denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,500 Commits 1 Branch 0 Tags
b12734d86af541f1cac63285a1b26fe73183c7c1
Commit Graph
925 Commits
Author SHA1 Message Date
Andreas Steffen 7e85bbda19 implement MAP client certificate authentication 2011-08-12 15:16:05 +02:00
Andreas Steffen c7b8512cc0 cosmetics 2011-08-12 13:18:49 +02:00
Andreas Steffen 537205fa9d implemented enforcement-report metadata 2011-08-12 13:16:02 +02:00
Andreas Steffen ae8a984b5a use EAP identity 2011-08-12 11:34:56 +02:00
Andreas Steffen d6a69acba4 defined mapping of IKEv2 identity types to IF-MAP identity types 2011-08-12 11:07:29 +02:00
Tobias Brunner 9af9c6772b If we close a duplicate SA, it is also no authentication failure. 2011-08-12 10:11:39 +02:00
Tobias Brunner d9eaecd373 If local authentication fails, it is not really a peer auth failure. 2011-08-12 10:04:02 +02:00
Tobias Brunner ccbe380377 Throw an alert if authentication of the peer fails (not only for initiator). 2011-08-12 10:04:02 +02:00
Tobias Brunner 7ab19d571d Throw an alert when the peer address cannot be resolved during initiation. 2011-08-12 09:59:27 +02:00
Tobias Brunner ff4b25f9b7 Throw an alert via bus_t when remote authentication fails. 2011-08-12 09:59:27 +02:00
Andreas Steffen d0a9173ec9 support capability metadata 2011-08-11 15:06:19 +02:00
Andreas Steffen 3205e3be7a define server_cert in strongswan.conf 2011-08-10 09:29:35 +02:00
Andreas Steffen dcae107b5a getting rid of axis2.html configuration 2011-08-10 09:29:34 +02:00
Andreas Steffen 9d690477c9 output PEP device addresses as metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen e37f1fd6b7 classify an EAP identity as a username 2011-08-10 09:29:34 +02:00
Andreas Steffen e016913725 refactoring of tnc-ifmap plugin 2011-08-10 09:29:34 +02:00
Andreas Steffen 5144463634 publish all IKE_SA metadata after tnc-ifmap plugin reload 2011-08-10 09:29:34 +02:00
Andreas Steffen 8c78772a05 implemented tnc-ifmap reload method 2011-08-10 09:29:34 +02:00
Andreas Steffen cc7cfbc16e moved ifmap code into tnc_ifmap_soap 2011-08-10 09:29:34 +02:00
Andreas Steffen 2c5e71b0c5 free device_name in destroy() 2011-08-10 09:29:34 +02:00
Andreas Steffen 1bae34e1a0 set device_name via strongswan.conf 2011-08-10 09:29:34 +02:00
Andreas Steffen d0236f9353 fixed delete filters 2011-08-10 09:29:34 +02:00
Andreas Steffen a3686ce33a check for publishReceived response 2011-08-10 09:29:34 +02:00
Andreas Steffen 046db4f242 added authenticated-by metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen 55c0c5956c first working publish of metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen 024d2522d5 added some XML syntax checking 2011-08-10 09:29:34 +02:00
Andreas Steffen d13db9f99d implemented purgePublisher command 2011-08-10 09:29:34 +02:00
Andreas Steffen 875f217625 fixed typo 2011-08-10 09:29:34 +02:00
Andreas Steffen 9d267f7111 combined newSession and newSessionResult 2011-08-10 09:29:33 +02:00
Andreas Steffen 7ab854adf9 newSession and endSession work 2011-08-10 09:29:33 +02:00
Andreas Steffen c77af76807 created tnc-ifmap plugin 2011-08-10 09:29:33 +02:00
Tobias Brunner 1d5aae4b53 Fixed syntax in MySQL script. 2011-08-08 16:15:28 +02:00
Martin Willi efee3ed80f Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name 2011-08-08 13:36:56 +02:00
Martin Willi 4c199e6f81 Add a non-clonig variant of eap_payload_create_data 2011-08-08 13:36:55 +02:00
Tobias Brunner 6b444c5934 Migrated peer_cfg_t to INIT/METHOD macros. 2011-08-03 15:17:34 +02:00
Martin Willi 61e13630f8 Show error code of Microsoft specific error notify 2011-08-03 12:01:15 +02:00
Martin Willi 06912a5eb4 Added Microsoft specific error notify 2011-08-03 12:00:50 +02:00
Tobias Brunner 846f846a39 Added tnc Doxygen group to libcharon. 2011-08-03 11:01:08 +02:00
Martin Willi caa451557f ha plugin does not need Linux headers anymore 2011-08-02 17:08:41 +02:00
Martin Willi 6e5118e9e3 Check for kernel version and use appropriate jhash version in HA plugin 2011-08-02 17:00:59 +02:00
Tobias Brunner 5baaaa5ed5 Properly initialize ike_sa_t. 2011-08-01 13:08:15 +02:00
Tobias Brunner acf380bc05 Properly initialize the UCI plugin. 2011-08-01 13:06:09 +02:00
Tobias Brunner aeb6590bda Build libtncif on Android. 2011-07-29 17:41:14 +02:00
Tobias Brunner 088d73b7b0 File lists in Android.mk files updated. 2011-07-29 17:40:29 +02:00
Tobias Brunner 241cf8e791 Update fallback drop policies if required. 2011-07-29 12:34:51 +02:00
Tobias Brunner f1c1965d64 Install fallback drop policies for all three directions. 2011-07-28 16:56:15 +02:00
Tobias Brunner d7a59f1976 Install fallback drop policies to avoid transmitting unencrypted packets. 
During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed.  In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.
 2011-07-27 13:44:33 +02:00
Tobias Brunner fbedc6a45b Remove policies in kernel interfaces based on their priority. 
This allows to unroute a connection while the same connection is
currently established.  In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
 2011-07-27 13:41:35 +02:00
Martin Willi 5d6b981572 Inherit authentication information during IKE_SA rekeying 2011-07-25 14:19:17 +02:00
Tobias Brunner 446ff101c2 Added a log message when roam jobs get created. 2011-07-21 19:44:42 +02:00