 Andreas Steffen
|
873604dd7f
|
defined aaa_identity
|
2010-09-01 00:16:19 +02:00 |
|
|
Andreas Steffen
|
3a01908060
|
increase number of message due to large certificate payloads
|
2010-09-01 00:11:23 +02:00 |
|
|
Andreas Steffen
|
5fb1311b2a
|
clarified debug output
|
2010-08-31 23:22:39 +02:00 |
|
|
Andreas Steffen
|
c3024a0848
|
fixed typo
|
2010-08-31 21:42:14 +02:00 |
|
|
Andreas Steffen
|
68eb610d81
|
fixed typos
|
2010-08-30 16:22:33 +02:00 |
|
|
Andreas Steffen
|
6ade82d5b7
|
fixed copy-and-paste errors
|
2010-08-30 15:42:44 +02:00 |
|
|
Andreas Steffen
|
d93e2e5409
|
created an eap-tnc method hull
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
577893612f
|
for the time being assume a single request/response exchange for a given EAP method
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
be63a48c36
|
defined EAP-TNC
|
2010-08-30 13:13:39 +02:00 |
|
|
Andreas Steffen
|
1bc8690f54
|
replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr
|
2010-08-29 21:52:08 +02:00 |
|
|
Andreas Steffen
|
6297dc390f
|
added ctr ccm and gcm plugins to ikev2/rw-cert scenario
|
2010-08-29 21:11:00 +02:00 |
|
|
Andreas Steffen
|
8eb74facfe
|
added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario
|
2010-08-29 21:09:25 +02:00 |
|
|
Andreas Steffen
|
6aa82ec280
|
added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario
|
2010-08-29 20:50:37 +02:00 |
|
|
Andreas Steffen
|
4f2a0bd839
|
replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm
|
2010-08-29 20:39:51 +02:00 |
|
|
Andreas Steffen
|
8318d88450
|
replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm
|
2010-08-29 20:24:12 +02:00 |
|
|
Andreas Steffen
|
897c7a72cf
|
Win7 might send up to 7k of certificate requests
|
2010-08-27 16:30:05 +02:00 |
|
|
Andreas Steffen
|
d9b85e28b9
|
removed tls_record_t definition
|
2010-08-24 19:19:13 +02:00 |
|
|
Andreas Steffen
|
421a529f88
|
added ikev2/rw-eap-tls-fragments scenario
|
2010-08-24 10:12:15 +02:00 |
|
|
Andreas Steffen
|
234aa8ee03
|
use correct network diagram
|
2010-08-24 10:09:58 +02:00 |
|
|
Andreas Steffen
|
79a5e391f8
|
support fragmentation in AVPs
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
c1a929daa7
|
removed some redundant debug output
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
4776500055
|
added debug-tls comand line option
|
2010-08-23 17:51:40 +02:00 |
|
|
Andreas Steffen
|
56a1167b07
|
fixed build_cipher_suite_list()
|
2010-08-21 12:52:55 +02:00 |
|
|
Andreas Steffen
|
906680029d
|
enable the ccm and gcm plugins in the UML scenarios
|
2010-08-20 12:47:44 +02:00 |
|
|
Andreas Steffen
|
fd86fb5183
|
removed debug output for TLS application data
|
2010-08-19 07:27:30 +02:00 |
|
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
|
Andreas Steffen
|
5ae4292cb9
|
added TLS record debug output
|
2010-08-18 22:52:42 +02:00 |
|
|
Andreas Steffen
|
ee346b54c1
|
add TLS handshake packet size to debug output
|
2010-08-18 22:07:27 +02:00 |
|
|
Andreas Steffen
|
53115857ae
|
some simplifications using the INIT macro
|
2010-08-17 20:09:32 +02:00 |
|
|
Andreas Steffen
|
f9a2d4bfcb
|
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
|
2010-08-16 19:29:39 +02:00 |
|
|
Andreas Steffen
|
cf95e162f2
|
added ikev2/rw-eap-ttls-phase2-piggyback scenario
|
2010-08-16 18:32:00 +02:00 |
|
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
f2b9b9725c
|
changed ikev2/rw-eap-ttls-only description
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
d2be215a99
|
added ikev2/rw-eap-ttls-only scenario
