Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 722d68803e Set sp_id to reqid when creating ESA Adrian-Ken Rueegsegger 2012-12-17 17:21:47 +01:00
• 1c1400f007 Call Esa_Select after creation of child SA Adrian-Ken Rueegsegger 2012-11-12 19:05:28 +01:00
• d2371b728c Check that chunk fits into sequence when converting Adrian-Ken Rueegsegger 2012-11-12 12:08:32 +01:00
• 3360bad910 Remove result out parameter from EES Init Reto Buerki 2012-11-08 15:32:54 +01:00
• 0f5e57fe26 Drop support for pre-shared key authentication Adrian-Ken Rueegsegger 2012-11-08 12:22:10 +01:00
• c457128ab6 charon-tkm: Register TKM private key on startup Reto Buerki 2012-10-16 17:12:51 +02:00
• 08d199fa3d Add TKM private key implementation Reto Buerki 2012-10-16 16:27:46 +02:00
• fe504b745d keymat: Store signature info in auth octets Reto Buerki 2012-10-16 16:42:23 +02:00
• a2f97ff860 Add AUTH signature info data structure Reto Buerki 2012-10-16 16:39:54 +02:00
• ac90fcee2f charon-tkm: Register TKM public key on startup Adrian-Ken Rueegsegger 2012-11-08 11:04:48 +01:00
• 9a5c51c44f Add TKM public key implementation Adrian-Ken Rueegsegger 2012-11-08 11:00:21 +01:00
• 832488b14a Authenticate ISA using certificates Adrian-Ken Rueegsegger 2012-11-07 17:55:47 +01:00
• 49b1fdb24a Store peer IKE init message Adrian-Ken Rueegsegger 2012-11-07 17:54:24 +01:00
• 351bd59de2 Build cc context in tkm listener authorize hook Adrian-Ken Rueegsegger 2012-09-25 15:21:11 +02:00
• 464eb54ba4 Add TKM_CTX_CC (Certificate chain context id) Adrian-Ken Rueegsegger 2012-09-25 17:13:19 +02:00
• 0f0165c81f Add typelen parameter to chunk_to_sequence function Adrian-Ken Rueegsegger 2012-10-04 11:17:33 +02:00
• 270b321e97 Implement Ada exception processing Reto Buerki 2012-10-02 17:03:39 +02:00
• e0cb01f44d Implement Esa Event Service (EES) Reto Buerki 2012-09-26 15:40:27 +02:00
• d9c6480688 Conditionally reset AE context in keymat destroy Adrian-Ken Rueegsegger 2012-09-19 17:55:28 +02:00
• 62b625430e Let tkm_keymat_t extend keymat_v2_t Adrian-Ken Rueegsegger 2012-09-18 19:01:38 +02:00
• 2ac988bf4b Implement IKE SA rekeying Adrian-Ken Rueegsegger 2012-09-18 15:21:08 +02:00
• e472129aa3 Add test for keymat derive_child_keys operation Adrian-Ken Rueegsegger 2012-09-18 11:15:16 +02:00
• 4a1529203b Implement ESA rekeying with and without PFS Adrian-Ken Rueegsegger 2012-09-17 17:19:58 +02:00
• d303221c0b Extend esa_info_t struct Adrian-Ken Rueegsegger 2012-09-14 17:29:21 +02:00
• de20230111 Use SAD to manage TKM ESA context information Adrian-Ken Rueegsegger 2012-09-14 15:42:17 +02:00
• 1e13904f45 Implement TKM kernel SA database (SAD) Adrian-Ken Rueegsegger 2012-09-14 14:59:04 +02:00
• d1c0822759 Add TKM_CTX_ESA (ESP SA context id) Adrian-Ken Rueegsegger 2012-09-14 10:29:38 +02:00
• d0ab667c99 Use rng to generate local ESP SPIs Adrian-Ken Rueegsegger 2012-09-12 11:52:08 +02:00
• 6ed5c3bb1e charon-tkm: Register kernel_netlink_net Adrian-Ken Rueegsegger 2012-09-11 19:17:23 +02:00
• db97fd74d3 Do not return shared secret in TKM Diffie-Hellman Adrian-Ken Rueegsegger 2012-09-11 19:13:29 +02:00
• a61ae27d16 Remove keymat proxy from TKM keymat Adrian-Ken Rueegsegger 2012-09-11 19:04:55 +02:00
• 6c237edb9a Remove netlink proxy from TKM kernel interface Reto Buerki 2012-09-11 18:32:50 +02:00
• a642e3ba27 Avoid proxy for bypass_socket, enable_udp_decap Reto Buerki 2012-09-11 18:24:21 +02:00
