Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 21a4fc832e Pass ipsec.conf xauth_identity option via stroke to charon configurations Martin Willi 2011-12-15 13:12:42 +01:00
• 10a6a5acff Store Main Mode identity even if XAuth-only is used for authentication Martin Willi 2011-12-15 12:28:43 +01:00
• f5e5c5edbd Added an XAUTH identity to use or require for XAuth authentication Martin Willi 2011-12-15 11:58:26 +01:00
• bdadc5aee2 Check authorization constraints after main mode completed Martin Willi 2011-12-15 11:31:02 +01:00
• fd2a491b31 Stop checking once a key size constraint is not fulfilled Martin Willi 2011-12-15 11:30:22 +01:00
• ac3bc42e63 Save authentication info collected during main mode authentication Martin Willi 2011-12-15 11:01:35 +01:00
• b24b73b7f3 Flush auth configs, if enabled, for both IKEv1 and IKEv2 Martin Willi 2011-12-15 11:01:06 +01:00
• 4ac137135a Fixed return value if SIG payload missing Martin Willi 2011-12-15 10:01:35 +01:00
• 00d8823242 Show auth method of config we are looking for in main mode Martin Willi 2011-12-14 19:45:30 +01:00
• 7b1e15ac4e Fixed IKEv1 prf+ keymat expansion beyond 320 bits Martin Willi 2011-12-14 17:34:57 +01:00
• 3ba15819ed Remove executable flag from source code files Martin Willi 2011-12-14 16:46:29 +01:00
• 91ca35a2d2 Removed IKEv1 specific code from child_delete task Martin Willi 2011-12-14 16:41:32 +01:00
• c459dae556 Use IKEv1 specific tasks to close Quick Mode SAs Martin Willi 2011-12-14 16:39:44 +01:00
• 5f10938592 Added a dedicated IKEv1 task to delete CHILD_SAs Martin Willi 2011-12-14 16:33:39 +01:00
• 07095794a1 Close IKE_SA directly after sending the delete Martin Willi 2011-12-14 15:33:06 +01:00
• 0f5b6c6831 Removed IKEv1 specific code from ike_delete task Martin Willi 2011-12-14 15:28:43 +01:00
• 5f23be840b Use the IKEv1 specific delete in IKEv1 SAs Martin Willi 2011-12-14 15:27:12 +01:00
• 8db202f1b0 Added a dedicated delete task for IKEv1 IKE_SAs Martin Willi 2011-12-14 15:22:39 +01:00
• 137c06babf Use a single task_type_t enum name for ME and non-ME variant Martin Willi 2011-12-14 15:21:35 +01:00
• 7b25135ecf Send certificates and requests when using Hybrid authentication Martin Willi 2011-12-14 10:56:23 +01:00
• d1b986eb48 Look for an XAuth authentication config both in the first and the second round Martin Willi 2011-12-14 09:44:59 +01:00
• d548435a02 Added hybrid authentication support to Main Mode Martin Willi 2011-12-14 09:44:39 +01:00
• 51da01a722 Support encoding of Hybrid initiator authentication method Martin Willi 2011-12-14 09:43:44 +01:00
• 29101ce978 Added a IKEv1 hybrid authenticator based on Pubkey/PSK authenticators Martin Willi 2011-12-14 09:40:43 +01:00
• a6c328a6e9 Use real ID payload to build HASH_I|R for Main Mode authentication. Tobias Brunner 2011-12-13 18:56:06 +01:00
• 19965ffe56 Create authenticators right when they are used during Main Mode. Tobias Brunner 2011-12-13 18:53:44 +01:00
• 33493a5253 Added method to get encoded version if ID_V1 payload. Tobias Brunner 2011-12-13 17:12:23 +01:00
• 0b0191e143 Ignore additional TRANSACTION request if we already queued one Martin Willi 2011-12-13 16:21:47 +01:00
• fce566a876 Keep a history of received response hashes to detect late retransmissions Martin Willi 2011-12-13 16:14:17 +01:00
• 3643179535 Narrow down received and configured traffic selector to a common subset Martin Willi 2011-12-13 15:32:53 +01:00
• 7b34de45c3 Don't send a retransmit for a request we never have sent a response Martin Willi 2011-12-13 15:10:26 +01:00
• f5ef357791 Print unsigned IKEv1 message IDs Martin Willi 2011-12-13 14:52:50 +01:00
• 6a6e000134 Log selected peer config during Main Mode. Tobias Brunner 2011-12-13 13:09:56 +01:00
