 Martin Willi
|
bff9f824ed
|
Verify EAP-SIM/AKA AT_MAC before processing any attributes
|
2009-11-30 10:00:06 +01:00 |
|
|
Martin Willi
|
b04e72c21c
|
SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response
|
2009-11-30 09:27:39 +01:00 |
|
|
Martin Willi
|
5a91fd4536
|
Invoke attribute/key hooks from libsimaka
|
2009-11-30 09:27:34 +01:00 |
|
|
Martin Willi
|
8434c88b5e
|
Extended SIM manager by hooks, currently featuring attribute and key hooks
|
2009-11-30 09:27:26 +01:00 |
|
|
Martin Willi
|
fb1ae8da52
|
Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA
|
2009-11-30 09:27:14 +01:00 |
|
|
Martin Willi
|
c56d958243
|
Handle NOT_SUPPORTED or other errors properly in get_quintuplet
|
2009-11-30 09:26:35 +01:00 |
|
|
Martin Willi
|
2b2c69e992
|
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header
|
2009-11-26 16:03:06 +01:00 |
|
|
Martin Willi
|
52fd0ef9e0
|
Added NEWS about SHA2 changes
|
2009-11-26 10:39:26 +01:00 |
|
|
Martin Willi
|
6780edc07e
|
Use full algorithm name for SHA384/512 HMACs
|
2009-11-26 10:39:26 +01:00 |
|
|
Martin Willi
|
6546482a68
|
Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword
|
2009-11-26 10:39:25 +01:00 |
|
|
Martin Willi
|
eebfa73fd5
|
Install SHA256_128 auth algorithm with specified 128 bit truncation
|
2009-11-26 10:39:25 +01:00 |
|
|
Martin Willi
|
2379fdba1e
|
Updated XFRM linux header, includes specified truncations for auth algos
|
2009-11-26 10:39:25 +01:00 |
|
|
Martin Willi
|
5be75c2cb1
|
Added support for IPv6 source route installation
|
2009-11-26 10:31:00 +01:00 |
|
|
Martin Willi
|
387a6e6c32
|
Check existing path in mobike probing only if we still have a route
|
2009-11-26 10:30:59 +01:00 |
|
|
Martin Willi
|
06f02f993c
|
Do not recreate existing create_child subtask when retrying with different DH group
|
2009-11-23 13:50:01 +01:00 |
|
|
Martin Willi
|
0d1d19b99d
|
Avoid potentially unaligned half-word read
|
2009-11-23 13:49:19 +01:00 |
|
|
Martin Willi
|
dd326c114f
|
Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled
|
2009-11-20 14:36:24 +01:00 |
|
|
Martin Willi
|
832f283150
|
Use status_t return value for get_quintuplet() dummy implementations
|
2009-11-20 11:02:06 +01:00 |
|
|
Martin Willi
|
10bc5d96cb
|
Move comment out of register_printf_function test
|
2009-11-19 14:37:34 +01:00 |
|
|
Martin Willi
|
80b44cd71a
|
Message stringification supports more detailed EAP payload information
|
2009-11-18 10:37:46 +01:00 |
|
|
Martin Willi
|
1860bfa2ea
|
Correctly enumerate attributes to request as initiator with the actually requesting handler
|
2009-11-17 17:51:30 +01:00 |
|
|
Martin Willi
|
1427c93fcd
|
Fixed memleak in attribute handling
|
2009-11-17 15:55:45 +00:00 |
|
|
Martin Willi
|
d674c2ace0
|
attr plugin supports any custom attribute type having a v4/v6 IP under the charon.plugins.attr namespace
|
2009-11-17 15:53:57 +00:00 |
|
|
Martin Willi
|
3797b8e767
|
Support enumeration of key/value pairs in a section of strongswan.conf
|
2009-11-17 15:52:36 +00:00 |
|
|
Martin Willi
|
86813bef12
|
Whitelist register_printf_specifier in leak detective
|
2009-11-17 15:51:57 +00:00 |
|
|
Martin Willi
|
b5a2055fb1
|
Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler
|
2009-11-17 14:51:50 +01:00 |
|
|
Martin Willi
|
e6cf060275
|
Encrypt payloads with missing rule, fix insertion of non-encrypted payloads
|
2009-11-12 14:52:12 +00:00 |
|
|
Martin Willi
|
074444972a
|
Build libsimaka with libtool, as we require a PIC-enabled version
|
2009-11-12 13:37:07 +00:00 |
|
|
Martin Willi
|
098466039f
|
Fix word alignement in memxor() on 64-bit architectures
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
addfeeff9c
|
Do not complain about missing payload order rules for private use payloads
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
5bfe1b2529
|
Properly initialize attribute encoding/length values
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
733538a421
|
Identation/whitespace cleanups
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
82713deafd
|
Simplified vendor ID payload interface
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
