Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• c811479986 Strictly check if the server certificate matches the TLS server identity Martin Willi 2010-08-31 18:07:38 +02:00
• 36eafea232 Use the AAA Identity for EAP authentication, if given Martin Willi 2010-08-31 18:06:02 +02:00
• 64d7b0733f Added support for the ipsec.conf aaa_identity keyword Martin Willi 2010-08-31 17:52:52 +02:00
• 81137552e5 Added an AAA identity authentication config option Martin Willi 2010-08-31 17:26:20 +02:00
• f9fc5f2045 Added strongswan.conf options for EAP-TLS/TTLS fragment size Martin Willi 2010-08-31 16:10:55 +02:00
• 743f94067e Support processing of partial TLS record headers Martin Willi 2010-08-31 10:03:03 +02:00
• 1cf8c5f746 Migrated EAP-TTLS to the generic TLS helper Martin Willi 2010-08-31 09:12:40 +02:00
• be751012c3 Migrated EAP-TLS to the generic TLS helper Martin Willi 2010-08-31 09:12:20 +02:00
• 877c910f04 Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other variants Martin Willi 2010-08-31 09:11:09 +02:00
• ecd98efa9d Support output fragmentation of TLS records Martin Willi 2010-08-31 08:57:26 +02:00
• f13a03add0 Moved EAP type/code definitions to a seprate header file in libstrongswan Martin Willi 2010-08-31 08:55:48 +02:00
• ce1af73907 Implemented buffering of partial records in TLS stack Martin Willi 2010-08-26 12:27:56 +02:00
• d169aab35e Log TLS handshake subtypes as handshakes Martin Willi 2010-08-26 12:18:24 +02:00
• fd0bde9a60 Added a TLS debug level option, use debugging hook Martin Willi 2010-08-26 12:17:22 +02:00
• 4332b5af89 Do not strdup() zero length strings in identification_create_from_string() Martin Willi 2010-08-31 15:34:08 +02:00
• 64d24679df Corrected some URLs. Tobias Brunner 2010-08-31 14:46:53 +02:00
• 9b698a771c Enable the generation of unencrypted messages (e.g. ME connectivity checks). Tobias Brunner 2010-08-30 17:24:07 +02:00
• 68eb610d81 fixed typos Andreas Steffen 2010-08-30 16:22:33 +02:00
• 6ade82d5b7 fixed copy-and-paste errors Andreas Steffen 2010-08-30 15:42:44 +02:00
• d93e2e5409 created an eap-tnc method hull Andreas Steffen 2010-08-30 15:36:24 +02:00
• 577893612f for the time being assume a single request/response exchange for a given EAP method Andreas Steffen 2010-08-30 15:35:13 +02:00
• 2402dee177 Port floating patch partially reversed. Tobias Brunner 2010-08-30 14:54:31 +02:00
• 277f02ce9e Slightly refactored port floating. Tobias Brunner 2010-08-30 12:19:37 +02:00
• be63a48c36 defined EAP-TNC Andreas Steffen 2010-08-30 13:13:39 +02:00
• 2291754ddf Unwrap crlNumber INTEGER in openssl CRL parsing Martin Willi 2010-08-30 11:22:54 +02:00
• 21f80e9dbc Added crl support to pki --print Martin Willi 2010-08-30 11:01:18 +02:00
• 0433b4172b Typo in doxygen comment fixed. Tobias Brunner 2010-08-30 10:49:32 +02:00
• fde2d34d0f Fixed ME after introduction of AEAD wrapper. Tobias Brunner 2010-08-30 10:48:09 +02:00
• 45684ee65c Fixed pluto smartcard support after introducing encryption schemes Martin Willi 2010-08-30 10:14:45 +02:00
• 1bc8690f54 replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr Andreas Steffen 2010-08-29 21:52:08 +02:00
• 6297dc390f added ctr ccm and gcm plugins to ikev2/rw-cert scenario Andreas Steffen 2010-08-29 21:11:00 +02:00
• 8eb74facfe added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario Andreas Steffen 2010-08-29 21:09:25 +02:00
• 6aa82ec280 added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario Andreas Steffen 2010-08-29 20:50:37 +02:00
