]>
git.ipfire.org Git - people/ms/strongswan.git/log
Martin Willi [Thu, 3 Dec 2009 07:00:04 +0000 (08:00 +0100)]
Do not execute the callback job if it has been cancelled since registration
Martin Willi [Thu, 3 Dec 2009 06:56:19 +0000 (07:56 +0100)]
Cleanup library if daemon initialization fails
Martin Willi [Wed, 2 Dec 2009 10:49:11 +0000 (11:49 +0100)]
To build strongSwan from git sources, gettext is required
Martin Willi [Tue, 1 Dec 2009 14:46:56 +0000 (15:46 +0100)]
Do not install invalid 0.0.0.0 DNS servers
Martin Willi [Tue, 1 Dec 2009 13:01:56 +0000 (13:01 +0000)]
Prefer EAP-Identity for provider attribute/address lookup
Martin Willi [Tue, 1 Dec 2009 13:23:37 +0000 (14:23 +0100)]
Save EAP-Identity on auth config
Martin Willi [Tue, 1 Dec 2009 10:35:30 +0000 (11:35 +0100)]
Store completed authentication rounds permanently on IKE_SA, with flush option
Martin Willi [Mon, 30 Nov 2009 15:59:23 +0000 (16:59 +0100)]
Removed obsolete and unused [gs]et_eap_identity() methods
Martin Willi [Mon, 30 Nov 2009 10:32:26 +0000 (11:32 +0100)]
Do not propose transport mode as initiator if connection is NATed
Martin Willi [Mon, 30 Nov 2009 08:58:54 +0000 (09:58 +0100)]
Verify EAP-SIM/AKA AT_MAC before processing any attributes
Martin Willi [Fri, 27 Nov 2009 14:40:40 +0000 (15:40 +0100)]
SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response
Martin Willi [Fri, 27 Nov 2009 10:16:20 +0000 (11:16 +0100)]
Invoke attribute/key hooks from libsimaka
Martin Willi [Fri, 27 Nov 2009 10:14:40 +0000 (11:14 +0100)]
Extended SIM manager by hooks, currently featuring attribute and key hooks
Martin Willi [Fri, 27 Nov 2009 08:34:38 +0000 (09:34 +0100)]
Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA
Martin Willi [Fri, 27 Nov 2009 13:55:20 +0000 (14:55 +0100)]
Handle NOT_SUPPORTED or other errors properly in get_quintuplet
Andreas Steffen [Thu, 26 Nov 2009 22:48:29 +0000 (23:48 +0100)]
added RFC-conforming ikev2/sha2 scenarios
Andreas Steffen [Thu, 26 Nov 2009 22:46:27 +0000 (23:46 +0100)]
adapted ikev2/alg-aes-xcbc scenario
Martin Willi [Thu, 26 Nov 2009 14:58:55 +0000 (15:58 +0100)]
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header
Martin Willi [Thu, 26 Nov 2009 09:27:35 +0000 (10:27 +0100)]
Added NEWS about SHA2 changes
Martin Willi [Tue, 24 Nov 2009 14:21:16 +0000 (15:21 +0100)]
Use full algorithm name for SHA384/512 HMACs
Martin Willi [Fri, 20 Nov 2009 09:49:03 +0000 (09:49 +0000)]
Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword
Martin Willi [Fri, 20 Nov 2009 09:42:29 +0000 (09:42 +0000)]
Install SHA256_128 auth algorithm with specified 128 bit truncation
Martin Willi [Fri, 20 Nov 2009 09:41:46 +0000 (09:41 +0000)]
Updated XFRM linux header, includes specified truncations for auth algos
Martin Willi [Tue, 24 Nov 2009 13:10:18 +0000 (14:10 +0100)]
Added support for IPv6 source route installation
Martin Willi [Tue, 24 Nov 2009 13:09:09 +0000 (14:09 +0100)]
Check existing path in mobike probing only if we still have a route
Andreas Steffen [Wed, 25 Nov 2009 08:02:09 +0000 (09:02 +0100)]
put identities in single quotes
Andreas Steffen [Tue, 24 Nov 2009 22:17:07 +0000 (23:17 +0100)]
added more debugging in configuration attribute handling
Andreas Steffen [Tue, 24 Nov 2009 15:45:52 +0000 (16:45 +0100)]
changed error messages in the case of faulty esp and ike strings
Andreas Steffen [Tue, 24 Nov 2009 15:38:10 +0000 (16:38 +0100)]
do not send all available kernel algorithms if esp string is faulty
Elmar Vonlanthen [Tue, 24 Nov 2009 15:15:12 +0000 (16:15 +0100)]
check if alg_info_esp exists
Andreas Steffen [Tue, 24 Nov 2009 13:36:17 +0000 (14:36 +0100)]
added some parentheses
Andreas Steffen [Tue, 24 Nov 2009 13:35:25 +0000 (14:35 +0100)]
allow ECP DH groups in pfsgroup definition
Andreas Steffen [Tue, 24 Nov 2009 12:55:38 +0000 (13:55 +0100)]
renewed OCSP Signing certificate
Andreas Steffen [Tue, 24 Nov 2009 11:37:38 +0000 (12:37 +0100)]
issue error message for expired certificates in OCSP trust chain checking
Andreas Steffen [Tue, 24 Nov 2009 08:21:00 +0000 (09:21 +0100)]
updated IKEv2 notification messages assigned by IANA
Andreas Steffen [Tue, 24 Nov 2009 08:18:41 +0000 (09:18 +0100)]
updated NEWS for 4.3.6dr2
Martin Willi [Mon, 23 Nov 2009 12:50:01 +0000 (13:50 +0100)]
Do not recreate existing create_child subtask when retrying with different DH group
Martin Willi [Mon, 23 Nov 2009 12:49:19 +0000 (13:49 +0100)]
Avoid potentially unaligned half-word read
Eric Mertens [Tue, 17 Nov 2009 18:30:37 +0000 (10:30 -0800)]
