Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 4412ee86c5 recognize eap-ttls method Andreas Steffen 2010-08-12 23:57:42 +02:00
• 1327839da8 added generic TLS application data handler and specific EAP-TTLS instantiation Andreas Steffen 2010-08-12 23:56:44 +02:00
• 123a84d3db Use an explicit plugin list instead of the unrealible "find" to build checksums Martin Willi 2010-08-12 16:07:24 +02:00
• 8f01815143 Build dedicated plugin lists for each strongSwan component Martin Willi 2010-08-12 14:37:45 +02:00
• 9e2c88b98d Use a m4 helper macro to build plugin lists Martin Willi 2010-08-12 13:03:04 +02:00
• 8bec0f5153 Implemented Smartcard support in NetworkManager frontend Martin Willi 2010-08-11 16:32:04 +02:00
• 01e4f5f32f Implemented public key encryption/private key decryption in PKCS#11 Martin Willi 2010-08-11 12:12:37 +02:00
• aea735ef63 Discard a packet that exceeds the receive buffer Martin Willi 2010-08-11 10:51:40 +02:00
• 10a2e09b55 Added a strongswan.conf option to change socket receive buffer size Martin Willi 2010-08-11 10:48:17 +02:00
• 4ec53e95f5 Double check that the OpenSSL RNG has been seeded, do so otherwise Martin Willi 2010-08-11 10:11:57 +02:00
• d775af9d18 Implemented RSA en-/decryption in openssl plugin Martin Willi 2010-08-11 09:53:45 +02:00
• 133accfcfd differentiate between TLS messages and EAP-[T]TLS packets in the debug output Andreas Steffen 2010-08-10 19:01:55 +02:00
• 07d2b39123 Parse important extendedKeyUsage flags in openssl plugin Martin Willi 2010-08-10 18:44:17 +02:00
• a0a8aaaf4f Parse UPN subjectAltName in openssl plugin Martin Willi 2010-08-10 17:43:48 +02:00
• 772cba39e4 Parse UPN subjectAltNames in x509 plugin Martin Willi 2010-08-10 17:27:17 +02:00
• 82f62a7447 Added Microsoft OID for user principal name (UPN) subjectAltNames Martin Willi 2010-08-10 17:26:24 +02:00
• 3d711a68fb Added a stroke command to export cached x509 certificates to the console Martin Willi 2010-08-10 16:57:14 +02:00
• a944d2092b Use bits instead of bytes for a private/public key Martin Willi 2010-08-10 15:56:10 +02:00
• 33ddaaabec Added support for different encryption schemes to private/public keys Martin Willi 2010-08-10 14:38:44 +02:00
• 3547a9b87d Migrated agent plugin to INIT/METHOD macros Martin Willi 2010-08-10 14:32:59 +02:00
• 57202484e4 Migrated remaining classes in openssl plugin to INIT/METHOD macros Martin Willi 2010-08-10 14:22:10 +02:00
• 646babd354 Migraded gcrypt plugin to INIT/METHOD macros Martin Willi 2010-08-10 13:52:13 +02:00
• 876b61e132 Migrated gmp plugin to INIT/METHOD macros Martin Willi 2010-08-10 12:15:40 +02:00
• 6432669fa2 Added support for early and late calls to Vstr wrappers. Tobias Brunner 2010-08-10 13:00:20 +02:00
• 478eb66030 Fixed settings lookup if the section/key contains dots, second try Martin Willi 2010-07-29 12:00:21 +02:00
• 3810afa9f9 log final TLS acknowledgement packet Andreas Steffen 2010-08-08 19:14:53 +02:00
• ded59df4fc added level 2 debug info on sent TLS packets Andreas Steffen 2010-08-07 11:24:59 +02:00
• ab47a7924b log EAP-TTLS version Andreas Steffen 2010-08-06 22:39:11 +02:00
• a622c6d019 fixed typo Andreas Steffen 2010-08-06 22:18:22 +02:00
• a6444fcdd4 EAP-TLS and EAP-TTLS use different constant MSK PRF label Andreas Steffen 2010-08-06 17:33:46 +02:00
• b4d30a425e support server authentication only for EAP-TTLS Andreas Steffen 2010-08-06 16:24:56 +02:00
• 26eb9b2d17 added eap_ttls plugin configuration Andreas Steffen 2010-08-06 07:45:03 +02:00