• 4f2a0bd839 replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm Andreas Steffen 2010-08-29 20:39:51 +02:00
• 8318d88450 replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm Andreas Steffen 2010-08-29 20:24:12 +02:00
• 897c7a72cf Win7 might send up to 7k of certificate requests Andreas Steffen 2010-08-27 16:30:05 +02:00
• cb7a0cef48 Fixed documentation of XAUTH in ipsec.secrets. Tobias Brunner 2010-08-26 10:25:08 +02:00
• 2bf0e74c38 Prefer AES/Camellia suites over 3DES/NULL encryption Martin Willi 2010-08-25 18:30:09 +02:00
• a596006e3f Send TLS alerts for errors in TLS handshake building Martin Willi 2010-08-25 18:24:27 +02:00
• ee88ddd6aa Refactored fragment building, use correct TLS content type for non-first fragments Martin Willi 2010-08-25 18:04:59 +02:00
• dfde6570c7 Update delete_payload length when adding SPIs Martin Willi 2010-08-25 17:03:09 +02:00
• 5299719569 Migrated delete_payload to INIT/METHOD macros, replaced iterator Martin Willi 2010-08-25 17:00:01 +02:00
• e5c6ebb697 Use different return values in payload decryption to distinguish between integrity and syntax errors Martin Willi 2010-08-25 15:29:53 +02:00
• f1a74a3cab Implemented a TLS utility to test on any TLS secured TCP connection Martin Willi 2010-08-25 12:57:13 +02:00
• 17102f7b58 Added a simple high level TLS wrapper for sockets Martin Willi 2010-08-25 12:51:01 +02:00
• bd23b9086e Initialize output chunk before appending data to it Martin Willi 2010-08-25 12:43:21 +02:00
• 3dd06bd4ed Added private key support to in-memory credential set Martin Willi 2010-08-24 18:17:34 +02:00
• 72c6335de9 Added certificate support to in-memory credential set Martin Willi 2010-08-24 16:59:45 +02:00
• e54e86cb49 Check if colliding rekey actually created an IKE_INIT Thomas Egerer 2010-08-24 14:55:47 +02:00
• 8427c78611 Added a ike_name logger option to prefix the IKE_SA name on each line Martin Willi 2010-08-25 09:53:43 +02:00
• d9b85e28b9 removed tls_record_t definition Andreas Steffen 2010-08-24 19:18:44 +02:00
• 69e8bb2e8d Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option Martin Willi 2010-08-24 11:34:43 +02:00
• a2c1235969 Skip the close notify if application layer completes successfully Martin Willi 2010-08-24 10:29:54 +02:00
• 421a529f88 added ikev2/rw-eap-tls-fragments scenario Andreas Steffen 2010-08-24 10:12:15 +02:00
• 234aa8ee03 use correct network diagram Andreas Steffen 2010-08-24 10:09:58 +02:00
• 79a5e391f8 support fragmentation in AVPs Andreas Steffen 2010-08-24 09:02:40 +02:00
• c1a929daa7 removed some redundant debug output Andreas Steffen 2010-08-24 09:00:52 +02:00
• bda7d9d940 Added generic TLS purposes Martin Willi 2010-08-24 08:42:10 +02:00
• f55f9c4e1e Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS Martin Willi 2010-08-24 08:41:12 +02:00
• c5142f110e Check if the application layer has completed successfully Martin Willi 2010-08-24 08:40:28 +02:00
• 1475800080 Moved TLS record parsing/generation to tls.c Martin Willi 2010-08-23 16:21:49 +02:00
• 4776500055 added debug-tls comand line option Andreas Steffen 2010-08-23 17:51:40 +02:00
• c310881a11 Added a TLS purpose for EAP-TTLS with client authentication Martin Willi 2010-08-23 14:31:21 +02:00
• 5ff8c62707 EAP-TLS clients send an empty packet on failure to properly shut down a TLS session Martin Willi 2010-08-23 14:22:54 +02:00
• e6f3ef1330 Implemented TLS Alert handling Martin Willi 2010-08-23 14:22:38 +02:00
• 908e752201 Rebuild library.lo after changing ./configure options Martin Willi 2010-08-23 12:01:48 +02:00
