Martin Willi
|
f34b452d56
|
Implement second exchange in IKEv1 main mode
|
2012-03-20 17:30:42 +01:00 |
|
Martin Willi
|
38fb67fbf1
|
Add a payload.get_header_length() method, remove header length definitions
|
2012-03-20 17:30:42 +01:00 |
|
Martin Willi
|
e9b55b8325
|
Simplify signature of get_encoding_rules(), make all rules static
|
2012-03-20 17:30:42 +01:00 |
|
Martin Willi
|
683d83ed3e
|
Extended KE payload for IKEv1 support
|
2012-03-20 17:30:42 +01:00 |
|
Martin Willi
|
bcfb0f4096
|
Extended nonce payload for IKEv1 support
|
2012-03-20 17:30:42 +01:00 |
|
Martin Willi
|
717333da98
|
Add fixed PSK authentication method to IKEv1 proposal for now
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
2e897fe30a
|
Handle first exchange in IKEv1 main mode as responder
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
3a470f3035
|
Added limiting encoding of IKEv1 SA payloads
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
2bcd51b389
|
Added SA payload IKEv1 encoding types to generator
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
bce8d3be11
|
Don't set IKEv2 only header flags when using IKEv1
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
da8cadbd93
|
Set default IKE header initiator flag in IKEv2 only
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
c73c832c5a
|
Added an IKEv1 main mode task stub
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
4a09d9ee7f
|
Added a stub for a IKEv1 task manager
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
e69f7dcddf
|
Use task manager as generic interface, renamed implementation to _v2.
|
2012-03-20 17:30:41 +01:00 |
|
Martin Willi
|
4ac22be0ec
|
Fix unaligned aliasing warning in raw socket
|
2012-03-20 17:30:41 +01:00 |
|
Tobias Brunner
|
f7a8fcedc0
|
Use enum to define IKE version on peer_cfg_t.
Replaced all those magic numbers.
|
2012-03-20 17:30:41 +01:00 |
|
Tobias Brunner
|
3238faf8e6
|
Fix init message arrival check.
|
2012-03-20 17:30:41 +01:00 |
|
Tobias Brunner
|
354ac9579f
|
Compile error fixed.
|
2012-03-20 17:30:41 +01:00 |
|
Tobias Brunner
|
7f56cf1a65
|
Message parsing slightly refactored, allows parsing of unencrypted IKEv1 messages.
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
4ed52db2bb
|
Allow creation of message_t objects for IKEv1 packets.
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
8a2d079d78
|
Certificate request payloads can be sent in pretty much any IKEv1 message.
|
2012-03-20 17:30:40 +01:00 |
|
Martin Willi
|
1bf2971ff2
|
Implemented limited payload parsing for IKEv1 SA payloads
|
2012-03-20 17:30:40 +01:00 |
|
Martin Willi
|
3f6d1b13a7
|
Added additional IKEv1 payload and encoding identifiers
|
2012-03-20 17:30:40 +01:00 |
|
Martin Willi
|
b0b9d18593
|
Extend sa_payload for IKEv1 support
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
8f3aea2f77
|
Message rules for IKEv1 INFORMATIONAL exchange added.
Since INFORMATIONAL "exchanges" are actually unidirectionally sent
message we don't have any responder rules.
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
130c9a54c2
|
Message rules for IKEv1 AGGRESSIVE exchange added.
These are basically the same as for ID_PROT but no payloads are expected
to be encrypted (at least if using PSK or signatures for authentication).
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
6ba70ba8dd
|
Message rules for IKEv1 ID_PROT exchange added.
These rules are quite broad and cover main mode with at least PSK and
signature based authentication.
|
2012-03-20 17:30:40 +01:00 |
|
Tobias Brunner
|
fdb8421f36
|
Typo fixed.
|
2012-03-20 17:30:40 +01:00 |
|
Martin Willi
|
837298c590
|
Use vendor id payload for IKEv1 payloads, too
|
2012-03-20 17:30:39 +01:00 |
|
Martin Willi
|
ecf854a00b
|
Added IKEv1 payload identifiers to "known" payload list
|
2012-03-20 17:30:39 +01:00 |
|
Martin Willi
|
2fc986182f
|
Handle IKEv1 messages in managers checkout_by_message
|
2012-03-20 17:30:39 +01:00 |
|
Martin Willi
|
e33b41e7b0
|
Added IKEv1 payload identifiers
|
2012-03-20 17:30:39 +01:00 |
|
Martin Willi
|
867701bc6d
|
Accept and process IKEv1 messages in receiver
|
2012-03-20 17:30:39 +01:00 |
|
Martin Willi
|
526b5afb45
|
Extended IKE header for IKEv1 support
|
2012-03-20 17:30:39 +01:00 |
|
Tobias Brunner
|
856baca23e
|
Fixed monolithic build of libcharon with libtnccs enabled.
|
2011-11-08 18:35:11 +01:00 |
|
Tobias Brunner
|
59c5f048bb
|
Correctly refer to tnc-tnccs plugin when building monolithically.
|
2011-11-08 18:35:11 +01:00 |
|
Tobias Brunner
|
48e87e12ab
|
Revert "fixed integrity tests of plugins using libtls or libtnccs"
This reverts commit b597ac4a4c (not
completely).
|
2011-11-08 18:35:11 +01:00 |
|
Tobias Brunner
|
e034cc9ca9
|
Revert "fixed integrity tests of plugins using libsimaka"
This reverts commit 8c42f16dee.
Conflicts:
src/charon/Makefile.am
|
2011-11-08 18:35:11 +01:00 |
|
Tobias Brunner
|
39b30518c2
|
Syntax error in sqlite.sql fixed.
|
2011-11-04 14:37:22 +01:00 |
|
Andreas Steffen
|
8c42f16dee
|
fixed integrity tests of plugins using libsimaka
|
2011-11-04 11:27:19 +01:00 |
|
Thomas Egerer
|
dbd2169569
|
Change order of destroy/get_ref function calls
Since DESTROY_IF might destroy the peer_cfg, a get_ref on a freed object
is subject to fail.
|
2011-11-04 11:11:17 +01:00 |
|
Andreas Steffen
|
b597ac4a4c
|
fixed integrity tests of plugins using libtls or libtnccs
|
2011-11-02 06:42:08 +01:00 |
|
Tobias Brunner
|
abb89a97d1
|
Some Doxygen fixes.
|
2011-10-28 21:24:52 +02:00 |
|
Andreas Steffen
|
b21cfa93f8
|
Cosmetics
|
2011-10-26 10:32:54 +02:00 |
|
Tobias Brunner
|
87c65e76fc
|
Don't link to tnc libraries on Android as no tnc plugins are currently enabled.
|
2011-10-25 11:57:00 +02:00 |
|
Tobias Brunner
|
ba5b559b41
|
Build libtnccs on Android.
|
2011-10-25 11:56:26 +02:00 |
|
Andreas Steffen
|
5d36af6936
|
share some code between IMC and IMV managers
|
2011-10-25 09:45:35 +02:00 |
|
Andreas Steffen
|
61f7036e69
|
removed unneeded includes
|
2011-10-25 09:45:35 +02:00 |
|
Andreas Steffen
|
f0a8bf47f7
|
refactored TNC framework
|
2011-10-25 01:10:16 +02:00 |
|
Andreas Steffen
|
c008d2cc46
|
moved imv_manager to libtnccs
|
2011-10-25 01:10:16 +02:00 |
|