 Martin Willi
|
e7ae90c194
|
Use informational task in quick mode to send notifies
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
b47052694f
|
Cleaned up notification sending in IKEv1 task manager
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
accf46129a
|
Use informational taks to send notify errors
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
f492907667
|
Added a task stub to create and process IKEv1 informational exchanges
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
590ca1d482
|
Allow IKEv1 tasks to return ALREADY_DONE to flush all active or passive tasks
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
0f61964ed7
|
Support flushing of single tasks queues in IKEv1 task manager
|
2012-03-20 17:31:18 +01:00 |
|
|
Martin Willi
|
9862852823
|
Double check if we have a packet before retransmitting it
|
2012-03-20 17:31:18 +01:00 |
|
|
Tobias Brunner
|
0793ac497a
|
Fixed memory leak when handling IKEv1 error notifications.
|
2012-03-20 17:31:18 +01:00 |
|
|
Tobias Brunner
|
4dbd81c669
|
Destroy IKE_SA after failed XAuth authentication.
|
2012-03-20 17:31:17 +01:00 |
|
|
Tobias Brunner
|
3d44d735c6
|
Added generic XAuth backend, using secrets provided by credential sets.
|
2012-03-20 17:31:17 +01:00 |
|
|
Tobias Brunner
|
41e1e435d9
|
Removed xauth-null dummy plugin.
|
2012-03-20 17:31:17 +01:00 |
|
|
Clavister OpenSource
|
5c6abd2865
|
Added possibility to send notifications from the Quick Mode task
|
2012-03-20 17:31:17 +01:00 |
|
|
Clavister OpenSource
|
e647c98a13
|
Setting Protocol ID of notifys sent from task manager to ISAKMP
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
cc6b03bb5a
|
If no IKEv1 shared key found for hosts, try to find one based on config identities
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
033dfba01f
|
Log peer cfg enumeration externally for flexibility
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
d7376e2ab4
|
Accept NULL identities passed to peer config enumeration
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
0e2cc3fed9
|
Fixed authentication method selection for main mode PSK authentication
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
ea9e047bc5
|
Use virtual IP to substitute dynamic traffic selectors in quick mode
|
2012-03-20 17:31:17 +01:00 |
|
|
Martin Willi
|
156b8662a6
|
Queue Mode Config tasks when required
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
b155084c42
|
Added IKEv1 Mode Config task based on IKEv2 ike_config
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
21c916886d
|
Added missing XAuth auth_class enum name
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
a22b9e4f33
|
Reject quick modes if IKE_SA not yet established
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
67a753b95c
|
Use a common function to set IKE_SA to established
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
f223a28ae7
|
Be less verbose if plugin dependecy not satisfied
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
9626164e9a
|
Don't complain when receiving XAuth or Unity configuration attributes
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
c9e5998d7f
|
Interpret attribute format correctly in IKEv1 configuration format
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
9f43868a01
|
Implemented responder part of XAUTH task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
d192cc9dc8
|
Implemented initiator part of xauth task
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
081b6dd3ed
|
Ask for a username/password in xauth-null as XAUTH initiator
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
59ee898326
|
Get first XAuth backend if none configured
|
2012-03-20 17:31:16 +01:00 |
|
|
Martin Willi
|
cbda13f6fe
|
Accept a xauth backend name appended to left/rightauth
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
6ebcbc654c
|
Added auth_cfg option to select XAUTH backend to use
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
89afbe58bb
|
Remove unused task swap_initiator method
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
1fe6cdfac2
|
Use a string to identify xauth backends, no need for integer types
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
4e73f85b81
|
Remove xauth_authenticator, we handle it in the task
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
96c9159d96
|
Use a second authentication config to configure XAUTH authentication
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
69adeb5bf2
|
Replace xauth_request task with a new stub where we reimplement it
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
c6d0098c1b
|
Added missing auth_method_t enum names
|
2012-03-20 17:31:15 +01:00 |
|
|
Martin Willi
|
a0eea1a7ac
|
Defined hybrid IKEv1 authentication methods
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
c29fba51aa
|
Some notification errors added to main_mode process_r
|
2012-03-20 17:31:15 +01:00 |
|
|
Clavister OpenSource
|
b8383f1f2d
|
Encrypt INFORMATIONAL exchange if needed
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
fbbd439bf9
|
Added possibility to send notification if task_manager->process fails
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
1390daae15
|
Added status code to status_t
New status_t enum to allow packets to be sent to peer in task_manager->process
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
9ce5d0c0e8
|
added functions for getting/setting ISAKMP SPI to notify payload
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
a064eaa8a6
|
Handling of initial contact
|
2012-03-20 17:31:14 +01:00 |
|
|
Clavister OpenSource
|
751bd02e98
|
Added retransmissions for initiator.
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
1755ac0617
|
Cleaned up quick mode notify processing
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
5adf855e3d
|
Add support for KE payloads in IKEv1 quick mode (PFS)
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
9bb4de1d83
|
En- and decode DH group attribute in quick mode SA payloads
|
2012-03-20 17:31:14 +01:00 |
|
|
Martin Willi
|
fb8bc6a764
|
Use authenticators in IKEv1 main mode
|
2012-03-20 17:31:14 +01:00 |
|