denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,283 Commits 1 Branch 0 Tags
84f89634efdfd8d3eebcba3d0cfac3704ff8ec06
Commit Graph
4481 Commits
Author SHA1 Message Date
Martin Willi 18010de23d Derive master secret, create Finished message 2010-08-03 15:39:25 +02:00
Martin Willi 149b7e6d01 Implemented the TLS specific PRF in its TLSv1.0 and TLSv1.2 variants 2010-08-03 15:39:24 +02:00
Martin Willi 3ddd164e5e Implemented sending of Certificate, ClientKeyExchange, CertificateVerify and ChangeCipherSpec as peer 2010-08-03 15:39:24 +02:00
Martin Willi 3a1640dea1 Implemented a tls_writer class to simplify TLS data generation 2010-08-03 15:39:24 +02:00
Martin Willi 4ef946dd64 Implemented a tls_reader class to simplify TLS data parsing 2010-08-03 15:39:24 +02:00
Martin Willi 3e962b0843 Process ServerHello(Done), Certificate(Request) messages 2010-08-03 15:39:24 +02:00
Martin Willi 698674c7f3 Send a ClientHello to start TLS negotiation 2010-08-03 15:39:24 +02:00
Martin Willi 536dbc00b9 Added TLS crypto helper, currently supports cipher suite selection 2010-08-03 15:39:24 +02:00
Martin Willi 9dc73cd21c Added support for AUTH_HMAC_SHA2_256_256, used in TLS 2010-08-03 15:39:24 +02:00
Martin Willi 4c0c2283a5 Added stubs for handshake handling, server and peer variants 2010-08-03 15:39:24 +02:00
Martin Willi 4c0124a0a2 Accept follow-up fragments with a TLS message length 2010-08-03 15:39:24 +02:00
Martin Willi 40e384ea01 Added dummy/identity implementations of the different TLS record layers 2010-08-03 15:39:24 +02:00
Martin Willi dcbbeb2d09 Pass TLS records to newly introduced TLS stack 2010-08-03 15:39:24 +02:00
Martin Willi f7f63c52e1 Added some TLS constants 2010-08-03 15:39:24 +02:00
Martin Willi b173819e5d (De-)fragment EAP-TLS packets, pass TLS records to upper layer 2010-08-03 15:39:24 +02:00
Martin Willi 2107953804 Added EAP-TLS plugin stub 2010-08-03 15:39:24 +02:00
Thomas Egerer 86a73f16ab Do not touch child from collision if peer deleted it 2010-08-03 10:32:38 +02:00
Waldemar Brodkorb 45e962edef substitute obsolete function calls(bzero/index) 2010-08-01 21:20:15 +02:00
Martin Willi 63163cc340 The va_list trick does not seem to be portable, revert dots-in-section fix 
This reverts commit 8f50d06c35.
 2010-07-30 10:57:59 +02:00
Thomas Egerer 5d2e159b41 Fix segfault on 'ipsec stroke up ]' command 2010-07-29 14:03:11 +02:00
Martin Willi 8f50d06c35 Fixed settings lookup if the section/key contains dots 2010-07-29 12:14:32 +02:00
Martin Willi b8aeaea80c Fix use of snprintf() in pluto subjectAltName enumeration 2010-07-28 10:54:48 +02:00
Martin Willi c118559afe Fix use of snprintf() in IETF attributes to string conversion 2010-07-28 10:54:48 +02:00
Martin Willi 018543f3a8 Fix use of snprintf() in identification DN to ASCII conversion 2010-07-28 10:54:47 +02:00
Martin Willi 98d0343870 Implemented a HA enabled in-memory address pool 2010-07-28 10:06:19 +02:00
Martin Willi 7455ab063f Added a function to segmentate a generic integer 2010-07-28 10:06:19 +02:00
Martin Willi c03b64a4ac Reserving does not work, as our pools do not support acquiring arbitrary addresses 
This reverts commit d1384080b3.
 2010-07-27 12:05:39 +02:00
Martin Willi 45c992474c Mem pool does not support multiple leases for an identity 2010-07-27 09:54:27 +02:00
Martin Willi 7eeb687d59 Flush any remaining cache state if an IKE_SA goes down 2010-07-27 09:18:06 +02:00
Martin Willi fa4f71c819 Synchronize EAP-Identity of remote peer 2010-07-26 15:10:54 +02:00
Martin Willi d1384080b3 Reserve virtual IP of passive IKE_SAs in the local pool 2010-07-26 15:01:24 +02:00
Martin Willi 65d15aff73 Added strongswan.conf options for HA heartbeat 2010-07-26 14:30:19 +02:00
Martin Willi 08e266a119 Log CHILD_SA segment responsibility 2010-07-26 13:53:54 +02:00
Martin Willi 3e6736f67e Pass initiator parameter to distinguish between original and exchange initiator 2010-07-26 13:53:53 +02:00
Martin Willi b2e447e24a Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter 2010-07-26 13:53:53 +02:00
Martin Willi aa334daa9b Use a sync message cache to resynchronize IKE_SAs without rekeying 2010-07-26 13:53:49 +02:00
Martin Willi 2031002d42 Log received HA message types 2010-07-26 11:33:00 +02:00
Martin Willi f2eebed2a3 Add enum names for HA message types 2010-07-26 11:33:00 +02:00
Martin Willi 51217527e6 Delay resynchronization request until starter has loaded the configurations 2010-07-26 11:33:00 +02:00
Martin Willi 2cbc48ecab Replaces in_segment() by a more generic get_segment() function 2010-07-26 11:33:00 +02:00
Martin Willi ad2488fcdf Use distinct message types for HA message ID updates 2010-07-26 10:15:17 +02:00
Martin Willi 00c1bd0606 Migrated ha plugin to INIT/METHOD macros 2010-07-26 10:15:17 +02:00
Martin Willi ce7967c50c Implemented support for multiple RADIUS servers 2010-07-21 17:25:09 +02:00
Martin Willi 58d2ef6e14 Migrated eap-radius plugin to INIT/METHOD macros 2010-07-21 17:09:27 +02:00
Martin Willi 5b6c220d13 Added log statement if peer requests EAP, but current config does not allow it 2010-07-21 17:09:15 +02:00
Andreas Steffen 16c97c8e59 documented the new PLUTO environment variables available in the updown script 2010-07-17 13:41:40 +02:00
Andreas Steffen ae0e3b03b7 in a ESP_IN_UDP situation make UDP port available in the updown script 2010-07-17 13:27:19 +02:00
Andreas Steffen 14665981a5 make xfrm marks available in the updown scripts 2010-07-17 13:08:50 +02:00
Andreas Steffen ff090f8781 check for mark changes in ipsec update 2010-07-17 09:13:48 +02:00
Andreas Steffen 3de510ca43 Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option 2010-07-15 06:29:26 +02:00