Correctly set host number to zero when computing traffic selector range
Martin Willi [Fri, 20 Nov 2009 13:36:24 +0000 (14:36 +0100)]
Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled
Martin Willi [Fri, 20 Nov 2009 10:02:06 +0000 (11:02 +0100)]
Use status_t return value for get_quintuplet() dummy implementations
Martin Willi [Thu, 19 Nov 2009 13:37:34 +0000 (14:37 +0100)]
Move comment out of register_printf_function test
Martin Willi [Wed, 18 Nov 2009 09:37:46 +0000 (10:37 +0100)]
Message stringification supports more detailed EAP payload information
Martin Willi [Tue, 17 Nov 2009 16:51:30 +0000 (17:51 +0100)]
Correctly enumerate attributes to request as initiator with the actually requesting handler
Martin Willi [Tue, 17 Nov 2009 15:55:45 +0000 (15:55 +0000)]
Fixed memleak in attribute handling
Martin Willi [Tue, 17 Nov 2009 15:53:57 +0000 (15:53 +0000)]
attr plugin supports any custom attribute type having a v4/v6 IP under the charon.plugins.attr namespace
Martin Willi [Tue, 17 Nov 2009 15:52:36 +0000 (15:52 +0000)]
Support enumeration of key/value pairs in a section of strongswan.conf
Martin Willi [Tue, 17 Nov 2009 15:51:57 +0000 (15:51 +0000)]
Whitelist register_printf_specifier in leak detective
Martin Willi [Tue, 17 Nov 2009 13:51:50 +0000 (14:51 +0100)]
Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler
Martin Willi [Thu, 12 Nov 2009 14:52:12 +0000 (14:52 +0000)]
Encrypt payloads with missing rule, fix insertion of non-encrypted payloads
Martin Willi [Tue, 10 Nov 2009 13:24:19 +0000 (14:24 +0100)]
Build libsimaka with libtool, as we require a PIC-enabled version
Martin Willi [Tue, 10 Nov 2009 13:12:00 +0000 (14:12 +0100)]
Fix word alignement in memxor() on 64-bit architectures
Martin Willi [Tue, 10 Nov 2009 10:11:03 +0000 (11:11 +0100)]
Do not complain about missing payload order rules for private use payloads
Martin Willi [Tue, 10 Nov 2009 10:07:37 +0000 (11:07 +0100)]
Properly initialize attribute encoding/length values
Martin Willi [Tue, 10 Nov 2009 10:07:13 +0000 (11:07 +0100)]
Identation/whitespace cleanups
Martin Willi [Mon, 9 Nov 2009 11:38:48 +0000 (12:38 +0100)]
Simplified vendor ID payload interface
Martin Willi [Mon, 2 Nov 2009 09:44:11 +0000 (10:44 +0100)]
Invoke message hook before generation, allowing plugins to mangle it
Martin Willi [Thu, 12 Nov 2009 13:10:30 +0000 (13:10 +0000)]
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
Martin Willi [Thu, 12 Nov 2009 12:16:46 +0000 (13:16 +0100)]
Use register_printf_specifier instead of deprecated register_printf_function, if available
Martin Willi [Thu, 12 Nov 2009 10:17:02 +0000 (11:17 +0100)]
Fixed compiler warning about missing return value
Martin Willi [Thu, 12 Nov 2009 09:27:50 +0000 (10:27 +0100)]
Support variable RES length in AKA quintuplets
Martin Willi [Thu, 29 Oct 2009 16:38:45 +0000 (17:38 +0100)]
Ported pseudonym/reauth functionality to EAP-AKA
Martin Willi [Thu, 29 Oct 2009 16:37:36 +0000 (17:37 +0100)]
Passing other as NULL should not always result in a match if me matches
Martin Willi [Thu, 29 Oct 2009 14:58:43 +0000 (15:58 +0100)]
Use new identity constructor in EAP-SIM
Martin Willi [Thu, 29 Oct 2009 14:52:00 +0000 (15:52 +0100)]
Added identification constructor using a chunk of data, guessing id type
Martin Willi [Thu, 29 Oct 2009 13:56:45 +0000 (14:56 +0100)]
Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins
Martin Willi [Thu, 29 Oct 2009 09:19:43 +0000 (10:19 +0100)]
Added option to disable identity requests completely (old behavior)
Martin Willi [Thu, 29 Oct 2009 08:49:55 +0000 (09:49 +0100)]
Fixed replacing existing reauthentication data
Martin Willi [Wed, 28 Oct 2009 15:04:45 +0000 (16:04 +0100)]
Initiate full authentication if reauthentication identity is unknown
Martin Willi [Wed, 28 Oct 2009 14:34:05 +0000 (15:34 +0100)]
Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend
Martin Willi [Wed, 28 Oct 2009 13:18:33 +0000 (14:18 +0100)]
eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data
Martin Willi [Wed, 28 Oct 2009 13:16:54 +0000 (14:16 +0100)]
Initial support for fast reauthentication in EAP-SIM
Martin Willi [Wed, 28 Oct 2009 13:15:24 +0000 (14:15 +0100)]
EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication
Martin Willi [Tue, 27 Oct 2009 10:12:36 +0000 (11:12 +0100)]
Fallback to permanent identity request if pseudonym mapping failed
Martin Willi [Tue, 27 Oct 2009 10:10:44 +0000 (11:10 +0100)]
Query triplet/quintuplet functions with permanent identity only,
extended sim_provider with a is_pseudonym() function.
