Tobias Brunner
9f166d9ac2
Removed references to protocol_id_t from kernel interface.
...
Instead we use the actual IP protocol identifier (the conversion now happens in
child_sa_t and kernel_handler_t).
2010-09-02 19:01:25 +02:00
Tobias Brunner
9d94174242
Migrated child_sa_t to INIT/METHOD macros.
2010-09-02 19:01:25 +02:00
Tobias Brunner
ba26508d05
Moved roam job creation to kernel event handler.
2010-09-02 19:01:25 +02:00
Tobias Brunner
61e8e73206
Refer to scheduler via hydra and not charon.
2010-09-02 19:01:24 +02:00
Tobias Brunner
8c387909eb
Moved scheduler_t to libhydra.
2010-09-02 19:01:24 +02:00
Tobias Brunner
4e258e63c3
Moved migrate job creation to kernel event handler.
2010-09-02 19:01:24 +02:00
Tobias Brunner
01563352e8
Moved update SA job creation to kernel event handler.
2010-09-02 19:01:24 +02:00
Tobias Brunner
a22853b302
Moved delete/rekey CHILD_SA job creation to kernel event handler.
2010-09-02 19:01:24 +02:00
Tobias Brunner
81f6ec276b
Moved acquire job creation to kernel event handler.
2010-09-02 19:01:23 +02:00
Tobias Brunner
09ae31f13a
Added kernel event handler stub.
2010-09-02 19:01:23 +02:00
Tobias Brunner
f7f3d87ed7
All kernel listener hooks are optional.
2010-09-02 19:01:23 +02:00
Tobias Brunner
c560ddeb25
Added listener handling to kernel interface.
2010-09-02 19:01:23 +02:00
Tobias Brunner
bd50254ca9
Added an interface for kernel event listeners.
2010-09-02 19:01:23 +02:00
Tobias Brunner
211943be23
Some whitespace and code style fixes.
2010-09-02 19:01:23 +02:00
Tobias Brunner
07500cda69
Move callback_job_t to libhydra.
2010-09-02 19:01:22 +02:00
Tobias Brunner
222a64d892
Fixing Doxygen groups after moving processor.
2010-09-02 19:01:22 +02:00
Tobias Brunner
c5f7146b17
Refer to processor via hydra and not charon.
2010-09-02 19:01:22 +02:00
Tobias Brunner
633fbe4fde
Move processor_t (thread-pool) to libhydra.
2010-09-02 19:01:22 +02:00
Martin Willi
bbdc85b66e
Respect key types in stroke key/certificate backend
2010-09-02 13:07:23 +02:00
Andreas Steffen
3a01908060
increase number of message due to large certificate payloads
2010-09-01 00:11:23 +02:00
Martin Willi
33b1a2567f
Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined
2010-08-31 18:10:23 +02:00
Martin Willi
36eafea232
Use the AAA Identity for EAP authentication, if given
2010-08-31 18:10:23 +02:00
Martin Willi
64d7b0733f
Added support for the ipsec.conf aaa_identity keyword
2010-08-31 17:52:52 +02:00
Martin Willi
f9fc5f2045
Added strongswan.conf options for EAP-TLS/TTLS fragment size
2010-08-31 16:17:01 +02:00
Martin Willi
1cf8c5f746
Migrated EAP-TTLS to the generic TLS helper
2010-08-31 16:17:01 +02:00
Martin Willi
be751012c3
Migrated EAP-TLS to the generic TLS helper
2010-08-31 16:17:01 +02:00
Martin Willi
ecd98efa9d
Support output fragmentation of TLS records
2010-08-31 15:54:37 +02:00
Martin Willi
f13a03add0
Moved EAP type/code definitions to a seprate header file in libstrongswan
2010-08-31 15:35:29 +02:00
Tobias Brunner
9b698a771c
Enable the generation of unencrypted messages (e.g. ME connectivity checks).
2010-08-30 17:25:12 +02:00
Andreas Steffen
6ade82d5b7
fixed copy-and-paste errors
2010-08-30 15:42:44 +02:00
Andreas Steffen
d93e2e5409
created an eap-tnc method hull
2010-08-30 15:36:34 +02:00
Andreas Steffen
577893612f
for the time being assume a single request/response exchange for a given EAP method
2010-08-30 15:36:34 +02:00
Tobias Brunner
2402dee177
Port floating patch partially reversed.
...
If MOBIKE is enabled, we do have to switch to port 4500 with the
IKE_AUTH request, that is, before we know whether the other peer
actually supports MOBIKE or not.
2010-08-30 14:54:31 +02:00
Tobias Brunner
277f02ce9e
Slightly refactored port floating.
...
In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
2010-08-30 13:42:58 +02:00
Tobias Brunner
fde2d34d0f
Fixed ME after introduction of AEAD wrapper.
2010-08-30 10:48:09 +02:00
Andreas Steffen
897c7a72cf
Win7 might send up to 7k of certificate requests
2010-08-27 16:30:05 +02:00
Martin Willi
dfde6570c7
Update delete_payload length when adding SPIs
2010-08-25 17:04:25 +02:00
Martin Willi
5299719569
Migrated delete_payload to INIT/METHOD macros, replaced iterator
2010-08-25 17:03:00 +02:00
Martin Willi
e5c6ebb697
Use different return values in payload decryption to distinguish between integrity and syntax errors
2010-08-25 15:29:53 +02:00
Thomas Egerer
e54e86cb49
Check if colliding rekey actually created an IKE_INIT
...
In some cases (especially if a child is half-open) the colliding
rekey-job might not have created the ike_init member. If so, the
nonce check fails with SIGSEGV.
2010-08-25 10:16:42 +02:00
Martin Willi
8427c78611
Added a ike_name logger option to prefix the IKE_SA name on each line
2010-08-25 09:55:37 +02:00
Andreas Steffen
d9b85e28b9
removed tls_record_t definition
2010-08-24 19:19:13 +02:00
Martin Willi
69e8bb2e8d
Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option
2010-08-24 11:34:43 +02:00
Andreas Steffen
79a5e391f8
support fragmentation in AVPs
2010-08-24 09:02:51 +02:00
Martin Willi
f55f9c4e1e
Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS
2010-08-24 08:45:49 +02:00
Martin Willi
1475800080
Moved TLS record parsing/generation to tls.c
2010-08-24 08:45:49 +02:00
Martin Willi
5ff8c62707
EAP-TLS clients send an empty packet on failure to properly shut down a TLS session
2010-08-23 15:13:41 +02:00
Martin Willi
c49475dae1
Accept encryption payloads with no wrapped payloads
2010-08-23 11:30:36 +02:00
Martin Willi
835ec23aff
Use enum mappings to resolve debug group
2010-08-23 09:47:04 +02:00
Martin Willi
96b2fbcc2c
Introducing simple purposes for the TLS stack, switches various options
2010-08-20 15:09:08 +02:00
Tobias Brunner