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
06a207480e
|
fixed typo in eap-mschapv2 plugin
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
|
Andreas Steffen
|
758d7283fb
|
used default ipsec.secrets
|
2010-08-15 12:49:14 +02:00 |
|
|
Andreas Steffen
|
d662a7ffad
|
included bad case in ikev2/rw-eap-ttls-radius scenario
|
2010-08-15 11:13:41 +02:00 |
|
|
Andreas Steffen
|
eb4c9c609c
|
version bumps in testing.conf
|
2010-08-14 21:41:52 +02:00 |
|
|
Andreas Steffen
|
4618430f83
|
enable the eap-ttls and ctr plugins in the uml scenarios
|
2010-08-14 21:40:05 +02:00 |
|
|
Andreas Steffen
|
e8f971ee4e
|
added rw-eap-ttls-radius scenario
|
2010-08-14 20:05:21 +02:00 |
|
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|
|
Andreas Steffen
|
004b226bb8
|
use EAP plugin for tunneled client authentication
|
2010-08-14 01:14:28 +02:00 |
|
|
Andreas Steffen
|
6659c61335
|
send tunneled EAP Identity response using eap-identity plugin
|
2010-08-13 22:45:22 +02:00 |
|
|
Andreas Steffen
|
486893ee52
|
allow to send an EAP Identity response without matching request
|
2010-08-13 22:41:00 +02:00 |
|
|
Andreas Steffen
|
c4347aa86e
|
do not dump tls application data any more
|
2010-08-13 21:21:49 +02:00 |
|
|
Andreas Steffen
|
683a912eab
|
implement AVP EAP message building and processing
|
2010-08-13 21:21:49 +02:00 |
|
|
Andreas Steffen
|
71efe40077
|
Migrated eap_identity plugin to INIT/METHOD macros
|
2010-08-13 16:57:01 +02:00 |
|
|
Andreas Steffen
|
a568897011
|
Migrated eap_md5 plugin to INIT/METHOD macros
|
2010-08-13 16:33:26 +02:00 |
|
|
Andreas Steffen
|
45c4021bd0
|
Migrated eap_authenticator to INIT/METHOD macros
|
2010-08-13 15:58:53 +02:00 |
|
|
Andreas Steffen
|
fe6ae23d1f
|
Migrated eap_manager to INIT/METHOD macros
|
2010-08-13 15:32:37 +02:00 |
|
|
Andreas Steffen
|
87799b0c00
|
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
|
2010-08-13 15:07:53 +02:00 |
|
|
Andreas Steffen
|
e643da585b
|
fixed typo
|
2010-08-13 12:24:54 +02:00 |
|
|
Andreas Steffen
|
3a15a02a58
|
set TLS record type before state change to STATE_FINISHED_SENT
|
2010-08-13 00:31:45 +02:00 |
|
|
Andreas Steffen
|
b62e9a30ce
|
fixed sequence numbering and iv of TLS protection layer
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
4412ee86c5
|
recognize eap-ttls method
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
1327839da8
|
added generic TLS application data handler and specific EAP-TTLS instantiation
|
2010-08-12 23:58:54 +02:00 |
|
|
Andreas Steffen
|
133accfcfd
|
differentiate between TLS messages and EAP-[T]TLS packets in the debug output
|
2010-08-10 19:02:05 +02:00 |
|
|
Andreas Steffen
|
3810afa9f9
|
log final TLS acknowledgement packet
|
2010-08-08 19:14:53 +02:00 |
|
|
Andreas Steffen
|
ded59df4fc
|
added level 2 debug info on sent TLS packets
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
ab47a7924b
|
log EAP-TTLS version
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
a622c6d019
|
fixed typo
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
a6444fcdd4
|
EAP-TLS and EAP-TTLS use different constant MSK PRF label
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
b4d30a425e
|
support server authentication only for EAP-TTLS
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
26eb9b2d17
|
added eap_ttls plugin configuration
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
fd8ad4198d
|
added TTLS to EAP short names, too
|
2010-08-06 06:06:40 +02:00 |
|
|
Andreas Steffen
|
f32e56bbce
|
added EAP_TTLS method
|
2010-08-05 21:01:39 +02:00 |
