Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 5c6abd2865 Added possibility to send notifications from the Quick Mode task Clavister OpenSource 2011-12-12 15:54:27 +01:00
• e647c98a13 Setting Protocol ID of notifys sent from task manager to ISAKMP Clavister OpenSource 2011-12-12 14:35:34 +01:00
• cc6b03bb5a If no IKEv1 shared key found for hosts, try to find one based on config identities Martin Willi 2011-12-12 12:33:31 +01:00
• 033dfba01f Log peer cfg enumeration externally for flexibility Martin Willi 2011-12-12 12:30:47 +01:00
• d7376e2ab4 Accept NULL identities passed to peer config enumeration Martin Willi 2011-12-12 12:17:13 +01:00
• 0e2cc3fed9 Fixed authentication method selection for main mode PSK authentication Martin Willi 2011-12-12 11:28:24 +01:00
• ea9e047bc5 Use virtual IP to substitute dynamic traffic selectors in quick mode Martin Willi 2011-12-09 16:19:54 +01:00
• 156b8662a6 Queue Mode Config tasks when required Martin Willi 2011-12-09 16:19:37 +01:00
• b155084c42 Added IKEv1 Mode Config task based on IKEv2 ike_config Martin Willi 2011-12-09 16:18:22 +01:00
• 21c916886d Added missing XAuth auth_class enum name Martin Willi 2011-12-09 15:22:30 +01:00
• a22b9e4f33 Reject quick modes if IKE_SA not yet established Martin Willi 2011-12-09 15:18:23 +01:00
• 67a753b95c Use a common function to set IKE_SA to established Martin Willi 2011-12-09 15:10:38 +01:00
• f223a28ae7 Be less verbose if plugin dependecy not satisfied Martin Willi 2011-12-07 13:40:38 +01:00
• 9626164e9a Don't complain when receiving XAuth or Unity configuration attributes Martin Willi 2011-12-09 14:57:51 +01:00
• c9e5998d7f Interpret attribute format correctly in IKEv1 configuration format Martin Willi 2011-12-09 14:54:23 +01:00
• 9f43868a01 Implemented responder part of XAUTH task Martin Willi 2011-12-08 18:30:47 +01:00
• d192cc9dc8 Implemented initiator part of xauth task Martin Willi 2011-12-08 18:08:54 +01:00
• 081b6dd3ed Ask for a username/password in xauth-null as XAUTH initiator Martin Willi 2011-12-08 18:08:13 +01:00
• 59ee898326 Get first XAuth backend if none configured Martin Willi 2011-12-08 17:19:10 +01:00
• cbda13f6fe Accept a xauth backend name appended to left/rightauth Martin Willi 2011-12-08 16:57:38 +01:00
• 6ebcbc654c Added auth_cfg option to select XAUTH backend to use Martin Willi 2011-12-08 16:53:27 +01:00
• 89afbe58bb Remove unused task swap_initiator method Martin Willi 2011-12-08 16:53:01 +01:00
• 1fe6cdfac2 Use a string to identify xauth backends, no need for integer types Martin Willi 2011-12-08 16:42:11 +01:00
• 4e73f85b81 Remove xauth_authenticator, we handle it in the task Martin Willi 2011-12-08 15:38:28 +00:00
• 96c9159d96 Use a second authentication config to configure XAUTH authentication Martin Willi 2011-12-08 16:20:46 +01:00
• 69adeb5bf2 Replace xauth_request task with a new stub where we reimplement it Martin Willi 2011-12-08 16:19:54 +01:00
• c6d0098c1b Added missing auth_method_t enum names Martin Willi 2011-12-08 15:56:01 +01:00
• a0eea1a7ac Defined hybrid IKEv1 authentication methods Martin Willi 2011-12-08 15:55:43 +01:00
• c29fba51aa Some notification errors added to main_mode process_r Clavister OpenSource 2011-12-09 16:05:17 +01:00
• b8383f1f2d Encrypt INFORMATIONAL exchange if needed Clavister OpenSource 2011-12-09 16:04:12 +01:00
• fbbd439bf9 Added possibility to send notification if task_manager->process fails Clavister OpenSource 2011-12-09 16:03:37 +01:00
• 1390daae15 Added status code to status_t Clavister OpenSource 2011-12-09 15:49:07 +01:00
• 9ce5d0c0e8 added functions for getting/setting ISAKMP SPI to notify payload Clavister OpenSource 2011-12-09 15:43:36 +01:00
• a064eaa8a6 Handling of initial contact Clavister OpenSource 2011-12-09 11:41:26 +01:00
• 751bd02e98 Added retransmissions for initiator. Clavister OpenSource 2011-12-08 13:47:16 +01:00
• 1755ac0617 Cleaned up quick mode notify processing Martin Willi 2011-12-07 17:51:35 +01:00
