Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• d2933125d5 added IKEv1 IPCOMP pluto-charon interoperability scenarios Andreas Steffen 2012-05-25 12:52:21 +02:00
• daab61e51f Added encapsulation mode transform attribute to IPComp proposal. Tobias Brunner 2012-05-25 09:24:49 +02:00
• b253008544 upgraded ikev1/compress to 5.0.0 Andreas Steffen 2012-05-24 17:36:27 +02:00
• 18dac73f02 Updated ipsec.conf(5) to reflect changes to IPComp support. Tobias Brunner 2012-05-24 15:31:15 +02:00
• 6695b48582 Add an additional proposal without IPComp to SA payload. Tobias Brunner 2012-05-24 14:40:12 +02:00
• 3451ecd7ac Added log message if peer does not accept/provide IPComp proposal. Tobias Brunner 2012-05-24 14:36:57 +02:00
• 47b448b807 Added support to negotiate IPComp during Quick Mode. Tobias Brunner 2012-05-24 14:00:44 +02:00
• 647cd741e8 Added support for IKEv1 IPComp proposals in SA payload. Tobias Brunner 2012-05-24 13:31:53 +02:00
• 7a75cae856 Added support for IKEv1 IPComp proposals in proposal substructure. Tobias Brunner 2012-05-23 18:44:48 +02:00
• 00e11bcefd Fix memleak during Quick Mode in case no SPI can be allocated from kernel. Tobias Brunner 2012-05-23 18:09:21 +02:00
• 624bb24d12 Properly filter IKEv1 proposals consisting of multiple proposal payloads. Tobias Brunner 2012-05-23 17:55:41 +02:00
• fda9f104b4 Fixed check for loaded plugins with feature types that are not compared exactly. Tobias Brunner 2012-05-24 12:58:38 +02:00
• 0e5d587df7 get_match() method added to hashtable_t. Tobias Brunner 2012-05-24 12:54:38 +02:00
• fa50a89c95 added ikev1/xauth-rsa-eap-md5-radius scenario Andreas Steffen 2012-05-24 09:26:00 +02:00
• 9eac6106d0 Use a hashtable to check for already loaded plugin features. Tobias Brunner 2012-05-23 17:41:11 +02:00
• a9cfd29c10 Hash function for plugin features added. Tobias Brunner 2012-05-23 17:37:53 +02:00
• 31c83b973e load nonce plugin Andreas Steffen 2012-05-23 15:05:57 +02:00
• ad59f3a91a added ikev1 pluto-charon interoperability scenarios Andreas Steffen 2012-05-23 14:47:41 +02:00
• 148b643880 upgraded ikev1 scenarios to 5.0.0 Andreas Steffen 2012-05-23 14:45:15 +02:00
• 3c475660c5 Apply IDir before deriving keys as aggressive initiator Martin Willi 2012-05-23 12:27:47 +02:00
• 523ce7c20c Use received identity to look up PSK as aggressive responder Martin Willi 2012-05-23 12:18:45 +02:00
• 51754f6654 Check if we actually have an initiating packet to free while processing responses Martin Willi 2012-05-23 11:50:12 +02:00
• 2ac996cb71 list IKEv1 Aggressive Mode in ipsec statusall Andreas Steffen 2012-05-23 11:12:27 +02:00
• 1a624ff45a Switch to alternative peer config in IKEv1 Main and Aggressive Mode. Tobias Brunner 2012-05-21 12:07:17 +02:00
• 17949695bf Cancel pending retransmits when flushing active task queue Martin Willi 2012-05-21 14:53:40 +02:00
• 4ce92ef350 Cancel active quick mode task when receiving INFORMATIONAL error Martin Willi 2012-05-21 14:48:48 +02:00
• 7ce504e182 Flush task queues explicitly, not implicitly if task returns ALREADY_DONE Martin Willi 2012-05-21 14:17:09 +02:00
• cbc1a20ffe Wrap task managers flush_queue() in IKE_SA Martin Willi 2012-05-21 14:05:01 +02:00
• a5c799602f Make task managers flush_queue() method public Martin Willi 2012-05-21 14:02:35 +02:00
• 9e19cb912d Destroy Netlink socket only after deleting remaining source routes. Tobias Brunner 2012-05-21 13:19:57 +02:00
• 75d4e01c4a Enumerate correct list while removing nonce_gens, fix deregistration Martin Willi 2012-05-21 12:28:01 +02:00
