Andreas Steffen
be1585c587
log received DH groups and PRFs if no common proposal is found
2008-05-22 14:18:44 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Andreas Steffen
8bbb212f3a
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
2008-05-20 21:54:33 +00:00
Tobias Brunner
68ac3b44d1
fixed a bug introduced in [3973]
2008-05-19 08:48:44 +00:00
Andreas Steffen
15c508c708
ccm and gcm icv_sizes are accepted both in bits and octets
2008-05-17 21:51:47 +00:00
Tobias Brunner
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
2008-05-16 13:27:21 +00:00
Martin Willi
240e727fde
renamed PRF_AES128_CBC to PRF_AES128_XCBC
2008-05-08 12:43:27 +00:00
Martin Willi
27d04e055d
implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
...
supporting ike=...-aesxcbc-... in ipsec.conf
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
1fa9bdc4fb
added compatibility names (pluto) for sha2 algorithms (sha2_256, ...)
2007-05-25 05:44:53 +00:00
Martin Willi
c80e8ba11a
added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20)
2007-04-23 13:00:20 +00:00
Martin Willi
1fd5383e61
added PDF support for CHILD_SAs
...
support for INVALID_KE_PAYLOAD negotiation for rekeying
2007-04-19 08:02:19 +00:00
Martin Willi
7cec30ad8d
added AES-192/256 proposals to IKE
2007-03-13 14:55:03 +00:00
Martin Willi
069f01cfef
removed SHA2 kernel proposals from default, the kernel doesn't support them yet
2007-03-08 15:18:51 +00:00
Martin Willi
9aa20fdae8
added SHA2 MAC and PRF to default proposal
2007-03-08 00:16:33 +00:00
Martin Willi
6e1be42744
some cleanups
...
not assigning %any virtual IPs to peer anymore
2007-03-05 22:07:36 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Martin Willi
7995489a6d
added support for NULL encryption in ESP
2007-02-08 13:54:42 +00:00
Martin Willi
9425da1816
include NO_EXT_SEQUENCE_NUMBER in default proposal
2007-02-08 13:31:31 +00:00
Martin Willi
191a26a6a7
removed deprecated iterator methods (has_next & current)
...
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi
55bbff11ec
linked list cleanups
...
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
2006-10-24 08:46:17 +00:00
Martin Willi
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi
b5cac6684d
added copyright notice to sha2_hasher
...
included SHA2 in build process
2006-09-19 14:54:01 +00:00
Martin Willi
462129d332
added support for 3DES encryption algorithm in IKE
2006-09-19 11:18:35 +00:00
Martin Willi
3dd3c5f39e
redesigned IKE_SA using a transaction mechanism:
...
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
2006-07-05 10:53:20 +00:00
Martin Willi
c095388f7f
added support for "ike" and "esp" keywords
...
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
2006-06-15 11:09:11 +00:00
Martin Willi
b543bef50c
improved kernel interface logging
2006-06-09 08:41:41 +00:00
Martin Willi
5238c9afef
fixed compile warnings when using -Wall
...
further CHILD_SA rekeying work done:
creation of a new CHILD_SA on a expire from a kernel works
delete of old CHILD_SA still missing
some issues when both initiate rekeing
2006-06-08 14:20:05 +00:00
Martin Willi
8d77eddec2
further work for rekeying:
...
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
2006-06-07 13:26:23 +00:00
Martin Willi
b8577029d1
2006-05-10 08:02:49 +00:00
Andreas Steffen