Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 2e897fe30a Handle first exchange in IKEv1 main mode as responder Martin Willi 2011-11-16 18:24:47 +01:00
• 3a470f3035 Added limiting encoding of IKEv1 SA payloads Martin Willi 2011-11-16 18:24:14 +01:00
• 2bcd51b389 Added SA payload IKEv1 encoding types to generator Martin Willi 2011-11-16 18:23:37 +01:00
• bce8d3be11 Don't set IKEv2 only header flags when using IKEv1 Martin Willi 2011-11-16 18:23:00 +01:00
• da8cadbd93 Set default IKE header initiator flag in IKEv2 only Martin Willi 2011-11-16 15:09:02 +00:00
• c73c832c5a Added an IKEv1 main mode task stub Martin Willi 2011-11-16 14:44:06 +00:00
• 4a09d9ee7f Added a stub for a IKEv1 task manager Martin Willi 2011-11-16 15:27:04 +01:00
• e69f7dcddf Use task manager as generic interface, renamed implementation to _v2. Martin Willi 2011-11-16 13:53:54 +00:00
• 4ac22be0ec Fix unaligned aliasing warning in raw socket Martin Willi 2011-11-16 13:45:19 +00:00
• f7a8fcedc0 Use enum to define IKE version on peer_cfg_t. Tobias Brunner 2011-11-16 17:28:06 +01:00
• 3238faf8e6 Fix init message arrival check. Tobias Brunner 2011-11-16 16:19:13 +01:00
• 354ac9579f Compile error fixed. Tobias Brunner 2011-11-16 15:05:08 +01:00
• 7f56cf1a65 Message parsing slightly refactored, allows parsing of unencrypted IKEv1 messages. Tobias Brunner 2011-11-16 14:23:50 +01:00
• 4ed52db2bb Allow creation of message_t objects for IKEv1 packets. Tobias Brunner 2011-11-16 12:06:55 +01:00
• 8a2d079d78 Certificate request payloads can be sent in pretty much any IKEv1 message. Tobias Brunner 2011-11-16 10:31:53 +01:00
• 1bf2971ff2 Implemented limited payload parsing for IKEv1 SA payloads Martin Willi 2011-11-16 13:46:54 +01:00
• 3f6d1b13a7 Added additional IKEv1 payload and encoding identifiers Martin Willi 2011-11-16 12:40:09 +00:00
• b0b9d18593 Extend sa_payload for IKEv1 support Martin Willi 2011-11-16 09:29:38 +01:00
• 8f3aea2f77 Message rules for IKEv1 INFORMATIONAL exchange added. Tobias Brunner 2011-11-15 18:23:15 +01:00
• 130c9a54c2 Message rules for IKEv1 AGGRESSIVE exchange added. Tobias Brunner 2011-11-15 18:21:28 +01:00
• 6ba70ba8dd Message rules for IKEv1 ID_PROT exchange added. Tobias Brunner 2011-11-15 16:13:50 +01:00
• fdb8421f36 Typo fixed. Tobias Brunner 2011-11-15 14:27:19 +01:00
• 837298c590 Use vendor id payload for IKEv1 payloads, too Martin Willi 2011-11-15 14:58:47 +00:00
• ecf854a00b Added IKEv1 payload identifiers to "known" payload list Martin Willi 2011-11-15 14:58:23 +00:00
• 2fc986182f Handle IKEv1 messages in managers checkout_by_message Martin Willi 2011-11-15 15:30:39 +01:00
• e33b41e7b0 Added IKEv1 payload identifiers Martin Willi 2011-11-15 14:47:20 +01:00
• 867701bc6d Accept and process IKEv1 messages in receiver Martin Willi 2011-11-15 14:03:24 +01:00
• 526b5afb45 Extended IKE header for IKEv1 support Martin Willi 2011-11-15 13:53:56 +01:00
• ccdd3a4cee Added configure option for the IKEv1 implementation in charon. Tobias Brunner 2011-11-09 12:08:40 +01:00
• 3cea55b0c8 corrected description Andreas Steffen 2012-03-17 23:22:25 +01:00
• 9da795392e added ikev2/esp-alg-sha1-160 scenario Andreas Steffen 2012-03-17 23:20:03 +01:00
• d9b539dc33 added ikev2/esp-alg-md5-128 scenario Andreas Steffen 2012-03-17 22:56:37 +01:00
• 584178c3bb version bump to 4.6.3dr2 Andreas Steffen 2012-03-16 22:21:54 +01:00
• f673958e59 added the strongswan.conf options of the tnc-pdp plugin Andreas Steffen 2012-03-16 11:14:40 +01:00
