denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,852 Commits 1 Branch 0 Tags
8caf7711c94fede0c4d8808cc9f68870ba331340
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 80d3a187c5 double check that parsing a list consumes all bytes 2009-06-17 13:38:05 +02:00
Martin Willi df2565a2d5 use signed lengths in parser and generator 2009-06-17 13:22:07 +02:00
Martin Willi 8ae89883e1 fixed copy/paste error in attribute type parsing 2009-06-17 11:42:53 +02:00
Martin Willi fcb06fdbfa use rwlock instead of a mutex in trap_manager, avoids possible deadlock 2009-06-16 17:27:25 +02:00
Martin Willi 4edda6e4a0 load trap_manager before plugins, allowing them to install traps 2009-06-16 17:27:24 +02:00
Martin Willi 04d6583e26 reset IKE_SA on bus after checkout/checkin of replacement SA 2009-06-16 17:27:24 +02:00
Martin Willi 140ea1fe5a instanciate first registered kernel interface immediately 2009-06-16 17:27:24 +02:00
Martin Willi a998276a2b calculating plugin dependencies for eap-sim/aka 2009-06-16 14:53:16 +02:00
Martin Willi 9c9a110130 pluto does not depend on gmp anymore 2009-06-16 14:47:07 +02:00
Martin Willi 62d6da67dd support older gcrypt libraries not defining the CAMELLIA cipher 2009-06-16 14:23:32 +02:00
Martin Willi 24d7b25d21 fixed compiler warning 2009-06-16 14:21:55 +02:00
Martin Willi 0c013ff345 load hmac/xcbc plugins after hash/crypter plugins to pass crypto tests 2009-06-16 13:05:43 +02:00
Martin Willi 26999f2511 increased verbosity of successful crypto tests 2009-06-16 09:54:28 +02:00
Martin Willi 72e174f966 removed one hierarchy level for crypto test options 2009-06-16 09:48:45 +02:00
Martin Willi 80c0710caa added NEWS for 4.3.2 2009-06-16 09:39:56 +02:00
Martin Willi 25ecb8dafa gcrypt actually does not implement IDEA 2009-06-15 18:18:04 +02:00
Martin Willi d32b14db5e implemented gcrypt RSA encrypt/decrypt operations 2009-06-15 18:07:57 +02:00
Martin Willi 810ce1f336 added a gcrypt.quick_random option to generate weak testing keys faster 2009-06-15 18:06:16 +02:00
Martin Willi f1f968d562 extended RSA tests by encrypt/decrypt operations 2009-06-15 18:05:34 +02:00
Martin Willi 04b348f61a implemented IKEv1 specific SIGN_RSA_EMSA_PKCS1_NULL scheme in gcrypt 2009-06-15 14:47:39 +02:00
Martin Willi 3176e4421f check if RSA key is large enough to sign a chunk of data 2009-06-15 13:49:30 +02:00
Martin Willi e7227f0ba0 use save chunk advancing, check signature length 2009-06-15 13:37:52 +02:00
Martin Willi b59e239335 added SHA2 HMAC signer test vectors 2009-06-12 11:09:09 +02:00
Martin Willi 0897ff21e7 removed crypto tests form unit tester, all gone to test-vector plugin 2009-06-12 10:44:01 +02:00
Martin Willi 095f971c10 added a FIPS_PRF test vector 2009-06-12 10:40:38 +02:00
Martin Willi 371a54c7a9 added support for stateful PRFs (such as the FIPS_PRF) 2009-06-12 10:39:47 +02:00
Martin Willi c66cd00df4 removed pluto test vectors, --disable-self-test option 2009-06-11 20:27:32 +02:00
Martin Willi 701381ceb8 added SHA2 HMAC PRF test vectors 2009-06-11 20:26:01 +02:00
Martin Willi d94d68e404 added SHA2 test vectors 2009-06-11 18:14:30 +02:00
Martin Willi f02d144095 added SHA1 test vectors 2009-06-11 17:17:33 +02:00
Martin Willi 2df93f467b added HMAC SHA1 test vectors 2009-06-11 17:05:56 +02:00
Martin Willi 764708b4e0 added HMAC MD5 test vectors 2009-06-11 16:44:20 +02:00
Martin Willi c698da8cb4 added RNG test vectors 2009-06-11 15:56:00 +02:00
