 Martin Willi
|
719c33b41a
|
Send INITIAL_CONTACT even if we have a unique policy
|
2011-01-10 11:54:10 +01:00 |
|
|
Andreas Steffen
|
5fee822a93
|
implemented parsing of TNCCS 1.1 messages
|
2011-01-09 10:00:54 +01:00 |
|
|
Andreas Steffen
|
33749b879c
|
send notifyConnectionChange() to IMCs
|
2011-01-09 10:00:13 +01:00 |
|
|
Andreas Steffen
|
8235528840
|
generate TNCCS-Error messages
|
2011-01-08 02:17:42 +01:00 |
|
|
Andreas Steffen
|
1c4b4f76ad
|
created process() method for TNCCS messages
|
2011-01-08 02:17:42 +01:00 |
|
|
Martin Willi
|
44e513a320
|
Added support for trustchain key strength checking to rightauth option
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
6367de28ad
|
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
1ed482d808
|
Fix nonce comparison in rekey collisions, lowest nonce loses
|
2011-01-07 15:51:35 +01:00 |
|
|
Andreas Steffen
|
3a04dfaaf6
|
corrected naming of tnccs_reason_strings_msg_t object
|
2011-01-07 07:18:42 +01:00 |
|
|
Andreas Steffen
|
87fd83a91e
|
do not forget to advance node
|
2011-01-07 07:17:52 +01:00 |
|
|
Andreas Steffen
|
3e348daae5
|
fixed cert_validator_t:validate interface
|
2011-01-07 05:41:01 +01:00 |
|
|
Andreas Steffen
|
d9e21bf180
|
implemented TNCCS 1.1 without libtnc
|
2011-01-07 05:29:59 +01:00 |
|
|
Martin Willi
|
6f5892f5c7
|
Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACT
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
a4a1e24d37
|
Send INITIAL_CONTACT for the first IKE_SA if it has a unique policy
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
240bd7dbb7
|
Migrated ike_sa_manager_t to INIT/METHOD macros, some cleanups
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
2e90006f96
|
Show base CRL of delta CRLs in listcrls
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
3a89b3c52f
|
Provide CRLs received in CERT payloads to trustchain verification
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
b3d359e58f
|
Use a generic getter for all numerical X.509 constraints
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
5dba5852fc
|
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
1038d9fee5
|
Added a null-safe strdup variant
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5f15faebc8
|
Include the used reserved bytes from ID payloads in AUTH calculation
|
2011-01-05 16:45:53 +01:00 |
|
|
Martin Willi
|
502edf425f
|
Migrated psk/pubkey_authenticators to INIT/METHOD macros
|
2011-01-05 16:45:53 +01:00 |
|
|
Martin Willi
|
54f2bdd656
|
Added substructure enumerators to sa_payload, proposal_substructure
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
9ca5d0280e
|
Moved check if packet already encoded to ike_sa, avoids message() hook invocation twice
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
2813be18f5
|
Added a message method to set the "higher version supported" flag
|
2011-01-05 16:45:52 +01:00 |
|
|
Martin Willi
|
166a2a45d9
|
Added reserved bit mangling wrapper functions to message
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
e662d62a76
|
Implemented a generic payload field lookup function
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
bf029696c6
|
Reserved field get parsed/generated like any other bit/byte field
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
c93c7a7560
|
Added member fields for reserved bits and bytes in all payloads
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
1b671248c2
|
Migrated vendor_id_payload to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
102adb9bfd
|
Migrated ts_payload to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
1f5b2bec4b
|
Use enumerator instead of deprecated iterator
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
9f8ecff2e2
|
Migrated transform_substructure to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
6844c156fc
|
Removed obsolete clone mehtod from proposal_substructure
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
6b69c03d13
|
Migrated transform_attribute to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
423745b652
|
Migrated traffic_selector_substructre to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
3f0a2af2a6
|
Migrated notify_payload to INIT/METHOD macros
|
2011-01-05 16:45:51 +01:00 |
|
|
Martin Willi
|
e3c4c6a5ac
|
Migrated nonce_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
19ee0762e7
|
Migrated ke_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
ffb980572f
|
Migrated id_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
a11cfe2960
|
Migrated cp_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
bda62cedb9
|
Migrated configuration_attribute to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
1cc58e7ed2
|
Migrated certreq_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
2aa1bffb02
|
Migrated cert_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
9c0ccf5e26
|
Migrated auth_payload to INIT/METHOD macros
|
2011-01-05 16:45:50 +01:00 |
|
|
Martin Willi
|
401818651e
|
Moved generic infrastructure initialization to libcharon_init(), allows us to preload plugins
|
2011-01-05 16:45:49 +01:00 |
|
|
Martin Willi
|
2ecbd6186e
|
Do not update payload length during generation, allows hooks override payload length
|
2011-01-05 16:45:47 +01:00 |
|
|
Martin Willi
|
d58127af84
|
Do not recalculate payload header length after generation, payloads do length calculation
|
2011-01-05 16:45:47 +01:00 |
|
|
Martin Willi
|
2a19095e4c
|
Apply IKE major/minor version set on message to IKE header
|
2011-01-05 16:45:46 +01:00 |
|
|
Martin Willi
|
7e7c7c1d84
|
Added setters for IKE major/minor version to ike_header
|
2011-01-05 16:45:46 +01:00 |
|