Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Martin Willi
cd37e13133
properly terminate EAP authentication if EAP method fails
2009-05-20 09:24:18 +02:00
Martin Willi
25f2d52f30
Fixed EAP authentication regression
...
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
2009-05-11 10:42:52 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Tobias Brunner
3a80181b61
missed strcaseeq added
2009-04-17 10:52:41 +00:00
Andreas Steffen
63176bbcb0
moved strcaseeq() macro from constants.h to utils.h
2009-04-17 09:52:49 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Andreas Steffen
fda8404abc
cosmetics
2009-03-26 13:58:17 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Martin Willi
4a6b84a934
reintegrated eap-radius branch into trunk
2009-03-24 10:24:58 +00:00
Tobias Brunner
f98cdf7a47
adding plugin for EAP-MS-CHAPv2
2009-02-18 19:57:15 +00:00
Martin Willi
d0eee69822
reset pointer for a clean destruction
2008-12-04 10:09:21 +00:00
Martin Willi
3ac5a0db8c
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
2008-11-05 11:29:56 +00:00
Martin Willi
6a4ff35cc4
moved key derivation and management into keymat object
...
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi
79a878466c
reintegrated two-sim branch providing SIM card plugin API
2008-10-10 08:36:01 +00:00
Andreas Steffen
a44d02627f
cosmetics
2008-08-26 19:54:47 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Martin Willi
1caa265c61
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
2008-08-21 12:10:07 +00:00
Andreas Steffen
7d4bb52073
make config_auth_method_t backward compatible to existing sql templates
2008-06-10 20:31:53 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Martin Willi
d20e5c6ab5
replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification
2008-03-27 19:07:23 +00:00
Andreas Steffen
ae8715f956
attempt to achieve consistent debugging output
2008-03-19 12:06:38 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Andreas Steffen
663fedbe44
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
2008-02-04 14:52:06 +00:00
Martin Willi
3b1692c058
use identifiers in EAP_SUCCESS/EAP_FAILURE payloads
2008-02-04 11:43:10 +00:00
Martin Willi
b8461a37db
fixed EAP-MD5 to accept Name attribute in challenge
2007-12-18 10:44:44 +00:00
Martin Willi
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
Martin Willi
3243ac6d5e
fixed actual ID length when AT_IDENTITY gets padded
2007-12-13 14:39:38 +00:00
Martin Willi
26e2467692
ported EAP-AKA branch into trunk
2007-12-13 10:54:29 +00:00
Martin Willi
4b403e7672
merged EAP-MD5 into trunk
2007-12-12 14:29:10 +00:00
Tobias Brunner
278396b6da
typos
2007-09-27 10:36:03 +00:00
Andreas Steffen
794d2526b4
removed unused chunk variable
2007-09-12 07:54:56 +00:00
Andreas Steffen
1cb2cb622e
overwrite shared_key with random bytes before freeing it
2007-09-11 21:06:46 +00:00
Andreas Steffen
f0c156fbc9
replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material
2007-09-11 10:18:25 +00:00
Andreas Steffen
c045d90a8e
corrected debug output
2007-08-10 11:23:45 +00:00
Andreas Steffen
6e04f25313
support of CA-based ipsec policies
2007-05-18 12:25:37 +00:00
Andreas Steffen
889c2ded1c
output of eap_type_names requires %N format
2007-05-18 10:14:01 +00:00
Andreas Steffen
9b6591e796
authentication failure is handled in ike_auth.c
2007-05-15 19:05:26 +00:00
Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
0706c39cda
added support for EAP methods not establishing an MSK
2007-04-19 12:37:48 +00:00
Martin Willi
d3e1da2378
proper notification handling
2007-04-10 15:00:51 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Martin Willi
4deb89485c
removed send_queue, handled internally in sender_t know
...
do header parsing in receiver, ready for cookie integration
2007-03-28 13:34:02 +00:00
Martin Willi
9179ac9667
merged changes from eap-aka trunk
2007-03-28 07:32:54 +00:00
Martin Willi
b34f86f545
giving up EAP-SIM authentication after 3 failed challenges
2007-03-27 06:24:17 +00:00
Martin Willi
ccf96c7e43
EAP-SIM cleanups
2007-03-19 09:59:17 +00:00
Martin Willi
d560c849e3
added --with-sim-reader option to configure script
...
some cleanups in eap_sim
2007-03-14 15:39:45 +00:00
Martin Willi
c105696d1c
removed dublicated code in eap_authenticator
2007-03-14 15:25:00 +00:00
Tobias Brunner