Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 9f166d9ac2 Removed references to protocol_id_t from kernel interface. Tobias Brunner 2010-07-12 10:35:19 +02:00
• 9d94174242 Migrated child_sa_t to INIT/METHOD macros. Tobias Brunner 2010-07-12 09:38:39 +02:00
• ba26508d05 Moved roam job creation to kernel event handler. Tobias Brunner 2010-07-06 16:03:09 +02:00
• 61e8e73206 Refer to scheduler via hydra and not charon. Tobias Brunner 2010-07-06 13:23:42 +02:00
• 8c387909eb Moved scheduler_t to libhydra. Tobias Brunner 2010-07-06 13:13:39 +02:00
• 4e258e63c3 Moved migrate job creation to kernel event handler. Tobias Brunner 2010-07-06 12:46:40 +02:00
• 01563352e8 Moved update SA job creation to kernel event handler. Tobias Brunner 2010-07-06 12:34:15 +02:00
• a22853b302 Moved delete/rekey CHILD_SA job creation to kernel event handler. Tobias Brunner 2010-07-06 12:09:06 +02:00
• 81f6ec276b Moved acquire job creation to kernel event handler. Tobias Brunner 2010-07-06 11:50:43 +02:00
• 09ae31f13a Added kernel event handler stub. Tobias Brunner 2010-07-06 11:36:58 +02:00
• f7f3d87ed7 All kernel listener hooks are optional. Tobias Brunner 2010-07-06 16:09:06 +02:00
• c560ddeb25 Added listener handling to kernel interface. Tobias Brunner 2010-07-06 13:02:01 +02:00
• bd50254ca9 Added an interface for kernel event listeners. Tobias Brunner 2010-07-06 09:28:12 +02:00
• 1989c75e9e Some minor comment fixes. Tobias Brunner 2010-07-06 10:48:55 +02:00
• 211943be23 Some whitespace and code style fixes. Tobias Brunner 2010-07-05 18:52:50 +02:00
• 74f15e9320 Do not include files from libcharon in libhydra. Tobias Brunner 2010-07-05 18:49:41 +02:00
• 07500cda69 Move callback_job_t to libhydra. Tobias Brunner 2010-07-05 15:32:54 +02:00
• 222a64d892 Fixing Doxygen groups after moving processor. Tobias Brunner 2010-07-05 15:24:58 +02:00
• c5f7146b17 Refer to processor via hydra and not charon. Tobias Brunner 2010-07-05 13:52:05 +02:00
• 633fbe4fde Move processor_t (thread-pool) to libhydra. Tobias Brunner 2010-07-05 13:46:04 +02:00
• dbb7c0306c Support different hash/sig algorithms in handshake signing, including ECDSA Martin Willi 2010-09-02 10:29:32 +02:00
• 99dcaea9bd Added TLS ClientCertificateType identifiers Martin Willi 2010-09-02 10:05:11 +02:00
• 9dd2ca924e Added TLS specific Hash and Signature Algorithm identifiers Martin Willi 2010-09-02 09:21:45 +02:00
• ea6d7cb4be Fixed typos in tls_writer method descriptions Martin Willi 2010-09-02 10:28:51 +02:00
• bbdc85b66e Respect key types in stroke key/certificate backend Martin Willi 2010-09-02 12:37:27 +02:00
• 0ac49c3292 Added an enumerator for registered credential builders Martin Willi 2010-09-02 09:46:09 +02:00
• b019136596 Migrated credential_factory to INIT/METHOD macros Martin Willi 2010-09-02 09:30:48 +02:00
• 4171cbd60b adapted evaltest.dat to new RULE_OCSP_VALIDATION Andreas Steffen 2010-09-01 22:22:27 +02:00
• 54cba78573 cosmetics in debug output Andreas Steffen 2010-09-01 14:30:14 +02:00
• 873604dd7f defined aaa_identity Andreas Steffen 2010-09-01 00:16:19 +02:00
• 3a01908060 increase number of message due to large certificate payloads Andreas Steffen 2010-09-01 00:11:23 +02:00
• 5fb1311b2a clarified debug output Andreas Steffen 2010-08-31 23:22:39 +02:00
• c3024a0848 fixed typo Andreas Steffen 2010-08-31 21:42:14 +02:00
• 93709d1093 Do not process any more TLS handshake messages on fatal alerts Martin Willi 2010-08-31 18:08:46 +02:00