• bd360b3911 keep a copy of refreshed carolCert-ocsp.pem Andreas Steffen 2012-03-15 07:59:42 +01:00
• ebf292bad0 refreshed carolCert-ocsp.pem Andreas Steffen 2012-03-15 07:58:35 +01:00
• 68c2c7ece4 eliminate unneeded private variable Andreas Steffen 2012-03-14 21:38:30 +01:00
• ea2f340e27 added tnc/tnccs-20-pdp scenario Andreas Steffen 2012-03-14 08:47:12 +01:00
• 9b8053a63a edited description of tnc/tnccs-11-radius scenario Andreas Steffen 2012-03-14 08:46:52 +01:00
• fb5450a435 use MAX_RADIUS_ATTRIBUTE_SIZE constant from radius_message header file Andreas Steffen 2012-03-14 07:51:56 +01:00
• c224f7654d version bump to 4.6.3dr1 Andreas Steffen 2012-03-14 07:45:35 +01:00
• dae4ada4cd make the mppe salt unique Andreas Steffen 2012-03-14 07:31:19 +01:00
• 3cff2b598b straightene radius_mppe header file Andreas Steffen 2012-03-14 06:52:26 +01:00
• 6fd612913e implemented MS_MPPE encryption Andreas Steffen 2012-03-13 23:26:15 +01:00
• 5fdb849293 use predefined Microsoft PEN Andreas Steffen 2012-03-13 19:23:35 +01:00
• 4adc3c147e use MAX_RADIUS_ATTRIBUTE_SIZE constant Andreas Steffen 2012-03-13 18:06:56 +01:00
• ff4e447954 use RADIUS_TUNNEL_TYPE_ESP defined in header file Andreas Steffen 2012-03-13 17:00:37 +01:00
• d90ade8f79 implemented RADIUS Filter-ID attribute Andreas Steffen 2012-03-13 16:26:10 +01:00
• dfa3084223 removed double library entry Andreas Steffen 2012-03-12 08:56:48 +01:00
• 27a91de071 adapted debug output Andreas Steffen 2012-03-09 17:41:04 +01:00
• 70b2bfa5cb keep a list of RADIUS connections with EAP method states Andreas Steffen 2012-03-09 17:38:06 +01:00
• 595f44e9a3 apply maximum RADIUS attribute size to outbound EAP messages Andreas Steffen 2012-03-09 10:20:44 +01:00
• d1a311f631 read PDP server name from strongswan.conf Andreas Steffen 2012-03-09 09:28:51 +01:00
• 4853efe891 define MAX_RADIUS_ATTRIBUTE_SIZE Andreas Steffen 2012-03-09 08:48:46 +01:00
• 135822e11b define peer and server identities Andreas Steffen 2012-03-08 23:19:13 +01:00
• cd9bde335c added EAP_SUCCESS/FAILURE message to RADIUS Accept/Reject Andreas Steffen 2012-03-08 22:37:09 +01:00
• b3ec652192 added msg_auth flag in radius_message_t sign() method Andreas Steffen 2012-03-08 22:36:06 +01:00
• 4fc6c7d442 allow debug of raw RADIUS data Andreas Steffen 2012-03-08 21:47:27 +01:00
• d4db9f44c2 simple RADIUS server example works Andreas Steffen 2012-03-08 10:22:56 +01:00
• e9f32b010a first use of libradius Andreas Steffen 2011-11-24 11:02:18 +01:00
• 21b0f216b9 created libradius shared by eap-radius and tnc-pdp plugins Andreas Steffen 2011-11-18 19:42:05 +01:00
• 70fd2d1af7 created tnc-pdp policy decision point plugin Andreas Steffen 2011-11-13 21:56:47 +01:00
• bc403eb1e5 Fixed crash and locking issues while unrouting connections via stroke Martin Willi 2012-03-13 10:55:58 +01:00
• cd6b5bf8e9 Clear peer addresses during HA update. Tobias Brunner 2012-03-09 10:30:37 +01:00
• 72b2811204 Simplified some route lookups now that we store all peer addresses in a list. Tobias Brunner 2012-03-09 10:22:21 +01:00
• 94bbc60256 Renamed list of additional peer addresses as it now stores all known addresses. Tobias Brunner 2012-03-09 10:15:21 +01:00
• 2fe624cca9 Store the peer's current address as additional known address on the IKE_SA. Tobias Brunner 2012-03-09 10:03:08 +01:00
• 4bbd943038 Include radattr RADIUS attribute only if an EAP payload is present Martin Willi 2012-03-06 11:00:35 +01:00
• bb0b203186 By default include radattr RADIUS attribute in any IKE_AUTH exchange Martin Willi 2012-03-06 11:00:00 +01:00