Martin Willi e091d5100f added MD5 test vectors 2009-06-11 15:56:00 +02:00
Martin Willi 54916d79d6 added AES-XCBC test vectors for signer/prf 2009-06-11 15:56:00 +02:00
Martin Willi 005163805d added test vectors for AES128 CBC 2009-06-11 15:56:00 +02:00
Martin Willi 6f4f83e333 added blowfish test vectors from pluto 2009-06-11 15:56:00 +02:00
Martin Willi 81811a9d8b added a plugin providing crypto test vectors 2009-06-11 15:55:59 +02:00
Martin Willi 28a0728b67 make use of the crypto_tester in the crypto_factory 
libstrongswan.crypto.test.on_add to test algorithms during initialization
libstrongswan.crypto.test.on_create to test algorithms on each instantiation
 2009-06-11 15:55:48 +02:00
Martin Willi 3e8891667b implemented a crypto_tester class to test crypto algorithms 
libstrongswan.crypto.test.required to require at least one test vector to use an algorithm
libstrongswan.crypto.test.rng_true to run RNG tests on RNG_TRUE quality
 2009-06-11 15:54:44 +02:00
Martin Willi 6f299040fb handling hashers and rngs as transform types (in private range) 2009-06-11 14:17:16 +02:00
Martin Willi e51f607221 gcrypt blowfish supports 128 bit key size only 2009-06-11 14:13:17 +02:00
Martin Willi 25d6c5146b remove obsolete scripts 2009-06-10 18:31:15 +02:00
Martin Willi e0069366c8 fixed ecp521 test 2009-06-10 18:07:19 +02:00
Martin Willi 0461a2ff13 added missing RSA 768 test 2009-06-10 17:26:56 +02:00
Martin Willi 6edad5afdd added convenience scripts for pubkey/dh speed tests 2009-06-10 16:25:32 +02:00
Martin Willi a4caeac76e moved publickey speed test to a standalone program 
This reverts commit 08874d6ae2.
 2009-06-10 16:25:32 +02:00
Martin Willi 3e3de01b28 moved Diffie-Hellman speed test to a standalone program 
This reverts commit 1e6050bfae.
 2009-06-10 14:58:58 +02:00
Martin Willi 260158e53e properly shut down and unref nm mainloop, fixes crash at shutdown 2009-06-09 15:13:10 +02:00
Martin Willi 4d8ddefb78 remove stale pidfile if no such process found 2009-06-09 14:56:31 +02:00
Martin Willi fd0b7903e6 fix inclusion of private_key_t in nm plugin 2009-06-09 14:03:48 +02:00
Martin Willi 1e6050bfae implemented a speed test for diffie-hellman 2009-06-09 11:27:35 +02:00
Martin Willi 08874d6ae2 implemented a speed test for public key algorithms 2009-06-09 11:27:34 +02:00
Martin Willi 3240cab978 gcrypt RSA public key implementation 2009-06-09 11:27:26 +02:00
Martin Willi ff8d3ba355 gcrypt RSA private key implementation 2009-06-09 11:27:11 +02:00
Martin Willi ccd1464586 use autoconf macro provided by libgcrypt 2009-06-09 11:18:57 +02:00
Martin Willi 1111088aa7 gcrypt mpi based Diffie-Hellman implementation 2009-06-09 11:18:57 +02:00
Martin Willi a41d0932c2 gcrypt rng implementation 2009-06-09 11:18:57 +02:00
Martin Willi 8e97e32705 use abstract mutex_t for gcrypt locking callbacks 2009-06-09 11:18:56 +02:00
Martin Willi 80862c4637 gcrypt crypter implementation 2009-06-09 11:18:56 +02:00
Martin Willi f908ff9f91 gcrypt hasher implementation 2009-06-09 11:18:56 +02:00
Martin Willi 513a1a2835 initialize gcrypt threadsave, currently for pthread only 2009-06-09 11:18:56 +02:00
Martin Willi 4977018c23 added skeleton for libgcrypt based crypto plugin 2009-06-09 11:18:56 +02:00
Martin Willi 86ab0bb65e fixed crash in openssl private_key->get_public_key(), using encode/load workaround 2009-06-09 11:03:35 +02:00
Martin Willi b00fbdb55a updated medcli/medsrv plugins to use new auth_cfg API, fixes compilation 2009-06-05 14:15:39 +02:00
