Andreas Steffen
663fedbe44
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
2008-02-04 14:52:06 +00:00
Martin Willi
3b1692c058
use identifiers in EAP_SUCCESS/EAP_FAILURE payloads
2008-02-04 11:43:10 +00:00
Martin Willi
b8461a37db
fixed EAP-MD5 to accept Name attribute in challenge
2007-12-18 10:44:44 +00:00
Martin Willi
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
Martin Willi
3243ac6d5e
fixed actual ID length when AT_IDENTITY gets padded
2007-12-13 14:39:38 +00:00
Martin Willi
26e2467692
ported EAP-AKA branch into trunk
2007-12-13 10:54:29 +00:00
Martin Willi
4b403e7672
merged EAP-MD5 into trunk
2007-12-12 14:29:10 +00:00
Tobias Brunner
278396b6da
typos
2007-09-27 10:36:03 +00:00
Andreas Steffen
794d2526b4
removed unused chunk variable
2007-09-12 07:54:56 +00:00
Andreas Steffen
1cb2cb622e
overwrite shared_key with random bytes before freeing it
2007-09-11 21:06:46 +00:00
Andreas Steffen
f0c156fbc9
replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material
2007-09-11 10:18:25 +00:00
Andreas Steffen
c045d90a8e
corrected debug output
2007-08-10 11:23:45 +00:00
Andreas Steffen
6e04f25313
support of CA-based ipsec policies
2007-05-18 12:25:37 +00:00
Andreas Steffen
889c2ded1c
output of eap_type_names requires %N format
2007-05-18 10:14:01 +00:00
Andreas Steffen
9b6591e796
authentication failure is handled in ike_auth.c
2007-05-15 19:05:26 +00:00
Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
0706c39cda
added support for EAP methods not establishing an MSK
2007-04-19 12:37:48 +00:00
Martin Willi
d3e1da2378
proper notification handling
2007-04-10 15:00:51 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Martin Willi
4deb89485c
removed send_queue, handled internally in sender_t know
...
do header parsing in receiver, ready for cookie integration
2007-03-28 13:34:02 +00:00
Martin Willi
9179ac9667
merged changes from eap-aka trunk
2007-03-28 07:32:54 +00:00
Martin Willi
b34f86f545
giving up EAP-SIM authentication after 3 failed challenges
2007-03-27 06:24:17 +00:00
Martin Willi
ccf96c7e43
EAP-SIM cleanups
2007-03-19 09:59:17 +00:00
Martin Willi
d560c849e3
added --with-sim-reader option to configure script
...
some cleanups in eap_sim
2007-03-14 15:39:45 +00:00
Martin Willi
c105696d1c
removed dublicated code in eap_authenticator
2007-03-14 15:25:00 +00:00
Martin Willi
1e93d77153
version number selection fix
...
some cleanups
2007-03-14 11:20:34 +00:00
Martin Willi
b0f24449dd
added EAP-SIM authentication
...
client side only
uses an external SIM reader library specified with SIM_READER_LIB
untested
2007-03-13 15:01:02 +00:00
Martin Willi
3bc0b1a88d
added generic EAP_IDENTITY client implementation using peers IKEv2 ID
2007-03-13 14:54:24 +00:00
Martin Willi
cda642a152
removed eap aka module due nda
2007-02-13 15:19:30 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi
e691a5c493
some fixes for doxygen
2006-10-31 15:24:08 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Andreas Steffen
914eea92d7
moved (myself) in log output
2006-10-31 06:31:21 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Andreas Steffen