denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,415 Commits 1 Branch 0 Tags
a6dc7bf287c0d6bd792cc2fb2ca91d2fdc9448db
Commit Graph
15415 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 2bcd51b389 Added SA payload IKEv1 encoding types to generator 2012-03-20 17:30:41 +01:00
Martin Willi bce8d3be11 Don't set IKEv2 only header flags when using IKEv1 2012-03-20 17:30:41 +01:00
Martin Willi da8cadbd93 Set default IKE header initiator flag in IKEv2 only 2012-03-20 17:30:41 +01:00
Martin Willi c73c832c5a Added an IKEv1 main mode task stub 2012-03-20 17:30:41 +01:00
Martin Willi 4a09d9ee7f Added a stub for a IKEv1 task manager 2012-03-20 17:30:41 +01:00
Martin Willi e69f7dcddf Use task manager as generic interface, renamed implementation to _v2. 2012-03-20 17:30:41 +01:00
Martin Willi 4ac22be0ec Fix unaligned aliasing warning in raw socket 2012-03-20 17:30:41 +01:00
Tobias Brunner f7a8fcedc0 Use enum to define IKE version on peer_cfg_t. 
Replaced all those magic numbers.
 2012-03-20 17:30:41 +01:00
Tobias Brunner 3238faf8e6 Fix init message arrival check. 2012-03-20 17:30:41 +01:00
Tobias Brunner 354ac9579f Compile error fixed. 2012-03-20 17:30:41 +01:00
Tobias Brunner 7f56cf1a65 Message parsing slightly refactored, allows parsing of unencrypted IKEv1 messages. 2012-03-20 17:30:40 +01:00
Tobias Brunner 4ed52db2bb Allow creation of message_t objects for IKEv1 packets. 2012-03-20 17:30:40 +01:00
Tobias Brunner 8a2d079d78 Certificate request payloads can be sent in pretty much any IKEv1 message. 2012-03-20 17:30:40 +01:00
Martin Willi 1bf2971ff2 Implemented limited payload parsing for IKEv1 SA payloads 2012-03-20 17:30:40 +01:00
Martin Willi 3f6d1b13a7 Added additional IKEv1 payload and encoding identifiers 2012-03-20 17:30:40 +01:00
Martin Willi b0b9d18593 Extend sa_payload for IKEv1 support 2012-03-20 17:30:40 +01:00
Tobias Brunner 8f3aea2f77 Message rules for IKEv1 INFORMATIONAL exchange added. 
Since INFORMATIONAL "exchanges" are actually unidirectionally sent
message we don't have any responder rules.
 2012-03-20 17:30:40 +01:00
Tobias Brunner 130c9a54c2 Message rules for IKEv1 AGGRESSIVE exchange added. 
These are basically the same as for ID_PROT but no payloads are expected
to be encrypted (at least if using PSK or signatures for authentication).
 2012-03-20 17:30:40 +01:00
Tobias Brunner 6ba70ba8dd Message rules for IKEv1 ID_PROT exchange added. 
These rules are quite broad and cover main mode with at least PSK and
signature based authentication.
 2012-03-20 17:30:40 +01:00
Tobias Brunner fdb8421f36 Typo fixed. 2012-03-20 17:30:40 +01:00
Martin Willi 837298c590 Use vendor id payload for IKEv1 payloads, too 2012-03-20 17:30:39 +01:00
Martin Willi ecf854a00b Added IKEv1 payload identifiers to "known" payload list 2012-03-20 17:30:39 +01:00
Martin Willi 2fc986182f Handle IKEv1 messages in managers checkout_by_message 2012-03-20 17:30:39 +01:00
Martin Willi e33b41e7b0 Added IKEv1 payload identifiers 2012-03-20 17:30:39 +01:00
Martin Willi 867701bc6d Accept and process IKEv1 messages in receiver 2012-03-20 17:30:39 +01:00
Martin Willi 526b5afb45 Extended IKE header for IKEv1 support 2012-03-20 17:30:39 +01:00
Tobias Brunner ccdd3a4cee Added configure option for the IKEv1 implementation in charon. 2012-03-20 17:30:39 +01:00
Andreas Steffen 3cea55b0c8 corrected description 2012-03-17 23:22:25 +01:00
Andreas Steffen 9da795392e added ikev2/esp-alg-sha1-160 scenario 2012-03-17 23:20:03 +01:00
Andreas Steffen d9b539dc33 added ikev2/esp-alg-md5-128 scenario 2012-03-17 22:56:37 +01:00
Andreas Steffen 584178c3bb version bump to 4.6.3dr2 2012-03-16 22:21:54 +01:00
Andreas Steffen f673958e59 added the strongswan.conf options of the tnc-pdp plugin 2012-03-16 11:14:40 +01:00
Andreas Steffen bd360b3911 keep a copy of refreshed carolCert-ocsp.pem 2012-03-15 07:59:42 +01:00
Andreas Steffen ebf292bad0 refreshed carolCert-ocsp.pem 2012-03-15 07:58:35 +01:00
Andreas Steffen 68c2c7ece4 eliminate unneeded private variable 2012-03-14 21:38:30 +01:00
Andreas Steffen ea2f340e27 added tnc/tnccs-20-pdp scenario 2012-03-14 08:47:12 +01:00
Andreas Steffen 9b8053a63a edited description of tnc/tnccs-11-radius scenario 2012-03-14 08:46:52 +01:00
Andreas Steffen fb5450a435 use MAX_RADIUS_ATTRIBUTE_SIZE constant from radius_message header file 2012-03-14 07:51:56 +01:00
Andreas Steffen c224f7654d version bump to 4.6.3dr1 2012-03-14 07:45:35 +01:00
Andreas Steffen dae4ada4cd make the mppe salt unique 2012-03-14 07:31:19 +01:00
Andreas Steffen 3cff2b598b straightene radius_mppe header file 2012-03-14 06:52:26 +01:00
Andreas Steffen 6fd612913e implemented MS_MPPE encryption 2012-03-13 23:26:15 +01:00
Andreas Steffen 5fdb849293 use predefined Microsoft PEN 2012-03-13 19:23:35 +01:00
Andreas Steffen 4adc3c147e use MAX_RADIUS_ATTRIBUTE_SIZE constant 2012-03-13 18:06:56 +01:00
Andreas Steffen ff4e447954 use RADIUS_TUNNEL_TYPE_ESP defined in header file 2012-03-13 17:00:37 +01:00
Andreas Steffen d90ade8f79 implemented RADIUS Filter-ID attribute 2012-03-13 16:27:18 +01:00
Andreas Steffen dfa3084223 removed double library entry 2012-03-13 16:27:17 +01:00
Andreas Steffen 27a91de071 adapted debug output 2012-03-13 16:27:17 +01:00
Andreas Steffen 70b2bfa5cb keep a list of RADIUS connections with EAP method states 2012-03-13 16:27:17 +01:00
Andreas Steffen 595f44e9a3 apply maximum RADIUS attribute size to outbound EAP messages 2012-03-13 16:27:17 +01:00