denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,160 Commits 1 Branch 0 Tags
ca037076bfd31578410af900a3a667efa165df78
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi ca037076bf Implemented migration of XAuth task 2012-03-20 17:31:29 +01:00
Martin Willi 5903acd0ff Implemented migration of certificate handling tasks 2012-03-20 17:31:29 +01:00
Martin Willi 451ebecc85 Implemented migration of Main Mode task 2012-03-20 17:31:29 +01:00
Martin Willi 448e2e2945 Check message version before processing it on an IKE_SA 2012-03-20 17:31:29 +01:00
Martin Willi 986237603f Fix ike_version_t enum names 2012-03-20 17:31:29 +01:00
Martin Willi 82b1e5e270 Accept NULL as keymat when generating a message 2012-03-20 17:31:29 +01:00
Martin Willi 53300baded Send correct INVALID_MAJOR_VERSION when receiving packet with unsupported protocol 2012-03-20 17:31:28 +01:00
Martin Willi be83ea7ebf Drop IKEv1 main/aggressive modes if peer to aggressive 2012-03-20 17:31:28 +01:00
Martin Willi 87791f7538 Added description for the xauth-eap plugin 2012-03-20 17:31:28 +01:00
Martin Willi 28e3c6595d Check if a config has been selected before narrowing selectors in quick mode 2012-03-20 17:31:28 +01:00
Martin Willi 85fc1eb640 Added an XAuth plugin that forwards authentication to EAP methods 2012-03-20 17:31:28 +01:00
Martin Willi 747f837cce Added a flag to register local credential sets exclusively, disabling all others 2012-03-20 17:31:28 +01:00
Martin Willi 5d1677f52d Added missing XAuth plugin feature enum names 2012-03-20 17:31:28 +01:00
Martin Willi 438a8d785f Added a TODO for creating IKE_SAs with unsupported protocol version 2012-03-20 17:31:28 +01:00
Martin Willi 38bb727c06 Don't accept IKEv2 packets if IKEv2 disabled 2012-03-20 17:31:28 +01:00
Martin Willi 7d788af0a0 Don't include ikev1/ikev2 subfolders in build when using --disable-ikev1/ikev2 2012-03-20 17:31:28 +01:00
Martin Willi 326a94232d Moved eap/xauth classes out of protocol specific subdirectories 2012-03-20 17:31:27 +01:00
Martin Willi 3b08de850a Removed obsolete task header inclusion in IKE_SA 2012-03-20 17:31:27 +01:00
Martin Willi 873df908cc Moved MOBIKE task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 26eee421b4 Check in task manager if we have to requeue IKE tasks in a non-first keyingtry 2012-03-20 17:31:27 +01:00
Martin Willi cedb412e5a Moved IKE_SA reauth task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi dab60d6411 Moved IKE_SA rekey task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 3ed148b37e Moved IKE_SA delete task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 83c5fda053 Moved CHILD_SA delete task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 463a73cc0f Moved CHILD_SA rekey task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi fe43d9a237 Moved CHILD_SA initiate task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi a60daa07f6 Moved IKE_SA initiate task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 244d715de5 Moved liveness checking task creation to protocol specific task manager 2012-03-20 17:31:27 +01:00
Martin Willi 7d0a3a427d Factories honor charon IKEv1/IKEv2 protocol support flags 2012-03-20 17:31:26 +01:00
Martin Willi e51a28fda8 Added a --disable-ikev2 option to disable IKEv2 support in charon 2012-03-20 17:31:26 +01:00
Martin Willi 15a682f4c2 Separated libcharon/sa directory with ikev1 and ikev2 subfolders 2012-03-20 17:31:26 +01:00
Martin Willi 2e3c9f8799 Renamed ike_vendor_v1 to isakmp_vendor 2012-03-20 17:31:26 +01:00
Martin Willi 79d6fc7f72 Renamed ike_natd_v1 to isakmp_natd 2012-03-20 17:31:26 +01:00