• 0a43f4b6c4 Log configured IKE version in stroke plugin. Tobias Brunner 2011-12-13 13:09:37 +01:00
• e6503db2cf Fixed SIGSEGV when logging peer config matches. Tobias Brunner 2011-12-13 13:08:54 +01:00
• 9f10b95a3b Added a bunch of well known IKEv1 vendor IDs to database Martin Willi 2011-12-13 14:39:24 +01:00
• 156cd8827f Use a generic IKEv1 vendor ID database to send and receive vendor IDs Martin Willi 2011-12-13 14:26:31 +01:00
• 360c3394cf Fixed compiler warning (set but unused variable) Martin Willi 2011-12-13 13:42:41 +01:00
• f91b6ac77a Queue a TRANSACTION message for later processing if Main Mode not yet completed Martin Willi 2011-12-13 12:17:35 +01:00
• e33510f8a3 Fixed leak of shared keys in xauth-generic plugin Martin Willi 2011-12-13 11:39:54 +01:00
• 45956d15ea Free list after removing the last local credential set, fixes a leak report Martin Willi 2011-12-13 11:37:02 +01:00
• 226b0f36c7 Fixed SPI size calculation in DELETE payload Martin Willi 2011-12-13 11:30:35 +01:00
• 41fbde4544 Reset task manager state when build() completes an exchange (quick mode) Martin Willi 2011-12-13 11:19:08 +01:00
• 92aa6e0255 Include COOKIES in IKEv1 delete payloads Martin Willi 2011-12-13 11:10:48 +01:00
• 0acb520758 Support IKEv1 SPIs in IKEv1 delete payload Martin Willi 2011-12-13 11:08:53 +01:00
• 5383b50d88 Fixed missing shared_key initialization in main_mode task. Tobias Brunner 2011-12-13 10:39:36 +01:00
• c9fc577a8a Use version specific DELETE payload identifier in ike_delete task Martin Willi 2011-12-13 10:36:42 +01:00
• 8ef2bae4db Activate DELETE tasks when queued Martin Willi 2011-12-13 10:36:02 +01:00
• 5dec456b69 Fix IKEv1 DELETE subtask creation and processing Martin Willi 2011-12-13 10:35:18 +01:00
• 10e18713f1 Handle DELETE as responder as INFORMATIONAL subtask Martin Willi 2011-12-13 10:22:49 +01:00
• 46505067c7 Close SA immediately after sending an INFORMATIONAL error Martin Willi 2011-12-13 09:55:37 +01:00
• 97933967a0 Moved responder informational handling to task Martin Willi 2011-12-13 09:50:31 +01:00
• 1477ab157c Remove unused status type Martin Willi 2011-12-13 09:42:16 +01:00
• 1cc3e92ccc Check if IKEv1 exchange type matches before handling it as response Martin Willi 2011-12-13 09:40:26 +01:00
• e7ae90c194 Use informational task in quick mode to send notifies Martin Willi 2011-12-12 18:13:10 +01:00
• b47052694f Cleaned up notification sending in IKEv1 task manager Martin Willi 2011-12-12 15:45:45 +01:00
• accf46129a Use informational taks to send notify errors Martin Willi 2011-12-12 15:44:58 +01:00
• f492907667 Added a task stub to create and process IKEv1 informational exchanges Martin Willi 2011-12-12 15:38:20 +01:00
• 590ca1d482 Allow IKEv1 tasks to return ALREADY_DONE to flush all active or passive tasks Martin Willi 2011-12-12 15:16:15 +01:00
• 0f61964ed7 Support flushing of single tasks queues in IKEv1 task manager Martin Willi 2011-12-12 18:01:21 +01:00
• 9862852823 Double check if we have a packet before retransmitting it Martin Willi 2011-12-12 15:43:12 +01:00
• 0793ac497a Fixed memory leak when handling IKEv1 error notifications. Tobias Brunner 2011-12-12 18:37:49 +01:00
• 4dbd81c669 Destroy IKE_SA after failed XAuth authentication. Tobias Brunner 2011-12-12 18:38:32 +01:00
• 3d44d735c6 Added generic XAuth backend, using secrets provided by credential sets. Tobias Brunner 2011-12-12 18:26:26 +01:00
• 41e1e435d9 Removed xauth-null dummy plugin. Tobias Brunner 2011-12-12 14:25:15 +01:00
• 5c6abd2865 Added possibility to send notifications from the Quick Mode task Clavister OpenSource 2011-12-12 15:54:27 +01:00
