 Andreas Steffen
|
d6fc82c12e
|
version bump to final 4.5.2
|
2011-05-14 17:12:50 +02:00 |
|
|
Andreas Steffen
|
636a7d2bc3
|
whitelisting can already be enabled in strongswan.conf
|
2011-05-14 17:11:15 +02:00 |
|
|
Andreas Steffen
|
19ae24f0ea
|
fixed whitelist enabling
|
2011-05-14 17:09:45 +02:00 |
|
|
Andreas Steffen
|
706ae005c6
|
do not call recommendations if recs does not exist
|
2011-05-14 16:36:05 +02:00 |
|
|
Andreas Steffen
|
cc546c3ce6
|
Restrict IMCs and IMVs to call SendMessage()
|
2011-05-14 13:31:16 +02:00 |
|
|
Andreas Steffen
|
8afbc768f3
|
added ikev2/rw-whitelist scenario
|
2011-05-12 21:11:01 +02:00 |
|
|
Andreas Steffen
|
e8a512f800
|
protection against insane IMCs and IMVs
|
2011-05-11 19:34:01 +02:00 |
|
|
Andreas Steffen
|
261d5f22db
|
terminate imc/imv that couldn't be initialized properly
|
2011-05-10 07:03:50 +02:00 |
|
|
Andreas Steffen
|
bb6b2fbb81
|
lock the set_message_types() method for imvs
|
2011-05-09 16:46:08 +02:00 |
|
|
Andreas Steffen
|
375ac27609
|
cosmetics
|
2011-05-09 16:46:08 +02:00 |
|
|
Andreas Steffen
|
52cab8874b
|
fixed debug output
|
2011-05-09 00:49:59 +02:00 |
|
|
Andreas Steffen
|
d6eec513f1
|
adapted state_machine for retry batches
|
2011-05-09 00:49:36 +02:00 |
|
|
Andreas Steffen
|
82b43847f5
|
version bump to 4.5.2rc2
|
2011-05-08 17:56:05 +02:00 |
|
|
Andreas Steffen
|
ff30e06bf0
|
lock the set_message_types() method
|
2011-05-07 17:51:53 +02:00 |
|
|
Andreas Steffen
|
2c3464af46
|
added missing comma
|
2011-05-07 10:22:57 +02:00 |
|
|
Andreas Steffen
|
50a43c79a6
|
refactored tnccs->remove_connection()
|
2011-05-06 15:13:05 +02:00 |
|
|
Andreas Steffen
|
51f259a82d
|
id of non-registered threads defaults to 0
|
2011-05-06 06:22:19 +02:00 |
|
|
Andreas Steffen
|
b58e9783d7
|
version bump to 4.5.2rc1
|
2011-05-02 22:15:43 +02:00 |
|
|
Andreas Steffen
|
ca0341bf85
|
added missing tab
|
2011-04-28 13:30:40 +02:00 |
|
|
Andreas Steffen
|
083fe967e5
|
adapted debug output
|
2011-04-28 13:28:40 +02:00 |
|
|
Andreas Steffen
|
02472e3417
|
do not send messages of type TNC_VENDORID_ANY or subtye TNC_SUBTYPE_ANY
|
2011-04-28 13:28:40 +02:00 |
|
|
Andreas Steffen
|
7d39f3e1b9
|
log unsupported IMC_IMV message types
|
2011-04-28 02:27:08 +02:00 |
|
|
Andreas Steffen
|
e7f21e33b1
|
list registered TNCCS message types
|
2011-04-28 01:35:45 +02:00 |
|
|
Andreas Steffen
|
8af1e3606b
|
fixed loop error in parsing of OCSP basic responses
|
2011-04-26 12:32:19 +02:00 |
|
|
Andreas Steffen
|
6ab1a83059
|
Migrated eap_sim_file to INIT/METHOD macros
|
2011-04-22 11:30:42 +02:00 |
|
|
Andreas Steffen
|
406051ea4e
|
fixed segmentation fault due to null pointer
|
2011-04-22 10:11:16 +02:00 |
|
|
Andreas Steffen
|
4b06f9f265
|
debug type is EAP_TLS
|
2011-04-21 21:04:11 +02:00 |
