Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 244d715de5 Moved liveness checking task creation to protocol specific task manager Martin Willi 2011-12-19 13:49:09 +01:00
• 7d0a3a427d Factories honor charon IKEv1/IKEv2 protocol support flags Martin Willi 2011-12-19 13:32:41 +01:00
• e51a28fda8 Added a --disable-ikev2 option to disable IKEv2 support in charon Martin Willi 2011-12-19 13:13:45 +01:00
• 15a682f4c2 Separated libcharon/sa directory with ikev1 and ikev2 subfolders Martin Willi 2011-12-19 13:10:29 +01:00
• 2e3c9f8799 Renamed ike_vendor_v1 to isakmp_vendor Martin Willi 2011-12-19 11:28:54 +01:00
• 79d6fc7f72 Renamed ike_natd_v1 to isakmp_natd Martin Willi 2011-12-19 11:24:03 +01:00
• 824dc0adad Renamed ike_cert_pre_v1 to isakmp_cert_pre Martin Willi 2011-12-19 11:17:31 +01:00
• 0aa2af5efc Renamed ike_cert_post_v1 to isakmp_cert_post Martin Willi 2011-12-19 11:12:27 +01:00
• 26a758ffcb Fixed fix for XAuth plugin feature matching Martin Willi 2011-12-19 11:33:06 +01:00
• 8833068877 Doxygen fixes Martin Willi 2011-12-19 10:27:40 +01:00
• ef32c6866e Removed obsolete XAuth job Martin Willi 2011-12-19 10:22:47 +01:00
• 26b02f50f4 Always use a transform number of 1 when encoding a single transform Martin Willi 2011-12-19 10:12:52 +01:00
• 5d0458af0a Another set of cleanups in message.c Martin Willi 2011-12-19 10:12:33 +01:00
• 2ee83c2778 Fix XAuth plugin feature matching Martin Willi 2011-12-19 10:10:57 +01:00
• ef175c92d9 Initiate IKE_ANY configurations with IKEv2 Martin Willi 2011-12-17 14:26:04 +01:00
• ac009df132 Pass IKE version to peer config enumerator, filter configs Martin Willi 2011-12-17 13:31:27 +01:00
• d94c923648 Support an "any" IKE version for both IKEv1 or IKEv2 Martin Willi 2011-12-17 12:48:14 +01:00
• b9a707e696 Some coding style cleanups Martin Willi 2011-12-17 12:47:44 +01:00
• 2f58f6cba1 Fixed notify enum names Martin Willi 2011-12-17 12:19:30 +01:00
• 4bc4e8e17b Added support for iKEIntermediate flag to ipsec pki. Tobias Brunner 2011-12-15 16:56:07 +01:00
• f29a4f1c64 Added support for iKEIntermediate X.509 extended key usage flag. Tobias Brunner 2011-12-15 16:54:49 +01:00
• 00cc2188d4 Some whitespace fixes. Tobias Brunner 2011-12-15 16:51:19 +01:00
• b46b56fac1 Log parsed unsigned ints with proper format strings. Tobias Brunner 2011-12-15 11:22:31 +01:00
• bf5b1d9e73 Send different notifies if quick mode fails Martin Willi 2011-12-15 18:35:55 +01:00
• b64d6423b1 Support flushing of task queue after building message in task fails Martin Willi 2011-12-15 18:23:28 +01:00
• fceb20f390 Consider notify errors fatal only during main mode Martin Willi 2011-12-15 18:11:00 +01:00
• 767966e70b Delete CHILD_SA if installing SA in third message fails Martin Willi 2011-12-15 18:04:39 +01:00
• 53816600ff Added a quick_delete task flag to enforce delete, even if CHILD_SA not found Martin Willi 2011-12-15 18:03:14 +01:00
• 429d95fef2 Send delete if Main Mode authentication fails as initiator Martin Willi 2011-12-15 17:28:58 +01:00
• 5762c0efeb Send notifies in all error cases of Main Mode Martin Willi 2011-12-15 17:04:45 +01:00
• ca26065745 Add some additional IKEv1 notify types Martin Willi 2011-12-15 17:04:29 +01:00
• a4cc071364 Do not trust unprotected INFORMATIONALS, just print that we got one Martin Willi 2011-12-15 16:23:47 +01:00
• daf7e6bc36 Use (as client) and verify (as server) configured XAuth identities Martin Willi 2011-12-15 13:15:34 +01:00
• 7a7efbf9d8 Added an identity getter to XAuth methods to query the actually used identity Martin Willi 2011-12-15 13:14:33 +01:00
