Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 10f24e6599 Don't invoke child_updown hook twice as responder Martin Willi 2012-04-11 17:43:30 +02:00
• 4ef867f578 Accept zero-length certificate request payloads Martin Willi 2012-04-03 08:35:25 +02:00
• ae9ce83511 Properly initialize src in ike_sa_t.is_any_path_valid(). Tobias Brunner 2012-04-06 10:53:47 +02:00
• 367e1e22b8 checksum need a libradius_init() symbol Andreas Steffen 2012-04-05 16:52:37 +02:00
• e90e106117 version bump to 4.6.3rc1 Andreas Steffen 2012-04-05 09:11:47 +02:00
• 4626e49ad9 remove leading zero in ASN.1 encoded serial numbers Andreas Steffen 2012-04-05 09:04:11 +02:00
• 5ff99529e6 ASN.1 two's complement encoding prevents overflow in CRL serial number Andreas Steffen 2012-04-04 11:29:00 +02:00
• bad192069f Make AES-CMAC actually usable for IKEv2. Tobias Brunner 2012-04-04 10:51:46 +02:00
• 89a5881c63 Added another bunch of commonly used IKEv1 NATT vendor IDs Martin Willi 2012-04-04 10:31:57 +02:00
• 4670661d6d represent 0 as a single byte Andreas Steffen 2012-04-03 14:19:37 +02:00
• 320fd5fe62 moved chunk_skip_zero to chunk.h Andreas Steffen 2012-04-03 14:12:50 +02:00
• 4e5b7e09ee added IKEv2 Generic Secure Password Authentication Method Andreas Steffen 2012-04-03 12:49:05 +02:00
• 5893d1b156 added IKEv2 Generic Secure Password Authentication Method Andreas Steffen 2012-04-03 12:48:48 +02:00
• f54c4ed8d6 added GSPM IKEv2 payload Andreas Steffen 2012-04-03 12:21:39 +02:00
• d1391b8fdb fixed typo Andreas Steffen 2012-04-03 12:07:13 +02:00
• 37d43ebbde Doxygen fixes. Tobias Brunner 2012-04-03 10:56:47 +02:00
• d7590217c3 Added NEWS about cmac plugin. Tobias Brunner 2012-04-03 10:48:03 +02:00
• 811e7490f6 Added test vectors for AES-CMAC. Tobias Brunner 2012-04-03 10:45:09 +02:00
• c0d39c205c Implemented AES-CMAC based PRF and signer. Tobias Brunner 2012-04-03 10:40:47 +02:00
• 9a6b1cb412 Fixed GNU license header in hmac and xcbc plugins. Tobias Brunner 2012-04-03 10:33:59 +02:00
• 4bc7577db2 More detailed NEWS about RADIUS extensions Martin Willi 2012-04-02 13:58:21 +02:00
• 0293f09597 updated supported EAP methods Andreas Steffen 2012-03-30 11:15:10 +02:00
• ef511fc03d Add support for dnQualifier in DNs. Tobias Brunner 2012-03-29 10:01:55 +02:00
• e464894e8b remove leading zeros in ASN.1 encoded serial numbers Andreas Steffen 2012-03-27 15:05:36 +02:00
• a281494abd Added NEWS about resolvconf support. Tobias Brunner 2012-03-27 09:47:38 +02:00
• ed2cab08d2 Make resolvconf interface prefix configurable. Tobias Brunner 2012-03-26 15:09:21 +02:00
• caae5a5c0f Added support for the resolvconf framework in resolve plugin. Tobias Brunner 2012-03-26 15:00:14 +02:00
• 6e921f2017 Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value). Tobias Brunner 2012-03-27 10:37:56 +02:00
• 817ab8a8d4 Don't cast second argument of mem_printf_hook (%b) to size_t. Tobias Brunner 2012-03-22 16:13:15 +01:00
• adfd3b992f smp: Use proper signed type to get return value of read(2). Tobias Brunner 2012-03-22 16:11:39 +01:00
• 008e2df477 pluto: Use time_monotonic() instead of a custom implementation. Tobias Brunner 2012-03-22 14:10:59 +01:00
• 8e066237a7 Don't include individual glib headers in nm plugin. Tobias Brunner 2012-03-26 15:23:17 +02:00
• 3110744a6b Fix null-terminated XAuth passwords, as sent by Android 4 Martin Willi 2012-03-22 15:01:35 +01:00
• 83d77866f4 Store authentication info of a XAUTH round on IKE_SA Martin Willi 2012-03-21 16:57:06 +01:00
• 79f39ecf5d Added a getter for CHILD_SA marks Martin Willi 2012-03-21 16:54:24 +01:00