• 5adf855e3d Add support for KE payloads in IKEv1 quick mode (PFS) Martin Willi 2011-12-07 17:43:58 +01:00
• 9bb4de1d83 En- and decode DH group attribute in quick mode SA payloads Martin Willi 2011-12-07 17:41:16 +01:00
• fb8bc6a764 Use authenticators in IKEv1 main mode Martin Willi 2011-12-07 14:10:05 +00:00
• 76fe7de3fd Added a factory function for IKEv1 authenticators Martin Willi 2011-12-07 14:09:34 +00:00
• 7c27c914d4 Implemented IKEv1 pubkey SIG payload processing in an authenticator Martin Willi 2011-12-07 14:08:06 +00:00
• 2792587875 Implemented IKEv1 PSK HASH payload processing in separated authenticator Martin Willi 2011-12-07 14:52:02 +01:00
• 5d1eeec297 Handle incoming delete messages Clavister OpenSource 2011-12-07 13:30:53 +01:00
• 6f6380e670 use untoh64 instead of non-portable be64toh Andreas Steffen 2011-12-06 15:15:40 +01:00
• c64a4b4f8e Implemented post-authentication certificate handling for IKEv1 Martin Willi 2011-12-06 13:38:27 +01:00
• 9ad5b8fa95 Cleanup CERT payload constructors Martin Willi 2011-12-06 13:37:57 +01:00
• 0bcdb8e571 Implemented pre-authentication certificate handling for IKEv1 Martin Willi 2011-12-06 12:14:48 +01:00
• 8c33850615 Added task types for IKEv1 certificate handling Martin Willi 2011-12-06 11:44:17 +01:00
• df06ef2098 Cleaned up certreq payload for IKEv2/IKEv1 use Martin Willi 2011-12-06 10:56:39 +01:00
• 6ccabe2561 Reverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks Martin Willi 2011-12-06 10:55:15 +01:00
• 9f80110bc6 Install SAs with UDP encapsulation during Quick Mode. Tobias Brunner 2011-12-06 10:33:10 +01:00
• aaa8f88906 Fix support for plain RSA authentication in IKEv1, both as initiator and responder Martin Willi 2011-12-05 17:24:17 +01:00
• a974700fc0 Fix referencing of multiple CERTREQ payload with IKEv1, other cleanups Martin Willi 2011-12-05 17:07:48 +01:00
• 695aff41f5 Encode a single IP traffic selector as ID_IPV?_ADDRESS identity Martin Willi 2011-12-05 16:20:56 +01:00
• caa6f772c8 Added missing break;s when converting ID_IP_ADDRESS types to ts, extracted function Martin Willi 2011-12-05 16:14:52 +01:00
• bd8700f055 Don't use unportable htobe64 macro directly Martin Willi 2011-12-05 15:45:01 +01:00
• f4e25e602b Implement htoun/untoh64 with potentially faster htobe64/be64toh macros, if available Martin Willi 2011-12-05 15:44:51 +01:00
• 65840cc462 fixed copy-and-paste error Andreas Steffen 2011-12-04 12:53:47 +01:00
• cd419ae446 extended bio_reader and bio_writer to handle u_int64_t Andreas Steffen 2011-10-27 00:37:24 +02:00
• d82a68642d XAUTH additions for certificates. Clavister OpenSource 2011-12-05 14:27:53 +01:00
• a874a1f50b signature payload handling. Clavister OpenSource 2011-12-05 14:22:11 +01:00
• 8ad5cd1f6c certificate tasks added to passive list for responder Clavister OpenSource 2011-12-05 14:17:17 +01:00
• 7d9269bfce certificate handling for XAuth responder. Clavister OpenSource 2011-12-05 14:11:48 +01:00
• a846be3116 keymat: derive_ike_keys updated with XAUTH RSA:s Clavister OpenSource 2011-12-05 13:54:54 +01:00
• e102f86e88 Setting transform number in esp proposal. Clavister OpenSource 2011-12-05 13:44:22 +01:00
• 8a9ab2035f ID_IPV4_ADDR and ID_IPV6_ADDR cases added to get_ts Clavister OpenSource 2011-12-05 12:48:14 +01:00
• 8c583c110e version bump to 5.0.0dr1 Andreas Steffen 2011-12-03 15:12:14 +01:00
• 07abb470c6 IKEv1: Added basic support for INFORMATIONAL exchange types, and for NOTIFY_V1 messages in the 3rd message in quick_mode. Clavister OpenSource 2011-12-02 16:22:42 +01:00
• f00ffe4dd2 IKEv1 XAuth: Added changes to Makefile.am to compile the xauth_null plugin. Clavister OpenSource 2011-12-02 15:39:09 +01:00
• 8cb6f4f979 Don't stop processing tasks if one returns SUCCESS. Tobias Brunner 2011-12-02 08:38:43 +01:00
• 4394d96844 IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin. Clavister OpenSource 2011-12-01 16:34:30 +01:00