• 33b1a2567f Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined Martin Willi 2010-08-31 18:02:46 +02:00
• c811479986 Strictly check if the server certificate matches the TLS server identity Martin Willi 2010-08-31 18:07:38 +02:00
• 36eafea232 Use the AAA Identity for EAP authentication, if given Martin Willi 2010-08-31 18:06:02 +02:00
• 64d7b0733f Added support for the ipsec.conf aaa_identity keyword Martin Willi 2010-08-31 17:52:52 +02:00
• 81137552e5 Added an AAA identity authentication config option Martin Willi 2010-08-31 17:26:20 +02:00
• f9fc5f2045 Added strongswan.conf options for EAP-TLS/TTLS fragment size Martin Willi 2010-08-31 16:10:55 +02:00
• 743f94067e Support processing of partial TLS record headers Martin Willi 2010-08-31 10:03:03 +02:00
• 1cf8c5f746 Migrated EAP-TTLS to the generic TLS helper Martin Willi 2010-08-31 09:12:40 +02:00
• be751012c3 Migrated EAP-TLS to the generic TLS helper Martin Willi 2010-08-31 09:12:20 +02:00
• 877c910f04 Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other variants Martin Willi 2010-08-31 09:11:09 +02:00
• ecd98efa9d Support output fragmentation of TLS records Martin Willi 2010-08-31 08:57:26 +02:00
• f13a03add0 Moved EAP type/code definitions to a seprate header file in libstrongswan Martin Willi 2010-08-31 08:55:48 +02:00
• ce1af73907 Implemented buffering of partial records in TLS stack Martin Willi 2010-08-26 12:27:56 +02:00
• d169aab35e Log TLS handshake subtypes as handshakes Martin Willi 2010-08-26 12:18:24 +02:00
• fd0bde9a60 Added a TLS debug level option, use debugging hook Martin Willi 2010-08-26 12:17:22 +02:00
• 4332b5af89 Do not strdup() zero length strings in identification_create_from_string() Martin Willi 2010-08-31 15:34:08 +02:00
• 64d24679df Corrected some URLs. Tobias Brunner 2010-08-31 14:46:53 +02:00
• 9b698a771c Enable the generation of unencrypted messages (e.g. ME connectivity checks). Tobias Brunner 2010-08-30 17:24:07 +02:00
• 68eb610d81 fixed typos Andreas Steffen 2010-08-30 16:22:33 +02:00
• 6ade82d5b7 fixed copy-and-paste errors Andreas Steffen 2010-08-30 15:42:44 +02:00
• d93e2e5409 created an eap-tnc method hull Andreas Steffen 2010-08-30 15:36:24 +02:00
• 577893612f for the time being assume a single request/response exchange for a given EAP method Andreas Steffen 2010-08-30 15:35:13 +02:00
• 2402dee177 Port floating patch partially reversed. Tobias Brunner 2010-08-30 14:54:31 +02:00
• 277f02ce9e Slightly refactored port floating. Tobias Brunner 2010-08-30 12:19:37 +02:00
• be63a48c36 defined EAP-TNC Andreas Steffen 2010-08-30 13:13:39 +02:00
• 2291754ddf Unwrap crlNumber INTEGER in openssl CRL parsing Martin Willi 2010-08-30 11:22:54 +02:00
• 21f80e9dbc Added crl support to pki --print Martin Willi 2010-08-30 11:01:18 +02:00
• 0433b4172b Typo in doxygen comment fixed. Tobias Brunner 2010-08-30 10:49:32 +02:00
• fde2d34d0f Fixed ME after introduction of AEAD wrapper. Tobias Brunner 2010-08-30 10:48:09 +02:00
• 45684ee65c Fixed pluto smartcard support after introducing encryption schemes Martin Willi 2010-08-30 10:14:45 +02:00
• 1bc8690f54 replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr Andreas Steffen 2010-08-29 21:52:08 +02:00
• 6297dc390f added ctr ccm and gcm plugins to ikev2/rw-cert scenario Andreas Steffen 2010-08-29 21:11:00 +02:00
• 8eb74facfe added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario Andreas Steffen 2010-08-29 21:09:25 +02:00
• 6aa82ec280 added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario Andreas Steffen 2010-08-29 20:50:37 +02:00