|
|
Andreas Steffen
|
2778b6644b
|
do not include length field in non-fragmented EAP-PEAP packets
|
2011-04-21 19:52:49 +02:00 |
|
|
Andreas Steffen
|
c223ccd174
|
Win 7 accepts compressed EAP Identity request
|
2011-04-21 19:52:49 +02:00 |
|
|
Andreas Steffen
|
20c428b670
|
added level 3 debug output of forwarded EAP payloads
|
2011-04-21 19:52:49 +02:00 |
|
|
Andreas Steffen
|
a30e025901
|
support unstructuredAddress in left|rightid
|
2011-04-18 23:40:31 +02:00 |
|
|
Andreas Steffen
|
733813c7fb
|
send an empty EAP Ack client message if TLS was successful and handle it on the server
|
2011-04-15 15:02:39 +02:00 |
|
|
Andreas Steffen
|
ad5033a67c
|
Windows 7 expects an uncompressed EAP Identity request
|
2011-04-15 15:02:39 +02:00 |
|
|
Andreas Steffen
|
a9ee43e96a
|
added TLS renegotiation_info extension
|
2011-04-14 16:54:46 +02:00 |
|
|
Andreas Steffen
|
7bc718ff3b
|
version bump to 4.5.2dr5
|
2011-04-11 06:24:31 +02:00 |
|
|
Andreas Steffen
|
1ee7440bce
|
updated NEWS
|
2011-04-11 06:23:52 +02:00 |
|
|
Andreas Steffen
|
1ef7a2ef94
|
with the 2.6.38 kernel alice is preferred for handling the IKE connections
|
2011-04-08 07:50:20 +02:00 |
|
|
Andreas Steffen
|
01b39fe900
|
added EAP-PEAP options to strongswan.conf
|
2011-04-06 20:08:56 +02:00 |
|
|
Andreas Steffen
|
e4444c7b4a
|
define MSCHAPv2 as default phase2 algorithm for EAP-PEAP
|
2011-04-06 20:07:59 +02:00 |
|
|
Andreas Steffen
|
7346114e9c
|
added ikev2/rw-eap-peap-mschapv2 scenario
|
2011-04-06 19:44:58 +02:00 |
|
|
Andreas Steffen
|
35e2a87e1e
|
added ikev2/rw-eap-peap-md5 scenario
|
2011-04-06 19:44:30 +02:00 |
|
|
Andreas Steffen
|
119b0a45a1
|
added ikev2/rw-eap-peap-radius scenario
|
2011-04-06 19:42:52 +02:00 |
|
|
Andreas Steffen
|
30c42831a0
|
allow multi-pass authentication schemes as e.g. MSCHAPv2
|
2011-04-06 19:39:00 +02:00 |
|
|
Andreas Steffen
|
c98ed04de0
|
display EAP identifiers in HEX format
|
2011-04-06 17:34:27 +02:00 |
|
|
Andreas Steffen
|
0ef9744123
|
no EAP identifier offset required in build() function
|
2011-04-06 17:33:01 +02:00 |
|
|
Andreas Steffen
|
915aa1f198
|
added missing function pointers in eap_identity_create_server()
|
2011-04-06 15:47:49 +02:00 |
|
|
Andreas Steffen
|
1be296dfb2
|
implemented the PEAP tunneling protocol as an EAP plugin
|
2011-04-06 14:42:02 +02:00 |
|
|
Andreas Steffen
|
0e83847088
|
added get|set_identifier() methods to eap_tnc_t
|
2011-04-06 07:50:42 +02:00 |
|
|
Andreas Steffen
|
555a8ca238
|
added EAP identifier to debug output
|
2011-04-05 20:53:46 +02:00 |
|
|
Andreas Steffen
|
934216df2d
|
added get|set_identifier() methods to eap_tls_t and eap_ttls_t
|
2011-04-05 18:35:22 +02:00 |
|
|
Andreas Steffen
|
1bee89d339
|
added TLS_PURPOSE_EAP_PEAP
|
2011-04-05 18:16:28 +02:00 |
|
|
