Martin Willi
5dffdea1d7
added hooks for IKE and CHILD keymat
2008-10-30 12:58:54 +00:00
Martin Willi
80853d8498
moved CHILD_SA key derivation to keymat_t
...
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi
a64cc8f75f
do not store DH redundant in keymat
2008-10-29 13:35:06 +00:00
Martin Willi
6a4ff35cc4
moved key derivation and management into keymat object
...
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi
3c8234d408
store IKE proposal implicitly during derive_keys
2008-10-28 10:12:21 +00:00
Andreas Steffen
7790ab0f37
re-established all previous AUD level messages
2008-10-17 03:44:06 +00:00
Martin Willi
a985db3ff3
reintegrated bus-refactoring branch
2008-10-14 08:52:13 +00:00
Andreas Steffen
51c8f8261f
some more changes to IKE_SA and CHILD_SA logging
2008-07-22 17:10:10 +00:00
Martin Willi
a4a3e0c7dc
introduced an additional bus->signal parameter for signal specific data
...
added SIG_IKE/SIG_CHD macros for signal emitting
2008-07-18 15:51:40 +00:00
Andreas Steffen
125aaf1ab1
log received vendor id as a hex value
2008-06-27 17:11:54 +00:00
Andreas Steffen
bc997f6583
display selected IKE proposal in ipsec statusall
2008-06-22 11:24:33 +00:00
Martin Willi
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
2008-06-06 15:05:54 +00:00
Martin Willi
6a365f0740
added API for random number generators, served through credential factory
...
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Andreas Steffen
196b28a470
demoted more notify debug messages to level 2
2008-04-02 19:15:05 +00:00
Andreas Steffen
080555e76a
demoted received notify debug message to level 2
2008-04-01 20:22:38 +00:00
Tobias Brunner
9c2a905d63
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
2008-04-01 11:38:18 +00:00
Tobias Brunner
9e183cd5b8
signal fixed
2008-03-31 14:27:16 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Andreas Steffen
703b4b0332
connection name to IKE_SA initiating
2007-09-15 20:30:04 +00:00
Martin Willi
cc68e173fe
fixed payload order (Nonce, KE) for IKE_SA_INIT
2007-07-16 07:01:49 +00:00
Martin Willi
1fd5383e61
added PDF support for CHILD_SAs
...
support for INVALID_KE_PAYLOAD negotiation for rekeying
2007-04-19 08:02:19 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Martin Willi
a6bdc731b1
added retry limit for IKE_SA_INIT (give up after 5 cookie failures)
2007-03-29 11:07:49 +00:00
Martin Willi
eef0859043
fixed child rekey collision
...
implemented ike rekey collision
2007-03-21 14:42:49 +00:00
Martin Willi
d2940fd78c
not detaching from bus when IKE_SA_INIT is retried
2007-03-13 14:55:53 +00:00
Martin Willi
e5a7f1cd08
implemented cookies as initiator
...
proper logging of notifies in IKE_SA setup
2007-03-08 20:18:39 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Martin Willi