denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 7747210f26 removed redundant ikev2/esp-alg-camellia scenario Andreas Steffen 2009-12-08 21:43:03 +01:00
  • a6225e4936 Improved libfast session management, using a hashtable Martin Willi 2009-12-05 17:56:44 +01:00
  • 4e90d9de9f Removed obsolete curl interface specific destructor Martin Willi 2009-12-08 16:21:58 +01:00
  • 89d236f0da Support "_" and "-" variants of NetworkManager pkg-config packages Martin Willi 2009-12-08 14:35:16 +01:00
  • f469754f7f Undef PACKAGE_BUG/URL of strongSwan before including ruby variants Martin Willi 2009-12-08 14:34:14 +01:00
  • 88dbccc842 Remove generated config.h.in from source tree Martin Willi 2009-12-08 14:29:48 +01:00
  • 04933ea74e added ikev2/alg-3des-md5 scenario Andreas Steffen 2009-12-08 12:54:42 +01:00
  • 268911a5cc The attribute manager was moved from daemon_t to libstrongswan. Tobias Brunner 2009-12-07 16:00:27 +01:00
  • cd51437e43 Do not execute the callback job if it has been cancelled since registration Martin Willi 2009-12-03 08:00:04 +01:00
  • c636bc7e17 Cleanup library if daemon initialization fails Martin Willi 2009-12-03 07:56:19 +01:00
  • 65c8bff7a1 To build strongSwan from git sources, gettext is required Martin Willi 2009-12-02 11:49:11 +01:00
  • 376a11db3c Do not install invalid 0.0.0.0 DNS servers Martin Willi 2009-12-01 15:46:56 +01:00
  • 5b4d0de7d4 Prefer EAP-Identity for provider attribute/address lookup Martin Willi 2009-12-01 13:01:56 +00:00
  • f6116e61fc Save EAP-Identity on auth config Martin Willi 2009-12-01 14:23:37 +01:00
  • 44ce749360 Store completed authentication rounds permanently on IKE_SA, with flush option Martin Willi 2009-12-01 11:35:30 +01:00
  • 5b2b4d190a Removed obsolete and unused [gs]et_eap_identity() methods Martin Willi 2009-11-30 16:59:23 +01:00
  • 5351e51951 Do not propose transport mode as initiator if connection is NATed Martin Willi 2009-11-30 11:32:26 +01:00
  • bff9f824ed Verify EAP-SIM/AKA AT_MAC before processing any attributes Martin Willi 2009-11-30 09:58:54 +01:00
  • b04e72c21c SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response Martin Willi 2009-11-27 15:40:40 +01:00
  • 5a91fd4536 Invoke attribute/key hooks from libsimaka Martin Willi 2009-11-27 11:16:20 +01:00
  • 8434c88b5e Extended SIM manager by hooks, currently featuring attribute and key hooks Martin Willi 2009-11-27 11:14:40 +01:00
  • fb1ae8da52 Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA Martin Willi 2009-11-27 09:34:38 +01:00
  • c56d958243 Handle NOT_SUPPORTED or other errors properly in get_quintuplet Martin Willi 2009-11-27 14:55:20 +01:00
  • 7868162b35 added RFC-conforming ikev2/sha2 scenarios Andreas Steffen 2009-11-26 23:48:29 +01:00
  • 68db91ca32 adapted ikev2/alg-aes-xcbc scenario Andreas Steffen 2009-11-26 23:46:27 +01:00
  • 2b2c69e992 Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header Martin Willi 2009-11-26 15:58:55 +01:00
  • 52fd0ef9e0 Added NEWS about SHA2 changes Martin Willi 2009-11-26 10:27:35 +01:00
  • 6780edc07e Use full algorithm name for SHA384/512 HMACs Martin Willi 2009-11-24 15:21:16 +01:00
  • 6546482a68 Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword Martin Willi 2009-11-20 09:49:03 +00:00
  • eebfa73fd5 Install SHA256_128 auth algorithm with specified 128 bit truncation Martin Willi 2009-11-20 09:42:29 +00:00
  • 2379fdba1e Updated XFRM linux header, includes specified truncations for auth algos Martin Willi 2009-11-20 09:41:46 +00:00
  • 5be75c2cb1 Added support for IPv6 source route installation Martin Willi 2009-11-24 14:10:18 +01:00
  • 387a6e6c32 Check existing path in mobike probing only if we still have a route Martin Willi 2009-11-24 14:09:09 +01:00
