 Martin Willi
|
d7376e2ab4
|
Accept NULL identities passed to peer config enumeration
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
0e2cc3fed9
|
Fixed authentication method selection for main mode PSK authentication
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
ea9e047bc5
|
Use virtual IP to substitute dynamic traffic selectors in quick mode
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
156b8662a6
|
Queue Mode Config tasks when required
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
b155084c42
|
Added IKEv1 Mode Config task based on IKEv2 ike_config
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
67a753b95c
|
Use a common function to set IKE_SA to established
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
9f43868a01
|
Implemented responder part of XAUTH task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
d192cc9dc8
|
Implemented initiator part of xauth task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
89afbe58bb
|
Remove unused task swap_initiator method
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
96c9159d96
|
Use a second authentication config to configure XAUTH authentication
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
69adeb5bf2
|
Replace xauth_request task with a new stub where we reimplement it
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
c29fba51aa
|
Some notification errors added to main_mode process_r
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
a064eaa8a6
|
Handling of initial contact
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
1755ac0617
|
Cleaned up quick mode notify processing
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
5adf855e3d
|
Add support for KE payloads in IKEv1 quick mode (PFS)
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
fb8bc6a764
|
Use authenticators in IKEv1 main mode
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
5d1eeec297
|
Handle incoming delete messages
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
c64a4b4f8e
|
Implemented post-authentication certificate handling for IKEv1
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
9ad5b8fa95
|
Cleanup CERT payload constructors
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
0bcdb8e571
|
Implemented pre-authentication certificate handling for IKEv1
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
8c33850615
|
Added task types for IKEv1 certificate handling
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
6ccabe2561
|
Reverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks
|
2012-03-20 17:31:13 +01:00 |
|
|
Tobias Brunner
|
9f80110bc6
|
Install SAs with UDP encapsulation during Quick Mode.
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
aaa8f88906
|
Fix support for plain RSA authentication in IKEv1, both as initiator and responder
|
2012-03-20 17:31:13 +01:00 |
|
|
Martin Willi
|
a974700fc0
|
Fix referencing of multiple CERTREQ payload with IKEv1, other cleanups
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
d82a68642d
|
XAUTH additions for certificates.
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
a874a1f50b
|
signature payload handling.
|
2012-03-20 17:31:12 +01:00 |
|
|
Clavister OpenSource
|
7d9269bfce
|
certificate handling for XAuth responder.
|
2012-03-20 17:31:11 +01:00 |
|
|
Clavister OpenSource
|
07abb470c6
|
IKEv1: Added basic support for INFORMATIONAL exchange types, and for NOTIFY_V1 messages in the 3rd message in quick_mode.
|
2012-03-20 17:31:11 +01:00 |
|
|
Clavister OpenSource
|
4394d96844
|
IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin.
|
2012-03-20 17:31:11 +01:00 |
|
|
Tobias Brunner
|
3bf0be6b08
|
Add NAT-OA payloads during Quick Mode if transport mode is used.
We don't parse them currently, as the Linux kernel does not need them to fix
the IP header checksum.
|
2012-03-20 17:31:11 +01:00 |
|
|
Tobias Brunner
|
29b0cb328a
|
Negotiate UDP encapsulation during Quick Mode if NAT is detected.
|
2012-03-20 17:31:10 +01:00 |
|
|
Tobias Brunner
|
1cc4ec46cf
|
Task added for IKEv1 NAT detection.
There is already support for both Main and Aggressive Mode.
|
2012-03-20 17:31:10 +01:00 |
|
|
Tobias Brunner
|
61e2a1ad8a
|
Create negotiated hasher earlier during Main Mode so it is available for building NAT-D payloads.
|
2012-03-20 17:31:10 +01:00 |
|
|
Clavister OpenSource
|
c5dc9d3383
|
IKEv1 XAuth: Moving the state change to IKE_CONNECTED until after XAuth exchanges are complete.
|
2012-03-20 17:31:10 +01:00 |
|
|
Tobias Brunner
|
06d29be714
|
Handle IKEv1 NAT-T vendor ID payload (only RFC 3947 for now).
|
2012-03-20 17:31:10 +01:00 |
|
|
Tobias Brunner
|
1e97783c99
|
Added payloads for IKEv1 NAT-Traversal negotiation.
|
2012-03-20 17:31:09 +01:00 |
|
|
Clavister OpenSource
|
3fa8db8b59
|
IKEv1 XAuth: Clean up debug prints in xauth_request task.
|
2012-03-20 17:31:09 +01:00 |
|
|
Clavister OpenSource
|
c961d110ab
|
IKEv1 XAuth + CfgMode: Added ability to process CfgMode messages in the xauth task. Migrated away from using the MIGRATE method to switch queues.
|
2012-03-20 17:31:09 +01:00 |
|
|
Clavister OpenSource
|
ef2eac7fb0
|
IKEv1 XAuth: Change the main_mode task to use the new initiate_xauth job instead of the old MIGRATE method.
|
2012-03-20 17:31:09 +01:00 |
|
|
Clavister OpenSource
|
2c49c53186
|
IKEv1 XAuth: Fix main mode to work with XAuth PSK.
|
2012-03-20 17:31:07 +01:00 |
|
|
Martin Willi
|
a2f8fc9711
|
Use a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1
|
2012-03-20 17:31:07 +01:00 |
|
|
Martin Willi
|
abf9784786
|
Pass concrete auth_method to key derivation, as we have that as a responder
|
2012-03-20 17:30:53 +01:00 |
|
|
Martin Willi
|
b4e815354c
|
Map auth_class to auth method and IKEv1 proposal attribute
|
2012-03-20 17:30:53 +01:00 |
|
|
Martin Willi
|
cd0017d452
|
Exchange IKEv1 ESP SA proposal information
|
2012-03-20 17:30:53 +01:00 |
|
|
Martin Willi
|
132d5c56de
|
Exchange IKEv1 SA specific proposal data with SA payload
|
2012-03-20 17:30:52 +01:00 |
|
|
Martin Willi
|
e174e0d445
|
Added not-yet used sa_payload parameters used in IKEv1
|
2012-03-20 17:30:52 +01:00 |
|
|
Clavister OpenSource
|
b03c700d08
|
IKEv1 XAuth: Changed the xauth_request task to use the new MIGRATE status.
|
2012-03-20 17:30:52 +01:00 |
|
|
Clavister OpenSource
|
46897273d7
|
IKEv1 XAuth: Added new "swap_initiator" method to the standard task_t interface. This is needed for when we move a task from the passive queue to the active one. I'm not a huge fan of this method of doing things. Perhaps we should change task_t to have build_i, build_r, process_i, and process_r methods, and call the appropriate one from the task manager, since we have these methods for most tasks anyways.
|
2012-03-20 17:30:52 +01:00 |
|
|
Clavister OpenSource
|
cc50df9e6c
|
IKEv1 XAuth: XAuthInitPreShared working for XAuth initiator (Main Mode responder). Creates USER/PASS request, retrieves the result and sends status.
|
2012-03-20 17:30:52 +01:00 |
|