Martin Willi 824dc0adad Renamed ike_cert_pre_v1 to isakmp_cert_pre 2012-03-20 17:31:26 +01:00
Martin Willi 0aa2af5efc Renamed ike_cert_post_v1 to isakmp_cert_post 2012-03-20 17:31:26 +01:00
Martin Willi 26a758ffcb Fixed fix for XAuth plugin feature matching 2012-03-20 17:31:25 +01:00
Martin Willi 8833068877 Doxygen fixes 2012-03-20 17:31:25 +01:00
Martin Willi ef32c6866e Removed obsolete XAuth job 2012-03-20 17:31:25 +01:00
Martin Willi 26b02f50f4 Always use a transform number of 1 when encoding a single transform 2012-03-20 17:31:25 +01:00
Martin Willi 5d0458af0a Another set of cleanups in message.c 2012-03-20 17:31:25 +01:00
Martin Willi 2ee83c2778 Fix XAuth plugin feature matching 2012-03-20 17:31:25 +01:00
Martin Willi ef175c92d9 Initiate IKE_ANY configurations with IKEv2 2012-03-20 17:31:25 +01:00
Martin Willi ac009df132 Pass IKE version to peer config enumerator, filter configs 2012-03-20 17:31:25 +01:00
Martin Willi d94c923648 Support an "any" IKE version for both IKEv1 or IKEv2 2012-03-20 17:31:25 +01:00
Martin Willi b9a707e696 Some coding style cleanups 2012-03-20 17:31:25 +01:00
Martin Willi 2f58f6cba1 Fixed notify enum names 2012-03-20 17:31:25 +01:00
Martin Willi bf5b1d9e73 Send different notifies if quick mode fails 2012-03-20 17:31:24 +01:00
Martin Willi b64d6423b1 Support flushing of task queue after building message in task fails 2012-03-20 17:31:24 +01:00
Martin Willi fceb20f390 Consider notify errors fatal only during main mode 2012-03-20 17:31:24 +01:00
Martin Willi 767966e70b Delete CHILD_SA if installing SA in third message fails 2012-03-20 17:31:24 +01:00
Martin Willi 53816600ff Added a quick_delete task flag to enforce delete, even if CHILD_SA not found 2012-03-20 17:31:24 +01:00
Martin Willi 429d95fef2 Send delete if Main Mode authentication fails as initiator 2012-03-20 17:31:24 +01:00
Martin Willi 5762c0efeb Send notifies in all error cases of Main Mode 2012-03-20 17:31:24 +01:00
Martin Willi ca26065745 Add some additional IKEv1 notify types 2012-03-20 17:31:23 +01:00
Martin Willi a4cc071364 Do not trust unprotected INFORMATIONALS, just print that we got one 2012-03-20 17:31:23 +01:00
Martin Willi daf7e6bc36 Use (as client) and verify (as server) configured XAuth identities 2012-03-20 17:31:23 +01:00
Martin Willi 7a7efbf9d8 Added an identity getter to XAuth methods to query the actually used identity 2012-03-20 17:31:23 +01:00
Martin Willi 5f6a37eb9b Be a little more verbose about XAuth configs in ipsec statusall 2012-03-20 17:31:23 +01:00
Martin Willi 21a4fc832e Pass ipsec.conf xauth_identity option via stroke to charon configurations 2012-03-20 17:31:23 +01:00
Martin Willi 10a6a5acff Store Main Mode identity even if XAuth-only is used for authentication 2012-03-20 17:31:23 +01:00
Martin Willi f5e5c5edbd Added an XAUTH identity to use or require for XAuth authentication 2012-03-20 17:31:23 +01:00
Martin Willi bdadc5aee2 Check authorization constraints after main mode completed 2012-03-20 17:31:23 +01:00
Martin Willi fd2a491b31 Stop checking once a key size constraint is not fulfilled 2012-03-20 17:31:23 +01:00
Martin Willi ac3bc42e63 Save authentication info collected during main mode authentication 2012-03-20 17:31:23 +01:00
Martin Willi b24b73b7f3 Flush auth configs, if enabled, for both IKEv1 and IKEv2 2012-03-20 17:31:23 +01:00
Martin Willi 4ac137135a Fixed return value if SIG payload missing 2012-03-20 17:31:22 +01:00
Martin Willi 00d8823242 Show auth method of config we are looking for in main mode 2012-03-20 17:31:22 +01:00
Martin Willi 7b1e15ac4e Fixed IKEv1 prf+ keymat expansion beyond 320 bits 2012-03-20 17:31:22 +01:00