  • 4b55cf5d09 put identities in single quotes Andreas Steffen 2009-11-25 09:02:09 +01:00
  • 653da7c907 added more debugging in configuration attribute handling Andreas Steffen 2009-11-24 23:17:07 +01:00
  • eba568563c changed error messages in the case of faulty esp and ike strings Andreas Steffen 2009-11-24 16:45:52 +01:00
  • 2eeab939a0 do not send all available kernel algorithms if esp string is faulty Andreas Steffen 2009-11-24 16:38:10 +01:00
  • 792876ff87 check if alg_info_esp exists Elmar Vonlanthen 2009-11-24 16:15:12 +01:00
  • cda8ec7afc added some parentheses Andreas Steffen 2009-11-24 14:36:17 +01:00
  • 93e2377c7f allow ECP DH groups in pfsgroup definition Andreas Steffen 2009-11-24 14:35:25 +01:00
  • 17d52fbba1 renewed OCSP Signing certificate Andreas Steffen 2009-11-24 13:55:38 +01:00
  • c4570d188e issue error message for expired certificates in OCSP trust chain checking Andreas Steffen 2009-11-24 12:37:38 +01:00
  • 227583ba59 updated IKEv2 notification messages assigned by IANA Andreas Steffen 2009-11-24 09:21:00 +01:00
  • 44e41c4c6e updated NEWS for 4.3.6dr2 Andreas Steffen 2009-11-24 09:18:41 +01:00
  • 06f02f993c Do not recreate existing create_child subtask when retrying with different DH group Martin Willi 2009-11-23 13:50:01 +01:00
  • 0d1d19b99d Avoid potentially unaligned half-word read Martin Willi 2009-11-23 13:49:19 +01:00
  • ad78bb13c8 Correctly set host number to zero when computing traffic selector range Eric Mertens 2009-11-17 10:30:37 -08:00
  • dd326c114f Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled Martin Willi 2009-11-20 14:36:24 +01:00
  • 832f283150 Use status_t return value for get_quintuplet() dummy implementations Martin Willi 2009-11-20 11:02:06 +01:00
  • 10bc5d96cb Move comment out of register_printf_function test Martin Willi 2009-11-19 14:37:34 +01:00
  • 80b44cd71a Message stringification supports more detailed EAP payload information Martin Willi 2009-11-18 10:37:46 +01:00
  • 1860bfa2ea Correctly enumerate attributes to request as initiator with the actually requesting handler Martin Willi 2009-11-17 17:51:30 +01:00
  • 1427c93fcd Fixed memleak in attribute handling Martin Willi 2009-11-17 15:55:45 +00:00
  • d674c2ace0 attr plugin supports any custom attribute type having a v4/v6 IP under the charon.plugins.attr namespace Martin Willi 2009-11-17 15:53:57 +00:00
  • 3797b8e767 Support enumeration of key/value pairs in a section of strongswan.conf Martin Willi 2009-11-17 15:52:36 +00:00
  • 86813bef12 Whitelist register_printf_specifier in leak detective Martin Willi 2009-11-17 15:51:57 +00:00
  • b5a2055fb1 Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler Martin Willi 2009-11-17 14:51:50 +01:00
  • e6cf060275 Encrypt payloads with missing rule, fix insertion of non-encrypted payloads Martin Willi 2009-11-12 14:52:12 +00:00
  • 074444972a Build libsimaka with libtool, as we require a PIC-enabled version Martin Willi 2009-11-10 14:24:19 +01:00
  • 098466039f Fix word alignement in memxor() on 64-bit architectures Martin Willi 2009-11-10 14:12:00 +01:00
  • addfeeff9c Do not complain about missing payload order rules for private use payloads Martin Willi 2009-11-10 11:11:03 +01:00
  • 5bfe1b2529 Properly initialize attribute encoding/length values Martin Willi 2009-11-10 11:07:37 +01:00
  • 733538a421 Identation/whitespace cleanups Martin Willi 2009-11-10 11:07:13 +01:00
  • 82713deafd Simplified vendor ID payload interface Martin Willi 2009-11-09 12:38:48 +01:00
  • 20d144e72f Invoke message hook before generation, allowing plugins to mangle it Martin Willi 2009-11-02 10:44:11 +01:00
  • ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups Martin Willi 2009-11-12 13:10:30 +00:00
