Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• eba568563c changed error messages in the case of faulty esp and ike strings Andreas Steffen 2009-11-24 16:45:52 +01:00
• 2eeab939a0 do not send all available kernel algorithms if esp string is faulty Andreas Steffen 2009-11-24 16:38:10 +01:00
• 792876ff87 check if alg_info_esp exists Elmar Vonlanthen 2009-11-24 16:15:12 +01:00
• cda8ec7afc added some parentheses Andreas Steffen 2009-11-24 14:36:17 +01:00
• 93e2377c7f allow ECP DH groups in pfsgroup definition Andreas Steffen 2009-11-24 14:35:25 +01:00
• 17d52fbba1 renewed OCSP Signing certificate Andreas Steffen 2009-11-24 13:55:38 +01:00
• c4570d188e issue error message for expired certificates in OCSP trust chain checking Andreas Steffen 2009-11-24 12:37:38 +01:00
• 227583ba59 updated IKEv2 notification messages assigned by IANA Andreas Steffen 2009-11-24 09:21:00 +01:00
• 44e41c4c6e updated NEWS for 4.3.6dr2 Andreas Steffen 2009-11-24 09:18:41 +01:00
• 06f02f993c Do not recreate existing create_child subtask when retrying with different DH group Martin Willi 2009-11-23 13:50:01 +01:00
• 0d1d19b99d Avoid potentially unaligned half-word read Martin Willi 2009-11-23 13:49:19 +01:00
• ad78bb13c8 Correctly set host number to zero when computing traffic selector range Eric Mertens 2009-11-17 10:30:37 -08:00
• dd326c114f Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled Martin Willi 2009-11-20 14:36:24 +01:00
• 832f283150 Use status_t return value for get_quintuplet() dummy implementations Martin Willi 2009-11-20 11:02:06 +01:00
• 10bc5d96cb Move comment out of register_printf_function test Martin Willi 2009-11-19 14:37:34 +01:00
• 80b44cd71a Message stringification supports more detailed EAP payload information Martin Willi 2009-11-18 10:37:46 +01:00
• 1860bfa2ea Correctly enumerate attributes to request as initiator with the actually requesting handler Martin Willi 2009-11-17 17:51:30 +01:00
• 1427c93fcd Fixed memleak in attribute handling Martin Willi 2009-11-17 15:55:45 +00:00
• d674c2ace0 attr plugin supports any custom attribute type having a v4/v6 IP under the charon.plugins.attr namespace Martin Willi 2009-11-17 15:53:57 +00:00
• 3797b8e767 Support enumeration of key/value pairs in a section of strongswan.conf Martin Willi 2009-11-17 15:52:36 +00:00
• 86813bef12 Whitelist register_printf_specifier in leak detective Martin Willi 2009-11-17 15:51:57 +00:00
• b5a2055fb1 Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler Martin Willi 2009-11-17 14:51:50 +01:00
• e6cf060275 Encrypt payloads with missing rule, fix insertion of non-encrypted payloads Martin Willi 2009-11-12 14:52:12 +00:00
• 074444972a Build libsimaka with libtool, as we require a PIC-enabled version Martin Willi 2009-11-10 14:24:19 +01:00
• 098466039f Fix word alignement in memxor() on 64-bit architectures Martin Willi 2009-11-10 14:12:00 +01:00
• addfeeff9c Do not complain about missing payload order rules for private use payloads Martin Willi 2009-11-10 11:11:03 +01:00
• 5bfe1b2529 Properly initialize attribute encoding/length values Martin Willi 2009-11-10 11:07:37 +01:00
• 733538a421 Identation/whitespace cleanups Martin Willi 2009-11-10 11:07:13 +01:00
• 82713deafd Simplified vendor ID payload interface Martin Willi 2009-11-09 12:38:48 +01:00
• 20d144e72f Invoke message hook before generation, allowing plugins to mangle it Martin Willi 2009-11-02 10:44:11 +01:00
• ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups Martin Willi 2009-11-12 13:10:30 +00:00
