 Martin Willi
|
4eee34ac49
|
Added keymat_v1_t.get_hash() to calculate authentication hashes
|
2012-03-20 17:30:46 +01:00 |
|
|
Martin Willi
|
059d694a6b
|
Derive IKE keys as IKEv1 initiator, too
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
b6f0029497
|
Added IV generation to keymat_v1_t.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
0463674971
|
Use key derivation in IKEv1 main mode (PSK authentication).
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
aadb9e8355
|
Added a simple AEAD wrapper for IKEv1 encryption/decryption.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
b05d91edd7
|
Added IKEv1 key derivation with support for AUTH_CLASS_PSK.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
3d59c5c382
|
Update cached hosts on ike_sa_t when processing IKEv1 messages.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
0cec72df40
|
Provide keymat_t to message_t to encrypt/decrypt data.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
a0563846b0
|
Moved version specific keymat functions to specific interfaces.
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
a09972df2b
|
Added a generic TASK_ prefix to all task types
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
744c080153
|
Initiate and respond to quick mode task (stub)
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
9124e3425b
|
Fixed reference counting bugs in main mode
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
73aaf76be3
|
Implemented basic message id handling for IKEv1
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
2b04aa46ea
|
Added a quick mode task stub
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
c311d22d0f
|
Don't clone chunk in message.get_packet_data
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
31fc14e394
|
Verify IKEv1 nonce size, send 32 byte nonces
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
6c2b7d4ed9
|
Partially implemented third main mode exchange (identities)
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
26b55dc6c8
|
Implemented first two exchanges of Main Mode as initiator
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
9cc63d2cf0
|
Added enum name for MAIN_MODE task
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
558f79f76d
|
Added missing task manager factory declaration
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
cf6cd5aa4b
|
Added IKEv1 support to delete payload
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
04ee2b7fed
|
Added IKEv1 support to notify payload
|
2012-03-20 17:30:43 +01:00 |
|
|
Tobias Brunner
|
043ed1b346
|
Memory leak fixed.
|
2012-03-20 17:30:43 +01:00 |
|
|
Tobias Brunner
|
273f2f8054
|
Added factory function to create task_manager_t implementations.
|
2012-03-20 17:30:43 +01:00 |
|
|
Tobias Brunner
|
4b64a1a17d
|
Added factory function to create keymat_t implementations.
|
2012-03-20 17:30:43 +01:00 |
|
|
Tobias Brunner
|
0b611540ef
|
Store IKE version of an SA on ike_sa_t.
|
2012-03-20 17:30:43 +01:00 |
|
|
Tobias Brunner
|
0fc9acdd23
|
Added stub for IKEv1 keymat_t implementation.
|
2012-03-20 17:30:42 +01:00 |
|
|
Tobias Brunner
|
6ab936f046
|
Use keymat_t as common interface, renamed current implementation to _v2.
|
2012-03-20 17:30:42 +01:00 |
|
|
Martin Willi
|
f34b452d56
|
Implement second exchange in IKEv1 main mode
|
2012-03-20 17:30:42 +01:00 |
|
|
Martin Willi
|
683d83ed3e
|
Extended KE payload for IKEv1 support
|
2012-03-20 17:30:42 +01:00 |
|
|
Martin Willi
|
bcfb0f4096
|
Extended nonce payload for IKEv1 support
|
2012-03-20 17:30:42 +01:00 |
|
|
Martin Willi
|
2e897fe30a
|
Handle first exchange in IKEv1 main mode as responder
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
c73c832c5a
|
Added an IKEv1 main mode task stub
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
4a09d9ee7f
|
Added a stub for a IKEv1 task manager
|
2012-03-20 17:30:41 +01:00 |
|
|
Martin Willi
|
e69f7dcddf
|
Use task manager as generic interface, renamed implementation to _v2.
|
2012-03-20 17:30:41 +01:00 |
|
|
Tobias Brunner
|
3238faf8e6
|
Fix init message arrival check.
|
2012-03-20 17:30:41 +01:00 |
|
|
Tobias Brunner
|
4ed52db2bb
|
Allow creation of message_t objects for IKEv1 packets.
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
b0b9d18593
|
Extend sa_payload for IKEv1 support
|
2012-03-20 17:30:40 +01:00 |
|
|
Martin Willi
|
837298c590
|
Use vendor id payload for IKEv1 payloads, too
|
2012-03-20 17:30:39 +01:00 |
|
|
Martin Willi
|
2fc986182f
|
Handle IKEv1 messages in managers checkout_by_message
|
2012-03-20 17:30:39 +01:00 |
|
|
Tobias Brunner
|
72b2811204
|
Simplified some route lookups now that we store all peer addresses in a list.
|
2012-03-09 10:22:21 +01:00 |
|
|
Tobias Brunner
|
94bbc60256
|
Renamed list of additional peer addresses as it now stores all known addresses.
|
2012-03-09 10:17:42 +01:00 |
|
|
Tobias Brunner
|
2fe624cca9
|
Store the peer's current address as additional known address on the IKE_SA.
This allows to switch back to the original address after switching to
any of the additional addresses.
|
2012-03-09 10:08:41 +01:00 |
|
|
Martin Willi
|
4d7a2128b6
|
Re-resolve hosts on additional keyingtries
|
2012-03-06 16:05:28 +01:00 |
|
|
Martin Willi
|
4cd176d525
|
Invoke ike_updown hook on authentication failure not before response sent
|
2012-03-05 18:08:04 +01:00 |
|
|
Martin Willi
|
fbaf5cd213
|
Be a little more verbose before starting IKE_SA reauthentication
|
2012-03-05 18:06:14 +01:00 |
|
|
Martin Willi
|
a07b69734b
|
Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth actively
|
2012-03-05 18:06:14 +01:00 |
|
|
Martin Willi
|
bdcf441703
|
Set hard timeouts when setting a lifetime
|
2012-03-05 18:06:13 +01:00 |
|
|
Martin Willi
|
e9fcf1c6cc
|
Fix IKE_SA timeout debug output on 64bit platforms
|
2012-03-05 18:06:13 +01:00 |
|
|
Tobias Brunner
|
686cfd4e34
|
Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595.
This requires a Linux kernel >= 2.6.33.
|
2012-02-27 14:31:19 +01:00 |
|