|
|
Andreas Steffen
|
6ac797ad3a
|
added ikev2/rw-eap-tls-radius
|
2010-08-05 19:28:06 +02:00 |
|
|
Andreas Steffen
|
6b717cc28d
|
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
|
2010-08-05 12:47:09 +02:00 |
|
|
Andreas Steffen
|
7ea87db00d
|
added some more TLS debug output
|
2010-08-05 09:51:05 +02:00 |
|
|
Andreas Steffen
|
7030e3950a
|
fixed type in cipher suite list build
|
2010-08-05 01:26:10 +02:00 |
|
|
Andreas Steffen
|
4657b3a42a
|
log selected TLS version and cipher suite
|
2010-08-05 01:21:59 +02:00 |
|
|
Andreas Steffen
|
289c9ac3d7
|
log TLS handshake messages in debug level 2
|
2010-08-04 16:55:55 +02:00 |
|
|
Andreas Steffen
|
8e7920eea1
|
generated aaa certificate
|
2010-08-04 12:44:47 +02:00 |
|
|
Andreas Steffen
|
f8bb082f1f
|
added ikev2/rw-eap-tls-only scenario
|
2010-08-04 08:36:27 +02:00 |
|
|
Andreas Steffen
|
9dffc26b73
|
--enable eap-tls and --disable-load-warning in uml build
|
2010-08-04 07:48:19 +02:00 |
|
|
Andreas Steffen
|
50fb724ddd
|
delete tarball files
|
2010-07-30 22:27:41 +02:00 |
|
|
Andreas Steffen
|
b599b80013
|
version bump to 4.4.2
|
2010-07-30 22:26:14 +02:00 |
|
|
Andreas Steffen
|
ff7b0dd289
|
added NETMAP rules for the reverse direction
|
2010-07-27 21:16:44 +02:00 |
|
|
Andreas Steffen
|
c100dd6b5f
|
fixed description of ikev2/net2net-same-nets scenario
|
2010-07-27 20:50:28 +02:00 |
|
|
Andreas Steffen
|
c74c4c2a20
|
added net2net-same-nets
|
2010-07-25 11:56:33 +02:00 |
|
|
Andreas Steffen
|
b59340a2c3
|
NEWS cosmetics
|
2010-07-21 21:43:43 +02:00 |
|
|
Andreas Steffen
|
e93f452825
|
remove the private updown scripts after use
|
2010-07-17 23:25:15 +02:00 |
|
|
Andreas Steffen
|
15fd135564
|
minor fixes in the ikev2/rw-mark-in-out scenarios
|
2010-07-17 17:36:04 +02:00 |
|
|
Andreas Steffen
|
b22bb9f21c
|
updated NEWS
|
2010-07-17 17:25:01 +02:00 |
|
|
Andreas Steffen
|
f5baa5c4cf
|
some reformulations
|
2010-07-17 17:19:26 +02:00 |
|
|
Andreas Steffen
|
d2d7ed9227
|
the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
|
2010-07-17 16:32:47 +02:00 |
|
|
Andreas Steffen
|
16c97c8e59
|
documented the new PLUTO environment variables available in the updown script
|
2010-07-17 13:41:40 +02:00 |
|
|
Andreas Steffen
|
ae0e3b03b7
|
in a ESP_IN_UDP situation make UDP port available in the updown script
|
2010-07-17 13:27:19 +02:00 |
|
|
Andreas Steffen
|
34e93c0280
|
fix html error in scenario description
|
2010-07-17 13:09:28 +02:00 |
|
|
Andreas Steffen
|
14665981a5
|
make xfrm marks available in the updown scripts
|
2010-07-17 13:08:50 +02:00 |
|
|
Andreas Steffen
|
ff090f8781
|
check for mark changes in ipsec update
|
2010-07-17 09:13:48 +02:00 |
|
|
Andreas Steffen
|
cde633d632
|
all x509 based sql scenarios require the revocation plugin
|
2010-07-15 23:19:52 +02:00 |
|
|
Andreas Steffen
|
c349a68b2e
|
all x509 based pfkey scenarios require the revocation plugin
|
2010-07-15 23:17:37 +02:00 |
|
|
Andreas Steffen
|
f5731b4579
|
all x509 based p2pnat scenarios require the revocation plugin
|
2010-07-15 23:07:12 +02:00 |
|
|
Andreas Steffen
|
295d9cc313
|
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
|
2010-07-15 23:02:17 +02:00 |
|
|
Andreas Steffen
|
84fe65bd43
|
all x509 based ike scenarios require the revocation plugin
|
2010-07-15 22:40:20 +02:00 |
|
|
Andreas Steffen
|
001787b3eb
|
all x509 based openssl-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:33:05 +02:00 |
|
|
Andreas Steffen
|
6c2bd2a7d8
|
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:03:16 +02:00 |
|