  • f6bbcec390 Use register_printf_specifier instead of deprecated register_printf_function, if available Martin Willi 2009-11-12 13:16:46 +01:00
  • 0850e33518 Fixed compiler warning about missing return value Martin Willi 2009-11-12 11:17:02 +01:00
  • 1a86be6e48 Support variable RES length in AKA quintuplets Martin Willi 2009-11-12 10:27:50 +01:00
  • 15b65bf15d Ported pseudonym/reauth functionality to EAP-AKA Martin Willi 2009-10-29 17:38:45 +01:00
  • 3374cb0f44 Passing other as NULL should not always result in a match if me matches Martin Willi 2009-10-29 17:37:36 +01:00
  • 947b03fd09 Use new identity constructor in EAP-SIM Martin Willi 2009-10-29 15:58:43 +01:00
  • 324528700d Added identification constructor using a chunk of data, guessing id type Martin Willi 2009-10-29 15:52:00 +01:00
  • 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins Martin Willi 2009-10-29 14:56:45 +01:00
  • eb7bf91e12 Added option to disable identity requests completely (old behavior) Martin Willi 2009-10-29 10:19:43 +01:00
  • 0107f5b687 Fixed replacing existing reauthentication data Martin Willi 2009-10-29 09:49:55 +01:00
  • 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown Martin Willi 2009-10-28 16:04:45 +01:00
  • edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend Martin Willi 2009-10-28 15:34:05 +01:00
  • acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data Martin Willi 2009-10-28 14:18:33 +01:00
  • c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM Martin Willi 2009-10-28 14:16:54 +01:00
  • 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication Martin Willi 2009-10-28 14:15:24 +01:00
  • e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed Martin Willi 2009-10-27 11:12:36 +01:00
  • c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, extended sim_provider with a is_pseudonym() function. Martin Willi 2009-10-27 11:10:44 +01:00
  • 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory Martin Willi 2009-10-26 16:11:40 +01:00
  • 8aad8f6faf Some coding style cleanups Martin Willi 2009-10-26 16:08:14 +01:00
  • 0328fe940d Impemented basic pseudonym support in EAP-SIM Martin Willi 2009-10-26 16:11:15 +01:00
  • f81760dcd1 A SIM/AKA message can be parsed twice, without and with decryption Martin Willi 2009-10-23 16:26:26 +02:00
  • 0e20893d81 Pass SIM/AKA crypto helper to constructor of message Martin Willi 2009-10-23 13:57:13 +02:00
  • 13f418b442 Added a doxygen group for libsimaka, some cleanups Martin Willi 2009-10-22 14:41:13 +02:00
  • bcf8a0ff94 Added missing hasher include Martin Willi 2009-10-22 14:46:32 +02:00
  • 4735965fc0 EAP servers check if the received EAP message was expected Martin Willi 2009-10-22 14:05:10 +02:00
  • 02f785b050 Use existing triplet length definitions Martin Willi 2009-10-22 13:57:37 +02:00
  • aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library Martin Willi 2009-10-22 13:04:50 +02:00
  • 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM Martin Willi 2009-10-22 13:03:55 +02:00
  • fad4e5f393 Centralized SIM/AKA notifications and client errors Martin Willi 2009-10-22 13:02:32 +02:00
  • e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM Martin Willi 2009-10-21 14:21:00 +02:00
  • 55916dcc9e libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA Martin Willi 2009-10-21 13:37:37 +02:00
  • ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations Martin Willi 2009-10-20 13:44:21 +02:00
  • f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA Martin Willi 2009-10-19 15:37:36 +02:00
  • 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication Martin Willi 2009-10-14 14:42:43 +02:00