denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,866 Commits 1 Branch 0 Tags
4e8e74fcfa2efcbebbc5cd33634115c774e87b14
Commit Graph
199 Commits
Author SHA1 Message Date
Andreas Steffen 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin 2010-09-28 23:34:04 +02:00
Andreas Steffen 80f86acccb show validity of OCSP responses 2010-09-10 22:26:03 +02:00
Andreas Steffen 3f58022679 debug output of inbound and outbound TNCCS batches 2010-09-09 11:15:08 +02:00
Andreas Steffen 20ad62026e support non EAP-TTLS conformant RADIUS-type attribute segmentation 2010-09-09 11:15:08 +02:00
Tobias Brunner b1baa90846 Fixed copy/paste error. 2010-09-09 10:10:43 +02:00
Andreas Steffen 3b7eb3a9f4 added explanatory comments 2010-09-09 08:57:13 +02:00
Andreas Steffen 48b8cbb206 send well-formed TNCCS-Batch 2010-09-08 13:44:34 +02:00
Andreas Steffen de29e3a683 max max_message_count configurable and move it into tls_eap_t 2010-09-08 12:58:45 +02:00
Martin Willi 30cd31fb69 Added a simple led plugin to control Linux LEDs based on IKE activity 2010-09-08 12:00:57 +02:00
Andreas Steffen 51b385d44d moved tls_t existance test into tls_eap_create() again 2010-09-08 11:09:11 +02:00
Andreas Steffen d2b1d4378e generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol 2010-09-08 11:01:53 +02:00
Tobias Brunner f6697eadb9 Scheduler and processor have been moved to libstrongswan. 
Also reverts 0c21dc000d as the dependency
to libcharon is no longer required.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 34cf6def83 Fixing installation of trap policies (SPI=0) in kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner b4872c1e09 Replaced the protocol argument in add_policy with an optional SPI for an AH SA. 2010-09-02 19:04:19 +02:00
Tobias Brunner bb381e26c6 Refer to scheduler and processor via lib and not hydra. 2010-09-02 19:04:18 +02:00
Tobias Brunner 062a602216 Moved all kernel plugins to libhydra. 2010-09-02 19:01:26 +02:00
Tobias Brunner f6659688ab Refer to kernel interface via hydra and not charon. 2010-09-02 19:01:25 +02:00
Tobias Brunner 9f166d9ac2 Removed references to protocol_id_t from kernel interface. 
Instead we use the actual IP protocol identifier (the conversion now happens in
child_sa_t and kernel_handler_t).
 2010-09-02 19:01:25 +02:00
Tobias Brunner ba26508d05 Moved roam job creation to kernel event handler. 2010-09-02 19:01:25 +02:00
Tobias Brunner 61e8e73206 Refer to scheduler via hydra and not charon. 2010-09-02 19:01:24 +02:00
Tobias Brunner 4e258e63c3 Moved migrate job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner 01563352e8 Moved update SA job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner a22853b302 Moved delete/rekey CHILD_SA job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner 81f6ec276b Moved acquire job creation to kernel event handler. 2010-09-02 19:01:23 +02:00
Tobias Brunner 211943be23 Some whitespace and code style fixes. 2010-09-02 19:01:23 +02:00
Tobias Brunner c5f7146b17 Refer to processor via hydra and not charon. 2010-09-02 19:01:22 +02:00
Martin Willi bbdc85b66e Respect key types in stroke key/certificate backend 2010-09-02 13:07:23 +02:00
Andreas Steffen 3a01908060 increase number of message due to large certificate payloads 2010-09-01 00:11:23 +02:00
Martin Willi 33b1a2567f Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined 2010-08-31 18:10:23 +02:00
Martin Willi 64d7b0733f Added support for the ipsec.conf aaa_identity keyword 2010-08-31 17:52:52 +02:00
Martin Willi f9fc5f2045 Added strongswan.conf options for EAP-TLS/TTLS fragment size 2010-08-31 16:17:01 +02:00
Martin Willi 1cf8c5f746 Migrated EAP-TTLS to the generic TLS helper 2010-08-31 16:17:01 +02:00
Martin Willi be751012c3 Migrated EAP-TLS to the generic TLS helper 2010-08-31 16:17:01 +02:00
Martin Willi ecd98efa9d Support output fragmentation of TLS records 2010-08-31 15:54:37 +02:00
Andreas Steffen 6ade82d5b7 fixed copy-and-paste errors 2010-08-30 15:42:44 +02:00
Andreas Steffen d93e2e5409 created an eap-tnc method hull 2010-08-30 15:36:34 +02:00
Andreas Steffen 577893612f for the time being assume a single request/response exchange for a given EAP method 2010-08-30 15:36:34 +02:00
Andreas Steffen 897c7a72cf Win7 might send up to 7k of certificate requests 2010-08-27 16:30:05 +02:00
Andreas Steffen d9b85e28b9 removed tls_record_t definition 2010-08-24 19:19:13 +02:00
Martin Willi 69e8bb2e8d Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option 2010-08-24 11:34:43 +02:00
Andreas Steffen 79a5e391f8 support fragmentation in AVPs 2010-08-24 09:02:51 +02:00
Martin Willi f55f9c4e1e Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS 2010-08-24 08:45:49 +02:00
Martin Willi 1475800080 Moved TLS record parsing/generation to tls.c 2010-08-24 08:45:49 +02:00
Martin Willi 5ff8c62707 EAP-TLS clients send an empty packet on failure to properly shut down a TLS session 2010-08-23 15:13:41 +02:00
Martin Willi 835ec23aff Use enum mappings to resolve debug group 2010-08-23 09:47:04 +02:00
Martin Willi 96b2fbcc2c Introducing simple purposes for the TLS stack, switches various options 2010-08-20 15:09:08 +02:00
Martin Willi 6291fbedcb Fixed compiler warning 2010-08-20 15:09:08 +02:00
Martin Willi 9d49f79f55 List registered AEAD algorithms in listalgs 2010-08-19 19:02:34 +02:00
Andreas Steffen 1894622df2 added EAP-TTLS debug output 2010-08-18 23:21:00 +02:00
Andreas Steffen 5ae4292cb9 added TLS record debug output 2010-08-18 22:52:42 +02:00