• fa9f101345 Properly initialize libstrongswan in _copyright. Tobias Brunner 2010-08-06 19:28:28 +02:00
• 7c3dd613d7 Added missing Vstr wrappers for asprintf. Tobias Brunner 2010-08-06 19:27:10 +02:00
• 7c03d707a5 Create a PKCS#11 session public key if we don't find one Martin Willi 2010-08-06 17:32:32 +02:00
• fed9407bb1 Implemented PKCS#11 RSA public key for keys found on a token Martin Willi 2010-08-06 17:02:41 +02:00
• babed73257 Export scheme_to_mechanism conversion function Martin Willi 2010-08-06 17:02:01 +02:00
• a02784da5d Load certificate after enumeration Martin Willi 2010-08-06 17:00:23 +02:00
• 30d8e8d04d fix error-type range in parsing of NOTIFY payloads Jiri Bohac 2010-08-05 17:13:38 +02:00
• fd8ad4198d added TTLS to EAP short names, too Andreas Steffen 2010-08-06 06:06:40 +02:00
• f32e56bbce added EAP_TTLS method Andreas Steffen 2010-08-05 21:01:39 +02:00
• 6ac797ad3a added ikev2/rw-eap-tls-radius Andreas Steffen 2010-08-05 19:28:06 +02:00
• 37d2d7e158 Whitespace cleanups Martin Willi 2010-08-05 13:58:49 +02:00
• e85bca7f22 Use certificate subject to get a public key of the TLS server Martin Willi 2010-08-05 13:13:04 +02:00
• 6b717cc28d no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA Andreas Steffen 2010-08-05 12:47:09 +02:00
• edb82ab8ae Some Doxygen fixes. Tobias Brunner 2010-08-05 11:53:35 +02:00
• 7ea87db00d added some more TLS debug output Andreas Steffen 2010-08-05 09:51:05 +02:00
• 7030e3950a fixed type in cipher suite list build Andreas Steffen 2010-08-05 01:26:10 +02:00
• 4657b3a42a log selected TLS version and cipher suite Andreas Steffen 2010-08-05 01:21:59 +02:00
• 289c9ac3d7 log TLS handshake messages in debug level 2 Andreas Steffen 2010-08-04 16:55:47 +02:00
• 744b83c7c9 Fixed loading of secrets with IDs. Tobias Brunner 2010-08-04 15:59:15 +02:00
• dca2d89209 Fixed loading of private keys without password. Tobias Brunner 2010-08-04 14:22:48 +02:00
• 83628fd600 Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA allocated an ID. Tobias Brunner 2010-08-04 12:55:09 +02:00
• 8e7920eea1 generated aaa certificate Andreas Steffen 2010-08-04 12:44:32 +02:00
• 12549bedea IKEv2 notification types updated. Tobias Brunner 2010-08-04 10:02:09 +02:00
• e82186fb5a Reimplemented mem pool to support multiple leases for a single identity Martin Willi 2010-07-27 12:04:19 +02:00
• 6e4f4d2fdf Save/Load state of PKCS#11 hasher Martin Willi 2010-07-20 12:37:06 +02:00
• 83e52fd12d Register hmac/xcbc algorithms after potentially underlying PKCS#11 Martin Willi 2010-07-20 12:35:45 +02:00
• a3aeb89227 Do initial slot enumeration manually Martin Willi 2010-07-20 12:23:06 +02:00
• 0f0fc891d8 Implemented hasher_t using PKCS#11 Martin Willi 2010-07-20 11:01:39 +02:00
• 66267ea515 Defer certificate loading until all PKCS#11 modules are loaded Martin Willi 2010-07-20 10:59:21 +02:00
• 65858b83f8 Destroy IKE_SA Managers crypto primitives during flush, the plugins are gone in destroy Martin Willi 2010-07-20 10:58:17 +02:00
• 5a27bf8ad8 Provide a public PKCS#11 mechanism enumerator Martin Willi 2010-07-20 09:16:05 +02:00
• efab731338 Added PKCS#11 private key support to the pki tool Martin Willi 2010-07-19 17:36:17 +02:00
• 089d554a01 The pki tool uses a callback credential set to read in passphrase/PIN Martin Willi 2010-07-19 17:35:42 +02:00
• 0d08ebe7ac Pass type of requested key in the callback credential set Martin Willi 2010-07-19 16:25:26 +02:00
• af007ed68a Support PKCS#11 keys requiring reauthentication for each operation Martin Willi 2010-07-19 16:02:57 +02:00