• 4f2a0bd839 replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm Andreas Steffen 2010-08-29 20:39:51 +02:00
• 8318d88450 replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm Andreas Steffen 2010-08-29 20:24:12 +02:00
• 897c7a72cf Win7 might send up to 7k of certificate requests Andreas Steffen 2010-08-27 16:30:05 +02:00
• cb7a0cef48 Fixed documentation of XAUTH in ipsec.secrets. Tobias Brunner 2010-08-26 10:25:08 +02:00
• 2bf0e74c38 Prefer AES/Camellia suites over 3DES/NULL encryption Martin Willi 2010-08-25 18:30:09 +02:00
• a596006e3f Send TLS alerts for errors in TLS handshake building Martin Willi 2010-08-25 18:24:27 +02:00
• ee88ddd6aa Refactored fragment building, use correct TLS content type for non-first fragments Martin Willi 2010-08-25 18:04:59 +02:00
• dfde6570c7 Update delete_payload length when adding SPIs Martin Willi 2010-08-25 17:03:09 +02:00
• 5299719569 Migrated delete_payload to INIT/METHOD macros, replaced iterator Martin Willi 2010-08-25 17:00:01 +02:00
• e5c6ebb697 Use different return values in payload decryption to distinguish between integrity and syntax errors Martin Willi 2010-08-25 15:29:53 +02:00
• f1a74a3cab Implemented a TLS utility to test on any TLS secured TCP connection Martin Willi 2010-08-25 12:57:13 +02:00
• 17102f7b58 Added a simple high level TLS wrapper for sockets Martin Willi 2010-08-25 12:51:01 +02:00
• bd23b9086e Initialize output chunk before appending data to it Martin Willi 2010-08-25 12:43:21 +02:00
• 3dd06bd4ed Added private key support to in-memory credential set Martin Willi 2010-08-24 18:17:34 +02:00
• 72c6335de9 Added certificate support to in-memory credential set Martin Willi 2010-08-24 16:59:45 +02:00
• e54e86cb49 Check if colliding rekey actually created an IKE_INIT Thomas Egerer 2010-08-24 14:55:47 +02:00
• 8427c78611 Added a ike_name logger option to prefix the IKE_SA name on each line Martin Willi 2010-08-25 09:53:43 +02:00
• d9b85e28b9 removed tls_record_t definition Andreas Steffen 2010-08-24 19:18:44 +02:00
• 69e8bb2e8d Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option Martin Willi 2010-08-24 11:34:43 +02:00
• a2c1235969 Skip the close notify if application layer completes successfully Martin Willi 2010-08-24 10:29:54 +02:00
• 421a529f88 added ikev2/rw-eap-tls-fragments scenario Andreas Steffen 2010-08-24 10:12:15 +02:00
• 234aa8ee03 use correct network diagram Andreas Steffen 2010-08-24 10:09:58 +02:00
• 79a5e391f8 support fragmentation in AVPs Andreas Steffen 2010-08-24 09:02:40 +02:00
• c1a929daa7 removed some redundant debug output Andreas Steffen 2010-08-24 09:00:52 +02:00
• bda7d9d940 Added generic TLS purposes Martin Willi 2010-08-24 08:42:10 +02:00
• f55f9c4e1e Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS Martin Willi 2010-08-24 08:41:12 +02:00
• c5142f110e Check if the application layer has completed successfully Martin Willi 2010-08-24 08:40:28 +02:00
• 1475800080 Moved TLS record parsing/generation to tls.c Martin Willi 2010-08-23 16:21:49 +02:00
• 4776500055 added debug-tls comand line option Andreas Steffen 2010-08-23 17:51:40 +02:00
• c310881a11 Added a TLS purpose for EAP-TTLS with client authentication Martin Willi 2010-08-23 14:31:21 +02:00
• 5ff8c62707 EAP-TLS clients send an empty packet on failure to properly shut down a TLS session Martin Willi 2010-08-23 14:22:54 +02:00
• e6f3ef1330 Implemented TLS Alert handling Martin Willi 2010-08-23 14:22:38 +02:00