• e647c98a13 Setting Protocol ID of notifys sent from task manager to ISAKMP Clavister OpenSource 2011-12-12 14:35:34 +01:00
• cc6b03bb5a If no IKEv1 shared key found for hosts, try to find one based on config identities Martin Willi 2011-12-12 12:33:31 +01:00
• 033dfba01f Log peer cfg enumeration externally for flexibility Martin Willi 2011-12-12 12:30:47 +01:00
• d7376e2ab4 Accept NULL identities passed to peer config enumeration Martin Willi 2011-12-12 12:17:13 +01:00
• 0e2cc3fed9 Fixed authentication method selection for main mode PSK authentication Martin Willi 2011-12-12 11:28:24 +01:00
• ea9e047bc5 Use virtual IP to substitute dynamic traffic selectors in quick mode Martin Willi 2011-12-09 16:19:54 +01:00
• 156b8662a6 Queue Mode Config tasks when required Martin Willi 2011-12-09 16:19:37 +01:00
• b155084c42 Added IKEv1 Mode Config task based on IKEv2 ike_config Martin Willi 2011-12-09 16:18:22 +01:00
• 21c916886d Added missing XAuth auth_class enum name Martin Willi 2011-12-09 15:22:30 +01:00
• a22b9e4f33 Reject quick modes if IKE_SA not yet established Martin Willi 2011-12-09 15:18:23 +01:00
• 67a753b95c Use a common function to set IKE_SA to established Martin Willi 2011-12-09 15:10:38 +01:00
• f223a28ae7 Be less verbose if plugin dependecy not satisfied Martin Willi 2011-12-07 13:40:38 +01:00
• 9626164e9a Don't complain when receiving XAuth or Unity configuration attributes Martin Willi 2011-12-09 14:57:51 +01:00
• c9e5998d7f Interpret attribute format correctly in IKEv1 configuration format Martin Willi 2011-12-09 14:54:23 +01:00
• 9f43868a01 Implemented responder part of XAUTH task Martin Willi 2011-12-08 18:30:47 +01:00
• d192cc9dc8 Implemented initiator part of xauth task Martin Willi 2011-12-08 18:08:54 +01:00
• 081b6dd3ed Ask for a username/password in xauth-null as XAUTH initiator Martin Willi 2011-12-08 18:08:13 +01:00
• 59ee898326 Get first XAuth backend if none configured Martin Willi 2011-12-08 17:19:10 +01:00
• cbda13f6fe Accept a xauth backend name appended to left/rightauth Martin Willi 2011-12-08 16:57:38 +01:00
• 6ebcbc654c Added auth_cfg option to select XAUTH backend to use Martin Willi 2011-12-08 16:53:27 +01:00
• 89afbe58bb Remove unused task swap_initiator method Martin Willi 2011-12-08 16:53:01 +01:00
• 1fe6cdfac2 Use a string to identify xauth backends, no need for integer types Martin Willi 2011-12-08 16:42:11 +01:00
• 4e73f85b81 Remove xauth_authenticator, we handle it in the task Martin Willi 2011-12-08 15:38:28 +00:00
• 96c9159d96 Use a second authentication config to configure XAUTH authentication Martin Willi 2011-12-08 16:20:46 +01:00
• 69adeb5bf2 Replace xauth_request task with a new stub where we reimplement it Martin Willi 2011-12-08 16:19:54 +01:00
• c6d0098c1b Added missing auth_method_t enum names Martin Willi 2011-12-08 15:56:01 +01:00
• a0eea1a7ac Defined hybrid IKEv1 authentication methods Martin Willi 2011-12-08 15:55:43 +01:00
• c29fba51aa Some notification errors added to main_mode process_r Clavister OpenSource 2011-12-09 16:05:17 +01:00
• b8383f1f2d Encrypt INFORMATIONAL exchange if needed Clavister OpenSource 2011-12-09 16:04:12 +01:00
• fbbd439bf9 Added possibility to send notification if task_manager->process fails Clavister OpenSource 2011-12-09 16:03:37 +01:00
• 1390daae15 Added status code to status_t Clavister OpenSource 2011-12-09 15:49:07 +01:00
• 9ce5d0c0e8 added functions for getting/setting ISAKMP SPI to notify payload Clavister OpenSource 2011-12-09 15:43:36 +01:00
• a064eaa8a6 Handling of initial contact Clavister OpenSource 2011-12-09 11:41:26 +01:00
• 751bd02e98 Added retransmissions for initiator. Clavister OpenSource 2011-12-08 13:47:16 +01:00