 Martin Willi
|
590ca1d482
|
Allow IKEv1 tasks to return ALREADY_DONE to flush all active or passive tasks
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
0f61964ed7
|
Support flushing of single tasks queues in IKEv1 task manager
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
9862852823
|
Double check if we have a packet before retransmitting it
|
2012-03-20 17:31:18 +01:00 |
|
|
Tobias Brunner
|
0793ac497a
|
Fixed memory leak when handling IKEv1 error notifications.
|
2012-03-20 17:31:18 +01:00 |
|
|
Tobias Brunner
|
4dbd81c669
|
Destroy IKE_SA after failed XAuth authentication.
|
2012-03-20 17:31:17 +01:00 |
|
|
Tobias Brunner
|
3d44d735c6
|
Added generic XAuth backend, using secrets provided by credential sets.
|
2012-03-20 17:31:17 +01:00 |
|
|
Clavister OpenSource
|
5c6abd2865
|
Added possibility to send notifications from the Quick Mode task
|
2012-03-20 17:31:17 +01:00 |
|
|
Clavister OpenSource
|
e647c98a13
|
Setting Protocol ID of notifys sent from task manager to ISAKMP
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
cc6b03bb5a
|
If no IKEv1 shared key found for hosts, try to find one based on config identities
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
033dfba01f
|
Log peer cfg enumeration externally for flexibility
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
d7376e2ab4
|
Accept NULL identities passed to peer config enumeration
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
0e2cc3fed9
|
Fixed authentication method selection for main mode PSK authentication
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
ea9e047bc5
|
Use virtual IP to substitute dynamic traffic selectors in quick mode
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
156b8662a6
|
Queue Mode Config tasks when required
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
b155084c42
|
Added IKEv1 Mode Config task based on IKEv2 ike_config
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
a22b9e4f33
|
Reject quick modes if IKE_SA not yet established
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
67a753b95c
|
Use a common function to set IKE_SA to established
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
9f43868a01
|
Implemented responder part of XAUTH task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
d192cc9dc8
|
Implemented initiator part of xauth task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
59ee898326
|
Get first XAuth backend if none configured
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
89afbe58bb
|
Remove unused task swap_initiator method
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
1fe6cdfac2
|
Use a string to identify xauth backends, no need for integer types
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
4e73f85b81
|
Remove xauth_authenticator, we handle it in the task
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
96c9159d96
|
Use a second authentication config to configure XAUTH authentication
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
69adeb5bf2
|
Replace xauth_request task with a new stub where we reimplement it
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
c6d0098c1b
|
Added missing auth_method_t enum names
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
a0eea1a7ac
|
Defined hybrid IKEv1 authentication methods
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
c29fba51aa
|
Some notification errors added to main_mode process_r
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
fbbd439bf9
|
Added possibility to send notification if task_manager->process fails
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
a064eaa8a6
|
Handling of initial contact
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
751bd02e98
|
Added retransmissions for initiator.
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
1755ac0617
|
Cleaned up quick mode notify processing
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
5adf855e3d
|
Add support for KE payloads in IKEv1 quick mode (PFS)
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
fb8bc6a764
|
Use authenticators in IKEv1 main mode
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
76fe7de3fd
|
Added a factory function for IKEv1 authenticators
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
7c27c914d4
|
Implemented IKEv1 pubkey SIG payload processing in an authenticator
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
2792587875
|
Implemented IKEv1 PSK HASH payload processing in separated authenticator
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
5d1eeec297
|
Handle incoming delete messages
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
c64a4b4f8e
|
Implemented post-authentication certificate handling for IKEv1
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
9ad5b8fa95
|
Cleanup CERT payload constructors
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
0bcdb8e571
|
Implemented pre-authentication certificate handling for IKEv1
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
8c33850615
|
Added task types for IKEv1 certificate handling
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
6ccabe2561
|
Reverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks
|
2012-03-20 17:31:13 +01:00 |
|
|
Tobias Brunner
|
9f80110bc6
|
Install SAs with UDP encapsulation during Quick Mode.
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
aaa8f88906
|
Fix support for plain RSA authentication in IKEv1, both as initiator and responder
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
a974700fc0
|
Fix referencing of multiple CERTREQ payload with IKEv1, other cleanups
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
d82a68642d
|
XAUTH additions for certificates.
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
a874a1f50b
|
signature payload handling.
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
8ad5cd1f6c
|
certificate tasks added to passive list for responder
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
7d9269bfce
|
certificate handling for XAuth responder.
|
2012-03-20 17:31:11 +01:00 |
|