Andreas Steffen
be1585c587
log received DH groups and PRFs if no common proposal is found
2008-05-22 14:18:44 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Tobias Brunner
31430acc1b
correctly initialize the mediation and connection manager
2008-05-22 11:33:35 +00:00
Martin Willi
e1d2435dbf
fixed parsing of UNKNOWN_PAYLOADs
2008-05-21 21:53:38 +00:00
Andreas Steffen
0005cee527
fixed typo
2008-05-21 21:52:59 +00:00
Martin Willi
85a119bc0b
replying to COOKIE2 mobike notify properly
...
including COOKIE2 ourself after path probing
2008-05-21 17:56:21 +00:00
Martin Willi
cb9edc54eb
using fixed size keys in key derivation for AES-XCBC PRF
2008-05-21 14:58:03 +00:00
Andreas Steffen
8bbb212f3a
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
2008-05-20 21:54:33 +00:00
Martin Willi
da1bc5e860
fixed loading of smp plugin
2008-05-19 14:20:07 +00:00
Tobias Brunner
6f2ba57a4e
added a fixup for addresses from shared libraries in segmentation fault handler
2008-05-19 12:49:35 +00:00
Tobias Brunner
68ac3b44d1
fixed a bug introduced in [3973]
2008-05-19 08:48:44 +00:00
Andreas Steffen
a327ee9589
suppress listing of integrity algorithm if it is undefined
2008-05-17 21:52:58 +00:00
Andreas Steffen
15c508c708
ccm and gcm icv_sizes are accepted both in bits and octets
2008-05-17 21:51:47 +00:00
Tobias Brunner
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
2008-05-16 13:27:21 +00:00
Martin Willi
99968bf0a0
fixed plugin names of EAP modules
2008-05-16 12:14:48 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Martin Willi
89658f6d6c
static leases use 0, not NULL timeout
...
fixed static leases
2008-05-15 09:26:47 +00:00
Martin Willi
782db7edd1
prototype of mediation client database plugin
2008-05-14 07:26:19 +00:00
Martin Willi
0fd4caea66
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
2008-05-14 06:49:31 +00:00
Martin Willi
4d4fc2eaa1
fixed "pool --purge" on mysql
2008-05-13 07:39:24 +00:00
Martin Willi
5373f2a642
fixed lookup for expired leases
...
initializing database if in inconsistent state
2008-05-13 07:24:53 +00:00
Andreas Steffen
f85d02a419
fixed typos
2008-05-11 20:36:14 +00:00
Andreas Steffen
95c297b580
added missing ipcomp DB type definition
2008-05-11 16:41:51 +00:00
Martin Willi
6cf1215e3c
ported IP pool to mysql
2008-05-09 15:01:22 +00:00
Martin Willi
7051ef4091
usable prototype of "ipsec pool" tool
2008-05-09 12:55:41 +00:00
Martin Willi
f3bcd7f041
correctly reassigning valid leases
2008-05-09 12:22:20 +00:00
Tobias Brunner
d4aad55434
IPComp for IKEv2
2008-05-08 16:19:11 +00:00
Martin Willi
0f074a4344
implemented append mode for xcbc, testcase
2008-05-08 14:51:37 +00:00
Martin Willi
affd7a90ba
moved RAW public key support to a separate plugin (pubkey)
2008-05-08 13:16:42 +00:00
Martin Willi
240e727fde
renamed PRF_AES128_CBC to PRF_AES128_XCBC
2008-05-08 12:43:27 +00:00
Martin Willi
5b7ec6d4e0
renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin
2008-05-08 12:11:30 +00:00
Martin Willi
25b12c696b
replaced --with-gid/uid by --with-group/user
...
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi
5302703407
prototype of sql pool administration utility
2008-05-07 09:37:08 +00:00
Martin Willi
5d892343fa
using capset version 1 if a newer is available
2008-05-07 08:46:37 +00:00
Martin Willi
bc1f02a860
providing medation configuration through med_db plugin
2008-05-06 13:44:14 +00:00
Martin Willi
ff6836716c
returning reference pointer on get_ref()
2008-05-06 10:55:42 +00:00
Martin Willi
27d04e055d
implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
...
supporting ike=...-aesxcbc-... in ipsec.conf
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Tobias Brunner
1da06b295f
made some stuff static
2008-04-28 14:19:25 +00:00
Martin Willi
3444390241
supporting multiple comma seperated subnets in left/rightsubnet definition
...
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
Martin Willi
5e6bbf4f77
added _GNU_SOURCE and limits.h to build against glibc-2.8
2008-04-24 13:49:20 +00:00
Martin Willi
c624081a7f
added missing base64 chunk test
2008-04-24 13:28:18 +00:00
Martin Willi
9213ad27c2
replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions
2008-04-24 13:26:22 +00:00
Martin Willi
71983b5cc9
some c-libs require _GNU_SOURCE for pthread_rwlock
2008-04-23 09:45:02 +00:00
Martin Willi
8570c648f1
fixed AES-128 test
2008-04-22 09:00:27 +00:00
Martin Willi
65456bfe33
added AES-128 unit test
2008-04-22 08:33:55 +00:00
Martin Willi
4d18175997
removed status result from crypter interface to be consistent with other crypto interfaces
2008-04-22 07:14:24 +00:00
Andreas Steffen
1d5d6f9667
Hash and URL cosmetics
2008-04-18 21:27:08 +00:00
Martin Willi
fa3fe3c1cf
sql pool prototype
2008-04-18 11:51:58 +00:00
Andreas Steffen