• b94a0befaf Implement CHILD SA key derivation using TKM Adrian-Ken Rueegsegger 2012-09-10 10:43:05 +02:00
• cc169cb16e Register TKM kernel ipsec interface in charon-tkm Adrian-Ken Rueegsegger 2012-09-07 15:17:25 +02:00
• 8a780242e2 Add TKM kernel ipsec skeleton Adrian-Ken Rueegsegger 2012-09-07 14:58:35 +02:00
• 8f1dfb3d9e chunk_map: Store key, value pair in entry_t struct Reto Buerki 2012-09-07 15:44:37 +02:00
• 3972769690 Call ike_isa_auth_psk in listener authorize hook Reto Buerki 2012-09-06 18:17:26 +02:00
• 9df5645623 listener: Register message hook Reto Buerki 2012-08-31 12:58:00 +02:00
• 071e792a85 keymat: Add AUTH payload setter/getter functions Reto Buerki 2012-09-06 17:27:45 +02:00
• d0ce4116b0 Register TKM bus listener in charon-tkm Reto Buerki 2012-08-31 11:13:39 +02:00
• c6c8d74026 Add TKM specific bus listener skeleton Reto Buerki 2012-08-31 11:11:30 +02:00
• d91acfdb5d Add ISA context id getter to TKM keymat Reto Buerki 2012-08-31 11:24:45 +02:00
• cdd4d73ff5 keymat: Acquire AE context ID on initialization Reto Buerki 2012-08-31 10:13:55 +02:00
• c755645032 Add TKM_CTX_AE (Authenticated Endpoint context) Reto Buerki 2012-08-30 15:07:21 +02:00
• bf1034a776 keymat: Acquire ISA context ID on initialization Reto Buerki 2012-08-30 14:42:19 +02:00
• 7fb3e5ed10 Add TKM_CTX_ISA (IKE SA context) Reto Buerki 2012-08-30 14:36:06 +02:00
• fa22fc2419 Use remote PSK signature computed by TKM Reto Buerki 2012-08-30 13:57:58 +02:00
• e7a497c307 keymat: Check for aes256-sha512 in derive_ike_keys Reto Buerki 2012-08-30 11:25:14 +02:00
• 51fdbd0429 keymat: Call ike_isa_sign_psk in get_psk_sig Adrian-Ken Rueegsegger 2012-08-29 18:32:28 +02:00
• e285544be2 Factor out AEAD transform creation Reto Buerki 2012-08-29 10:38:47 +02:00
• 4be8471fab Add keymat IKE key derivation test case Reto Buerki 2012-08-29 09:48:14 +02:00
• 3290b9995c keymat: Create inbound and outbound AEAD transforms Reto Buerki 2012-08-29 09:44:17 +02:00
• 4c38878db5 keymat: Extract enc,inc algorithms from proposal Reto Buerki 2012-08-29 09:41:02 +02:00
• fc828aaac6 keymat: Call TKM Isa_Create procedure Reto Buerki 2012-08-24 16:17:27 +02:00
• 0327fac6b6 Implement chunk_to_sequence function Reto Buerki 2012-08-24 12:58:47 +02:00
• 53232d5883 Implement sequence_to_chunk function Reto Buerki 2012-08-24 12:16:17 +02:00
• d61cea7524 keymat: Log nonce and DH context ids Adrian-Ken Rueegsegger 2012-08-22 11:27:30 +02:00
• 528fc21ffe Add context id getter to TKM DH implementation Adrian-Ken Rueegsegger 2012-08-22 11:17:14 +02:00
• ba0d7d9a76 keymat: Get context id of local nonce Adrian-Ken Rueegsegger 2012-08-22 11:05:44 +02:00
• 624178fece nonceg: Insert id mapping when allocating nonce Adrian-Ken Rueegsegger 2012-08-22 10:53:08 +02:00
• 3242a178b3 Add chunk map Adrian-Ken Rueegsegger 2012-08-22 10:17:59 +02:00
• 601de9f36f Add context id getter to TKM nonce generator Adrian-Ken Rueegsegger 2012-08-21 14:31:13 +02:00
• ebe592a393 id_manager: Use calloc instead of malloc Reto Buerki 2012-08-21 15:29:30 +02:00
• 1ee792f9ea Use ikev2 keymat proxy Reto Buerki 2012-08-21 12:38:50 +02:00
• 5b3bcdfada Add skeleton for TKM keymat variant Reto Buerki 2012-08-21 12:17:05 +02:00
• 84967b4439 id_manager: Use limits given by TKM Reto Buerki 2012-08-09 16:13:55 +02:00
