 Martin Willi
|
bcfb0f4096
|
Extended nonce payload for IKEv1 support
|
2012-03-20 17:30:42 +01:00 |
|
|
Martin Willi
|
717333da98
|
Add fixed PSK authentication method to IKEv1 proposal for now
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
3a470f3035
|
Added limiting encoding of IKEv1 SA payloads
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
2bcd51b389
|
Added SA payload IKEv1 encoding types to generator
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
bce8d3be11
|
Don't set IKEv2 only header flags when using IKEv1
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
da8cadbd93
|
Set default IKE header initiator flag in IKEv2 only
|
2012-03-20 17:30:41 +01:00 |
|
|
Tobias Brunner
|
354ac9579f
|
Compile error fixed.
|
2012-03-20 17:30:41 +01:00 |
|
|
Tobias Brunner
|
7f56cf1a65
|
Message parsing slightly refactored, allows parsing of unencrypted IKEv1 messages.
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
4ed52db2bb
|
Allow creation of message_t objects for IKEv1 packets.
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
8a2d079d78
|
Certificate request payloads can be sent in pretty much any IKEv1 message.
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
1bf2971ff2
|
Implemented limited payload parsing for IKEv1 SA payloads
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
3f6d1b13a7
|
Added additional IKEv1 payload and encoding identifiers
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
b0b9d18593
|
Extend sa_payload for IKEv1 support
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
8f3aea2f77
|
Message rules for IKEv1 INFORMATIONAL exchange added.
Since INFORMATIONAL "exchanges" are actually unidirectionally sent
message we don't have any responder rules.
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
130c9a54c2
|
Message rules for IKEv1 AGGRESSIVE exchange added.
These are basically the same as for ID_PROT but no payloads are expected
to be encrypted (at least if using PSK or signatures for authentication).
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
6ba70ba8dd
|
Message rules for IKEv1 ID_PROT exchange added.
These rules are quite broad and cover main mode with at least PSK and
signature based authentication.
|
2012-03-20 17:30:40 +01:00 |
|
|
Tobias Brunner
|
fdb8421f36
|
Typo fixed.
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
837298c590
|
Use vendor id payload for IKEv1 payloads, too
|
2012-03-20 17:30:39 +01:00 |
|
|
Martin Willi
|
ecf854a00b
|
Added IKEv1 payload identifiers to "known" payload list
|
2012-03-20 17:30:39 +01:00 |
|
|
Martin Willi
|
e33b41e7b0
|
Added IKEv1 payload identifiers
|
2012-03-20 17:30:39 +01:00 |
|
|
Martin Willi
|
526b5afb45
|
Extended IKE header for IKEv1 support
|
2012-03-20 17:30:39 +01:00 |
|
|
Martin Willi
|
007d5b9218
|
Defined a private status notify to transport arbitrary RADIUS attributes
|
2012-03-05 18:06:14 +01:00 |
|
|
Martin Willi
|
b2e493ab58
|
Fixed proposal numbering check in sa_payload
|
2011-11-21 09:12:00 +01:00 |
|
|
Tobias Brunner
|
055a823d08
|
Made create_endpoint_notify_create() private.
|
2011-10-04 15:59:20 +02:00 |
|
|
Tobias Brunner
|
13e5a32a1e
|
Migrated parser_t to INIT/METHOD macros.
|
2011-10-04 11:50:22 +02:00 |
|
|
Tobias Brunner
|
4459ae8cf5
|
Fixed compiler warnings for endpoint_notify_t.
|
2011-10-04 10:17:36 +02:00 |
|
|
Andreas Steffen
|
6b44a99f9e
|
Migrated endpoint_notify to INIT/METHOD macros
|
2011-10-03 21:30:49 +02:00 |
|
|
Andreas Steffen
|
a022f0863d
|
increased message buffer to cope with NCP's innumerable UNITY Configuration Payloads
|
2011-08-16 23:22:20 +02:00 |
|
|
Tobias Brunner
|
7ebf021d37
|
typos: initator->initiator, authenticaion->authentication.
|
2011-08-15 16:31:04 +02:00 |
|
|
Martin Willi
|
4c199e6f81
|
Add a non-clonig variant of eap_payload_create_data
|
2011-08-08 13:36:55 +02:00 |
|
|
Martin Willi
|
61e13630f8
|
Show error code of Microsoft specific error notify
|
2011-08-03 12:01:15 +02:00 |
|
|
Martin Willi
|
06912a5eb4
|
Added Microsoft specific error notify
|
2011-08-03 12:00:50 +02:00 |
|
|
Tobias Brunner
|
f3bb1bd039
|
Fixed common misspellings.
Mostly found by 'codespell'.
|
2011-07-20 16:14:10 +02:00 |
|
|
Andreas Steffen
|
152d7b373d
|
added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723
|
2011-07-15 07:48:36 +02:00 |
|
|
Andreas Steffen
|
895ac29719
|
fixed typo
|
2011-07-14 10:53:37 +02:00 |
|
|
Andreas Steffen
|
9f181e7fd5
|
updated IANA IKEv2 Notify Message Types
|
2011-07-14 10:51:24 +02:00 |
|
|
Tobias Brunner
|
a07568cf6a
|
Use has_more in decrypt_payloads instead of calling enumerate twice.
|
2011-07-06 09:43:46 +02:00 |
|
|
Tobias Brunner
|
e26304348c
|
Replaced simple iterator usages.
|
2011-07-06 09:43:45 +02:00 |
|
|
Martin Willi
|
513701f41b
|
Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable
|
2011-05-19 15:47:40 +02:00 |
|
|
Martin Willi
|
6d41218ced
|
Be a little more liberal in checking maximum payload count
|
2011-04-20 15:15:00 +02:00 |
|
|
Martin Willi
|
f7aca91603
|
Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs
|
2011-04-20 15:04:02 +02:00 |
|
|
Tobias Brunner
|
35fe7f8cbd
|
Compiler warning fixed.
|
2011-02-10 16:49:42 +01:00 |
|
|
Martin Willi
|
0700c153e7
|
Fixed function parameter description
|
2011-02-08 10:14:56 +01:00 |
|
|
Tobias Brunner
|
84545f6e7c
|
Some typos fixed.
|
2011-02-07 11:39:41 +01:00 |
|
|
Martin Willi
|
fe79cd4257
|
Accept non-encrypted INFORMATIONALs for ME connectivity checks
|
2011-02-01 09:47:36 +01:00 |
|
|
Martin Willi
|
3a89b3c52f
|
Provide CRLs received in CERT payloads to trustchain verification
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
54f2bdd656
|
Added substructure enumerators to sa_payload, proposal_substructure
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
9ca5d0280e
|
Moved check if packet already encoded to ike_sa, avoids message() hook invocation twice
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
2813be18f5
|
Added a message method to set the "higher version supported" flag
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
166a2a45d9
|
Added reserved bit mangling wrapper functions to message
|
2011-01-05 16:45:51 +01:00 |
|