• 45f20f8a79 farp plugin sends ARP responses for any tunneled address, not only virtual IPs Martin Willi 2012-02-10 16:50:18 +01:00
• 21796bac9a Be less verbose if we don't have a local address for a tunnel Martin Willi 2012-02-13 11:41:20 +01:00
• 4d7a2128b6 Re-resolve hosts on additional keyingtries Martin Willi 2012-02-14 11:29:34 +01:00
• d1fbb0a4b3 Renamed radius_server to radius_config, as some real RADIUS server functionality is coming Martin Willi 2012-03-05 18:31:30 +01:00
• 2e3615e4ad Prefer EAP-Identity to read radattr RADIUS attribute file Martin Willi 2012-03-05 17:57:16 +01:00
• 4cd176d525 Invoke ike_updown hook on authentication failure not before response sent Martin Willi 2012-02-29 10:10:45 +01:00
• 0853ff39c5 Build libradius if radattr plugin is enabled Martin Willi 2012-02-27 16:39:48 +01:00
• 3ccc8a191c Inject RADIUS attribute in radattr plugin read from an identity specific file Martin Willi 2012-02-27 16:33:18 +01:00
• caf4b88efc Added a radattr plugin that prints any received RADIUS notify to console Martin Willi 2012-02-27 15:41:53 +01:00
• f0f94e2ce6 Moved generic RADIUS protocol support to a dedicated libradius Martin Willi 2012-02-27 15:18:58 +01:00
• 990fda9d88 Removed libcharon dependencies from generic RADIUS protocol support Martin Willi 2012-02-27 14:49:22 +01:00
• 99cb353968 Forward specifcied RADIUS attributes between AAA backend and client Martin Willi 2012-02-24 16:41:10 +01:00
• 007d5b9218 Defined a private status notify to transport arbitrary RADIUS attributes Martin Willi 2012-02-24 13:37:00 +01:00
• c158ccd960 Implemented RADIUS DAE response retransmission Martin Willi 2012-02-22 17:01:13 +01:00
• fbaf5cd213 Be a little more verbose before starting IKE_SA reauthentication Martin Willi 2012-02-22 16:16:15 +01:00
• 4d19f7c5bf Process RADIUS DAE CoA updates, updating lifetimes Martin Willi 2012-02-22 16:10:38 +01:00
• a07b69734b Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth actively Martin Willi 2012-02-22 16:07:31 +01:00
• d23c159658 Use faster ike_sa_id and a delete job to handle RADIUS DAE Delete-Request Martin Willi 2012-02-22 15:07:02 +01:00
• 245e3c52a2 Refactored RADIUS DAE IKE_SA lookup Martin Willi 2012-02-22 14:56:02 +01:00
• 964b0c144e Pass RADIUS DAE client address a host_t instead of sockaddr struct Martin Willi 2012-02-22 14:44:24 +01:00
• 9756c143f0 Send RADIUS DAE Disconnect-ACK/NAK on Disconnect-Request Martin Willi 2012-02-22 14:23:50 +01:00
• 392618d4ec Support signing of RADIUS response messages Martin Willi 2012-02-22 14:22:50 +01:00
• 2bf3858955 Act on RADIUS DAE Disconnect requests Martin Willi 2012-02-22 13:49:06 +01:00
• 76b6b19f8d Verify received RADIUS DAE requests Martin Willi 2012-02-22 13:06:58 +01:00
• e8a8179706 Support verification of RADIUS request messages Martin Willi 2012-02-22 13:06:14 +01:00
• 3bc1829211 Rename RADIUS message constructors to handle both, requests and responses Martin Willi 2012-02-22 12:39:50 +01:00
• 6319ce63cf Enable RADIUS DAE listening if configured Martin Willi 2012-02-22 10:37:13 +01:00
• 85932ad24e Added infrastructure to listen to RADIUS Dynamic Authorization Extension requests Martin Willi 2012-02-22 10:34:06 +01:00
• 3a42c08904 Added Dynamic Authorization Extension RADIUS message codes Martin Willi 2012-02-22 10:31:36 +01:00
• c61341a58f Set IKE_SA lifetime based on RADIUS Session-Timeout attribute Martin Willi 2012-02-21 14:06:37 +01:00
• bdcf441703 Set hard timeouts when setting a lifetime Martin Willi 2012-02-21 14:05:57 +01:00