Martin Willi [Mon, 26 Oct 2009 15:11:40 +0000 (16:11 +0100)]
eap-sim-file plugin can store pseudonym information volatile in memory
Martin Willi [Mon, 26 Oct 2009 15:08:14 +0000 (16:08 +0100)]
Some coding style cleanups
Martin Willi [Mon, 26 Oct 2009 15:11:15 +0000 (16:11 +0100)]
Impemented basic pseudonym support in EAP-SIM
Martin Willi [Fri, 23 Oct 2009 14:26:26 +0000 (16:26 +0200)]
A SIM/AKA message can be parsed twice, without and with decryption
Martin Willi [Fri, 23 Oct 2009 11:57:13 +0000 (13:57 +0200)]
Pass SIM/AKA crypto helper to constructor of message
Martin Willi [Thu, 22 Oct 2009 12:41:13 +0000 (14:41 +0200)]
Added a doxygen group for libsimaka, some cleanups
Martin Willi [Thu, 22 Oct 2009 12:46:32 +0000 (14:46 +0200)]
Added missing hasher include
Martin Willi [Thu, 22 Oct 2009 12:05:10 +0000 (14:05 +0200)]
EAP servers check if the received EAP message was expected
Martin Willi [Thu, 22 Oct 2009 11:57:37 +0000 (13:57 +0200)]
Use existing triplet length definitions
Martin Willi [Thu, 22 Oct 2009 11:04:50 +0000 (13:04 +0200)]
Splitted EAP-AKA in peer and server implementations, use libsimaka helper library
Martin Willi [Thu, 22 Oct 2009 11:03:55 +0000 (13:03 +0200)]
Proper handling of non-skippable attributes and client error codes in EAP-SIM
Martin Willi [Thu, 22 Oct 2009 11:02:32 +0000 (13:02 +0200)]
Centralized SIM/AKA notifications and client errors
Martin Willi [Wed, 21 Oct 2009 12:21:00 +0000 (14:21 +0200)]
Use the EAP-SIM/AKA crypto helper in EAP-SIM
Martin Willi [Wed, 21 Oct 2009 11:37:37 +0000 (13:37 +0200)]
libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA
Martin Willi [Tue, 20 Oct 2009 11:44:21 +0000 (13:44 +0200)]
Migrated EAP-SIM to libsimaka, separated server/peer implementations
Martin Willi [Mon, 19 Oct 2009 13:37:36 +0000 (15:37 +0200)]
Added a libsimaka library with shared message handling code for EAP-SIM/AKA
Martin Willi [Wed, 14 Oct 2009 12:42:43 +0000 (14:42 +0200)]
sim_provider_t API gained support for pseudonym/fast reauthentication
Martin Willi [Wed, 14 Oct 2009 11:35:35 +0000 (13:35 +0200)]
sim_card_t API gained support for pseudonym/fast reauthentication
Andreas Steffen [Wed, 11 Nov 2009 10:17:59 +0000 (11:17 +0100)]
mixed fingerprint / userid
Andreas Steffen [Wed, 11 Nov 2009 10:06:07 +0000 (11:06 +0100)]
fixed 4.3.6 ocsp regression
Andreas Steffen [Tue, 10 Nov 2009 22:55:55 +0000 (23:55 +0100)]
adapted log message
Andreas Steffen [Tue, 10 Nov 2009 22:54:51 +0000 (23:54 +0100)]
merged pluto's PGP certificate parsing with charon's
Andreas Steffen [Tue, 10 Nov 2009 22:54:04 +0000 (23:54 +0100)]
merged pluto's PGP certificate parsing with charon's
Andreas Steffen [Tue, 10 Nov 2009 20:50:34 +0000 (21:50 +0100)]
added separating line
Andreas Steffen [Tue, 10 Nov 2009 09:04:55 +0000 (10:04 +0100)]
added some debugging to pgp certificate parsing