• 3de54af7ec Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid Martin Willi 2012-03-21 15:41:45 +01:00
• 80abe22f65 fixed parsing of IF-MAP SOAP responses Andreas Steffen 2012-03-21 14:25:19 +01:00
• 4f3cf61dfd Reply with received configuration payload identifier in Mode Config Martin Willi 2012-03-20 18:06:29 +01:00
• b1f2f05c92 Merge branch 'ikev1-clean' into ikev1-master Martin Willi 2012-03-20 17:56:18 +01:00
• d112a7e1fe Properly handle retransmitted initial IKE messages. Tobias Brunner 2012-03-08 15:23:20 +01:00
• de9357bb44 Implemented table of init hashes without linked_list_t. Tobias Brunner 2012-03-01 17:37:38 +01:00
• 6f0cca20d8 Implemented table of connected peers without linked_list_t. Tobias Brunner 2012-03-01 17:24:44 +01:00
• 3489370458 Implemented table of half open IKE_SAs without linked_list_t. Tobias Brunner 2012-03-01 16:34:45 +01:00
• e49bb4e3e3 Don't use linked_list_t for buckets in main IKE_SA hash table. Tobias Brunner 2012-03-01 12:51:34 +01:00
• 894c52cba2 Fixed deadlock if checkin_and_destroy is called during shutdown. Tobias Brunner 2012-03-01 12:52:17 +01:00
• 4b2f428f40 Do not clone hashes of initial IKE messages when storing them in the hash table. Tobias Brunner 2012-03-01 18:07:48 +01:00
• 20e3d5ea00 Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table. Tobias Brunner 2012-02-29 18:17:50 +01:00
• 71cf97871f Added separate hashtable for hashes of initial IKE messages. Tobias Brunner 2012-02-29 18:15:42 +01:00
• 68611395dc chunk_equals_ptr added to compare chunks given as pointers. Tobias Brunner 2012-02-29 18:06:49 +01:00
• 1726795fa9 Store the major IKE version on ike_sa_id_t. Tobias Brunner 2012-02-29 14:47:09 +01:00
• 8254e7ecb8 Implemented handling of UNITY_LOAD_BALANCE as reauthentication. Tobias Brunner 2012-03-02 19:17:13 +01:00
• a7d3b0e098 Check if we actually have a packet before retransmitting it Martin Willi 2012-02-21 10:23:20 +01:00
• 35852af7b1 Use a single set of FDs for all random plugin RNG instances Martin Willi 2012-02-21 10:22:48 +01:00
• eff331f799 Parse IKEv1 Cisco Load Balancing notify (can't act on it yet). Tobias Brunner 2012-02-03 12:58:11 +01:00
• 3a9d5cbc14 Fixed transform numbering in IKEv1 proposal. Tobias Brunner 2012-02-03 12:56:30 +01:00
• dcbdc914fa Compiler warning fixed. Tobias Brunner 2012-02-03 12:56:14 +01:00
• 182d55b229 Use correct enum values to detect three message tasks for retransmission Martin Willi 2012-02-02 10:49:19 +01:00
• f98af1ddd5 Trigger DPD not before IKE_SA state gets updated Martin Willi 2012-02-02 10:33:40 +01:00
• 5ed4b727d0 Fix mapping of IKEv1 encapsulation mode Martin Willi 2012-01-24 13:31:37 +01:00
• 7fd7ffc649 Use UDP encapsulation even in non-NAT situation if initiator requests it Martin Willi 2012-01-23 15:11:13 +01:00
• 75e3d90d43 Updated ipsec.conf man page for the use of IKEv1 with pluto Martin Willi 2012-01-23 14:35:57 +01:00
• c60246a618 Support inactivity timeout in IKEv1 CHILD_SAs Martin Willi 2012-01-23 13:49:56 +01:00
• a0c17d4157 Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasher Martin Willi 2012-01-23 12:46:46 +01:00
• 4c685e8850 Select public key auth method by checking what key we have Martin Willi 2012-01-23 12:28:55 +01:00
• 83b152dd4f Support ECDSA signatures in IKEv1 pubkey authenticator Martin Willi 2012-01-23 12:27:57 +01:00
• 5be386ff8e Exchange certificates when using IKEv1 ECDSA authentication Martin Willi 2012-01-23 12:26:42 +01:00
• 5aef6bd0f3 Accept NULL auth_cfg_t passed to credential_manager_t.get_private() Martin Willi 2012-01-23 12:25:38 +01:00
• 6261c0c3b7 Support encoding of IKEv1 ECDSA proposals Martin Willi 2012-01-23 12:25:00 +01:00