• 5f6a37eb9b Be a little more verbose about XAuth configs in ipsec statusall Martin Willi 2011-12-15 13:13:30 +01:00
• 21a4fc832e Pass ipsec.conf xauth_identity option via stroke to charon configurations Martin Willi 2011-12-15 13:12:42 +01:00
• 10a6a5acff Store Main Mode identity even if XAuth-only is used for authentication Martin Willi 2011-12-15 12:28:43 +01:00
• f5e5c5edbd Added an XAUTH identity to use or require for XAuth authentication Martin Willi 2011-12-15 11:58:26 +01:00
• bdadc5aee2 Check authorization constraints after main mode completed Martin Willi 2011-12-15 11:31:02 +01:00
• fd2a491b31 Stop checking once a key size constraint is not fulfilled Martin Willi 2011-12-15 11:30:22 +01:00
• ac3bc42e63 Save authentication info collected during main mode authentication Martin Willi 2011-12-15 11:01:35 +01:00
• b24b73b7f3 Flush auth configs, if enabled, for both IKEv1 and IKEv2 Martin Willi 2011-12-15 11:01:06 +01:00
• 4ac137135a Fixed return value if SIG payload missing Martin Willi 2011-12-15 10:01:35 +01:00
• 00d8823242 Show auth method of config we are looking for in main mode Martin Willi 2011-12-14 19:45:30 +01:00
• 7b1e15ac4e Fixed IKEv1 prf+ keymat expansion beyond 320 bits Martin Willi 2011-12-14 17:34:57 +01:00
• 3ba15819ed Remove executable flag from source code files Martin Willi 2011-12-14 16:46:29 +01:00
• 91ca35a2d2 Removed IKEv1 specific code from child_delete task Martin Willi 2011-12-14 16:41:32 +01:00
• c459dae556 Use IKEv1 specific tasks to close Quick Mode SAs Martin Willi 2011-12-14 16:39:44 +01:00
• 5f10938592 Added a dedicated IKEv1 task to delete CHILD_SAs Martin Willi 2011-12-14 16:33:39 +01:00
• 07095794a1 Close IKE_SA directly after sending the delete Martin Willi 2011-12-14 15:33:06 +01:00
• 0f5b6c6831 Removed IKEv1 specific code from ike_delete task Martin Willi 2011-12-14 15:28:43 +01:00
• 5f23be840b Use the IKEv1 specific delete in IKEv1 SAs Martin Willi 2011-12-14 15:27:12 +01:00
• 8db202f1b0 Added a dedicated delete task for IKEv1 IKE_SAs Martin Willi 2011-12-14 15:22:39 +01:00
• 137c06babf Use a single task_type_t enum name for ME and non-ME variant Martin Willi 2011-12-14 15:21:35 +01:00
• 7b25135ecf Send certificates and requests when using Hybrid authentication Martin Willi 2011-12-14 10:56:23 +01:00
• d1b986eb48 Look for an XAuth authentication config both in the first and the second round Martin Willi 2011-12-14 09:44:59 +01:00
• d548435a02 Added hybrid authentication support to Main Mode Martin Willi 2011-12-14 09:44:39 +01:00
• 51da01a722 Support encoding of Hybrid initiator authentication method Martin Willi 2011-12-14 09:43:44 +01:00
• 29101ce978 Added a IKEv1 hybrid authenticator based on Pubkey/PSK authenticators Martin Willi 2011-12-14 09:40:43 +01:00
• a6c328a6e9 Use real ID payload to build HASH_I|R for Main Mode authentication. Tobias Brunner 2011-12-13 18:56:06 +01:00
• 19965ffe56 Create authenticators right when they are used during Main Mode. Tobias Brunner 2011-12-13 18:53:44 +01:00
• 33493a5253 Added method to get encoded version if ID_V1 payload. Tobias Brunner 2011-12-13 17:12:23 +01:00
• 0b0191e143 Ignore additional TRANSACTION request if we already queued one Martin Willi 2011-12-13 16:21:47 +01:00
• fce566a876 Keep a history of received response hashes to detect late retransmissions Martin Willi 2011-12-13 16:14:17 +01:00
• 3643179535 Narrow down received and configured traffic selector to a common subset Martin Willi 2011-12-13 15:32:53 +01:00
• 7b34de45c3 Don't send a retransmit for a request we never have sent a response Martin Willi 2011-12-13 15:10:26 +01:00
• f5ef357791 Print unsigned IKEv1 message IDs Martin Willi 2011-12-13 14:52:50 +01:00
