Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 440231e863 load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-09-28 23:52:59 +02:00
• 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin Andreas Steffen 2010-09-28 23:34:04 +02:00
• 280c8ea2f0 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 11:31:39 +02:00
• 1e6cc07ee4 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 10:58:28 +02:00
• 234aaf2df2 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 10:35:12 +02:00
• 2b3124c76d fixed release of virtual IP for XAUTH identities Andreas Steffen 2010-09-26 10:16:30 +02:00
• f054606586 include RFC 5998 Andreas Steffen 2010-09-20 20:03:20 +02:00
• f22ba072e8 draft-ietf-ipsecme-eap-mutual will be released as RFC 5998. Tobias Brunner 2010-09-16 10:27:49 +02:00
• 824a040284 the updated IKEv2 RFC 5996 has been released Andreas Steffen 2010-09-15 12:55:31 +02:00
• 004de55235 added notify messages defined in RFC 5996 Andreas Steffen 2010-09-15 12:48:58 +02:00
• 80f86acccb show validity of OCSP responses Andreas Steffen 2010-09-10 22:14:12 +02:00
• 41f525becd Added missing options (corrected some default values). Tobias Brunner 2010-09-10 11:18:31 +02:00
• 3f71c5d95f Moved load-tester configuration to a separate section. Tobias Brunner 2010-09-10 10:00:02 +02:00
• b2bcc57737 Added information about logger configuration. Tobias Brunner 2010-09-09 18:55:26 +02:00
• fa8c06903f More information about IKEv2 retransmissions added. Tobias Brunner 2010-09-09 18:50:24 +02:00
• 320cecd2dd Adding most of the strongswan.conf options from the wiki. Tobias Brunner 2010-09-09 18:49:04 +02:00
• 483c1feb7e Added strongswan.conf(5) stub. Tobias Brunner 2010-09-09 14:03:22 +02:00
• 0a1233e642 Moved man pages for config files to a separate directory. Tobias Brunner 2010-09-09 13:15:36 +02:00
• 3c1debeb59 version bump to 4.5.0dr2 Andreas Steffen 2010-09-10 07:37:28 +02:00
• f3051ebf53 fixed memory leak Andreas Steffen 2010-09-09 21:38:22 +02:00
• 663e735553 Compare subject against all key identifiers in has_subject() Martin Willi 2010-09-09 17:40:16 +02:00
• f85f0c2795 has_subject() now resolves ID_KEY_IDs Andreas Steffen 2010-09-09 17:14:06 +02:00
• 89821331e0 Do not change cipherspec while we have buffered handshake fragments pending Martin Willi 2010-09-09 14:27:41 +02:00
• 939c4bf2e8 added ikev1/net2net-same-nets scenario Andreas Steffen 2010-09-09 13:37:22 +02:00
• 3f9ba3be66 Conditional exclusion of tls_test script completed. Tobias Brunner 2010-09-09 13:19:51 +02:00
• 6d4ae46768 Fixed typo. Tobias Brunner 2010-09-09 13:19:22 +02:00
• 3f58022679 debug output of inbound and outbound TNCCS batches Andreas Steffen 2010-09-09 11:14:48 +02:00
• 20ad62026e support non EAP-TTLS conformant RADIUS-type attribute segmentation Andreas Steffen 2010-09-09 11:13:48 +02:00
• b1baa90846 Fixed copy/paste error. Tobias Brunner 2010-09-09 10:10:43 +02:00
• 3b7eb3a9f4 added explanatory comments Andreas Steffen 2010-09-09 08:57:13 +02:00
• 48b8cbb206 send well-formed TNCCS-Batch Andreas Steffen 2010-09-08 13:44:34 +02:00
• de29e3a683 max max_message_count configurable and move it into tls_eap_t Andreas Steffen 2010-09-08 12:58:40 +02:00
• 99b0f633c2 handle TLS_PURPOSE_EAP_TNC Andreas Steffen 2010-09-08 12:11:44 +02:00
• 30cd31fb69 Added a simple led plugin to control Linux LEDs based on IKE activity Martin Willi 2010-09-08 11:59:00 +02:00