Martin Willi 3ba15819ed Remove executable flag from source code files 2012-03-20 17:31:22 +01:00
Martin Willi 91ca35a2d2 Removed IKEv1 specific code from child_delete task 2012-03-20 17:31:22 +01:00
Martin Willi c459dae556 Use IKEv1 specific tasks to close Quick Mode SAs 2012-03-20 17:31:22 +01:00
Martin Willi 5f10938592 Added a dedicated IKEv1 task to delete CHILD_SAs 2012-03-20 17:31:22 +01:00
Martin Willi 07095794a1 Close IKE_SA directly after sending the delete 2012-03-20 17:31:22 +01:00
Martin Willi 0f5b6c6831 Removed IKEv1 specific code from ike_delete task 2012-03-20 17:31:22 +01:00
Martin Willi 5f23be840b Use the IKEv1 specific delete in IKEv1 SAs 2012-03-20 17:31:22 +01:00
Martin Willi 8db202f1b0 Added a dedicated delete task for IKEv1 IKE_SAs 2012-03-20 17:31:21 +01:00
Martin Willi 137c06babf Use a single task_type_t enum name for ME and non-ME variant 2012-03-20 17:31:21 +01:00
Martin Willi 7b25135ecf Send certificates and requests when using Hybrid authentication 2012-03-20 17:31:21 +01:00
Martin Willi d1b986eb48 Look for an XAuth authentication config both in the first and the second round 2012-03-20 17:31:21 +01:00
Martin Willi d548435a02 Added hybrid authentication support to Main Mode 2012-03-20 17:31:21 +01:00
Martin Willi 51da01a722 Support encoding of Hybrid initiator authentication method 2012-03-20 17:31:21 +01:00
Martin Willi 29101ce978 Added a IKEv1 hybrid authenticator based on Pubkey/PSK authenticators 2012-03-20 17:31:21 +01:00
Martin Willi 0b0191e143 Ignore additional TRANSACTION request if we already queued one 2012-03-20 17:31:21 +01:00
Martin Willi fce566a876 Keep a history of received response hashes to detect late retransmissions 
If we receive an old response and we already sent out the next request,
we must be able to identify that it is not the response to the new
request.
 2012-03-20 17:31:20 +01:00
Martin Willi 3643179535 Narrow down received and configured traffic selector to a common subset 2012-03-20 17:31:20 +01:00
Martin Willi 7b34de45c3 Don't send a retransmit for a request we never have sent a response 2012-03-20 17:31:20 +01:00
Martin Willi f5ef357791 Print unsigned IKEv1 message IDs 2012-03-20 17:31:20 +01:00
Martin Willi 9f10b95a3b Added a bunch of well known IKEv1 vendor IDs to database 2012-03-20 17:31:20 +01:00
Martin Willi 156cd8827f Use a generic IKEv1 vendor ID database to send and receive vendor IDs 2012-03-20 17:31:20 +01:00
Martin Willi 360c3394cf Fixed compiler warning (set but unused variable) 2012-03-20 17:31:20 +01:00
Martin Willi f91b6ac77a Queue a TRANSACTION message for later processing if Main Mode not yet completed 2012-03-20 17:31:20 +01:00
Martin Willi e33510f8a3 Fixed leak of shared keys in xauth-generic plugin 2012-03-20 17:31:20 +01:00
Martin Willi 45956d15ea Free list after removing the last local credential set, fixes a leak report 2012-03-20 17:31:19 +01:00
Martin Willi 226b0f36c7 Fixed SPI size calculation in DELETE payload 2012-03-20 17:31:19 +01:00
Martin Willi 41fbde4544 Reset task manager state when build() completes an exchange (quick mode) 2012-03-20 17:31:19 +01:00
Martin Willi 92aa6e0255 Include COOKIES in IKEv1 delete payloads 2012-03-20 17:31:19 +01:00
Martin Willi 0acb520758 Support IKEv1 SPIs in IKEv1 delete payload 2012-03-20 17:31:19 +01:00
Martin Willi c9fc577a8a Use version specific DELETE payload identifier in ike_delete task 2012-03-20 17:31:19 +01:00
Martin Willi 8ef2bae4db Activate DELETE tasks when queued 2012-03-20 17:31:19 +01:00
Martin Willi 5dec456b69 Fix IKEv1 DELETE subtask creation and processing 2012-03-20 17:31:19 +01:00