• e0fcf43cf8 Build a trustchain even if no trust anchor is given Martin Willi 2010-08-23 11:57:40 +02:00
• c49475dae1 Accept encryption payloads with no wrapped payloads Martin Willi 2010-08-23 11:30:36 +02:00
• 4f60466a01 Fall back to shifting with 32-bit words if 64-bit byte order conversion function missing Martin Willi 2010-08-23 10:10:36 +02:00
• 835ec23aff Use enum mappings to resolve debug group Martin Willi 2010-08-20 20:45:31 +02:00
• f9efac2ba3 Implemented generic enum name to enum value mapping Martin Willi 2010-08-20 20:45:05 +02:00
• f154e30431 Verify negotiated TLS version Martin Willi 2010-08-20 16:08:59 +02:00
• 3c19b3461f Introducing a dedicated debug message group for libtls Martin Willi 2010-08-20 15:57:47 +02:00
• 0bcef5fe7a Streamlined TLS debugging output Martin Willi 2010-08-20 15:52:06 +02:00
• 56a1167b07 fixed build_cipher_suite_list() Andreas Steffen 2010-08-21 12:51:54 +02:00
• 96b2fbcc2c Introducing simple purposes for the TLS stack, switches various options Martin Willi 2010-08-20 15:02:25 +02:00
• 6291fbedcb Fixed compiler warning Martin Willi 2010-08-20 14:57:14 +02:00
• 906680029d enable the ccm and gcm plugins in the UML scenarios Andreas Steffen 2010-08-20 12:47:15 +02:00
• cb3f0c9b31 Register missing SHA256 authenticator with no truncation, as used by TLS Martin Willi 2010-08-20 11:59:49 +02:00
• 6e413d9ce9 Added more TLS cipher suites we already support Martin Willi 2010-08-20 11:01:57 +02:00
• a2bfc45bfd Build TLS cipher suite list in a generic fashion Martin Willi 2010-08-20 12:10:21 +02:00
• 2e64455ee1 Fixed crypter keymat derivation bug Martin Willi 2010-08-19 19:28:08 +02:00
• 44582075e0 Added ctr, ccm, gcm plugin NEWS Martin Willi 2010-08-19 19:01:03 +02:00
• 23cf96773a Improve GCM performance by factor 2-3 by shifting full 32/64 bit words Martin Willi 2010-08-19 18:49:35 +02:00
• 1a64981048 Implemented a gcm plugin providing GCM mode based on CBC crypters Martin Willi 2010-08-19 17:58:30 +02:00
• 026355af42 Added AES-GCM test vectors Martin Willi 2010-08-19 17:57:03 +02:00
• 37e52c3fbf Added a crypto transform stress test for profiling Martin Willi 2010-08-19 12:18:11 +02:00
• 9d3e174a1e Give a benchmark point for each operation to compare different transforms Martin Willi 2010-08-19 12:17:03 +02:00
• 80a93a1335 Implemented a ccm plugin providing CCM mode based on CBC crypters Martin Willi 2010-08-18 20:38:02 +02:00
• 7ba89ccd7f Added helper macros to define portable bitfields with gcc Martin Willi 2010-08-19 11:23:07 +02:00
• f9277ac426 Added AES-CCM test vectors Martin Willi 2010-08-19 11:24:34 +02:00
• 8ca9e255d8 Added support for AEAD test vectors to test-vectors plugin Martin Willi 2010-08-19 10:08:18 +02:00
• 08a5a708fc Include CCM/GCM algorithms in IKEv2 proposals, if supported Martin Willi 2010-08-18 20:32:57 +02:00
• 3f6a2d3343 Added proposal strings for Camellia CCM algorithm identifiers Martin Willi 2010-08-18 20:32:13 +02:00
• 84eb3aa456 Implemented IKEv2 keymat derivation for AEAD algorithms Martin Willi 2010-08-18 20:18:20 +02:00
• 9d49f79f55 List registered AEAD algorithms in listalgs Martin Willi 2010-08-18 20:17:09 +02:00
• 77b55e8a96 Added support for AEAD algorithms to crypto factory Martin Willi 2010-08-18 20:16:03 +02:00
• e09a87d652 Added AEAD support to crypto tester Martin Willi 2010-08-18 20:15:18 +02:00
• b519071299 Use AEAD wrapper for encryption payload encryption/decryption Martin Willi 2010-08-17 17:36:09 +02:00
• 7fc4b0814f Make function to test if an encryption algorithm is an AEAD alg public Martin Willi 2010-08-17 17:27:21 +02:00