Andreas Steffen
|
6f69fb0134
|
implemented get|set_identifier() for tls_eap_t
|
2011-04-05 18:14:58 +02:00 |
|
|
Andreas Steffen
|
2e44a2753f
|
eap_packet_t definition moved to libstrongswan/eap/eap.h
|
2011-04-05 18:04:45 +02:00 |
|
|
Andreas Steffen
|
6f05ad829a
|
added EAP PEAP and MSTLV protocols
|
2011-04-05 17:59:49 +02:00 |
|
|
Andreas Steffen
|
dcfb8177b3
|
implemented get|set_identifier() for eap_sim_t
|
2011-04-05 17:01:28 +02:00 |
|
|
Andreas Steffen
|
125fadb3e0
|
Migrated eap_sim plugin to INIT/METHOD macros
|
2011-04-05 16:12:38 +02:00 |
|
|
Andreas Steffen
|
ab5e087309
|
implemented get|set_identifier() for eap_radius_t
|
2011-04-05 15:57:00 +02:00 |
|
|
Andreas Steffen
|
07313dbe38
|
store EAP identifier on peer side
|
2011-04-05 15:45:51 +02:00 |
|
|
Andreas Steffen
|
1b80fdd9e0
|
implemented get|set_identifier() for eap_aka_t
|
2011-04-05 15:40:20 +02:00 |
|
|
Andreas Steffen
|
b5240b7c64
|
Migrated eap_aka plugin to INIT/METHOD macros
|
2011-04-05 15:20:22 +02:00 |
|
|
Andreas Steffen
|
05aa206dcd
|
implemented get|set_identifier() for eap_gtc_t
|
2011-04-05 14:47:19 +02:00 |
|
|
Andreas Steffen
|
e053961dcc
|
Migrated eap_gtc plugin to INIT/METHOD macros
|
2011-04-05 14:44:26 +02:00 |
|
|
Andreas Steffen
|
4ea837d951
|
implemented get|set_identifier() for eap_mschapv2_t
|
2011-04-05 14:44:09 +02:00 |
|
|
Andreas Steffen
|
dae5a088c5
|
Migrated eap_mschapv2 plugin to INIT/METHOD macros
|
2011-04-05 14:23:59 +02:00 |
|
|
Andreas Steffen
|
689f887147
|
implemented get|set_identifier() for eap_identity_t and eap_md5_t
|
2011-04-05 14:22:58 +02:00 |
|
|
Andreas Steffen
|
adcb221f19
|
log the EAP identifier also for vendor specific EAP methods
|
2011-04-05 13:57:37 +02:00 |
|
|
Andreas Steffen
|
de93154231
|
log the initial value of the EAP identifier
|
2011-04-05 13:54:26 +02:00 |
|
|
Andreas Steffen
|
2f7c12a2f4
|
added get_identifier() and set_identifier() methods
|
2011-04-05 13:32:10 +02:00 |
|
|
Andreas Steffen
|
6d508e8f36
|
version bump to 4.5.2dr4
|
2011-04-02 07:46:16 +02:00 |
|
|
Andreas Steffen
|
bf2233b32d
|
updated ikev2/rw-eap-tnc scenarios
|
2011-04-01 19:44:25 +02:00 |
|
|
Andreas Steffen
|
7aa2d1ca49
|
log TNC PEP decision with level 0
|
2011-03-25 12:49:05 +01:00 |
|
|
Andreas Steffen
|
3f5647819b
|
redirect debug output of imc/imv pairs to syslog
|
2011-03-19 23:23:52 +01:00 |
|
|
Andreas Steffen
|
b03dd40fe6
|
some changes to the ikev2/rw-eap-tnc-11|20 scenarios
|
2011-03-19 16:48:06 +01:00 |
|
|
Andreas Steffen
|
16ee58e036
|
TNC server did not issue a TNC_CONNECTION_STATE_HANDSHAKE NotifyConnection message
|
2011-03-19 16:43:22 +01:00 |
|
|
Andreas Steffen
|
357894c692
|
af-alg plugin does not require hmac and xcbc plugins
|
2011-03-18 09:55:26 +01:00 |
|
|
Andreas Steffen