• f6bbcec390 Use register_printf_specifier instead of deprecated register_printf_function, if available Martin Willi 2009-11-12 13:16:46 +01:00
• 0850e33518 Fixed compiler warning about missing return value Martin Willi 2009-11-12 11:17:02 +01:00
• 1a86be6e48 Support variable RES length in AKA quintuplets Martin Willi 2009-11-12 10:27:50 +01:00
• 15b65bf15d Ported pseudonym/reauth functionality to EAP-AKA Martin Willi 2009-10-29 17:38:45 +01:00
• 3374cb0f44 Passing other as NULL should not always result in a match if me matches Martin Willi 2009-10-29 17:37:36 +01:00
• 947b03fd09 Use new identity constructor in EAP-SIM Martin Willi 2009-10-29 15:58:43 +01:00
• 324528700d Added identification constructor using a chunk of data, guessing id type Martin Willi 2009-10-29 15:52:00 +01:00
• 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins Martin Willi 2009-10-29 14:56:45 +01:00
• eb7bf91e12 Added option to disable identity requests completely (old behavior) Martin Willi 2009-10-29 10:19:43 +01:00
• 0107f5b687 Fixed replacing existing reauthentication data Martin Willi 2009-10-29 09:49:55 +01:00
• 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown Martin Willi 2009-10-28 16:04:45 +01:00
• edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend Martin Willi 2009-10-28 15:34:05 +01:00
• acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data Martin Willi 2009-10-28 14:18:33 +01:00
• c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM Martin Willi 2009-10-28 14:16:54 +01:00
• 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication Martin Willi 2009-10-28 14:15:24 +01:00
• e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed Martin Willi 2009-10-27 11:12:36 +01:00
• c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, extended sim_provider with a is_pseudonym() function. Martin Willi 2009-10-27 11:10:44 +01:00
• 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory Martin Willi 2009-10-26 16:11:40 +01:00
• 8aad8f6faf Some coding style cleanups Martin Willi 2009-10-26 16:08:14 +01:00
• 0328fe940d Impemented basic pseudonym support in EAP-SIM Martin Willi 2009-10-26 16:11:15 +01:00
• f81760dcd1 A SIM/AKA message can be parsed twice, without and with decryption Martin Willi 2009-10-23 16:26:26 +02:00
• 0e20893d81 Pass SIM/AKA crypto helper to constructor of message Martin Willi 2009-10-23 13:57:13 +02:00
• 13f418b442 Added a doxygen group for libsimaka, some cleanups Martin Willi 2009-10-22 14:41:13 +02:00
• bcf8a0ff94 Added missing hasher include Martin Willi 2009-10-22 14:46:32 +02:00
• 4735965fc0 EAP servers check if the received EAP message was expected Martin Willi 2009-10-22 14:05:10 +02:00
• 02f785b050 Use existing triplet length definitions Martin Willi 2009-10-22 13:57:37 +02:00
• aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library Martin Willi 2009-10-22 13:04:50 +02:00
• 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM Martin Willi 2009-10-22 13:03:55 +02:00
• fad4e5f393 Centralized SIM/AKA notifications and client errors Martin Willi 2009-10-22 13:02:32 +02:00
• e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM Martin Willi 2009-10-21 14:21:00 +02:00
• 55916dcc9e libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA Martin Willi 2009-10-21 13:37:37 +02:00
• ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations Martin Willi 2009-10-20 13:44:21 +02:00
• f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA Martin Willi 2009-10-19 15:37:36 +02:00
• 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication Martin Willi 2009-10-14 14:42:43 +02:00
