denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,554 Commits 1 Branch 0 Tags
832f28315044abe4c2523ce28e46dc60ecb45a98
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 832f283150 Use status_t return value for get_quintuplet() dummy implementations 2009-11-20 11:02:06 +01:00
Martin Willi 10bc5d96cb Move comment out of register_printf_function test 2009-11-19 14:37:34 +01:00
Martin Willi 80b44cd71a Message stringification supports more detailed EAP payload information 2009-11-18 10:37:46 +01:00
Martin Willi 1860bfa2ea Correctly enumerate attributes to request as initiator with the actually requesting handler 2009-11-17 17:51:30 +01:00
Martin Willi 1427c93fcd Fixed memleak in attribute handling 2009-11-17 15:55:45 +00:00
Martin Willi d674c2ace0 attr plugin supports any custom attribute type having a v4/v6 IP under the charon.plugins.attr namespace 2009-11-17 15:53:57 +00:00
Martin Willi 3797b8e767 Support enumeration of key/value pairs in a section of strongswan.conf 2009-11-17 15:52:36 +00:00
Martin Willi 86813bef12 Whitelist register_printf_specifier in leak detective 2009-11-17 15:51:57 +00:00
Martin Willi b5a2055fb1 Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler 2009-11-17 14:51:50 +01:00
Martin Willi e6cf060275 Encrypt payloads with missing rule, fix insertion of non-encrypted payloads 2009-11-12 14:52:12 +00:00
Martin Willi 074444972a Build libsimaka with libtool, as we require a PIC-enabled version 2009-11-12 13:37:07 +00:00
Martin Willi 098466039f Fix word alignement in memxor() on 64-bit architectures 2009-11-12 13:37:06 +00:00
Martin Willi addfeeff9c Do not complain about missing payload order rules for private use payloads 2009-11-12 13:37:06 +00:00
Martin Willi 5bfe1b2529 Properly initialize attribute encoding/length values 2009-11-12 13:37:06 +00:00
Martin Willi 733538a421 Identation/whitespace cleanups 2009-11-12 13:37:06 +00:00
Martin Willi 82713deafd Simplified vendor ID payload interface 2009-11-12 13:37:06 +00:00
Martin Willi 20d144e72f Invoke message hook before generation, allowing plugins to mangle it 2009-11-12 13:37:06 +00:00
Martin Willi ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups 2009-11-12 13:10:30 +00:00
Martin Willi f6bbcec390 Use register_printf_specifier instead of deprecated register_printf_function, if available 2009-11-12 13:16:46 +01:00
Martin Willi 0850e33518 Fixed compiler warning about missing return value 2009-11-12 11:17:02 +01:00
Martin Willi 1a86be6e48 Support variable RES length in AKA quintuplets 2009-11-12 10:34:02 +01:00
Martin Willi 15b65bf15d Ported pseudonym/reauth functionality to EAP-AKA 2009-11-12 10:34:01 +01:00
Martin Willi 3374cb0f44 Passing other as NULL should not always result in a match if me matches 2009-11-12 10:34:01 +01:00
Martin Willi 947b03fd09 Use new identity constructor in EAP-SIM 2009-11-12 10:34:01 +01:00
Martin Willi 324528700d Added identification constructor using a chunk of data, guessing id type 2009-11-12 10:34:01 +01:00
Martin Willi 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins 2009-11-12 10:34:01 +01:00
Martin Willi eb7bf91e12 Added option to disable identity requests completely (old behavior) 2009-11-12 10:34:01 +01:00
Martin Willi 0107f5b687 Fixed replacing existing reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown 2009-11-12 10:34:01 +01:00
Martin Willi edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend 2009-11-12 10:34:01 +01:00
Martin Willi acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication 2009-11-12 10:34:00 +01:00
Martin Willi e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed 2009-11-12 10:34:00 +01:00
Martin Willi c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, 
extended sim_provider with a is_pseudonym() function.