20d144e72f
|
Invoke message hook before generation, allowing plugins to mangle it
|
2009-11-12 13:37:06 +00:00 |
|
|
Martin Willi
|
ee3d4ef801
|
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
|
2009-11-12 13:10:30 +00:00 |
|
|
Martin Willi
|
f6bbcec390
|
Use register_printf_specifier instead of deprecated register_printf_function, if available
|
2009-11-12 13:16:46 +01:00 |
|
|
Martin Willi
|
0850e33518
|
Fixed compiler warning about missing return value
|
2009-11-12 11:17:02 +01:00 |
|
|
Martin Willi
|
1a86be6e48
|
Support variable RES length in AKA quintuplets
|
2009-11-12 10:34:02 +01:00 |
|
|
Martin Willi
|
15b65bf15d
|
Ported pseudonym/reauth functionality to EAP-AKA
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
3374cb0f44
|
Passing other as NULL should not always result in a match if me matches
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
947b03fd09
|
Use new identity constructor in EAP-SIM
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
324528700d
|
Added identification constructor using a chunk of data, guessing id type
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
0109846aa1
|
Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
eb7bf91e12
|
Added option to disable identity requests completely (old behavior)
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
0107f5b687
|
Fixed replacing existing reauthentication data
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
2dbac2ab9c
|
Initiate full authentication if reauthentication identity is unknown
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
edcb2dd35b
|
Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
acb561373a
|
eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data
|
2009-11-12 10:34:01 +01:00 |
|
|
Martin Willi
|
c5ec0f48e7
|
Initial support for fast reauthentication in EAP-SIM
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
454b59c5fd
|
EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
e1a8729de0
|
Fallback to permanent identity request if pseudonym mapping failed
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
c2f8c6a11e
|
Query triplet/quintuplet functions with permanent identity only,
extended sim_provider with a is_pseudonym() function.
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
2d112ca310
|
eap-sim-file plugin can store pseudonym information volatile in memory
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
8aad8f6faf
|
Some coding style cleanups
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
0328fe940d
|
Impemented basic pseudonym support in EAP-SIM
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
f81760dcd1
|
A SIM/AKA message can be parsed twice, without and with decryption
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
0e20893d81
|
Pass SIM/AKA crypto helper to constructor of message
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
13f418b442
|
Added a doxygen group for libsimaka, some cleanups
|
2009-11-12 10:34:00 +01:00 |
|
|
Martin Willi
|
bcf8a0ff94
|
Added missing hasher include
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
4735965fc0
|
EAP servers check if the received EAP message was expected
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
02f785b050
|
Use existing triplet length definitions
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
aea334ec1c
|
Splitted EAP-AKA in peer and server implementations, use libsimaka helper library
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
6d90881573
|
Proper handling of non-skippable attributes and client error codes in EAP-SIM
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
fad4e5f393
|
Centralized SIM/AKA notifications and client errors
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
e9c03f5243
|
Use the EAP-SIM/AKA crypto helper in EAP-SIM
|
2009-11-12 10:33:59 +01:00 |
|
|
Martin Willi
|
55916dcc9e
|
libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA
|
2009-11-12 10:33:58 +01:00 |
|
|
Martin Willi
|
ac4dd5439b
|
Migrated EAP-SIM to libsimaka, separated server/peer implementations
|
2009-11-12 10:33:58 +01:00 |
|
|
Martin Willi