• c8d46f2959 Dropped support of deprecated authby=eap and eap= options Martin Willi 2012-01-20 16:03:18 +01:00
• c791def8c1 Added support for authby/xauth_server legacy options Martin Willi 2012-01-20 15:33:26 +01:00
• c390569a76 Renamed CONFIGURATION_ATTRIBUTE_LENGTH to streamline it with other ATTRIBUTE rules Martin Willi 2012-01-20 15:00:06 +01:00
• 05cb240215 Use ATTRIBUTE_VALUE rule in configuration attribute to parse it with correct length Martin Willi 2012-01-20 14:57:18 +01:00
• a994050e9c Don't re-resolve addresses during initiate if they have already been set Martin Willi 2012-01-20 13:54:39 +01:00
• aa3b53e716 Adopt children after syncing a rekeyed IKEv1 SA Martin Willi 2012-01-20 13:42:37 +01:00
• fed5c33440 Synchronize IKEv1 DPD sequence numbers Martin Willi 2012-01-20 12:23:46 +01:00
• fd6fbf1764 Setting message ID on task manager sets DPD sequence numbers in IKEv1 Martin Willi 2012-01-20 12:22:56 +01:00
• 783c496966 Update state before triggering DPD, as we cancel it if PASSIVE Martin Willi 2012-01-20 12:21:48 +01:00
• a46b8e16ad Set thread specific SA on bus for each enumerated IKE_SA Martin Willi 2012-01-20 12:21:13 +01:00
• b226fd300d Sync remote virtual IP for IKEv1 SAs Martin Willi 2012-01-20 11:36:26 +01:00
• 868d92a402 Sync new IKE_SA condition/extension flags Martin Willi 2012-01-20 11:23:27 +01:00
• c8531b7e69 Added support for Phase1 IV synchronization to HA plugin Martin Willi 2012-01-19 16:34:59 +01:00
• 47b8f6ef4b Invoke bus_t.message hook twice, once plain and parsed, once encoded and encrypted Martin Willi 2012-01-19 16:22:25 +01:00
• ae92641806 Create IKEv1 keymat hasher explicitly on sync Martin Willi 2012-01-19 15:55:29 +01:00
• a0fa7a7f64 Clear initiator flag when checking out initial IKEv1 SA from message Martin Willi 2012-01-19 15:54:38 +01:00
• 8bcd9bd161 Added support to sync IKEv1 SAs key material in HA plugin Martin Willi 2012-01-19 11:11:22 +01:00
• 23f9e7a18d Pass IKEv1 specific keymat to ike_keys hook Martin Willi 2012-01-18 18:34:07 +01:00
• 264514826c Use a more complete implementation of a HA specific diffie_hellman_t Martin Willi 2012-01-18 18:24:48 +01:00
• 5763367cac Show IKE version in ipsec statusall Martin Willi 2012-01-18 17:50:07 +01:00
• c3f1839ab7 Apply proposal to a HA synced IKE_SA Martin Willi 2012-01-18 17:49:52 +01:00
• 3624b09e21 Set selected proposal on IKEv1 SA, don't pass it separately to Phase 1 helper Martin Willi 2012-01-18 17:42:06 +01:00
• 6bc6f67b0f Updated HA plugin to new IKEv2 specific keymat functions Martin Willi 2012-01-18 17:24:31 +01:00
• 3957a6e4f3 Get a reference for the child_cfg passed to child_create_create() Martin Willi 2012-01-18 17:24:08 +01:00
• 696fa8e003 Invoke bus_t.narrow hook in quick mode exchange Martin Willi 2012-01-18 13:28:15 +01:00
• f420f51f55 Invoke authorization hooks for IKEv1 connections Martin Willi 2012-01-18 13:12:07 +01:00
• 1a0648490c Invoke ike_updown hooks for reauthenticated IKEv1 SAs Martin Willi 2012-01-16 16:47:18 +01:00
• b6ac063c36 Don't invoke a child_updown hook when a quick mode to delete has been rekeyed Martin Willi 2012-01-16 16:18:01 +01:00
• 669d8bded2 Invoke child_rekey hook instead of child_updown when rekeying a quick mode Martin Willi 2012-01-16 16:17:27 +01:00
• 5b7fc76861 Don't invoke updown hook when flushing SAs for IKEv1, tasks will do it Martin Willi 2012-01-16 15:57:46 +01:00
• c654d949f3 Fix "incoming" flag passed to bus_t.message() hook Martin Willi 2012-01-16 15:31:53 +01:00
• 477559cab5 Continue with next exchange after sending an INFORMATIONAL Martin Willi 2012-01-13 09:27:26 +01:00