 Andreas Steffen
|
f7cd1cde70
|
vendor ID cosmetics
|
2012-05-05 18:13:05 +02:00 |
|
|
Tobias Brunner
|
42500c274a
|
Use name from initialization to access settings in libcharon.
Also fixes several whitespace errors.
|
2012-05-03 13:57:04 +02:00 |
|
|
Martin Willi
|
89a5881c63
|
Added another bunch of commonly used IKEv1 NATT vendor IDs
|
2012-04-04 10:32:15 +02:00 |
|
|
Martin Willi
|
83d77866f4
|
Store authentication info of a XAUTH round on IKE_SA
|
2012-03-22 09:06:31 +01:00 |
|
|
Martin Willi
|
4f3cf61dfd
|
Reply with received configuration payload identifier in Mode Config
|
2012-03-20 18:06:29 +01:00 |
|
|
Tobias Brunner
|
8254e7ecb8
|
Implemented handling of UNITY_LOAD_BALANCE as reauthentication.
|
2012-03-20 17:31:40 +01:00 |
|
|
Tobias Brunner
|
eff331f799
|
Parse IKEv1 Cisco Load Balancing notify (can't act on it yet).
|
2012-03-20 17:31:40 +01:00 |
|
|
Martin Willi
|
7fd7ffc649
|
Use UDP encapsulation even in non-NAT situation if initiator requests it
|
2012-03-20 17:31:39 +01:00 |
|
|
Martin Willi
|
c60246a618
|
Support inactivity timeout in IKEv1 CHILD_SAs
|
2012-03-20 17:31:39 +01:00 |
|
|
Martin Willi
|
5be386ff8e
|
Exchange certificates when using IKEv1 ECDSA authentication
|
2012-03-20 17:31:39 +01:00 |
|
|
Martin Willi
|
3624b09e21
|
Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper
|
2012-03-20 17:31:37 +01:00 |
|
|
Martin Willi
|
696fa8e003
|
Invoke bus_t.narrow hook in quick mode exchange
|
2012-03-20 17:31:36 +01:00 |
|
|
Martin Willi
|
f420f51f55
|
Invoke authorization hooks for IKEv1 connections
|
2012-03-20 17:31:36 +01:00 |
|
|
Martin Willi
|
b6ac063c36
|
Don't invoke a child_updown hook when a quick mode to delete has been rekeyed
|
2012-03-20 17:31:36 +01:00 |
|
|
Martin Willi
|
669d8bded2
|
Invoke child_rekey hook instead of child_updown when rekeying a quick mode
|
2012-03-20 17:31:36 +01:00 |
|
|
Martin Willi
|
11aadd7722
|
Disable DPD checking for peers not supporting it
|
2012-03-20 17:31:35 +01:00 |
|
|
Martin Willi
|
ff6b084ac4
|
Confirm message reception time only if DPD sequence number valid
|
2012-03-20 17:31:35 +01:00 |
|
|
Martin Willi
|
2ddd45c9a7
|
Simplified DPD handling by using a task for a single message only
|
2012-03-20 17:31:35 +01:00 |
|
|
Clavister OpenSource
|
c9a160953e
|
Send DPD vendor ID
|
2012-03-20 17:31:35 +01:00 |
|
|
Clavister OpenSource
|
3e6b740336
|
Isakmp_dpd task added.
|
2012-03-20 17:31:35 +01:00 |
|
|
Martin Willi
|
37c12bd31e
|
Streamlined debug output when initiating IKEv1 IKE_SAs
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
c40963b457
|
Enforce encapsulation mode of configuration, in case initiator proposes both
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
91c212fd6a
|
Select IKEv1 configurations by main/aggressive mode option
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
a347c1ac43
|
Fix sending of CERTREQ/CERT payloads in aggressive mode
|
2012-03-20 17:31:34 +01:00 |
|
|
Martin Willi
|
ee325b555f
|
Implemented aggressive mode using Phase 1 helper class
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
b4bd875612
|
Make use of the new Phase 1 helper class in main mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
44dcd5944a
|
Fix error handling if no PSK found for main mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
90731f38c9
|
Install quick mode CHILD_SAs with negotiated encapsulation mode
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
b147679a2c
|
Try to detect reauthentication as responder and adopt children to new SA
|
2012-03-20 17:31:33 +01:00 |
|
|
Martin Willi
|
c9d68d17f0
|
Include peer config overtime in negotiated ISAKMP SA lifetime
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
17c64d5ff9
|
Establish IKE_SA only once as XAuth responder
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
2da3ff7a52
|
Set a condition flag if peer has been authenticated using XAuth
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
54773729a8
|
Queue Mode Config tasks after main mode as initiator, not as responder
|
2012-03-20 17:31:32 +01:00 |
|
|
Clavister OpenSource
|
d71092ceed
|
Setting Mode Cfg identifier for CFG_ACK messages.
|
2012-03-20 17:31:32 +01:00 |
|
|
Martin Willi
|
f56c3c53f6
|
As responder, try to reuse the reqid of the CHILD_SA the initiator is rekeying
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
31bd5c8c0e
|
Reply quick mode with the same SA lifetime that we received
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
3a925f74ab
|
Do not query CHILD_SA during delete if they already expired
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
634ac410a2
|
Don't return FAILED if a CHILD_SA to delete could not be found
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
14dc794165
|
Support installing of quick mode SAs with a specific reqid
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
5f1df0a060
|
Double check that we could select a TS as quick mode responder
|
2012-03-20 17:31:31 +01:00 |
|
|
Martin Willi
|
253d7e3eff
|
Don't process notifies in quick mode task when we get an INFORMATIONAL
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
94450913ef
|
Fixed migration of NATD task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
bce22af29e
|
Implemented migration of quick mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
ca037076bf
|
Implemented migration of XAuth task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
5903acd0ff
|
Implemented migration of certificate handling tasks
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
451ebecc85
|
Implemented migration of Main Mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
28e3c6595d
|
Check if a config has been selected before narrowing selectors in quick mode
|
2012-03-20 17:31:28 +01:00 |
|
|
Martin Willi
|
15a682f4c2
|
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
|
2012-03-20 17:31:26 +01:00 |
|