|
f8330d0395
|
Added a libsimaka library with shared message handling code for EAP-SIM/AKA
|
2009-11-12 10:33:58 +01:00 |
|
|
Martin Willi
|
44e8eea17a
|
sim_provider_t API gained support for pseudonym/fast reauthentication
|
2009-11-12 10:33:58 +01:00 |
|
|
Martin Willi
|
8f364b5433
|
sim_card_t API gained support for pseudonym/fast reauthentication
|
2009-11-12 10:33:58 +01:00 |
|
|
Martin Willi
|
5269150ebc
|
If cross-compiling, test for the existence of pthread_condattr_setclock only
|
2009-11-09 15:07:01 +01:00 |
|
|
Martin Willi
|
67c3875c02
|
Install bypass policies after creating XFRM netlink socket, loading xfrm_user module
|
2009-11-09 15:07:00 +01:00 |
|
|
Martin Willi
|
4a38687ae7
|
Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface
|
2009-10-30 11:19:32 +01:00 |
|
|
Martin Willi
|
140816b055
|
Query secrets in EAP-MD5 with me/other identities, fixing lookup in NetworkManager
|
2009-10-26 08:47:40 +01:00 |
|
|
Martin Willi
|
3dc40325d5
|
Show the number of times a lock was acquired in lock profiler
|
2009-10-23 08:12:17 +02:00 |
|
|
Martin Willi
|
c5f36782ca
|
Hand out shared secret of load tester for all identities
|
2009-10-22 16:44:07 +02:00 |
|
|
Martin Willi
|
4952dc11da
|
Fixed all doxygen warnings
|
2009-10-22 14:34:10 +02:00 |
|
|
Martin Willi
|
80252c8a46
|
Store return value of getc() in an int to correctly test it against EOF
|
2009-10-22 13:13:06 +02:00 |
|
|
Martin Willi
|
0d73fe88b2
|
Load-testers PSK is used for all purposes, including EAP authentication
|
2009-10-20 15:54:13 +02:00 |
|
|
Martin Willi
|
1eab115a8b
|
Do not null-terminate url in hash-and-url payloads
|
2009-10-16 09:21:28 +02:00 |
|
|
Martin Willi
|
b42bfc79d9
|
Added NEWS about streamlined plugin names
|
2009-10-15 11:12:13 +02:00 |
|
|
Martin Willi
|
f48ceeb1d1
|
Renamed plugin configuration sections to the actual plugin name
|
2009-10-15 10:36:17 +02:00 |
|
|
Martin Willi
|
c4d53fe06b
|
Streamlined EAP plugins to use a dash between eap-method, as used in all other places
|
2009-10-15 10:36:17 +02:00 |
|
|
Martin Willi
|
b76b867c70
|
Renamed --enable-load-tests to --enable-load-tester, like the plugin itself
|
2009-10-15 10:36:17 +02:00 |
|
|
Martin Willi
|
406f335938
|
Updated configuration directive of resolve plugin, renamed from resolv_conf
|
2009-10-15 10:14:10 +02:00 |
|
|
Martin Willi
|
d38eb3355e
|
Migrated the lease_history option to the new libstrongswan plugin namespace
|
2009-10-15 10:14:10 +02:00 |
|
|
Martin Willi
|
bb56e3f962
|
Improved debugging log in SIM triplet lookup
|
2009-10-14 09:55:14 +02:00 |
|
|
Martin Willi
|
a2b50c5d60
|
Fixed assignment of get_triplet() dummy implementation
|
2009-10-13 11:05:01 +02:00 |
|
|
Martin Willi
|
073e7dc062
|
Merged SIM/USIM manager/card/provider, avoids code duplication
|
2009-10-12 14:40:21 +02:00 |
|
|
Martin Willi
|
f7897b64f6
|
Added ${shlibs:Depends} dependency to Debian package
|
2009-10-12 14:06:51 +02:00 |
|
|
Martin Willi
|
3690d31a2a
|
Added .gitignore for NM Debian package build
|
2009-10-12 14:06:51 +02:00 |
|
|
Martin Willi
|
68d23d2401
|
Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins
|
2009-10-12 09:51:46 +02:00 |
|
|
Martin Willi
|
9b2942f68d
|
Stroke plugin interprets NULL identities as ID_ANY in shared key lookup
|
2009-10-12 09:51:45 +02:00 |
|
|
Martin Willi
|
55b045abb5
|
Added NEWS about EAP-AKA split
|
2009-10-09 13:31:19 +02:00 |
|
|
Martin Willi
|
5d5e2853b6
|
SIM card interface takes IMSI as parameter (same as in USIM)
|
2009-10-09 13:02:20 +02:00 |
|
|
Martin Willi
|
31f5280cee
|
Fixed USIM parameter description
|
2009-10-09 13:02:20 +02:00 |
|
|
Martin Willi
|
424ddf801c
|
Do not use monotonic time for AKA sequence numbers, it has an undefined starting point
|
2009-10-09 13:02:20 +02:00 |
|
|
Martin Willi
|
655728621b
|
Use constants instead of sizeof(), sizeof() does not work for function arguments
|
2009-10-09 13:02:20 +02:00 |
|
|
Martin Willi
|
aba93dcc32
|
Calculate missing CK/IK values in USIM
|
2009-10-09 13:02:20 +02:00 |
|
|
Martin Willi
|
aca7ba0ffc
|
Link 3gpp2 EAP-AKA plugin to libgmp
|
2009-10-09 13:02:20 +02:00 |
|