 Martin Willi
|
9276f7121c
|
Always queue a new passive task when receiving an IKEv1 INFORMATIONAL
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
8a395e889c
|
Fixed leak of a hash when checking out by hash
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
3bacc1f429
|
Added a keymat_t version to cast it safely
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
3d54ae94d9
|
Handle initiation of not supported IKE versions properly
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
daee47ba46
|
Send a delete for every CHILD_SA before deleting IKE_SA
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
6379c679ae
|
Set used auth_class in PSKv1 authenticator to comply to constraints
|
2012-03-20 17:31:30 +01:00 |
|
|
Martin Willi
|
8573b18d22
|
Fixed scheduling of IKEv2 init tasks in a second keyingtry
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
8ed976c061
|
Don't requeue IKEv1 init tasks if they already exist in a second keyingtry
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
d9c1dae293
|
Implemented resetting of IKEv1 task manager, enabling additional keyingtries
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
94450913ef
|
Fixed migration of NATD task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
bce22af29e
|
Implemented migration of quick mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
ca037076bf
|
Implemented migration of XAuth task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
5903acd0ff
|
Implemented migration of certificate handling tasks
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
451ebecc85
|
Implemented migration of Main Mode task
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
448e2e2945
|
Check message version before processing it on an IKE_SA
|
2012-03-20 17:31:29 +01:00 |
|
|
Martin Willi
|
28e3c6595d
|
Check if a config has been selected before narrowing selectors in quick mode
|
2012-03-20 17:31:28 +01:00 |
|
|
Martin Willi
|
438a8d785f
|
Added a TODO for creating IKE_SAs with unsupported protocol version
|
2012-03-20 17:31:28 +01:00 |
|
|
Martin Willi
|
326a94232d
|
Moved eap/xauth classes out of protocol specific subdirectories
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
3b08de850a
|
Removed obsolete task header inclusion in IKE_SA
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
873df908cc
|
Moved MOBIKE task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
26eee421b4
|
Check in task manager if we have to requeue IKE tasks in a non-first keyingtry
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
cedb412e5a
|
Moved IKE_SA reauth task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
dab60d6411
|
Moved IKE_SA rekey task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
3ed148b37e
|
Moved IKE_SA delete task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
83c5fda053
|
Moved CHILD_SA delete task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
463a73cc0f
|
Moved CHILD_SA rekey task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
fe43d9a237
|
Moved CHILD_SA initiate task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
a60daa07f6
|
Moved IKE_SA initiate task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
244d715de5
|
Moved liveness checking task creation to protocol specific task manager
|
2012-03-20 17:31:27 +01:00 |
|
|
Martin Willi
|
7d0a3a427d
|
Factories honor charon IKEv1/IKEv2 protocol support flags
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
15a682f4c2
|
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
2e3c9f8799
|
Renamed ike_vendor_v1 to isakmp_vendor
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
79d6fc7f72
|
Renamed ike_natd_v1 to isakmp_natd
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
824dc0adad
|
Renamed ike_cert_pre_v1 to isakmp_cert_pre
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
0aa2af5efc
|
Renamed ike_cert_post_v1 to isakmp_cert_post
|
2012-03-20 17:31:26 +01:00 |
|
|
Martin Willi
|
8833068877
|
Doxygen fixes
|
2012-03-20 17:31:25 +01:00 |
|
|
Martin Willi
|
ef175c92d9
|
Initiate IKE_ANY configurations with IKEv2
|
2012-03-20 17:31:25 +01:00 |
|
|
Martin Willi
|
ac009df132
|
Pass IKE version to peer config enumerator, filter configs
|
2012-03-20 17:31:25 +01:00 |
|
|
Martin Willi
|
d94c923648
|
Support an "any" IKE version for both IKEv1 or IKEv2
|
2012-03-20 17:31:25 +01:00 |
|
|
Martin Willi
|
bf5b1d9e73
|
Send different notifies if quick mode fails
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
b64d6423b1
|
Support flushing of task queue after building message in task fails
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
fceb20f390
|
Consider notify errors fatal only during main mode
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
767966e70b
|
Delete CHILD_SA if installing SA in third message fails
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
53816600ff
|
Added a quick_delete task flag to enforce delete, even if CHILD_SA not found
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
429d95fef2
|
Send delete if Main Mode authentication fails as initiator
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
5762c0efeb
|
Send notifies in all error cases of Main Mode
|
2012-03-20 17:31:24 +01:00 |
|
|
Martin Willi
|
daf7e6bc36
|
Use (as client) and verify (as server) configured XAuth identities
|
2012-03-20 17:31:23 +01:00 |
|
|
Martin Willi
|
7a7efbf9d8
|
Added an identity getter to XAuth methods to query the actually used identity
|
2012-03-20 17:31:23 +01:00 |
|
|
Martin Willi
|
10a6a5acff
|
Store Main Mode identity even if XAuth-only is used for authentication
|
2012-03-20 17:31:23 +01:00 |
|
|
Martin Willi
|
bdadc5aee2
|
Check authorization constraints after main mode completed
|
2012-03-20 17:31:23 +01:00 |
|