denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,616 Commits 1 Branch 0 Tags
69e8bb2e8d61a8e7b2a889eaae9722a4e5ed51c6
Commit Graph
160 Commits
Author SHA1 Message Date
Martin Willi 69e8bb2e8d Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option 2010-08-24 11:34:43 +02:00
Andreas Steffen 79a5e391f8 support fragmentation in AVPs 2010-08-24 09:02:51 +02:00
Martin Willi f55f9c4e1e Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLS 2010-08-24 08:45:49 +02:00
Martin Willi 1475800080 Moved TLS record parsing/generation to tls.c 2010-08-24 08:45:49 +02:00
Martin Willi 5ff8c62707 EAP-TLS clients send an empty packet on failure to properly shut down a TLS session 2010-08-23 15:13:41 +02:00
Martin Willi 835ec23aff Use enum mappings to resolve debug group 2010-08-23 09:47:04 +02:00
Martin Willi 96b2fbcc2c Introducing simple purposes for the TLS stack, switches various options 2010-08-20 15:09:08 +02:00
Martin Willi 6291fbedcb Fixed compiler warning 2010-08-20 15:09:08 +02:00
Martin Willi 9d49f79f55 List registered AEAD algorithms in listalgs 2010-08-19 19:02:34 +02:00
Andreas Steffen 1894622df2 added EAP-TTLS debug output 2010-08-18 23:21:00 +02:00
Andreas Steffen 5ae4292cb9 added TLS record debug output 2010-08-18 22:52:42 +02:00
Martin Willi ba31fe1fd6 Use a seperate section for each nested struct member in INIT macro 2010-08-18 12:15:03 +02:00
Andreas Steffen 53115857ae some simplifications using the INIT macro 2010-08-17 20:09:32 +02:00
Andreas Steffen 9ba53310ee implemented server-initiated phase2 of EAP-TTLS authentication 2010-08-16 18:30:41 +02:00
Andreas Steffen 79f2102cb4 implemented server side support for EAP-TTLS 2010-08-16 16:44:13 +02:00
Andreas Steffen 06a207480e fixed typo in eap-mschapv2 plugin 2010-08-16 16:44:13 +02:00
Andreas Steffen b51ac45c48 optional certificate-based peer authentication on TLS server side 2010-08-15 13:02:57 +02:00
Andreas Steffen 16d8b4b6c1 removed some raw EAP debug output 2010-08-14 12:01:45 +02:00
Andreas Steffen 004b226bb8 use EAP plugin for tunneled client authentication 2010-08-14 01:14:28 +02:00
Andreas Steffen 6659c61335 send tunneled EAP Identity response using eap-identity plugin 2010-08-13 22:45:22 +02:00
Andreas Steffen 486893ee52 allow to send an EAP Identity response without matching request 2010-08-13 22:41:00 +02:00
Andreas Steffen 683a912eab implement AVP EAP message building and processing 2010-08-13 21:21:49 +02:00
Andreas Steffen 71efe40077 Migrated eap_identity plugin to INIT/METHOD macros 2010-08-13 16:57:01 +02:00
Andreas Steffen a568897011 Migrated eap_md5 plugin to INIT/METHOD macros 2010-08-13 16:33:26 +02:00
Andreas Steffen e643da585b fixed typo 2010-08-13 12:24:54 +02:00
Andreas Steffen 1327839da8 added generic TLS application data handler and specific EAP-TTLS instantiation 2010-08-12 23:58:54 +02:00
Martin Willi 8f01815143 Build dedicated plugin lists for each strongSwan component 2010-08-12 14:46:57 +02:00
Martin Willi 8bec0f5153 Implemented Smartcard support in NetworkManager frontend 2010-08-11 16:32:04 +02:00
Martin Willi aea735ef63 Discard a packet that exceeds the receive buffer 2010-08-11 10:52:59 +02:00
Martin Willi 10a2e09b55 Added a strongswan.conf option to change socket receive buffer size 2010-08-11 10:48:17 +02:00
Andreas Steffen 133accfcfd differentiate between TLS messages and EAP-[T]TLS packets in the debug output 2010-08-10 19:02:05 +02:00
Martin Willi 3d711a68fb Added a stroke command to export cached x509 certificates to the console 2010-08-10 18:46:30 +02:00
Martin Willi a944d2092b Use bits instead of bytes for a private/public key 2010-08-10 18:46:30 +02:00
Martin Willi 33ddaaabec Added support for different encryption schemes to private/public keys 2010-08-10 18:46:30 +02:00
Andreas Steffen 3810afa9f9 log final TLS acknowledgement packet 2010-08-08 19:14:53 +02:00
Andreas Steffen ded59df4fc added level 2 debug info on sent TLS packets 2010-08-07 11:26:04 +02:00
Andreas Steffen ab47a7924b log EAP-TTLS version 2010-08-07 11:26:04 +02:00
Andreas Steffen a622c6d019 fixed typo 2010-08-07 11:26:04 +02:00
Andreas Steffen a6444fcdd4 EAP-TLS and EAP-TTLS use different constant MSK PRF label 2010-08-07 11:26:04 +02:00
Andreas Steffen 26eb9b2d17 added eap_ttls plugin configuration 2010-08-07 11:26:04 +02:00
Tobias Brunner edb82ab8ae Some Doxygen fixes. 2010-08-05 11:53:53 +02:00
Tobias Brunner 744b83c7c9 Fixed loading of secrets with IDs. 
Since the ID string is manually terminated by a null character, write
permission is required for the mmapped ipsec.secrets.
 2010-08-04 16:03:46 +02:00
Tobias Brunner dca2d89209 Fixed loading of private keys without password. 
The chunk storing the password was not correctly initialized, resulting
in a segmentation fault when no password was specified in ipsec.secrets.
 2010-08-04 14:22:48 +02:00
Martin Willi 0d08ebe7ac Pass type of requested key in the callback credential set 2010-08-04 09:26:21 +02:00
Martin Willi 15177f5785 Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets 2010-08-04 09:26:21 +02:00
Martin Willi 0556667dca Use credential sets to load smartcard keys 2010-08-04 09:26:21 +02:00
Martin Willi 62be923683 Implemented a callback based credential set, currently for shared keys only 2010-08-04 09:26:21 +02:00
Martin Willi 9587ece534 mmap() ipsec.secrets instead malloc(), proper error checking 2010-08-04 09:26:21 +02:00
Martin Willi 947298b302 Splitted up the load_secrets() function 2010-08-04 09:26:21 +02:00
Martin Willi 57522106c4 %prompt support for smartcard PIN via "ipsec secrets" 2010-08-04 09:26:20 +02:00