Martin Willi
84f89634ef
Moved logger initialization from libcharon to charon
2011-01-05 16:45:40 +01:00
Andreas Steffen
3d653727a8
removed superfluous s
2011-01-05 04:09:19 +01:00
Andreas Steffen
97613b3b1a
remove private_
2011-01-05 03:44:57 +01:00
Andreas Steffen
d0eb22333e
remove private_
2011-01-05 03:44:28 +01:00
Andreas Steffen
ac46c8be5c
cosmetics in debug output
2011-01-05 02:44:27 +01:00
Andreas Steffen
69e8407d51
detect fragmentation of PB-TNC batch
2011-01-05 02:41:36 +01:00
Andreas Steffen
dcde152265
fixed typo
2011-01-02 06:52:32 +01:00
Andreas Steffen
53e2c2e283
replaced spaces by tabs
2010-12-30 03:45:08 +01:00
Andreas Steffen
3a8ef88e51
commas are required
2010-12-27 08:26:29 +01:00
Andreas Steffen
203bfa4ee8
added Sansar Choinambuu to copryright.c
2010-12-27 08:24:05 +01:00
Andreas Steffen
e3504d6011
added missing tfc argument to kernel_pfkey_ipsec interface
2010-12-27 05:53:36 +01:00
Andreas Steffen
1c7a729100
set tfcv3 flag TRUE in ha_dispatcher
2010-12-26 23:10:57 +01:00
Andreas Steffen
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
2010-12-26 17:11:02 +01:00
Andreas Steffen
690d5aed59
disable AEAD crypto algorithm if no key size is supported
2010-12-25 16:14:55 +01:00
Andreas Steffen
d733a3babb
disable crypto algorithm if no key size is supported
2010-12-25 16:11:50 +01:00
Andreas Steffen
c6a043fad0
log if an AEAD algorithm does not support a given key size
2010-12-25 15:53:15 +01:00
Andreas Steffen
90288c76f8
log if a crypto algorithm does not support a given key size
2010-12-25 15:49:29 +01:00
Andreas Steffen
16b6606e5f
wrap list of IKEv2 algorithms after 120 characters per line
2010-12-24 17:29:51 +01:00
Andreas Steffen
cb6be85cfe
Migrated stroke_list_t to INIT/METHOD macros
2010-12-24 14:29:09 +01:00
Andreas Steffen
d77c6c49a9
printed plugin names have a hyphen
2010-12-24 05:53:27 +01:00
Martin Willi
33bfdf6f37
Fixed public key construction from PKCS#11 private key
2010-12-23 10:29:01 +01:00
Andreas Steffen
905ab99fc1
eliminated whitespace
2010-12-21 17:51:27 +01:00
Andreas Steffen
cf16a29dac
Migrated child_create_t to INIT/METHOD macros
2010-12-21 17:49:07 +01:00
Martin Willi
23a737eb29
Probe for supported AF_ALG algorithms, register dynamically
2010-12-20 10:09:20 +01:00
Martin Willi
4ee5d97d57
Register algorithms with dependencies only if dependency available
2010-12-20 10:00:39 +01:00
Martin Willi
d214ebdf82
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
2010-12-20 09:52:02 +01:00
Martin Willi
533151692f
Implemented PRFs using AF_ALG
2010-12-20 09:52:02 +01:00
Martin Willi
06eb35efb0
Use the AF_ALG wrapper in hasher, crypter and signer
2010-12-20 09:52:02 +01:00
Martin Willi
1b5de7ce3b
Use a generic AF_ALG wrapper for common operations
2010-12-20 09:52:02 +01:00
Martin Willi
a5c973b955
Implemented crypter on top of AF_ALG
2010-12-20 09:52:02 +01:00
Martin Willi
e75e1c9473
Implemented signer interface using AF_ALG
2010-12-20 09:52:02 +01:00
Martin Willi
6f08911321
Implemented hasher based on AF_ALG
2010-12-20 09:52:02 +01:00
Martin Willi
fd67d39e93
Added Linux AF_ALG header
2010-12-20 09:52:02 +01:00
Martin Willi
71c87e3483
Added plugin stub for AF_ALG
2010-12-20 09:52:02 +01:00
Martin Willi
6c302616f1
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
2010-12-20 09:45:39 +01:00
Martin Willi
55df72e6d5
Do not use TFC padding if peer does not support ESPv3
2010-12-20 09:45:39 +01:00
Martin Willi
37788b1d06
Added a TFC padding option to child_cfg
2010-12-20 09:45:39 +01:00
Martin Willi
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
2010-12-20 09:45:39 +01:00
Andreas Steffen
f10e72341c
cast enumerated algorithm type as int
2010-12-18 20:24:53 +01:00
Andreas Steffen
5932f41fcc
trace back crypto algorithms to the plugins that registered them
2010-12-18 16:31:12 +01:00
Jiri Bohac
19b7f763b3
Install selectors on transport mode IPsec SAs.
...
This fixes several test cases in IKEv2_Self_Test (part of the IPv6 Ready
Logo Program) which is required for USGv6 certification, namely:
- IKEv2.EN.I.1.1.7.1, IKEv2.EN.I.1.1.7.1: Narrowing the range of members
of the set of traffic selectors
- IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selector
When traffic selectors of a triggered SA are narrowed by the responder, the
installed policy and the broader trap policy share the same reqid. Without
selectors on the IPsec SA packets matching the trap policy, but not the
narrowed policy, would incorrectly be handled by that IPsec SA. Since only
one selector can be specified per IPsec SA, there is currently no solution
for tunnel mode SAs.
2010-12-13 15:28:40 +01:00
Andreas Steffen
7883e7ce33
fixed bug in mem_cred.c:add_crl()
2010-12-12 21:34:27 +01:00
Andreas Steffen
836d9a795b
reverted Connection ID to capital letters
2010-12-12 12:55:14 +01:00
Andreas Steffen
dc1b2eb2e8
fixed a bug in enum_from_name() function
2010-12-12 12:54:36 +01:00
Andreas Steffen
c2e625514d
some more cosmetics
2010-12-12 10:19:54 +01:00
Andreas Steffen
41216e6518
final cosmetics in PB-TNC debug output
2010-12-12 10:17:43 +01:00
Andreas Steffen
54eb669dd5
implemented PB-TNC message parsing checks
2010-12-12 00:42:31 +01:00
Andreas Steffen
3a4695dc5e
some code optimizations
2010-12-11 00:52:53 +01:00
Andreas Steffen
781730b86a
support handshake retry requests
2010-12-10 23:41:12 +01:00
Andreas Steffen
4ca368d223
the PB-TNC protocol is working
2010-12-10 23:21:13 +01:00
Martin Willi