denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,799 Commits 1 Branch 0 Tags
4cdade5aaecf7c03bc68ede05877ff04eef665fc
Commit Graph
5799 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 4cdade5aae Select private key based on received cipher suites 2010-09-03 14:54:43 +02:00
Martin Willi 37a59a8fbf Support for EC curve Hello extension, EC curve fallback 2010-09-03 14:54:43 +02:00
Martin Willi 141d7f7abd Added server support for ECDHE key exchange 2010-09-03 14:54:43 +02:00
Martin Willi 5fc7297e38 Added client support for ECDHE key exchange 2010-09-03 14:54:43 +02:00
Martin Willi 691ca54db5 Added TLS EC curve type and name identifiers 2010-09-03 14:54:43 +02:00
Andreas Steffen 1972102e1e fixed typo 2010-09-03 13:30:40 +02:00
Andreas Steffen 6d71f4dcb9 updown script variable is called PLUTO_UDP_ENC 2010-09-03 12:58:10 +02:00
Tobias Brunner ddc961c369 Fixed left-/rightnexthop ipsec.conf options. 2010-09-03 11:47:42 +02:00
Martin Willi ccb65463e7 Check for queued TLS alerts after each handshake part 2010-09-03 09:33:15 +02:00
Martin Willi ed60dfa14f Added support for MODP_CUSTOM to gcrypt plugin 2010-09-03 09:33:15 +02:00
Martin Willi 42b1ac91c4 Added support for MODP_CUSTOM to openssl plugin 2010-09-03 09:33:15 +02:00
Andreas Steffen 6deeacd965 adapted debug options 2010-09-03 09:29:56 +02:00
Andreas Steffen 4cbe758cd4 adapted debug options 2010-09-03 09:27:16 +02:00
Andreas Steffen c0071bde73 removed redundant debug output 2010-09-02 22:19:37 +02:00
Andreas Steffen 25de08474b version bump to 4.5.0dr2 2010-09-02 22:19:37 +02:00
Andreas Steffen 5175adee66 optimized FreeRadius scenarios for debug output 2010-09-02 22:19:37 +02:00
Andreas Steffen 0fb2980281 added ikev2/rw-eap-tnc-radius scenario 2010-09-02 22:19:37 +02:00
Andreas Steffen c0cecc0a0e added radius init script mit increased debugging 2010-09-02 22:19:37 +02:00
Andreas Steffen f9cfb5c836 display configuration and log of FreeRadius servers 2010-09-02 22:19:37 +02:00
Martin Willi ef0a8e5892 Add DHE enabled RSA variants to the supported TLS suites 2010-09-02 19:33:08 +02:00
Martin Willi f14358a9b5 Added TLS server side support for DHE suites 2010-09-02 19:33:08 +02:00
Martin Willi da3f4a9fd0 Added TLS client side support for DHE suites 2010-09-02 19:33:08 +02:00
Martin Willi 35d9c15d5e Store a MODP group we use for each TLS suite 2010-09-02 19:33:08 +02:00
Martin Willi 08d8b9405b Added support for MODP_CUSTOM to gmp plugin 2010-09-02 19:33:08 +02:00
Martin Willi 0abd558a65 Added a MODP_CUSTOM DH group which takes g and p as constructor arguments 2010-09-02 19:33:08 +02:00
Martin Willi 06109c4717 Implemented "signature algorithm" hello extension 2010-09-02 19:33:08 +02:00
Martin Willi 731611c525 Added TLS extension identifiers 2010-09-02 19:33:08 +02:00
Martin Willi d29a82a9d4 Added generic TLS data sign/verify, hash/sig algorithm construction 2010-09-02 19:33:08 +02:00
Martin Willi 60c4b3b545 Continue with a randomized premaster if decryption failed / version mismatches 2010-09-02 19:33:08 +02:00
Tobias Brunner 1dfd6d18ff pluto: Removed unused lifetime from raw_eroute. 2010-09-02 19:04:26 +02:00
Tobias Brunner b5be105aaf pluto: Added support for statically configured reqids. 2010-09-02 19:04:25 +02:00
Tobias Brunner fe962bc788 testing: Added ikev1 xfrm mark scenarios. 2010-09-02 19:04:25 +02:00
Tobias Brunner f8edbc22c7 pluto: Make marks available in updown script. 2010-09-02 19:04:25 +02:00
Tobias Brunner 190ee00c94 pluto: Fixed comparison of connections, if marks are specified. 2010-09-02 19:04:25 +02:00
Tobias Brunner a280ba9525 pluto: Store xfrm marks on connection and use them when installing SAs and policies. 2010-09-02 19:04:25 +02:00
Tobias Brunner a0d13f42e6 starter: Some whitespace cleanup. 2010-09-02 19:04:25 +02:00
Tobias Brunner f23e7394ae pluto: Added PLUTO_UDP_ENC argument to updown script. 
This contains the remote UDP port in case of UDP encapsulated ESP.
 2010-09-02 19:04:25 +02:00
Tobias Brunner 3251294ceb pluto: Return value fixed. 2010-09-02 19:04:25 +02:00
Tobias Brunner d499bdf393 pluto: Removed bare shunt table. 2010-09-02 19:04:24 +02:00
Tobias Brunner b8bf01ddee Do not install routes for pluto. 
There are some incompatibilities with e.g. passthrough policies.
Pluto installs required source routes via updown script.
 2010-09-02 19:04:24 +02:00
Tobias Brunner 76467e030c pluto: Handle changed NAT mappings via libhydra's kernel interface. 2010-09-02 19:04:24 +02:00
Tobias Brunner a0cbce9e7c pluto: Removed no_klips flag (--noklips option). 2010-09-02 19:04:24 +02:00
Tobias Brunner eeca1b0466 pluto: Removed references to KLIPS from documentation, log messages and comments. 2010-09-02 19:04:24 +02:00
Tobias Brunner 6374671110 pluto: Added --debug-kernel as alias for --debug-klips. 2010-09-02 19:04:24 +02:00
Tobias Brunner ebdbf28a4a pluto: Replaced DBG_KLIPS with DBG_KERNEL. 2010-09-02 19:04:24 +02:00
Tobias Brunner 8dade8e6eb pluto: Removed the KLIPS preprocessor flag. 2010-09-02 19:04:24 +02:00
Tobias Brunner fc06e34e46 pluto: Removed unneeded kernel abstractions. 2010-09-02 19:04:23 +02:00
Tobias Brunner 36ff473016 pluto: Completely removed struct kernel_ops. 2010-09-02 19:04:23 +02:00
Tobias Brunner 296972aeaf pluto: Refactored PF_KEY capabilities registration. 
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 4f898afc22 pluto: Removed unneeded functions from PF_KEY interface. 
We still use the algorithm registration.
 2010-09-02 19:04:23 +02:00