denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,268 Commits 1 Branch 0 Tags
690d5aed59afcd582642829230424f80ae2be9aa
Commit Graph
6268 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 690d5aed59 disable AEAD crypto algorithm if no key size is supported 2010-12-25 16:14:55 +01:00
Andreas Steffen d733a3babb disable crypto algorithm if no key size is supported 2010-12-25 16:11:50 +01:00
Andreas Steffen c6a043fad0 log if an AEAD algorithm does not support a given key size 2010-12-25 15:53:15 +01:00
Andreas Steffen 90288c76f8 log if a crypto algorithm does not support a given key size 2010-12-25 15:49:29 +01:00
Andreas Steffen 16b6606e5f wrap list of IKEv2 algorithms after 120 characters per line 2010-12-24 17:29:51 +01:00
Andreas Steffen cb6be85cfe Migrated stroke_list_t to INIT/METHOD macros 2010-12-24 14:29:09 +01:00
Andreas Steffen d77c6c49a9 printed plugin names have a hyphen 2010-12-24 05:53:27 +01:00
Martin Willi 33bfdf6f37 Fixed public key construction from PKCS#11 private key 2010-12-23 10:29:01 +01:00
Andreas Steffen 905ab99fc1 eliminated whitespace 2010-12-21 17:51:27 +01:00
Andreas Steffen cf16a29dac Migrated child_create_t to INIT/METHOD macros 2010-12-21 17:49:07 +01:00
Martin Willi 78a547c999 Added NEWS for af-alg plugin 2010-12-20 10:22:14 +01:00
Martin Willi 23a737eb29 Probe for supported AF_ALG algorithms, register dynamically 2010-12-20 10:09:20 +01:00
Martin Willi 4ee5d97d57 Register algorithms with dependencies only if dependency available 2010-12-20 10:00:39 +01:00
Martin Willi d214ebdf82 Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish) 2010-12-20 09:52:02 +01:00
Martin Willi 533151692f Implemented PRFs using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 06eb35efb0 Use the AF_ALG wrapper in hasher, crypter and signer 2010-12-20 09:52:02 +01:00
Martin Willi 1b5de7ce3b Use a generic AF_ALG wrapper for common operations 2010-12-20 09:52:02 +01:00
Martin Willi a5c973b955 Implemented crypter on top of AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi e75e1c9473 Implemented signer interface using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 6f08911321 Implemented hasher based on AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi fd67d39e93 Added Linux AF_ALG header 2010-12-20 09:52:02 +01:00
Martin Willi 71c87e3483 Added plugin stub for AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi e44817df6f Added NEWS about TFC padding 2010-12-20 09:51:33 +01:00
Martin Willi 6c302616f1 Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality 2010-12-20 09:45:39 +01:00
Martin Willi 55df72e6d5 Do not use TFC padding if peer does not support ESPv3 2010-12-20 09:45:39 +01:00
Martin Willi 37788b1d06 Added a TFC padding option to child_cfg 2010-12-20 09:45:39 +01:00
Martin Willi d86bb6ef4d Implemented Traffic Flow Confidentiality padding in kernel_interface 2010-12-20 09:45:39 +01:00
Andreas Steffen 814873a356 version bump to 4.5.1dr4 2010-12-19 09:46:59 +01:00
Andreas Steffen f10e72341c cast enumerated algorithm type as int 2010-12-18 20:24:53 +01:00
Andreas Steffen 840e7044e2 updated NEWS with new ipsec listalgs feature 2010-12-18 16:44:29 +01:00
Andreas Steffen 5932f41fcc trace back crypto algorithms to the plugins that registered them 2010-12-18 16:31:12 +01:00
Tobias Brunner ae09bc62bc Added news about changes regarding strongswan.conf. 2010-12-17 17:32:14 +01:00
Tobias Brunner 5889e864a0 Moved "Reading values" section, typo fixed. 2010-12-17 17:31:42 +01:00
Andreas Steffen c0cadd7182 version bump to 4.5.1dr3 2010-12-15 08:56:32 +01:00
Jiri Bohac 19b7f763b3 Install selectors on transport mode IPsec SAs. 
This fixes several test cases in IKEv2_Self_Test (part of the IPv6 Ready
Logo Program) which is required for USGv6 certification, namely:

  - IKEv2.EN.I.1.1.7.1, IKEv2.EN.I.1.1.7.1: Narrowing the range of members
    of the set of traffic selectors
  - IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selector

When traffic selectors of a triggered SA are narrowed by the responder, the
installed policy and the broader trap policy share the same reqid.  Without
selectors on the IPsec SA packets matching the trap policy, but not the
narrowed policy, would incorrectly be handled by that IPsec SA.  Since only
one selector can be specified per IPsec SA, there is currently no solution
for tunnel mode SAs.
 2010-12-13 15:28:40 +01:00
Andreas Steffen e27554144a increase sleep time in mediation scenarios 2010-12-12 21:54:44 +01:00
Andreas Steffen 7883e7ce33 fixed bug in mem_cred.c:add_crl() 2010-12-12 21:34:27 +01:00
Andreas Steffen 836d9a795b reverted Connection ID to capital letters 2010-12-12 12:55:14 +01:00
Andreas Steffen dc1b2eb2e8 fixed a bug in enum_from_name() function 2010-12-12 12:54:36 +01:00
Andreas Steffen 458e7779a8 reorganized ikev2/rw-eap-tnc scenarios 2010-12-12 12:51:14 +01:00
Andreas Steffen 146e9123a2 added the ikev2/rw-eap-tnc-20 scenario 2010-12-12 10:47:16 +01:00
Andreas Steffen 1b7e081bfa NEWS for the 4.5.1dr2 release 2010-12-12 10:46:43 +01:00
Andreas Steffen c2e625514d some more cosmetics 2010-12-12 10:19:54 +01:00
Andreas Steffen 41216e6518 final cosmetics in PB-TNC debug output 2010-12-12 10:17:43 +01:00
Andreas Steffen 54eb669dd5 implemented PB-TNC message parsing checks 2010-12-12 00:42:31 +01:00
Andreas Steffen 3a4695dc5e some code optimizations 2010-12-11 00:52:53 +01:00
Andreas Steffen 781730b86a support handshake retry requests 2010-12-10 23:41:12 +01:00
Andreas Steffen 4ca368d223 the PB-TNC protocol is working 2010-12-10 23:21:13 +01:00
Andreas Steffen 512d2e045f refactored message handling 2010-12-10 17:09:21 +01:00
Andreas Steffen af1e3ff567 do not accept results and recommendation messages from clients 2010-12-10 17:04:11 +01:00