Martin Willi
0619ddfaa4
Refactored heavily #ifdefd capability code to its own libstrongswan class
2012-07-04 11:01:40 +02:00
Martin Willi
b8e17eb36f
Show some uname() info during charon startup
2012-06-28 11:56:15 +02:00
Andreas Steffen
a71f0f3bdc
charon is now an IKE daemon
2012-05-03 20:48:01 +02:00
Tobias Brunner
18758e3d2e
Store the name of the binary using libcharon to enable specific settings.
2012-05-03 13:57:04 +02:00
Tobias Brunner
94b48e071a
Provide plugin list from charon, not internally in libcharon.
2012-05-03 13:14:07 +02:00
Tobias Brunner
ead92870b8
Loggers specify what log messages they want to receive during registration.
...
This also allows us to generate the log message only once for all
loggers that need it (avoids calls to custom printf specifier callbacks).
To update the log levels loggers can simply be registered again.
2012-05-02 14:45:38 +02:00
Tobias Brunner
0e474f9148
Use a separate interface for loggers.
...
The new interface does not allow loggers to unregister themselves from
the bus. This allows us to use a rwlock_t for them.
The latter also means that loggers can now be called concurrently by
multiple threads.
2012-05-02 14:45:38 +02:00
Tobias Brunner
5895c2e948
Option added to set identifier for syslog(3) logging.
...
This identifier is added to each log message by syslog.
2012-04-20 09:26:12 +02:00
Tobias Brunner
2e0b478a01
Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.
...
Because all packages are now marked as optional executables that are to
be installed on the final system have to be added to PRODUCT_PACKAGES in
build/target/product/core.mk. Dependencies (such as libraries) are
installed automatically.
2012-01-12 19:18:35 +01:00
Tobias Brunner
54d096a712
Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509).
...
This will allow us to remove quite some clutter from the LIB debug group
for higher debug levels.
2011-12-16 16:44:38 +01:00
Tobias Brunner
48e87e12ab
Revert "fixed integrity tests of plugins using libtls or libtnccs"
...
This reverts commit b597ac4a4c
2011-11-08 18:35:11 +01:00
Tobias Brunner
e034cc9ca9
Revert "fixed integrity tests of plugins using libsimaka"
...
This reverts commit 8c42f16dee
2011-11-08 18:35:11 +01:00
Andreas Steffen
f094dbc9bf
use the correct USE_SIMAKA conditional
2011-11-04 11:27:19 +01:00
Andreas Steffen
8c42f16dee
fixed integrity tests of plugins using libsimaka
2011-11-04 11:27:19 +01:00
Andreas Steffen
90bb98f4ac
charon must load libtls if available
2011-11-02 09:28:09 +01:00
Andreas Steffen
b597ac4a4c
fixed integrity tests of plugins using libtls or libtnccs
2011-11-02 06:42:08 +01:00
Tobias Brunner
bdbbab35b1
pluto: Switch to user 'vpn' on Android.
2011-10-18 11:36:52 +02:00
Tobias Brunner
6d36f8b60a
Make sure the PID read from charon.pid is null-terminated.
2011-09-28 13:57:59 +02:00
Andreas Steffen
b9d61f78d3
added PTS debug class
2011-09-11 00:11:04 +02:00
Andreas Steffen
a6cb374136
added DBG_IMC and DBG_IMV debug options
2011-05-29 10:25:13 +02:00
Martin Willi
3b71d3d033
Reload strongswan.conf and plugins supporting reloading on SIGHUP
2011-04-15 10:07:13 +02:00
Martin Willi
84f89634ef
Moved logger initialization from libcharon to charon
2011-01-05 16:45:40 +01:00
Andreas Steffen
ed08f7ce83
use DBG_TNC for TNC debugging output
2010-10-09 16:01:19 +02:00
Andreas Steffen
99dfc3c295
added --debug-tls to charon usage() function
2010-10-07 09:34:56 +02:00
Andreas Steffen
4776500055
added debug-tls comand line option
2010-08-23 17:51:40 +02:00
Martin Willi
0b71bc7af0
Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs
2010-08-03 15:39:25 +02:00
Martin Willi
400df4ca7c
Implemented EAP-TLS server functionality
2010-08-03 15:39:25 +02:00
Martin Willi
97abf95412
TLS stack keeps a copy of server/peer identities
2010-08-03 15:39:25 +02:00
Martin Willi
c8a2fca58c
Limit the number of EAP-TLS packets allowed
2010-08-03 15:39:25 +02:00
Martin Willi
8fef06a683
Use stricter state handling while processing TLS messages
2010-08-03 15:39:25 +02:00
Martin Willi
dc9f34be4d
Cleaned up the public TLS interface
2010-08-03 15:39:25 +02:00
Martin Willi
84d67ead4e
Refactored common used operations into TLS crypto helper
2010-08-03 15:39:25 +02:00
Martin Willi
3e7e777941
Properly send empty EAP-TLS messages
2010-08-03 15:39:25 +02:00
Martin Willi
51313a39d1
Derive MSK for EAP-TLS authentication
2010-08-03 15:39:25 +02:00
Martin Willi
110364b042
Verify Server Finished message
2010-08-03 15:39:25 +02:00
Martin Willi
f139b5786f
Implemented input record decryption and verification
2010-08-03 15:39:25 +02:00
Martin Willi
84543e6efa
Implemented key derivation, output record signing and encryption
2010-08-03 15:39:25 +02:00
Martin Willi
18010de23d
Derive master secret, create Finished message
2010-08-03 15:39:25 +02:00
Martin Willi
149b7e6d01
Implemented the TLS specific PRF in its TLSv1.0 and TLSv1.2 variants
2010-08-03 15:39:24 +02:00
Martin Willi
3ddd164e5e
Implemented sending of Certificate, ClientKeyExchange, CertificateVerify and ChangeCipherSpec as peer
2010-08-03 15:39:24 +02:00
Martin Willi
3a1640dea1
Implemented a tls_writer class to simplify TLS data generation
2010-08-03 15:39:24 +02:00
Martin Willi
4ef946dd64
Implemented a tls_reader class to simplify TLS data parsing
2010-08-03 15:39:24 +02:00
Martin Willi
3e962b0843
Process ServerHello(Done), Certificate(Request) messages
2010-08-03 15:39:24 +02:00
Martin Willi
698674c7f3
Send a ClientHello to start TLS negotiation
2010-08-03 15:39:24 +02:00
Martin Willi
536dbc00b9
Added TLS crypto helper, currently supports cipher suite selection
2010-08-03 15:39:24 +02:00
Martin Willi
4c0c2283a5
Added stubs for handshake handling, server and peer variants
2010-08-03 15:39:24 +02:00
Martin Willi
4c0124a0a2
Accept follow-up fragments with a TLS message length
2010-08-03 15:39:24 +02:00
Martin Willi
40e384ea01
Added dummy/identity implementations of the different TLS record layers
2010-08-03 15:39:24 +02:00
Martin Willi
dcbbeb2d09
Pass TLS records to newly introduced TLS stack
2010-08-03 15:39:24 +02:00
Martin Willi
f7f63c52e1
Added some TLS constants
2010-08-03 15:39:24 +02:00
Martin Willi