denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19,030 Commits 1 Branch 0 Tags
dd256e730d3775f437cb50e94de14f63e12e73c0
Commit Graph
19030 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 245e3c52a2 Refactored RADIUS DAE IKE_SA lookup 2012-03-05 18:06:14 +01:00
Martin Willi 964b0c144e Pass RADIUS DAE client address a host_t instead of sockaddr struct 2012-03-05 18:06:14 +01:00
Martin Willi 9756c143f0 Send RADIUS DAE Disconnect-ACK/NAK on Disconnect-Request 2012-03-05 18:06:14 +01:00
Martin Willi 392618d4ec Support signing of RADIUS response messages 2012-03-05 18:06:13 +01:00
Martin Willi 2bf3858955 Act on RADIUS DAE Disconnect requests 2012-03-05 18:06:13 +01:00
Martin Willi 76b6b19f8d Verify received RADIUS DAE requests 2012-03-05 18:06:13 +01:00
Martin Willi e8a8179706 Support verification of RADIUS request messages 2012-03-05 18:06:13 +01:00
Martin Willi 3bc1829211 Rename RADIUS message constructors to handle both, requests and responses 2012-03-05 18:06:13 +01:00
Martin Willi 6319ce63cf Enable RADIUS DAE listening if configured 2012-03-05 18:06:13 +01:00
Martin Willi 85932ad24e Added infrastructure to listen to RADIUS Dynamic Authorization Extension requests 2012-03-05 18:06:13 +01:00
Martin Willi 3a42c08904 Added Dynamic Authorization Extension RADIUS message codes 2012-03-05 18:06:13 +01:00
Martin Willi c61341a58f Set IKE_SA lifetime based on RADIUS Session-Timeout attribute 2012-03-05 18:06:13 +01:00
Martin Willi bdcf441703 Set hard timeouts when setting a lifetime 2012-03-05 18:06:13 +01:00
Martin Willi e9fcf1c6cc Fix IKE_SA timeout debug output on 64bit platforms 2012-03-05 18:06:13 +01:00
Tobias Brunner 0808d60ebf maemo: New upstream release. 2012-02-27 18:15:51 +01:00
Tobias Brunner 686cfd4e34 Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. 
This requires a Linux kernel >= 2.6.33.
 2012-02-27 14:31:19 +01:00
Martin Willi 3a2660f189 Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attribute 2012-02-24 11:20:16 +01:00
Martin Willi d15ae70c8c Refactored construction of RADIUS accounting messages 2012-02-24 11:12:18 +01:00
Martin Willi d93f204ca5 Include port numbers in Calling-Station-Id, too 2012-02-24 10:49:29 +01:00
Martin Willi 802ed08dff Use large enough buffers for IPv6 addresses in Calling-Station-Id 2012-02-24 10:13:08 +01:00
Martin Willi 434cdbac09 Send client external address as Calling-Station-Id in RADIUS accounting 2012-02-24 10:05:23 +01:00
Andreas Steffen f3d6b9c88c added missing x character 2012-02-21 16:29:35 +01:00
Andreas Steffen e4f554404e handle case where subject = NULL but keyid is set 2012-02-20 12:12:31 +01:00
Andreas Steffen 81ce0cf67e libtnccs is required by the eap_tnc plugin 2012-02-20 09:04:02 +01:00
Andreas Steffen f8b1b32768 charon does not depend on libtncif any more but tnc_tnccs does 2012-02-20 08:00:48 +01:00
Andreas Steffen 05f421b7d3 build libstrongswan if libimcv is built 2012-02-16 23:28:38 +01:00
Andreas Steffen a54cf814e6 version bump to 4.6.2 2012-02-16 00:10:36 +01:00
Andreas Steffen 1b9c613b77 fixed attest sql query in list_measurements() 2012-02-15 23:13:05 +01:00
Tobias Brunner a190ec0ac5 Compiler warnings fixed. 2012-02-14 16:09:44 +01:00
Tobias Brunner 0f7d381cfe pluto: Print expiry time more properly. 2012-02-14 09:38:00 +01:00
Tobias Brunner 7efde9011e pluto: Drop support for legacy PSK format. 
Any line in ipsec.secrets starting with " or ' was treated as PSK
without ID selectors by pluto.  This prevented it from supporting DNs
like "C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org" as
ID selectors.

PSKs defined in this legacy format can easily be updated by changing

"thisIsASecret"

into

: PSK "thisIsASecret"
 2012-02-08 13:36:32 +01:00
Andreas Steffen e01751035e completed imc/imv-attestation settings 2012-02-07 22:11:51 +01:00
Andreas Steffen 2af22e1135 adapted debug output check in openssl-ikev2/rw-eap-tls-only scenario 2012-02-07 20:31:17 +01:00
Martin Willi ae10ee6d0b Double check if a cached suite is available, overwrite any old suite state 2012-02-07 11:42:57 +01:00
Tobias Brunner b96eb46d5c Some Doxygen fixes. 2012-02-07 11:20:46 +01:00
Martin Willi 06c150365d Fix TLS EAP-MSK derivation, uses different order of randoms than key expansion 2012-02-07 10:54:53 +01:00
Martin Willi 1dabf5bfc7 Filter TLS suite MAC by HMAC algorithm, as the hash is not necessarily the same 2012-02-07 10:54:53 +01:00
Andreas Steffen 269e487567 open RADIUS accounting port in firewall 2012-02-06 20:45:21 +01:00
Andreas Steffen 9755910d7f added ikev2/rw-radius-accounting scenario 2012-02-06 12:52:48 +01:00
Martin Willi 32dc2b0243 Update usage for all children in RADIUS accounting just before sending Stop 2012-02-06 10:51:40 +01:00
Martin Willi e5747e7a83 Check if ClusterIP directory could be opened before enumerating it 2012-02-06 10:51:39 +01:00
Andreas Steffen b3cbc53893 version bump to 4.6.2rc1 2012-02-05 22:24:56 +01:00
Andreas Steffen a74fab640a ipsec attest adds and deletes key/component pairs 2012-02-05 22:23:45 +01:00
Andreas Steffen 32aee74c73 check if TNC client has a valid and registered AIK 2012-02-05 19:37:58 +01:00
Andreas Steffen de4a0c8376 reformulated some NEWS entries 2012-02-03 16:13:34 +01:00
Andreas Steffen 48bf8ce9bd added openssl-ikev2/ecdsa-pkcs8 scenario 2012-02-03 11:44:04 +01:00
Andreas Steffen 6b4e0dd504 added ikev2/rw-pkcs8 scenario 2012-02-03 11:10:13 +01:00
Andreas Steffen 2a77a27213 version bump to 4.6.2dr4 2012-02-02 18:26:12 +01:00
Martin Willi 85dd6a8deb Trigger DPD not before IKE_SA state gets updated 2012-02-02 10:35:50 +01:00
Martin Willi 916cdca851 Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE state 2012-02-02 10:34:04 +01:00