• 32400cd91a Added a convenience function to dump backtraces for gdb-less debugging Martin Willi 2012-05-21 12:18:49 +02:00
• b5341bb07c Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed Martin Willi 2012-05-21 12:17:32 +02:00
• 769696450a Properly munmap/close file if loading IMC/IMV fails. Tobias Brunner 2012-05-18 12:26:03 +02:00
• 7a56c35fc9 Remove executable flag from source files. Tobias Brunner 2012-05-18 09:52:52 +02:00
• 22bf44c8b9 Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.). Tobias Brunner 2012-05-18 09:52:15 +02:00
• 7959a3faec Removed superfluous @param in bus.h. Tobias Brunner 2012-05-18 08:37:32 +02:00
• 7684ca2e8c whitelist: Make sure listed IDs are null-terminated. Tobias Brunner 2012-05-18 09:27:24 +02:00
• 816f7f238f pkcs8: Initialize salt and IV properly. Tobias Brunner 2012-05-18 08:36:37 +02:00
• 5c162dd944 List registered nonce generators in statusall output. Tobias Brunner 2012-05-16 18:26:36 +02:00
• b826b192ba Add enumerator for registered nonce generators. Tobias Brunner 2012-05-16 18:25:25 +02:00
• afaf1bdf5e Use nonce_gen instead of rng to generate nonces Adrian-Ken Rueegsegger 2012-05-02 17:49:41 +02:00
• 5338fe5e79 Add create_nonce_gen function to keymat interface Adrian-Ken Rueegsegger 2012-05-02 17:49:35 +02:00
• 04024b5de8 Add nonce plugin implementation Adrian-Ken Rueegsegger 2012-05-02 17:49:32 +02:00
• e2fc09c186 Add nonce generator interface Adrian-Ken Rueegsegger 2012-05-02 17:49:26 +02:00
• 80c5b17d1a make IKEv1 DPD timeout configurable in charon Andreas Steffen 2012-05-17 19:49:22 +02:00
• 24742c0f83 Moved IKEv1 DPD processing to task manager, fix sequence issues Martin Willi 2012-05-15 16:10:47 +02:00
• b7dafb3f5b Consider inbound ESP as a sign of liveness for DPD timeout Martin Willi 2012-05-15 14:58:28 +02:00
• 4b38c22c00 Schedule a DPD timeout job that enforces the IKE message timeout policy Martin Willi 2012-05-15 14:44:30 +02:00
• ebf829f2eb Send unanswered follow up R_U_THERE messages with the same DPD seq Martin Willi 2012-05-15 14:27:16 +02:00
• 57a8418c88 Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL Martin Willi 2012-05-15 14:26:09 +02:00
• b3089ab74c Free name of application using libcharon. Tobias Brunner 2012-05-15 11:37:07 +02:00
• d3590016e9 starter: Initialize thread pool so kernel events are consumed. Tobias Brunner 2012-05-15 08:55:19 +02:00
• 9e25007646 Explicitly cast from strict_t to crl_policy_t Martin Willi 2012-05-14 14:11:54 +02:00
• 1b82fdb2e5 Use correct integrity_algorithm_t enum type in bench_signer() Martin Willi 2012-05-14 14:11:22 +02:00
• d185b6acee Make function pointer defined with METHOD() macro non-const Martin Willi 2012-05-14 14:10:00 +02:00
• 2e1f4a4631 Remove unused return value of INIT(), making clang happy Martin Willi 2012-05-14 14:07:00 +02:00
• 29b56078ea Register load-tester faked kernel interface before other kernel interfaces Martin Willi 2012-05-14 13:21:09 +02:00
• d4078ca796 Load tester can enforce a local IP to use Martin Willi 2012-05-14 10:03:05 +02:00
• d684242510 Add plugin features support to load-tester plugin Martin Willi 2012-05-14 09:52:53 +02:00
• 5cc6dc8b39 check for ESP in UDP encapsulation Andreas Steffen 2012-05-12 12:15:58 +02:00
• a56fdff194 upgraded ikev2 scenarios to 5.0.0 Andreas Steffen 2012-05-11 11:00:32 +02:00
• 0e1c6fa2a9 suppress leak detective output Andreas Steffen 2012-05-11 05:48:11 +02:00
• c732e22019 Fix route reinstallation if preferred source IP is not on outgoing interface. Tobias Brunner 2012-05-07 11:24:07 +02:00