• 9c5366446a IKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins to talk to servers with different quirks for XAuth authentication. Clavister OpenSource 2011-12-01 14:08:24 +01:00
• 781f4c8898 IKEv1 XAuth: Add XAuth defines for plugin types. Clavister OpenSource 2011-12-01 13:11:36 +01:00
• 3bf0be6b08 Add NAT-OA payloads during Quick Mode if transport mode is used. Tobias Brunner 2011-11-30 18:03:06 +01:00
• 29b0cb328a Negotiate UDP encapsulation during Quick Mode if NAT is detected. Tobias Brunner 2011-11-30 17:52:14 +01:00
• 1cc4ec46cf Task added for IKEv1 NAT detection. Tobias Brunner 2011-11-30 17:09:42 +01:00
• 61e2a1ad8a Create negotiated hasher earlier during Main Mode so it is available for building NAT-D payloads. Tobias Brunner 2011-11-30 17:04:21 +01:00
• 4ace4daf0c Added a function to keymat_v1 to create the hasher earlier than during key derivation. Tobias Brunner 2011-11-30 17:03:01 +01:00
• a0bea44a97 Message rules for IKEv1 NAT-T payloads added. Tobias Brunner 2011-11-30 16:55:24 +01:00
• c5dc9d3383 IKEv1 XAuth: Moving the state change to IKE_CONNECTED until after XAuth exchanges are complete. Clavister OpenSource 2011-11-30 10:43:38 +01:00
• 02c36eeb86 IKEv1 XAuth: Adding "initiate" flag parameter to the initiate_xauth method, signalling whether or not to call the task_manager->initiate method after queueing the task. Clavister OpenSource 2011-11-30 10:39:29 +01:00
• 06d29be714 Handle IKEv1 NAT-T vendor ID payload (only RFC 3947 for now). Tobias Brunner 2011-11-29 14:26:52 +01:00
• 1e97783c99 Added payloads for IKEv1 NAT-Traversal negotiation. Tobias Brunner 2011-11-29 11:14:25 +01:00
• 3fa8db8b59 IKEv1 XAuth: Clean up debug prints in xauth_request task. Clavister OpenSource 2011-11-29 11:41:56 +01:00
• 735fa3e5b9 IKEv1 XAuth: Remove XAuth task from the passive task list for ID_PROT. Clavister OpenSource 2011-11-29 11:36:53 +01:00
• 0ea77083bb Revert "IKEv1 XAuth: Added new MIGRATE status type to status_t." Clavister OpenSource 2011-11-29 11:21:54 +01:00
• c961d110ab IKEv1 XAuth + CfgMode: Added ability to process CfgMode messages in the xauth task. Migrated away from using the MIGRATE method to switch queues. Clavister OpenSource 2011-11-29 11:04:36 +01:00
• ef2eac7fb0 IKEv1 XAuth: Change the main_mode task to use the new initiate_xauth job instead of the old MIGRATE method. Clavister OpenSource 2011-11-29 10:52:31 +01:00
• 56fb0f0b3a IKEv1 XAuth: Added XAuthResp authentication modes. Clavister OpenSource 2011-11-29 10:42:31 +01:00
• 2e210e3ef5 IKEv1 XAuth: Added a job to call the initiate_xauth method of ike_sa after the completion of the current set of tasks is complete. Clavister OpenSource 2011-11-29 09:24:29 +01:00
• 65359ccbbc IKEv1 XAuth: Add "initiate xauth" method, which adds the xauth task into the queue for initiation. Clavister OpenSource 2011-11-29 09:15:59 +01:00
• 9eefb5f9b4 Use quiet generator when creating IKEv1 message hashes. Tobias Brunner 2011-11-25 18:58:18 +01:00
• 24ddf03f52 Added an option to create a generator that does not log debug messages. Tobias Brunner 2011-11-25 18:57:03 +01:00
• 4cfd0db854 Respond with NO_PROPOSAL_CHOSEN, if we don't find an ike_cfg. Tobias Brunner 2011-11-25 18:01:25 +01:00
• 6be8d33daa Don't respond to malformed INFORMATIONAL_V1 messages with another INFORMATIONAL_V1 exchange. Tobias Brunner 2011-11-25 18:00:06 +01:00
• 37639e94fb Handle invalid IKEv1 hashes more specifically. Tobias Brunner 2011-11-25 17:59:39 +01:00
• 29a5e0707e Handle unsupported IKEv1 exchange types more specifically. Tobias Brunner 2011-11-25 17:58:37 +01:00
• b235e69cde Send an INFORMATIONAL message on IKEv1 parse errors. Tobias Brunner 2011-11-25 17:54:28 +01:00
• 983e852af8 Handle INFORMATIONAL_V1 messages when no keys have been derived yet. Tobias Brunner 2011-11-25 17:45:30 +01:00
• e6732003f4 Error reporting for invalid IKEv2 responses fixed. Tobias Brunner 2011-11-25 16:24:32 +01:00