 Andreas Steffen
|
3a01908060
|
increase number of message due to large certificate payloads
|
2010-09-01 00:11:23 +02:00 |
|
|
Martin Willi
|
33b1a2567f
|
Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined
|
2010-08-31 18:10:23 +02:00 |
|
|
Martin Willi
|
64d7b0733f
|
Added support for the ipsec.conf aaa_identity keyword
|
2010-08-31 17:52:52 +02:00 |
|
|
Martin Willi
|
f9fc5f2045
|
Added strongswan.conf options for EAP-TLS/TTLS fragment size
|
2010-08-31 16:17:01 +02:00 |
|
|
Martin Willi
|
1cf8c5f746
|
Migrated EAP-TTLS to the generic TLS helper
|
2010-08-31 16:17:01 +02:00 |
|
|
Martin Willi
|
be751012c3
|
Migrated EAP-TLS to the generic TLS helper
|
2010-08-31 16:17:01 +02:00 |
|
|
Martin Willi
|
ecd98efa9d
|
Support output fragmentation of TLS records
|
2010-08-31 15:54:37 +02:00 |
|
|
Andreas Steffen
|
6ade82d5b7
|
fixed copy-and-paste errors
|
2010-08-30 15:42:44 +02:00 |
|
|
Andreas Steffen
|
d93e2e5409
|
created an eap-tnc method hull
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
577893612f
|
for the time being assume a single request/response exchange for a given EAP method
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
897c7a72cf
|
Win7 might send up to 7k of certificate requests
|
2010-08-27 16:30:05 +02:00 |
|
|
Andreas Steffen
|
d9b85e28b9
|
removed tls_record_t definition
|
2010-08-24 19:19:13 +02:00 |
|
|
Martin Willi
|
69e8bb2e8d
|
Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option
|
2010-08-24 11:34:43 +02:00 |
|
|
Andreas Steffen
|
79a5e391f8
|
support fragmentation in AVPs
|
2010-08-24 09:02:51 +02:00 |
|
|
Martin Willi
|
f55f9c4e1e
|
Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS
|
2010-08-24 08:45:49 +02:00 |
|
|
Martin Willi
|
1475800080
|
Moved TLS record parsing/generation to tls.c
|
2010-08-24 08:45:49 +02:00 |
|
|
Martin Willi
|
5ff8c62707
|
EAP-TLS clients send an empty packet on failure to properly shut down a TLS session
|
2010-08-23 15:13:41 +02:00 |
|
|
Martin Willi
|
835ec23aff
|
Use enum mappings to resolve debug group
|
2010-08-23 09:47:04 +02:00 |
|
|
Martin Willi
|
96b2fbcc2c
|
Introducing simple purposes for the TLS stack, switches various options
|
2010-08-20 15:09:08 +02:00 |
|
|
Martin Willi
|
6291fbedcb
|
Fixed compiler warning
|
2010-08-20 15:09:08 +02:00 |
|
|
Martin Willi
|
9d49f79f55
|
List registered AEAD algorithms in listalgs
|
2010-08-19 19:02:34 +02:00 |
|
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
|
Andreas Steffen
|
5ae4292cb9
|
added TLS record debug output
|
2010-08-18 22:52:42 +02:00 |
|
|
Martin Willi
|
ba31fe1fd6
|
Use a seperate section for each nested struct member in INIT macro
|
2010-08-18 12:15:03 +02:00 |
|
|
Andreas Steffen
|
53115857ae
|
some simplifications using the INIT macro
|
2010-08-17 20:09:32 +02:00 |
|
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
06a207480e
|
fixed typo in eap-mschapv2 plugin
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|
|
Andreas Steffen
|
004b226bb8
|
use EAP plugin for tunneled client authentication
|
2010-08-14 01:14:28 +02:00 |
|
|
Andreas Steffen
|
6659c61335
|
send tunneled EAP Identity response using eap-identity plugin
|
2010-08-13 22:45:22 +02:00 |
|
|
Andreas Steffen
|
486893ee52
|
allow to send an EAP Identity response without matching request
|
2010-08-13 22:41:00 +02:00 |
|
|
Andreas Steffen
|
683a912eab
|
implement AVP EAP message building and processing
|
2010-08-13 21:21:49 +02:00 |
|
|
Andreas Steffen
|
71efe40077
|
Migrated eap_identity plugin to INIT/METHOD macros
|
2010-08-13 16:57:01 +02:00 |
|
|
Andreas Steffen
|
a568897011
|
Migrated eap_md5 plugin to INIT/METHOD macros
|
2010-08-13 16:33:26 +02:00 |
|
|
Andreas Steffen
|
e643da585b
|
fixed typo
|
2010-08-13 12:24:54 +02:00 |
|
|
Andreas Steffen
|
1327839da8
|
added generic TLS application data handler and specific EAP-TTLS instantiation
|
2010-08-12 23:58:54 +02:00 |
|
|
Martin Willi
|
8f01815143
|
Build dedicated plugin lists for each strongSwan component
|
2010-08-12 14:46:57 +02:00 |
|
|
Martin Willi
|
8bec0f5153
|
Implemented Smartcard support in NetworkManager frontend
|
2010-08-11 16:32:04 +02:00 |
|
|
Martin Willi
|
aea735ef63
|
Discard a packet that exceeds the receive buffer
|
2010-08-11 10:52:59 +02:00 |
|
|
Martin Willi
|
10a2e09b55
|
Added a strongswan.conf option to change socket receive buffer size
|
2010-08-11 10:48:17 +02:00 |
|
|
Andreas Steffen
|
133accfcfd
|
differentiate between TLS messages and EAP-[T]TLS packets in the debug output
|
2010-08-10 19:02:05 +02:00 |
|
|
Martin Willi
|
3d711a68fb
|
Added a stroke command to export cached x509 certificates to the console
|
2010-08-10 18:46:30 +02:00 |
|
|
Martin Willi
|
a944d2092b
|
Use bits instead of bytes for a private/public key
|
2010-08-10 18:46:30 +02:00 |
|
|
Martin Willi
|
33ddaaabec
|
Added support for different encryption schemes to private/public keys
|
2010-08-10 18:46:30 +02:00 |
|
|
Andreas Steffen
|
3810afa9f9
|
log final TLS acknowledgement packet
|
2010-08-08 19:14:53 +02:00 |
|
|
Andreas Steffen
|
ded59df4fc
|
added level 2 debug info on sent TLS packets
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
ab47a7924b
|
log EAP-TTLS version
|
2010-08-07 11:26:04 +02:00 |
|
|
Andreas Steffen
|
a622c6d019
|
fixed typo
|
2010-08-07 11:26:04 +02:00 |
|