• 5de5b04ce4 Fixed #include in tnc-ifmap plugin. Tobias Brunner 2012-05-07 11:22:51 +02:00
• 86aab92248 upgraded ha scenario for 5.0.0 Andreas Steffen 2012-05-06 15:03:26 +02:00
• 922e0d0975 added gcrypt-ikev1 pluto interoperability tests Andreas Steffen 2012-05-06 09:51:19 +02:00
• 949d08dfca upgraded gcrypt-ikev1 scenarios to 5.0.0 Andreas Steffen 2012-05-06 09:25:31 +02:00
• 04d7b1725d upgraded gcrypt-ikev2 scenarios to 5.0.0 Andreas Steffen 2012-05-06 09:23:09 +02:00
• 44bd9b48c8 allow private algorithms Andreas Steffen 2012-05-05 23:25:51 +02:00
• 4b797f464e fixed mapping of IKEv1 algorithms Andreas Steffen 2012-05-05 23:25:34 +02:00
• f7cd1cde70 vendor ID cosmetics Andreas Steffen 2012-05-05 18:13:05 +02:00
• f66a14818e inserted space Andreas Steffen 2012-05-05 15:51:24 +02:00
• 8f834c16ae upgraded pfkey scenarios to 5.0.0 Andreas Steffen 2012-05-05 11:55:48 +02:00
• 5f540fd39c missing references to daemon.h Andreas Steffen 2012-05-05 11:36:38 +02:00
• 6624b8be24 removed leftover ipsec.conf parameters Andreas Steffen 2012-05-05 09:20:42 +02:00
• 84b291e668 upgraded sql scenarios to 5.0.0 Andreas Steffen 2012-05-05 09:16:15 +02:00
• 1e26235a0d fixed feature dependencies for CERT_TRUSTED_PUBKEY Andreas Steffen 2012-05-05 08:54:36 +02:00
• 8a5a33b52e upgrade p2pnat scenarios to 5.0.0 Andreas Steffen 2012-05-04 14:56:09 +02:00
• e5502cd2b5 updated af-alg scenarios to 5.0.0 Andreas Steffen 2012-05-04 12:15:30 +02:00
• 680609b972 added openssl-ikev1 pluto interoperability tests Andreas Steffen 2012-05-04 12:12:39 +02:00
• 1e9b62ad50 deleted unneeded openssl-ikev1 files Andreas Steffen 2012-05-04 12:11:57 +02:00
• 90e941fb97 upgraded openssl-ikev1 scenarios to 5.0.0 Andreas Steffen 2012-05-04 12:06:45 +02:00
• 3805e569f6 upgraded openssl-ikev2 scenarios to 5.0.0 Andreas Steffen 2012-05-04 12:03:05 +02:00
• 22bec9d4ae upgraded tnc scenarios to 5.0.0 Andreas Steffen 2012-05-04 11:57:31 +02:00
• a71f0f3bdc charon is now an IKE daemon Andreas Steffen 2012-05-03 20:48:01 +02:00
• 0aa90701f6 It seems charon-nm has to be linked against libnm-util. Tobias Brunner 2012-05-03 15:16:08 +02:00
• 983c667481 Use proper getter for settings in sender and receiver. Tobias Brunner 2012-04-24 15:06:31 +02:00
• 42500c274a Use name from initialization to access settings in libcharon. Tobias Brunner 2012-04-24 14:10:06 +02:00
• 18758e3d2e Store the name of the binary using libcharon to enable specific settings. Tobias Brunner 2012-04-24 11:07:56 +02:00
• 37d9334366 Changed default path to charon for NM frontend. Tobias Brunner 2012-04-19 17:23:48 +02:00
• b64f333612 Integrate nm plugin directly in charon-nm. Tobias Brunner 2012-04-19 16:40:21 +02:00
• 1c7a733e36 Added a small libcharon wrapper intended to directly host the nm plugin. Tobias Brunner 2012-04-19 16:35:44 +02:00
• 94b48e071a Provide plugin list from charon, not internally in libcharon. Tobias Brunner 2012-04-19 13:32:51 +02:00
• 2ee11fd42d display (soft) same as (not loaded) Andreas Steffen 2012-05-03 11:54:56 +02:00
• 493c468d4d charon is now an IKE daemon Andreas Steffen 2012-05-03 11:49:30 +02:00
• 40ca363a8b If we load new features from a plugin, restart loading from first plugin Martin Willi 2012-05-03 11:08:09 +02:00
• c9931135d1 stroke plugin sdepends on building CERT_ANY certificates Martin Willi 2012-05-03 11:07:21 +02:00
• 7f957b3379 Building CERT_ANY through PEM requires either a CERT_X509 or a CERT_PGP builder Martin Willi 2012-05-03 09:39:35 +02:00
• 088020fbac Updated Android.mk for 5.0 (no IKEv1 support yet). Tobias Brunner 2012-05-03 09:37:35 +02:00