denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,537 Commits 1 Branch 0 Tags
ee3d4ef8016c151a0e19dc91bd0445f4aac1e2ef
Commit Graph
4537 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups 2009-11-12 13:10:30 +00:00
Martin Willi f6bbcec390 Use register_printf_specifier instead of deprecated register_printf_function, if available 2009-11-12 13:16:46 +01:00
Martin Willi 0850e33518 Fixed compiler warning about missing return value 2009-11-12 11:17:02 +01:00
Martin Willi 1a86be6e48 Support variable RES length in AKA quintuplets 2009-11-12 10:34:02 +01:00
Martin Willi 15b65bf15d Ported pseudonym/reauth functionality to EAP-AKA 2009-11-12 10:34:01 +01:00
Martin Willi 3374cb0f44 Passing other as NULL should not always result in a match if me matches 2009-11-12 10:34:01 +01:00
Martin Willi 947b03fd09 Use new identity constructor in EAP-SIM 2009-11-12 10:34:01 +01:00
Martin Willi 324528700d Added identification constructor using a chunk of data, guessing id type 2009-11-12 10:34:01 +01:00
Martin Willi 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins 2009-11-12 10:34:01 +01:00
Martin Willi eb7bf91e12 Added option to disable identity requests completely (old behavior) 2009-11-12 10:34:01 +01:00
Martin Willi 0107f5b687 Fixed replacing existing reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown 2009-11-12 10:34:01 +01:00
Martin Willi edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend 2009-11-12 10:34:01 +01:00
Martin Willi acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication 2009-11-12 10:34:00 +01:00
Martin Willi e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed 2009-11-12 10:34:00 +01:00
Martin Willi c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, 
extended sim_provider with a is_pseudonym() function.
 2009-11-12 10:34:00 +01:00
Martin Willi 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory 2009-11-12 10:34:00 +01:00
Martin Willi 8aad8f6faf Some coding style cleanups 2009-11-12 10:34:00 +01:00
Martin Willi 0328fe940d Impemented basic pseudonym support in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi f81760dcd1 A SIM/AKA message can be parsed twice, without and with decryption 2009-11-12 10:34:00 +01:00
Martin Willi 0e20893d81 Pass SIM/AKA crypto helper to constructor of message 2009-11-12 10:34:00 +01:00
Martin Willi 13f418b442 Added a doxygen group for libsimaka, some cleanups 2009-11-12 10:34:00 +01:00
Martin Willi bcf8a0ff94 Added missing hasher include 2009-11-12 10:33:59 +01:00
Martin Willi 4735965fc0 EAP servers check if the received EAP message was expected 2009-11-12 10:33:59 +01:00
Martin Willi 02f785b050 Use existing triplet length definitions 2009-11-12 10:33:59 +01:00
Martin Willi aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library 2009-11-12 10:33:59 +01:00
Martin Willi 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi fad4e5f393 Centralized SIM/AKA notifications and client errors 2009-11-12 10:33:59 +01:00
Martin Willi e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi 55916dcc9e libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA 2009-11-12 10:33:58 +01:00
Martin Willi ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations 2009-11-12 10:33:58 +01:00
Martin Willi f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA 2009-11-12 10:33:58 +01:00
Martin Willi 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Andreas Steffen 6ae43b9333 mixed fingerprint / userid 2009-11-11 11:17:59 +01:00
Andreas Steffen 209f52cb63 fixed 4.3.6 ocsp regression 2009-11-11 11:06:07 +01:00
Andreas Steffen ee8486afdb adapted log message 2009-11-10 23:55:55 +01:00
Andreas Steffen a618e33e8b merged pluto's PGP certificate parsing with charon's 2009-11-10 23:54:51 +01:00
Andreas Steffen f565d0c575 merged pluto's PGP certificate parsing with charon's 2009-11-10 23:54:04 +01:00
Andreas Steffen cc543182bc added separating line 2009-11-10 21:50:34 +01:00
Andreas Steffen bb7ae382fd added some debugging to pgp certificate parsing 2009-11-10 10:04:55 +01:00
Andreas Steffen 262af16179 accept PGP v3 or v4 fingerprint as alternative to PGP user_id 2009-11-09 23:15:17 +01:00
Martin Willi 5269150ebc If cross-compiling, test for the existence of pthread_condattr_setclock only 2009-11-09 15:07:01 +01:00
Martin Willi 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module 2009-11-09 15:07:00 +01:00
Andreas Steffen 8a650a2bc8 put PGP userid in single quotes 2009-11-08 23:58:41 +01:00
Andreas Steffen b25311fbe2 added ikev2/net2net-pgp-v3 scenario 2009-11-08 23:49:04 +01:00
Andreas Steffen bc662125c2 removed nocrsend=yes statement 2009-11-08 23:48:26 +01:00
Andreas Steffen 2846e51a5b added ikev2/net2net-pgp-v4 scenario 2009-11-08 23:23:45 +01:00