Martin Willi
|
2e64455ee1
|
Fixed crypter keymat derivation bug
|
2010-08-19 19:28:08 +02:00 |
|
Martin Willi
|
08a5a708fc
|
Include CCM/GCM algorithms in IKEv2 proposals, if supported
|
2010-08-19 19:05:05 +02:00 |
|
Martin Willi
|
84eb3aa456
|
Implemented IKEv2 keymat derivation for AEAD algorithms
|
2010-08-19 19:02:34 +02:00 |
|
Martin Willi
|
9d49f79f55
|
List registered AEAD algorithms in listalgs
|
2010-08-19 19:02:34 +02:00 |
|
Martin Willi
|
b519071299
|
Use AEAD wrapper for encryption payload encryption/decryption
|
2010-08-19 19:02:33 +02:00 |
|
Martin Willi
|
7fc4b0814f
|
Make function to test if an encryption algorithm is an AEAD alg public
|
2010-08-19 19:02:16 +02:00 |
|
Martin Willi
|
92a4540aca
|
Migrated generator_t to INIT/METHOD macros
|
2010-08-19 12:35:53 +02:00 |
|
Martin Willi
|
0cca7427c7
|
Migrated encryption_payload to INIT/METHOD macros
|
2010-08-19 12:35:53 +02:00 |
|
Martin Willi
|
7c9d8e1476
|
Migrated message_t to INIT/METHOD macros
|
2010-08-19 12:35:53 +02:00 |
|
Martin Willi
|
5555b900b2
|
Migrated keymat to INIT/METHOD macros
|
2010-08-19 12:35:53 +02:00 |
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
Andreas Steffen
|
5ae4292cb9
|
added TLS record debug output
|
2010-08-18 22:52:42 +02:00 |
|
Martin Willi
|
ba31fe1fd6
|
Use a seperate section for each nested struct member in INIT macro
|
2010-08-18 12:15:03 +02:00 |
|
Andreas Steffen
|
53115857ae
|
some simplifications using the INIT macro
|
2010-08-17 20:09:32 +02:00 |
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
Andreas Steffen
|
06a207480e
|
fixed typo in eap-mschapv2 plugin
|
2010-08-16 16:44:13 +02:00 |
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|
Andreas Steffen
|
004b226bb8
|
use EAP plugin for tunneled client authentication
|
2010-08-14 01:14:28 +02:00 |
|
Andreas Steffen
|
6659c61335
|
send tunneled EAP Identity response using eap-identity plugin
|
2010-08-13 22:45:22 +02:00 |
|
Andreas Steffen
|
486893ee52
|
allow to send an EAP Identity response without matching request
|
2010-08-13 22:41:00 +02:00 |
|
Andreas Steffen
|
683a912eab
|
implement AVP EAP message building and processing
|
2010-08-13 21:21:49 +02:00 |
|
Martin Willi
|
c03b0d7e6b
|
Added support for Camellia cipher to xcbc
|
2010-08-13 17:11:54 +02:00 |
|
Martin Willi
|
c7776e0aa8
|
Support Camellia XCBC algorithms in proposal
|
2010-08-13 17:11:54 +02:00 |
|
Martin Willi
|
3b77c27a5b
|
Added Camellia, AES-CTR to default IKE proposal, if supported
|
2010-08-13 17:11:53 +02:00 |
|
Martin Willi
|
3102d8669d
|
Use IV length of a crypter instead of block size for IV calculations
|
2010-08-13 17:11:53 +02:00 |
|
Andreas Steffen
|
71efe40077
|
Migrated eap_identity plugin to INIT/METHOD macros
|
2010-08-13 16:57:01 +02:00 |
|
Andreas Steffen
|
a568897011
|
Migrated eap_md5 plugin to INIT/METHOD macros
|
2010-08-13 16:33:26 +02:00 |
|
Andreas Steffen
|
45c4021bd0
|
Migrated eap_authenticator to INIT/METHOD macros
|
2010-08-13 15:58:53 +02:00 |
|
Andreas Steffen
|
fe6ae23d1f
|
Migrated eap_manager to INIT/METHOD macros
|
2010-08-13 15:32:37 +02:00 |
|
Andreas Steffen
|
87799b0c00
|
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
|
2010-08-13 15:07:53 +02:00 |
|
Andreas Steffen
|
e643da585b
|
fixed typo
|
2010-08-13 12:24:54 +02:00 |
|
Andreas Steffen
|
4412ee86c5
|
recognize eap-ttls method
|
2010-08-12 23:58:54 +02:00 |
|
Andreas Steffen
|
1327839da8
|
added generic TLS application data handler and specific EAP-TTLS instantiation
|
2010-08-12 23:58:54 +02:00 |
|
Martin Willi
|
8f01815143
|
Build dedicated plugin lists for each strongSwan component
|
2010-08-12 14:46:57 +02:00 |
|
Martin Willi
|
8bec0f5153
|
Implemented Smartcard support in NetworkManager frontend
|
2010-08-11 16:32:04 +02:00 |
|
Martin Willi
|
aea735ef63
|
Discard a packet that exceeds the receive buffer
|
2010-08-11 10:52:59 +02:00 |
|
Martin Willi
|
10a2e09b55
|
Added a strongswan.conf option to change socket receive buffer size
|
2010-08-11 10:48:17 +02:00 |
|
Andreas Steffen
|
133accfcfd
|
differentiate between TLS messages and EAP-[T]TLS packets in the debug output
|
2010-08-10 19:02:05 +02:00 |
|
Martin Willi
|
3d711a68fb
|
Added a stroke command to export cached x509 certificates to the console
|
2010-08-10 18:46:30 +02:00 |
|
Martin Willi
|
a944d2092b
|
Use bits instead of bytes for a private/public key
|
2010-08-10 18:46:30 +02:00 |
|
Martin Willi
|
33ddaaabec
|
Added support for different encryption schemes to private/public keys
|
2010-08-10 18:46:30 +02:00 |
|
Andreas Steffen
|
3810afa9f9
|
log final TLS acknowledgement packet
|
2010-08-08 19:14:53 +02:00 |
|
Andreas Steffen
|
ded59df4fc
|
added level 2 debug info on sent TLS packets
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
ab47a7924b
|
log EAP-TTLS version
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
a622c6d019
|
fixed typo
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
a6444fcdd4
|
EAP-TLS and EAP-TTLS use different constant MSK PRF label
|
2010-08-07 11:26:04 +02:00 |
|
Andreas Steffen
|
26eb9b2d17
|
added eap_ttls plugin configuration
|
2010-08-07 11:26:04 +02:00 |
|
Jiri Bohac
|
30d8e8d04d
|
fix error-type range in parsing of NOTIFY payloads
|
2010-08-06 11:47:35 +02:00 |
|