• 6a6e000134 Log selected peer config during Main Mode. Tobias Brunner 2011-12-13 13:09:56 +01:00
• 0a43f4b6c4 Log configured IKE version in stroke plugin. Tobias Brunner 2011-12-13 13:09:37 +01:00
• e6503db2cf Fixed SIGSEGV when logging peer config matches. Tobias Brunner 2011-12-13 13:08:54 +01:00
• 9f10b95a3b Added a bunch of well known IKEv1 vendor IDs to database Martin Willi 2011-12-13 14:39:24 +01:00
• 156cd8827f Use a generic IKEv1 vendor ID database to send and receive vendor IDs Martin Willi 2011-12-13 14:26:31 +01:00
• 360c3394cf Fixed compiler warning (set but unused variable) Martin Willi 2011-12-13 13:42:41 +01:00
• f91b6ac77a Queue a TRANSACTION message for later processing if Main Mode not yet completed Martin Willi 2011-12-13 12:17:35 +01:00
• e33510f8a3 Fixed leak of shared keys in xauth-generic plugin Martin Willi 2011-12-13 11:39:54 +01:00
• 45956d15ea Free list after removing the last local credential set, fixes a leak report Martin Willi 2011-12-13 11:37:02 +01:00
• 226b0f36c7 Fixed SPI size calculation in DELETE payload Martin Willi 2011-12-13 11:30:35 +01:00
• 41fbde4544 Reset task manager state when build() completes an exchange (quick mode) Martin Willi 2011-12-13 11:19:08 +01:00
• 92aa6e0255 Include COOKIES in IKEv1 delete payloads Martin Willi 2011-12-13 11:10:48 +01:00
• 0acb520758 Support IKEv1 SPIs in IKEv1 delete payload Martin Willi 2011-12-13 11:08:53 +01:00
• 5383b50d88 Fixed missing shared_key initialization in main_mode task. Tobias Brunner 2011-12-13 10:39:36 +01:00
• c9fc577a8a Use version specific DELETE payload identifier in ike_delete task Martin Willi 2011-12-13 10:36:42 +01:00
• 8ef2bae4db Activate DELETE tasks when queued Martin Willi 2011-12-13 10:36:02 +01:00
• 5dec456b69 Fix IKEv1 DELETE subtask creation and processing Martin Willi 2011-12-13 10:35:18 +01:00
• 10e18713f1 Handle DELETE as responder as INFORMATIONAL subtask Martin Willi 2011-12-13 10:22:49 +01:00
• 46505067c7 Close SA immediately after sending an INFORMATIONAL error Martin Willi 2011-12-13 09:55:37 +01:00
• 97933967a0 Moved responder informational handling to task Martin Willi 2011-12-13 09:50:31 +01:00
• 1477ab157c Remove unused status type Martin Willi 2011-12-13 09:42:16 +01:00
• 1cc3e92ccc Check if IKEv1 exchange type matches before handling it as response Martin Willi 2011-12-13 09:40:26 +01:00
• e7ae90c194 Use informational task in quick mode to send notifies Martin Willi 2011-12-12 18:13:10 +01:00
• b47052694f Cleaned up notification sending in IKEv1 task manager Martin Willi 2011-12-12 15:45:45 +01:00
• accf46129a Use informational taks to send notify errors Martin Willi 2011-12-12 15:44:58 +01:00
• f492907667 Added a task stub to create and process IKEv1 informational exchanges Martin Willi 2011-12-12 15:38:20 +01:00
• 590ca1d482 Allow IKEv1 tasks to return ALREADY_DONE to flush all active or passive tasks Martin Willi 2011-12-12 15:16:15 +01:00
• 0f61964ed7 Support flushing of single tasks queues in IKEv1 task manager Martin Willi 2011-12-12 18:01:21 +01:00
• 9862852823 Double check if we have a packet before retransmitting it Martin Willi 2011-12-12 15:43:12 +01:00
• 0793ac497a Fixed memory leak when handling IKEv1 error notifications. Tobias Brunner 2011-12-12 18:37:49 +01:00
• 4dbd81c669 Destroy IKE_SA after failed XAuth authentication. Tobias Brunner 2011-12-12 18:38:32 +01:00
• 3d44d735c6 Added generic XAuth backend, using secrets provided by credential sets. Tobias Brunner 2011-12-12 18:26:26 +01:00
• 41e1e435d9 Removed xauth-null dummy plugin. Tobias Brunner 2011-12-12 14:25:15 +01:00