|
e236ed1e8d
|
added duplicheck.enable and whitelist.enable options to strongswan.conf man page
|
2011-03-18 08:01:09 +01:00 |
|
|
Andreas Steffen
|
ae04b73eb4
|
added af-alg-ikev1/alg-camellia scenario
|
2011-03-18 07:39:21 +01:00 |
|
|
Andreas Steffen
|
ec160f132c
|
added af-alg-ikev2/alg-camellia scenario
|
2011-03-18 07:34:48 +01:00 |
|
|
Andreas Steffen
|
efe7e863e7
|
added the af-alg-ikev1/rw-cert scenario
|
2011-03-17 23:16:41 +01:00 |
|
|
Andreas Steffen
|
d6946481ae
|
added the af-alg-ikev2/rw-cert scenario
|
2011-03-17 22:55:26 +01:00 |
|
|
Andreas Steffen
|
788fc89cc2
|
build the af-alg plugin in the UML test environment
|
2011-03-17 22:53:09 +01:00 |
|
|
Andreas Steffen
|
edd1fc71c2
|
include linux/if_alg.h in the strongSwan distribution
|
2011-03-17 22:52:04 +01:00 |
|
|
Andreas Steffen
|
d32a84fbc4
|
version bump to 4.5.2dr3
|
2011-03-17 20:24:44 +01:00 |
|
|
Andreas Steffen
|
6ca05fe2e9
|
added NEWS for 4.5.2dr2 release
|
2011-03-17 20:24:00 +01:00 |
|
|
Andreas Steffen
|
19897724d3
|
fixed asn1_oid_from_string(), allowing it to handle up to 32 bit node numbers
|
2011-03-12 13:46:14 +01:00 |
|
|
Andreas Steffen
|
4953a78a66
|
fixed parsing of X.509 certificatePolicies
|
2011-03-11 12:38:00 +01:00 |
|
|
Andreas Steffen
|
cfeb687d7f
|
added tcg-at-tpmIdLabel OID
|
2011-03-11 11:48:46 +01:00 |
|
|
Andreas Steffen
|
fc01176a7d
|
output unknown OIDs in dot string notation
|
2011-03-11 11:48:22 +01:00 |
|
|
Andreas Steffen
|
adba3c695d
|
version bump to 4.5.2dr2
|
2011-03-11 09:12:13 +01:00 |
|
|
Andreas Steffen
|
6f2378c1ce
|
added NEWS for the 4.5.2dr1 release
|
2011-03-11 09:11:37 +01:00 |
|
|
Andreas Steffen
|
f813069e89
|
fixed asn1_oid_to_string() conversion
|
2011-03-09 15:36:05 +01:00 |
|
|
Andreas Steffen
|
c54e1bb83b
|
defined some TCG attribute OIDs
|
2011-03-08 07:27:00 +01:00 |
|
|
Andreas Steffen
|
04be19127d
|
support of RSAES-OAEP public keys
|
2011-03-08 07:03:22 +01:00 |
|
|
Andreas Steffen
|
bf10d793f6
|
added id-RSAES-OAEP and id-pSpecified OIDs
|
2011-03-07 22:46:28 +01:00 |
|
|
Andreas Steffen
|
25ed5672a6
|
initiate or route all child configs if they have different names from their parent peer config
|
2011-03-04 07:02:31 +01:00 |
|
|
Andreas Steffen
|
ea1c20d14b
|
initiate or route child configs which don't have a peer config of the same name
|
2011-03-01 22:24:19 +01:00 |
|
|
Andreas Steffen
|
a2ebc1bd69
|
put DN in double quotes
|
2011-03-01 22:19:59 +01:00 |
|
|
Andreas Steffen
|
a79eba2e9c
|
corrected pkcs11 error message
|
2011-03-01 22:19:58 +01:00 |
|
|
Andreas Steffen
|
1a9f2443a2
|
prevent multiple debug outputs in case of non-monolithic plugins
|
2011-02-20 15:18:36 +01:00 |
|
|
Andreas Steffen
|
e7d60a9a06
|
version bump to 4.5.2dr1
|
2011-02-11 07:46:23 +01:00 |
|