 Tobias Brunner
|
4c6dfbb26b
|
Added missing comma after ME_CONNECT declaration.
|
2012-03-20 17:30:48 +01:00 |
|
|
Tobias Brunner
|
8c5e78ae4f
|
Fixed creation of endpoint notifies.
|
2012-03-20 17:30:48 +01:00 |
|
|
Tobias Brunner
|
21da1087a5
|
Fixed diagram of IKEv1 encrypted "payload".
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
a0b52db079
|
Refactored main mode NONCE/KE payload processing
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
a0f851cfe0
|
Refactored main mode HASH payload processing
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
73380c8685
|
Skip any payloads in front of SA to extract initiators SA bytes
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
21b7db99c6
|
Implemented quick mode protocol handling, no CHILD_SA or HASH payloads yet
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
cc9629d87c
|
Partially implemented IKEv1 ESP proposal en-/decoding
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
12b6a68a5f
|
Add missing keymat cast to avoid compiler warning
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
17ec1c74de
|
Don't compare initiator flag in IKE_SA manager, pass initiator parameter to IKE_SA constructor
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
1b99befac3
|
Create and verify PSK HASH payloads in IKEv1 main mode
|
2012-03-20 17:30:47 +01:00 |
|
|
Martin Willi
|
4eee34ac49
|
Added keymat_v1_t.get_hash() to calculate authentication hashes
|
2012-03-20 17:30:46 +01:00 |
|
|
Martin Willi
|
e1f9d6476e
|
Register HASH_V1 in payload factory
|
2012-03-20 17:30:46 +01:00 |
|
|
Martin Willi
|
059d694a6b
|
Derive IKE keys as IKEv1 initiator, too
|
2012-03-20 17:30:46 +01:00 |
|
|
Martin Willi
|
7fcd26f4fc
|
Fix payload length of id_payload created from a traffic selector
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
42a69b05ab
|
String for ENCRYPTED_DATA fixed.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
780ce7724d
|
Strings for ENCRYPTED_V1 payload added.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
d66199884f
|
Set flags on message according to IKE version when parsing header.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
c92f2cf36d
|
Encrypt IKEv1 messages.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
477e856a15
|
Decrypt IKEv1 messages.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
b6f0029497
|
Added IV generation to keymat_v1_t.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
6f5f8ee4b5
|
Use modified encryption payload to encrypt/decrypt complete IKEv1 messages.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
0463674971
|
Use key derivation in IKEv1 main mode (PSK authentication).
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
aadb9e8355
|
Added a simple AEAD wrapper for IKEv1 encryption/decryption.
|
2012-03-20 17:30:46 +01:00 |
|
|
Tobias Brunner
|
b05d91edd7
|
Added IKEv1 key derivation with support for AUTH_CLASS_PSK.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
3d59c5c382
|
Update cached hosts on ike_sa_t when processing IKEv1 messages.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
0cec72df40
|
Provide keymat_t to message_t to encrypt/decrypt data.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
50d493808c
|
Avoid compiler warnings due to extended enums.
|
2012-03-20 17:30:45 +01:00 |
|
|
Tobias Brunner
|
a0563846b0
|
Moved version specific keymat functions to specific interfaces.
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
a09972df2b
|
Added a generic TASK_ prefix to all task types
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
744c080153
|
Initiate and respond to quick mode task (stub)
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
3bd5fcc832
|
Print message ID as unsigned integer
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
9e40e3e9fa
|
Added message encoding rules for quick mode
|
2012-03-20 17:30:45 +01:00 |
|
|
Martin Willi
|
9124e3425b
|
Fixed reference counting bugs in main mode
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
73aaf76be3
|
Implemented basic message id handling for IKEv1
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
2b04aa46ea
|
Added a quick mode task stub
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
cbb6d765bc
|
Fixed length calculation of delete payload
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
4ea258538e
|
Update header length after each parsed rule, as it might change when parsing SPI size
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
5789320f5c
|
Fix rule selection in transform substructure
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
5f1aef65ce
|
Fixed proposal numbering check in sa_payload
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
c311d22d0f
|
Don't clone chunk in message.get_packet_data
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
31fc14e394
|
Verify IKEv1 nonce size, send 32 byte nonces
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
6c2b7d4ed9
|
Partially implemented third main mode exchange (identities)
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
e4a8fd72cb
|
Added IKEv1 ID payload <-> traffic selector conversion functions
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
764ee21d83
|
ts.get_subnet() returns TRUE if the selector actually is a subnet
|
2012-03-20 17:30:44 +01:00 |
|
|
Martin Willi
|
26b55dc6c8
|
Implemented first two exchanges of Main Mode as initiator
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
9cc63d2cf0
|
Added enum name for MAIN_MODE task
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
cf1772f685
|
Do not ignore configs for IKEv1 in charon anymore
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
558f79f76d
|
Added missing task manager factory declaration
|
2012-03-20 17:30:43 +01:00 |
|
|
Martin Willi
|
72b3146092
|
Re-enable static inclusion of PSK auth method into IKEv1 proposal
|
2012-03-20 17:30:43 +01:00 |
|