• 51b385d44d moved tls_t existance test into tls_eap_create() again Andreas Steffen 2010-09-08 11:09:11 +02:00
• d2b1d4378e generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol Andreas Steffen 2010-09-08 11:01:47 +02:00
• 7b3c01845f Read the compression type byte for EC groups, only Martin Willi 2010-09-08 10:32:55 +02:00
• 91a0825c39 added non-standard SERPENT and TWOFISH support to kernel_netlink plugin Andreas Steffen 2010-09-08 07:22:31 +02:00
• 2774826995 added openssl-ikev2/rw-eap-tls-only scenario Andreas Steffen 2010-09-07 17:14:32 +02:00
• 52d4dc7fe2 added qcStatements OID Andreas Steffen 2010-09-07 11:17:51 +02:00
• 61df42ccf3 Fixed typos Martin Willi 2010-09-07 10:24:40 +02:00
• 00755453e3 Build tls_test script only if TLS stack is enabled Martin Willi 2010-09-07 10:21:44 +02:00
• 84c9bc4254 Added PKCS#11 NEWS Martin Willi 2010-09-07 10:21:25 +02:00
• a782b52f6a Added (EAP-)TLS NEWS Martin Willi 2010-09-07 10:10:36 +02:00
• 31c65eb362 Include ec_point_format extension in ClientHello Martin Willi 2010-09-06 18:51:38 +02:00
• 02281c87a4 Added TLS specific EC point formats Martin Willi 2010-09-06 18:42:43 +02:00
• ec7d4e70d3 Renamed ecp_format to ansi_format, as point formats in TLS use different identifiers Martin Willi 2010-09-06 18:36:27 +02:00
• 3f5de7b65f Enable the random plugin for scripts Martin Willi 2010-09-06 18:11:05 +02:00
• fe559b5156 Accept TLS records with zero-length plaintext Martin Willi 2010-09-06 17:04:59 +02:00
• adb913adeb Added strongswan.conf option to filter for specific TLS suites Martin Willi 2010-09-06 16:44:47 +02:00
• 24a5b935e7 Added strongswan.conf options to filter cipher suites by specific algorithms Martin Willi 2010-09-06 16:37:45 +02:00
• a92a348092 Register missing AUTH_HMAC_SHA384 algorithm without truncation Martin Willi 2010-09-06 16:36:16 +02:00
• a03eebdf93 Fixed key type in TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA Martin Willi 2010-09-06 16:35:53 +02:00
• e6cce7ff0d Prepend point format to ECDH public key Martin Willi 2010-09-06 15:31:32 +02:00
• e4fd2bb428 Log the selected (EC)DH group Martin Willi 2010-09-06 11:19:47 +02:00
• 0f89143b84 Parse unsupported TLS Hello extensions properly Martin Willi 2010-09-06 10:55:15 +02:00
• 6cf85b35a4 Added TLS extension identifiers from RFC 3546 Martin Willi 2010-09-06 10:54:11 +02:00
• 3255e489be Of course, mark is also supported by pluto. Tobias Brunner 2010-09-06 12:04:26 +02:00
• a674c79a37 mark_in and mark_out are also supported by pluto. Tobias Brunner 2010-09-06 11:53:59 +02:00
• 4e68c1cfdc Do not propose (EC)DHE suites if we do not support them Martin Willi 2010-09-03 18:24:03 +02:00
• 4254257f9d Offer only algorithms/suites we have a registered public key backend for Martin Willi 2010-09-03 18:11:03 +02:00
• d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms Martin Willi 2010-09-03 18:09:48 +02:00
• f9c0cf862c Fixed key type of ECDHE_RSA groups Martin Willi 2010-09-03 17:24:39 +02:00
• 3f7bb88ba3 Use a dynamic curve enumerator to list/convert TLS named curves Martin Willi 2010-09-03 17:05:39 +02:00
• f4c98ae664 Use ECDH group check where appropriate Martin Willi 2010-09-03 16:22:49 +02:00
• 7d7711aba4 Added a generic function to check if a DH group is an EC group Martin Willi 2010-09-03 16:22:10 +02:00
• 2066918da2 Add ECDHE enabled cipher suites, including ECDSA variants Martin Willi 2010-09-03 12:54:40 +02:00
