00
Martin Willi 97d30f0010 Added support for OCSP responder URIs to conftest 2011-01-05 16:46:07 +01:00
Martin Willi 968e5e665b Added support for CDPs to conftest 2011-01-05 16:46:06 +01:00
Martin Willi 06e6535151 Updated conftest README 2011-01-05 16:46:06 +01:00
Martin Willi dbec133eb8 Added support for custom file loggers, loglevel settings 2011-01-05 16:46:06 +01:00
Martin Willi 98ef286580 Merge test config into suite config, instead of having two distinct configs 2011-01-05 16:46:04 +01:00
Martin Willi 58be32e88e Added a cert_policy option to conftest configurations 2011-01-05 16:46:03 +01:00
Martin Willi 0beb1d6fbb Added a hook to reset ESP sequence numbers 2011-01-05 16:46:00 +01:00
Martin Willi 48ef001133 Accept a suffix to differentiate x509, crl, ecdsa and rsa files 2011-01-05 16:45:59 +01:00
Martin Willi c7f7a0ba06 Use strncaseeq instead of strncasecmp 2011-01-05 16:45:59 +01:00
Martin Willi 04a1279f91 Added tfc_padding option, changes signature to master changes 2011-01-05 16:45:59 +01:00
Martin Willi 9992cb1c10 Generate payload to rebuild_auth, works with injected unknown payloads 2011-01-05 16:45:55 +01:00
Martin Willi 5c95bf7b93 Move rebuild_auth functionality to a standalone hook
This reverts commit 3c12b239fd55aa36c59eb60224d27af8b8d915d1.
2011-01-05 16:45:54 +01:00
Martin Willi a73e040cd5 Added key strength constraints support to conftest 2011-01-05 16:45:53 +01:00
Martin Willi 586070d2ce Implemented hook to log traffic selectors 2011-01-05 16:45:53 +01:00
Martin Willi 6bd3a1c220 The set_reserved() hook rebuilds AUTH if it mangles ID payload fields 2011-01-05 16:45:53 +01:00
Martin Willi 5f15faebc8 Include the used reserved bytes from ID payloads in AUTH calculation 2011-01-05 16:45:53 +01:00