• 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication Martin Willi 2009-10-14 13:35:35 +02:00
• 6ae43b9333 mixed fingerprint / userid Andreas Steffen 2009-11-11 11:17:59 +01:00
• 209f52cb63 fixed 4.3.6 ocsp regression Andreas Steffen 2009-11-11 11:06:07 +01:00
• ee8486afdb adapted log message Andreas Steffen 2009-11-10 23:55:55 +01:00
• a618e33e8b merged pluto's PGP certificate parsing with charon's Andreas Steffen 2009-11-10 23:54:51 +01:00
• f565d0c575 merged pluto's PGP certificate parsing with charon's Andreas Steffen 2009-11-10 23:54:04 +01:00
• cc543182bc added separating line Andreas Steffen 2009-11-10 21:50:34 +01:00
• bb7ae382fd added some debugging to pgp certificate parsing Andreas Steffen 2009-11-10 10:04:55 +01:00
• 262af16179 accept PGP v3 or v4 fingerprint as alternative to PGP user_id Andreas Steffen 2009-11-09 23:15:17 +01:00
• 5269150ebc If cross-compiling, test for the existence of pthread_condattr_setclock only Martin Willi 2009-11-09 11:43:15 +01:00
• 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module Martin Willi 2009-11-09 13:23:24 +01:00
• 8a650a2bc8 put PGP userid in single quotes Andreas Steffen 2009-11-08 23:58:41 +01:00
• b25311fbe2 added ikev2/net2net-pgp-v3 scenario Andreas Steffen 2009-11-08 23:49:04 +01:00
• bc662125c2 removed nocrsend=yes statement Andreas Steffen 2009-11-08 23:48:26 +01:00
• 2846e51a5b added ikev2/net2net-pgp-v4 scenario Andreas Steffen 2009-11-08 23:23:45 +01:00
• ab5762e32a list v3 or v4 fingerprint Andreas Steffen 2009-11-08 23:21:03 +01:00
• 9a127590ac stroke_list supports listing of PGP certificates Andreas Steffen 2009-11-08 21:01:12 +01:00
• 9f0327e652 define TIME_32_BITS_SIGNED_MAX in utils.h Andreas Steffen 2009-11-08 18:55:52 +01:00
• e92e19c177 pluto ignores proprietary Juniper SRX notification 40001 Andreas Steffen 2009-11-05 08:38:00 +01:00
• 16dca5c2f2 moved multi-level-ca-pathlen scenario Andreas Steffen 2009-11-04 23:43:43 +01:00
• 4c68a85a75 implemented path length constraint checkinf for IKEv2 Andreas Steffen 2009-11-04 23:37:15 +01:00
• fef3b0b7fd display printable characters in dntoa() Andreas Steffen 2009-11-04 20:17:12 +01:00
• 8fac84bcdd check if acerts linked_list has been initialized before destroying it Andreas Steffen 2009-11-04 19:36:02 +01:00
• 32c8b1847b renamed multi-level-pathlen scenario to multi-level-ca-pathlen Andreas Steffen 2009-11-04 18:18:43 +01:00
• cd36095e38 added ikev1/multi-level-pathlen scenario Andreas Steffen 2009-11-04 18:15:26 +01:00
• 28c554088d added a subsidiary Duck Research CA Andreas Steffen 2009-11-04 18:13:06 +01:00
• c95671cec2 implemented path length constraint checking for IKEv1 Andreas Steffen 2009-11-04 18:10:31 +01:00
• bed19335b8 put directory path into single quotes Andreas Steffen 2009-11-04 14:34:14 +01:00
• efab9f551d removed redundant and buggy debug statement Andreas Steffen 2009-11-04 14:28:10 +01:00
• fae322219f output optional pathLenConstraint in ipsec listcacerts Andreas Steffen 2009-11-04 07:30:07 +01:00
• 5d1d7e82b5 refreshened and fortified strongSwan Root CA certificate Andreas Steffen 2009-11-04 00:16:48 +01:00
• 00aa027503 implemented parsing of pathLenConstraint Andreas Steffen 2009-11-04 00:03:10 +01:00
• a58b1722b0 version bump to 4.3.6 Andreas Steffen 2009-11-02 22:47:55 +01:00
• 4a38687ae7 Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface Martin Willi 2009-10-30 11:19:32 +01:00
• f893bce3e7 fixed a memory leak in OCSP fetching Andreas Steffen 2009-10-29 10:00:19 +01:00