• 033fe95f0b Added support for a non-truncated SHA384 HMAC variant, as used by TLS Martin Willi 2010-09-03 12:51:26 +02:00
• 4cdade5aae Select private key based on received cipher suites Martin Willi 2010-09-03 12:50:18 +02:00
• 37a59a8fbf Support for EC curve Hello extension, EC curve fallback Martin Willi 2010-09-03 11:45:55 +02:00
• 141d7f7abd Added server support for ECDHE key exchange Martin Willi 2010-09-03 11:00:37 +02:00
• 5fc7297e38 Added client support for ECDHE key exchange Martin Willi 2010-09-03 11:00:07 +02:00
• 691ca54db5 Added TLS EC curve type and name identifiers Martin Willi 2010-09-03 10:59:01 +02:00
• 1972102e1e fixed typo Andreas Steffen 2010-09-03 13:30:40 +02:00
• 6d71f4dcb9 updown script variable is called PLUTO_UDP_ENC Andreas Steffen 2010-09-03 12:57:16 +02:00
• ddc961c369 Fixed left-/rightnexthop ipsec.conf options. Tobias Brunner 2010-09-03 11:44:01 +02:00
• ccb65463e7 Check for queued TLS alerts after each handshake part Martin Willi 2010-09-03 09:32:39 +02:00
• ed60dfa14f Added support for MODP_CUSTOM to gcrypt plugin Martin Willi 2010-09-03 09:32:18 +02:00
• 42b1ac91c4 Added support for MODP_CUSTOM to openssl plugin Martin Willi 2010-09-03 09:31:51 +02:00
• 6deeacd965 adapted debug options Andreas Steffen 2010-09-03 09:29:56 +02:00
• 4cbe758cd4 adapted debug options Andreas Steffen 2010-09-03 09:27:16 +02:00
• c0071bde73 removed redundant debug output Andreas Steffen 2010-09-02 22:19:25 +02:00
• 25de08474b version bump to 4.5.0dr2 Andreas Steffen 2010-09-02 22:18:52 +02:00
• 5175adee66 optimized FreeRadius scenarios for debug output Andreas Steffen 2010-09-02 14:37:27 +02:00
• 0fb2980281 added ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-09-02 14:36:52 +02:00
• c0cecc0a0e added radius init script mit increased debugging Andreas Steffen 2010-09-02 13:19:24 +02:00
• f9cfb5c836 display configuration and log of FreeRadius servers Andreas Steffen 2010-09-02 13:15:49 +02:00
• ef0a8e5892 Add DHE enabled RSA variants to the supported TLS suites Martin Willi 2010-09-02 19:27:37 +02:00
• f14358a9b5 Added TLS server side support for DHE suites Martin Willi 2010-09-02 19:27:13 +02:00
• da3f4a9fd0 Added TLS client side support for DHE suites Martin Willi 2010-09-02 19:26:19 +02:00
• 35d9c15d5e Store a MODP group we use for each TLS suite Martin Willi 2010-09-02 19:24:56 +02:00
• 08d8b9405b Added support for MODP_CUSTOM to gmp plugin Martin Willi 2010-09-02 19:23:37 +02:00
• 0abd558a65 Added a MODP_CUSTOM DH group which takes g and p as constructor arguments Martin Willi 2010-09-02 19:06:34 +02:00
• 06109c4717 Implemented "signature algorithm" hello extension Martin Willi 2010-09-02 19:19:17 +02:00
• 731611c525 Added TLS extension identifiers Martin Willi 2010-09-02 19:07:45 +02:00
• d29a82a9d4 Added generic TLS data sign/verify, hash/sig algorithm construction Martin Willi 2010-09-02 19:15:16 +02:00
• 60c4b3b545 Continue with a randomized premaster if decryption failed / version mismatches Martin Willi 2010-09-02 14:48:30 +02:00
• 1dfd6d18ff pluto: Removed unused lifetime from raw_eroute. Tobias Brunner 2010-09-02 18:59:53 +02:00
• b5be105aaf pluto: Added support for statically configured reqids. Tobias Brunner 2010-09-02 16:05:21 +02:00
• fe962bc788 testing: Added ikev1 xfrm mark scenarios. Tobias Brunner 2010-08-30 10:04:16 +02:00