• 50e35e66d2 Pass context limits on to id manager Reto Buerki 2012-08-09 15:18:05 +02:00
• ef5372395a Request limits from TKM on init Reto Buerki 2012-08-09 15:12:40 +02:00
• 7aa573a50e id_manager: Use array of bool instead of list Reto Buerki 2012-08-09 12:47:58 +02:00
• 49c513c1d9 Use id manager to acquire DH context id Reto Buerki 2012-08-08 16:59:19 +02:00
• 65a777f7fb Add TKM_CTX_DH (Diffie-Hellman context) to id manager Reto Buerki 2012-08-08 16:56:30 +02:00
• c38459d77d Use id manager to acquire nonce context id Reto Buerki 2012-08-07 17:46:45 +02:00
• f3cd7f50de Add initial TKM Diffie-Hellman implementation Reto Buerki 2012-07-24 10:40:26 +02:00
• d51305aa3f charon-tkm: Register tkm nonce generator Reto Buerki 2012-06-12 14:39:33 +02:00
• 8e95bf455d tkm_nonceg: Return nonce generated by TKM Reto Buerki 2012-06-12 11:05:14 +02:00
• 3d2746309e Initialize TKM client library in tkm.c Reto Buerki 2012-06-07 17:45:34 +02:00
• 559fe48c50 Introduce TKM specific charon daemon (charon-tkm) Reto Buerki 2012-05-18 14:09:24 +02:00
• 4dc3ef94a1 starter: Make daemon name configurable Adrian-Ken Rueegsegger 2013-01-22 16:13:15 +01:00
• 0aa5a46669 Add configure option --enable-unit-tests Adrian-Ken Rueegsegger 2012-05-18 21:19:52 +02:00
• deafaf51f1 Load arbitrary (non-host) attributes from strongswan.conf Tobias Brunner 2013-02-22 18:59:52 +01:00
• 824864f4e0 Don't try to mmap() empty ipsec.secret files Martin Willi 2013-03-19 13:44:11 +01:00
• 8a0a1ae857 Delete IKE_SAs if responder does not initiate XAuth exchange within a certain time frame Tobias Brunner 2012-09-21 12:14:29 +02:00
• 7a87381840 testing: Rename interfaces and bridges so they are easier to identify Tobias Brunner 2013-03-08 14:47:42 +01:00
• 9525e9c506 testing: Don't use a specific version for the QEMU machine type Tobias Brunner 2013-03-08 14:18:54 +01:00
• e34666a4ed NEWS about xauth-noauth added Tobias Brunner 2013-03-19 10:58:58 +01:00
• 3c34e15ee4 Make sure that xauth-noauth is not used accidentally Tobias Brunner 2013-03-19 10:57:17 +01:00
• e4013bb904 Added xauth-noauth plugin Tobias Brunner 2013-02-04 18:55:54 +01:00
• 41131528a9 In stroke counters, check if we have an IKE_SA before getting the name from it Martin Willi 2013-03-19 11:20:35 +01:00
• a0f1c4cf29 Add an "esp" load-tester option to configure custom CHILD_SA ESP proposal Martin Willi 2013-03-18 14:29:37 +01:00
• 6cf79c1e9d Algorithms are not really specific to an IKE version Tobias Brunner 2013-03-18 12:18:44 +01:00
• 96776d6f77 Add some 5.0.3 NEWS Martin Willi 2013-03-18 10:47:26 +01:00
• d29246cabe Merge branch 'radius-ext' Martin Willi 2013-03-18 10:13:36 +01:00
• 048872f2f7 Merge branch 'stroke-counters' Martin Willi 2013-03-18 10:12:22 +01:00
• e85c0f6b84 Merge branch 'stroke-timeout' Martin Willi 2013-03-18 10:11:46 +01:00
• cb14ecb1d3 Merge branch 'netlink-align' Martin Willi 2013-03-18 10:09:35 +01:00
• 94163816fa Use netlink_add_attribute() to copy over attributes during update_sa() Martin Willi 2013-03-15 16:01:32 +01:00
• 0d9f31e1ed Use a helper function to add XFRM_MARK attribute Martin Willi 2013-03-15 15:17:13 +01:00
• 6dfc633927 Use netlink_reserve() helper function in XFRM to simplify message construction Martin Willi 2013-03-15 15:05:00 +01:00
• 6359ab04f4 Add a Netlink utility function to add a RTA header and reserve space for data Martin Willi 2013-03-15 14:32:51 +01:00