• 199b17122d Do not try to log in if we already have a user session Martin Willi 2010-07-19 15:53:31 +02:00
• 15177f5785 Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets Martin Willi 2010-07-19 14:12:05 +02:00
• 3429be9514 Use a dedicated build part for challenge passwords, BUILD_PASSPHRASE gets obsolete Martin Willi 2010-07-19 13:16:32 +02:00
• 0556667dca Use credential sets to load smartcard keys Martin Willi 2010-07-19 10:25:51 +02:00
• 70789d28a1 Handle PIN: as a magic keyword for prompt, use getpass() to silently read credentials Martin Willi 2010-07-19 09:43:11 +02:00
• 62be923683 Implemented a callback based credential set, currently for shared keys only Martin Willi 2010-07-16 16:55:29 +02:00
• 0749e91bec Implemented a generic in-memory credential set, currently for shared keys only Martin Willi 2010-07-16 16:53:03 +02:00
• 9587ece534 mmap() ipsec.secrets instead malloc(), proper error checking Martin Willi 2010-07-16 14:40:02 +02:00
• 947298b302 Splitted up the load_secrets() function Martin Willi 2010-07-16 14:31:50 +02:00
• 1e4e29076c Updated ipsec.secrets.5 regarding IKEv2 smartcard support Martin Willi 2010-07-16 12:18:20 +02:00
• 57522106c4 %prompt support for smartcard PIN via "ipsec secrets" Martin Willi 2010-07-16 12:17:21 +02:00
• a0bdd5d63e Implemented callback PIN invocation for PKCS#11 login Martin Willi 2010-07-16 12:16:32 +02:00
• 7afc00d03c Implemented keyid discovery on all modules/slots Martin Willi 2010-07-16 11:17:06 +02:00
• 0b8b664056 Pass the PKCS11 keyid as chunk, not as string Martin Willi 2010-07-16 10:48:29 +02:00
• 353d10d590 Reuse generic passphrase build part, not a dedicated PIN part Martin Willi 2010-07-16 10:12:22 +02:00
• 5f1e4438cb Implemented private key on top of a PKCS#11 token Martin Willi 2010-07-15 17:54:26 +02:00
• d007ce3206 Extended the PKCS#11 object enumerator by attribute retrieval Martin Willi 2010-07-15 16:25:30 +02:00
• ddbac66028 Use the PKCS#11 object enumerator Martin Willi 2010-07-15 15:44:17 +02:00
• 9baa41c52d Implemented a generic PKCS#11 object enumerator Martin Willi 2010-07-15 15:43:30 +02:00
• cd251d9a21 Unload plugins in reverse order Martin Willi 2010-07-15 14:05:02 +02:00
• 3479c27931 Support module names in %smartcard specifier, streamlined smartcard building Martin Willi 2010-07-15 12:23:50 +02:00
• 36c852a08b Added enumerator for PKCS#11 tokens Martin Willi 2010-07-15 12:22:36 +02:00
• fe876b24d9 Handle NOT_SUPPORT return value from WaitForSlot Martin Willi 2010-07-15 10:10:14 +02:00
• 66033012c9 Reenabled dlclose Martin Willi 2010-07-15 08:26:46 +02:00
• a6d2ec331b Implemented a credential set on top of a PKCS#11 token Martin Willi 2010-07-14 17:44:27 +02:00
• 50a9e84540 Added NSPR PR_CallOnce to leak detective whitelist Martin Willi 2010-07-14 17:42:18 +02:00
• 044e0dd1b1 Added buffer checking variants of syslog functions to leak detective Martin Willi 2010-07-14 17:40:06 +02:00
• c281a427e0 Moved gmp plugin before users of it Martin Willi 2010-07-14 17:34:48 +02:00
• fdd7e21225 Added a token add/remove callback function to the manager Martin Willi 2010-07-14 15:09:12 +02:00
• 6522d6c50b Enumerate tokens and their mechanisms, wait for slot events Martin Willi 2010-07-14 14:44:08 +02:00
• 0c21dc000d Depend on libcharon until we have a thread pool to use Martin Willi 2010-07-14 14:13:24 +02:00
• 75451ac8ba Add enum names for CK_MECHANISM_TYPE constants Martin Willi 2010-07-14 14:13:02 +02:00
• b3b0e57cb1 Make the PKCS#11 padding string trimming public, add null terminator Martin Willi 2010-07-14 12:43:42 +02:00