Martin Willi ec0b9ac97c added missing identification.h include 2009-06-04 13:49:51 +02:00
Martin Willi 2fdca5e3cb apply is_anyaddr fix from socket also to socket-raw 2009-06-03 17:56:55 +02:00
Martin Willi c4f59ccec0 fixed ENUM naming of XCBC prf 2009-06-02 14:41:53 +02:00
Martin Willi 9474a0d90c added a charon.install_virtual_ip option to disable IP installation for testing 2009-06-02 13:45:29 +02:00
Martin Willi 178bf4c5e9 register the already implemented AUTH_HMAC_SHA1_160 algorithm 2009-05-28 15:03:57 +02:00
Martin Willi 92f5956790 show strongSwan version in statusall 2009-05-26 14:10:45 +02:00
Martin Willi 66b8345f9f added generated extconf.rb to .gitignore, removed it from distribution 2009-05-25 15:45:05 +02:00
Martin Willi a13c013b6f include TSi/TSr of triggering packet in acquire 2009-05-20 11:44:43 +02:00
Martin Willi cd37e13133 properly terminate EAP authentication if EAP method fails 2009-05-20 09:24:18 +02:00
Martin Willi 8affd7ac65 fixed dumping of integers in generator 2009-05-20 09:04:10 +02:00
Martin Willi c6c842e9ad added Debian specific packaging files to NM applet 2009-05-19 14:01:40 +02:00
Martin Willi bf9e1d4444 new NM applet release 1.1.1 2009-05-19 14:01:39 +02:00
Martin Willi ef56ba51d4 fixed compiler warnings 2009-05-19 12:23:21 +02:00
Martin Willi f920bd1861 replaced deprecated g_strcasecmp() 2009-05-19 12:23:21 +02:00
Martin Willi 9e2d7f962f updated build system to newer autotool/gnome conventions 2009-05-19 12:23:20 +02:00
Martin Willi 39ded7128c do not write to unaligned memory in MSCHAPv2 2009-05-18 14:41:16 +02:00
Martin Willi 3f7611c59d cleanup of generator code 2009-05-18 14:06:48 +02:00
Martin Willi 79a2afedd5 removed unused 64-bit integer parsing rule 2009-05-18 13:36:56 +02:00
Martin Willi 4274885855 do not access unaligned words/half-words directly 2009-05-18 13:34:09 +02:00
Martin Willi 57ae766af8 cleaned up parser code 2009-05-18 13:13:12 +02:00
Martin Willi 12806574b8 removed trailing spaces/tabs 2009-05-18 13:13:12 +02:00
Martin Willi 09dbca9fbf fixed typos 2009-05-18 10:49:50 +02:00
Martin Willi 047b2e42df added NEWS for 4.3.1 2009-05-18 10:42:16 +02:00
Martin Willi 24cd2ca6ee moved very stroke specific x509 flag handling out of core library 2009-05-18 10:42:16 +02:00
Martin Willi 0ed6b7a7d7 If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity. 
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
 2009-05-15 16:35:14 +02:00
Martin Willi d4b403e2f3 updated glade dialog, using tooltip instead of tooltip_text 2009-05-15 16:04:07 +02:00
Martin Willi 6b967fb762 implemented save_secrets hook to avoid crash 2009-05-15 16:04:07 +02:00
Martin Willi a61395676f added .gitignore files to NM applet 2009-05-15 15:33:19 +02:00
Martin Willi 9caceb6ed5 updated prf identifiers 2009-05-15 13:49:05 +02:00
Martin Willi b79ca7858b updated integrity algorithm identifiers 2009-05-15 13:48:44 +02:00
Martin Willi 832427064c added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA 2009-05-15 11:02:56 +02:00
Martin Willi 5cb3210acf stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config 2009-05-15 10:18:43 +02:00
Martin Willi c296e51c40 added eap_start option to radius plugin 
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
 2009-05-14 14:14:29 +02:00
Martin Willi 64e8ca281f simplified SPI allocation after refactorings 2009-05-14 10:28:18 +02:00
Martin Willi d50746febe identation cleanups 2009-05-13 15:57:31 +02:00