 2009-11-12 10:34:00 +01:00
Martin Willi 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory 2009-11-12 10:34:00 +01:00
Martin Willi 8aad8f6faf Some coding style cleanups 2009-11-12 10:34:00 +01:00
Martin Willi 0328fe940d Impemented basic pseudonym support in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi f81760dcd1 A SIM/AKA message can be parsed twice, without and with decryption 2009-11-12 10:34:00 +01:00
Martin Willi 0e20893d81 Pass SIM/AKA crypto helper to constructor of message 2009-11-12 10:34:00 +01:00
Martin Willi 13f418b442 Added a doxygen group for libsimaka, some cleanups 2009-11-12 10:34:00 +01:00
Martin Willi bcf8a0ff94 Added missing hasher include 2009-11-12 10:33:59 +01:00
Martin Willi 4735965fc0 EAP servers check if the received EAP message was expected 2009-11-12 10:33:59 +01:00
Martin Willi 02f785b050 Use existing triplet length definitions 2009-11-12 10:33:59 +01:00
Martin Willi aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library 2009-11-12 10:33:59 +01:00
Martin Willi 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi fad4e5f393 Centralized SIM/AKA notifications and client errors 2009-11-12 10:33:59 +01:00
Martin Willi e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi 55916dcc9e libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA 2009-11-12 10:33:58 +01:00
Martin Willi ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations 2009-11-12 10:33:58 +01:00
Martin Willi f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA 2009-11-12 10:33:58 +01:00
Martin Willi 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 5269150ebc If cross-compiling, test for the existence of pthread_condattr_setclock only 2009-11-09 15:07:01 +01:00
Martin Willi 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module 2009-11-09 15:07:00 +01:00
Martin Willi 4a38687ae7 Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface 2009-10-30 11:19:32 +01:00
Martin Willi 140816b055 Query secrets in EAP-MD5 with me/other identities, fixing lookup in NetworkManager 2009-10-26 08:47:40 +01:00
Martin Willi 3dc40325d5 Show the number of times a lock was acquired in lock profiler 2009-10-23 08:12:17 +02:00
Martin Willi c5f36782ca Hand out shared secret of load tester for all identities 2009-10-22 16:44:07 +02:00
Martin Willi 4952dc11da Fixed all doxygen warnings 2009-10-22 14:34:10 +02:00
Martin Willi 80252c8a46 Store return value of getc() in an int to correctly test it against EOF 2009-10-22 13:13:06 +02:00
Martin Willi 0d73fe88b2 Load-testers PSK is used for all purposes, including EAP authentication 2009-10-20 15:54:13 +02:00
Martin Willi 1eab115a8b Do not null-terminate url in hash-and-url payloads 2009-10-16 09:21:28 +02:00
Martin Willi b42bfc79d9 Added NEWS about streamlined plugin names 2009-10-15 11:12:13 +02:00
Martin Willi f48ceeb1d1 Renamed plugin configuration sections to the actual plugin name 2009-10-15 10:36:17 +02:00
Martin Willi c4d53fe06b Streamlined EAP plugins to use a dash between eap-method, as used in all other places 2009-10-15 10:36:17 +02:00
Martin Willi b76b867c70 Renamed --enable-load-tests to --enable-load-tester, like the plugin itself 2009-10-15 10:36:17 +02:00
Martin Willi 406f335938 Updated configuration directive of resolve plugin, renamed from resolv_conf 2009-10-15 10:14:10 +02:00
Martin Willi d38eb3355e Migrated the lease_history option to the new libstrongswan plugin namespace 2009-10-15 10:14:10 +02:00
Martin Willi bb56e3f962 Improved debugging log in SIM triplet lookup 2009-10-14 09:55:14 +02:00
Martin Willi a2b50c5d60 Fixed assignment of get_triplet() dummy implementation 2009-10-13 11:05:01 +02:00
Martin Willi 073e7dc062 Merged SIM/USIM manager/card/provider, avoids code duplication 2009-10-12 14:40:21 +02:00
Martin Willi f7897b64f6 Added ${shlibs:Depends} dependency to Debian package 2009-10-12 14:06:51 +02:00
Martin Willi 3690d31a2a Added .gitignore for NM Debian package build 2009-10-12 14:06:51 +02:00
Martin Willi 68d23d2401 Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins 2009-10-12 09:51:46 +02:00
Martin Willi 9b2942f68d Stroke plugin interprets NULL identities as ID_ANY in shared key lookup 2009-10-12 09:51:45 +02:00
Martin Willi 55b045abb5 Added NEWS about EAP-AKA split 2009-10-09 13:31:19 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00
Martin Willi 31f5280cee Fixed USIM parameter description 2009-10-09 13:02:20 +02:00
Martin Willi 424ddf801c Do not use monotonic time for AKA sequence numbers, it has an undefined starting point 2009-10-09 13:02:20 +02:00
Martin Willi 655728621b Use constants instead of sizeof(), sizeof() does not work for function arguments 2009-10-09 13:02:20 +02:00
Martin Willi aba93dcc32 Calculate missing CK/IK values in USIM 2009-10-09 13:02:20 +02:00
Martin Willi aca7ba0ffc Link 3gpp2 EAP-AKA plugin to libgmp 2009-10-09 13:02:20 +02:00
Martin Willi 53a16b72ab Separated 3gpp2 USIM card and provider functionality 2009-10-09 13:02:20 +02:00
Martin Willi 0030880c6b Ported AKA functions to 3gpp2 plugin 2009-10-09 13:02:19 +02:00
Martin Willi 4720815774 Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software 2009-10-09 13:02:19 +02:00
Martin Willi 36a3bccfcf Implemented a manager for USIM cards/providers very similar to the SIM manager 2009-10-09 13:02:19 +02:00
Martin Willi a4eb37eed0 Added medsrv.fcgi to gitignore 2009-10-08 13:10:02 +02:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Martin Willi 991f7ccd6c Catch CHILD_SA state changes during acquire 
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
 2009-10-07 13:09:59 +02:00
Martin Willi 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads 2009-10-05 14:06:32 +02:00
Martin Willi 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads 2009-10-05 13:32:41 +02:00
Martin Willi 587ebae722 Distinguish invalid free()s between corrupted magic and invalid pointer 2009-10-05 11:02:54 +02:00
Martin Willi f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts 2009-09-24 14:49:41 +02:00
Martin Willi cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only 2009-09-24 14:49:41 +02:00
Martin Willi 17859fe6cf Right-align short options in pki usage 2009-09-24 11:28:53 +02:00
Martin Willi 840743479a Use mysql_config to query MySQL LIBS and CFLAGS 2009-09-23 12:45:03 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Martin Willi a7f79ee9c1 Define ME for all charon plugins 2009-09-23 11:13:27 +02:00
Martin Willi e20b792108 Correctly handle --enable-mediation option 2009-09-23 10:50:00 +02:00