denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,219 Commits 1 Branch 0 Tags
9beb83868fa3cdaff7eeccc1cc7afc31188e0b03
Commit Graph
245 Commits
Author SHA1 Message Date
Martin Willi bb2059c60a added proposal parsing of uncommon DH groups 3072/6144 2008-10-08 12:57:11 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Andreas Steffen af18c84ffb display protoport in dynamic/32 traffic selectors 2008-07-21 19:08:03 +00:00
Andreas Steffen 2c258d7373 ipsec statusall displays dpd options 2008-07-02 10:48:57 +00:00
Martin Willi d01783dba4 logging peer addresses in peer_cfg lookup 2008-07-01 11:10:37 +00:00
Martin Willi 9eeaa25f5d added host match prio to debugging output 2008-07-01 11:01:27 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Andreas Steffen 5397a7f91d show authentication method in ipsec statusall 2008-06-30 17:08:47 +00:00
Martin Willi 035930fc4a added %P printf handler for poposal_t 
added some proposal selection debugging code
 2008-06-12 11:42:19 +00:00
Andreas Steffen 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates 2008-06-10 20:31:53 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Andreas Steffen be1585c587 log received DH groups and PRFs if no common proposal is found 2008-05-22 14:18:44 +00:00
Tobias Brunner 346e9c5712 added the ECP groups from RFC 5114 2008-05-22 11:55:05 +00:00
Tobias Brunner fc1a31d54b added ECDH with OpenSSL (see RFC 4753) 2008-05-22 11:39:17 +00:00
Andreas Steffen 8bbb212f3a list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen 2008-05-20 21:54:33 +00:00
Tobias Brunner 68ac3b44d1 fixed a bug introduced in [3973] 2008-05-19 08:48:44 +00:00
Andreas Steffen 15c508c708 ccm and gcm icv_sizes are accepted both in bits and octets 2008-05-17 21:51:47 +00:00
Tobias Brunner 3f730ec1cd Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon. 2008-05-16 13:27:21 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 240e727fde renamed PRF_AES128_CBC to PRF_AES128_XCBC 2008-05-08 12:43:27 +00:00
Martin Willi ff6836716c returning reference pointer on get_ref() 2008-05-06 10:55:42 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter 
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
 2008-04-30 14:26:24 +00:00
Martin Willi 4075225466 fixed peer config equality check 2008-04-18 10:30:52 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Tobias Brunner 471f923071 fixed two other memory leaks 2008-04-03 15:13:25 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info 
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
 2008-03-26 10:06:45 +00:00
Martin Willi 3c448f019b fixed peer_cfg lookup when omitting IDr 2008-03-19 10:08:59 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Andreas Steffen b073aada23 search : delimiter in ipsec.secrets entries from the rear 2007-11-16 20:23:29 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Andreas Steffen cb23c49143 return argument has type size_t 2007-09-18 11:21:55 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Andreas Steffen 15a9d460c0 peer_cfg now knows about group memberships 2007-09-13 15:33:17 +00:00
Andreas Steffen 2f9f5149c4 check hash algorithms used in signatures 2007-09-11 20:10:38 +00:00
Andreas Steffen c1ff717690 removed rsa_private_key clone() function 2007-09-11 16:26:08 +00:00
Andreas Steffen f0c156fbc9 replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material 2007-09-11 10:18:25 +00:00