Tobias Brunner
c3f803c4c6
fixing some memory leaks
2008-04-02 18:21:03 +00:00
Tobias Brunner
f98736aee6
changed order of server and peer reflexive endpoints (and also the priorities)
2008-03-31 10:56:49 +00:00
Tobias Brunner
b42421a04c
corrected ME_ENDPOINT length check
2008-03-27 12:29:51 +00:00
Tobias Brunner
54150b3f13
checking the size of ME_* notify payloads
2008-03-27 10:17:29 +00:00
Tobias Brunner
b0dee635d2
replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload
2008-03-27 09:54:09 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Martin Willi
bed94c8aeb
added generic payload order rules for notifies
2008-03-18 12:45:23 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
3b1692c058
use identifiers in EAP_SUCCESS/EAP_FAILURE payloads
2008-02-04 11:43:10 +00:00
Andreas Steffen
071e037124
next_payload must be of type u_int8_t
2008-02-01 00:07:56 +00:00
Martin Willi
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
Martin Willi
f9d80d53c3
accept unknown attributes in config payloads
2007-12-09 19:43:41 +00:00
Martin Willi
3895125275
removed c++ style comments
...
fixed compiler warnings
2007-12-04 10:48:27 +00:00
Andreas Steffen
3af513753a
improved P2P_ENDPOINT debugging
2007-12-03 23:06:17 +00:00
Martin Willi
ee61471113
implemented RFC4478 (repeated authentication)
...
changed %V printf handler to take a time delta, %#V now takes two arguments
2007-11-20 12:06:40 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Tobias Brunner
9b997daab9
do not attempt to encrypt payloads without crypter or signer (allows to override message rules)
2007-10-02 13:31:12 +00:00
Tobias Brunner
56db479192
ID payload with explicit payload type
2007-10-02 11:55:10 +00:00
Tobias Brunner
1fbcbe32d0
get_first_payload_type for message_t
2007-10-02 11:42:27 +00:00
Tobias Brunner
278396b6da
typos
2007-09-27 10:36:03 +00:00
Tobias Brunner
c019260e01
backports from the p2p-nat-t branch:
...
* double assignment of function ''destroy'' in some jobs
* typos
2007-07-19 14:12:19 +00:00
Martin Willi
4979e85871
added message ID to message log
2007-07-03 09:00:16 +00:00
Martin Willi
cba7ba7f9d
show kind of notify contained in messages in log
2007-07-03 08:50:14 +00:00
Martin Willi
4cb9d7a758
further fixed for mobike roaming
2007-06-25 13:26:02 +00:00
Martin Willi
17d92e9732
further MOBIKE stuff:
...
kernel properly reports network reconfiguration and informs all IKE_SAs
MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
reestablishment of IKE_SAs on network reconfiguration kinda works
not stable yet!
2007-06-21 15:25:28 +00:00
Martin Willi
092958c89d
fixed payload debug message
2007-04-12 06:20:14 +00:00
Martin Willi
cd08b6880b
removed %M printf handler, five more to go
2007-04-11 09:12:21 +00:00
Andreas Steffen
0f7995b11e
added CERT_ROOF
2007-03-23 22:01:59 +00:00
Andreas Steffen
387c29c62d
added CERT_ROOF
2007-03-23 22:01:40 +00:00
Andreas Steffen
d7eee6e1ca
added certificate encoding OCSP content
2007-03-23 21:53:12 +00:00
Martin Willi
e05a0b765a
fixed CHILD_SA rekeying/delete bug on 64bit machines
...
removed obsolete methods in delete_payload
2007-03-19 08:04:37 +00:00
Andreas Steffen
33d108de22
generalized get_ca_certificate() to get_auth_certificate(auth_flags)
2007-03-08 18:56:43 +00:00
Andreas Steffen
9149635ffa
support if ocsp signing certificates
2007-03-08 16:47:18 +00:00
Martin Willi
3b7fdcf6c6
fixed payload order in IKE_AUTH
2007-03-08 15:59:21 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Martin Willi
5bf1be3c9f
fixed ID selection bug when peer doesn't include IDr payload
...
allowing vendor ID in any messag
2007-03-05 15:22:50 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi
eb9a3fd6f0
be more liberal in accepting notifies with a protocol id
2007-02-08 13:53:41 +00:00
Martin Willi
a622c99240
fixed crash when CA for certrequest not found
2007-01-08 13:40:36 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
38fb426e9b
fixed encoding rules string
...
updated todo
2006-12-14 13:16:19 +00:00
Martin Willi
313d21c251
fixed some byte-order issues
2006-12-12 08:41:04 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Andreas Steffen
0f30b4bd24
cosmetics in debug output
2006-10-29 09:10:44 +00:00
Andreas Steffen
a702b731cb
support of certreq payload in IKE_AUTH messages
2006-10-28 20:02:26 +00:00
Andreas Steffen
84740c9b27
added function certreq_payload_create_from_x509()
2006-10-28 15:38:15 +00:00
Andreas Steffen
d267cca18f
cosmetics
2006-10-28 13:13:40 +00:00
Tobias Brunner