denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19,030 Commits 1 Branch 0 Tags
dd256e730d3775f437cb50e94de14f63e12e73c0
Commit Graph
19030 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 324528700d Added identification constructor using a chunk of data, guessing id type 2009-11-12 10:34:01 +01:00
Martin Willi 0109846aa1 Moved card/provider enumeration to SIM manager, providing wrapped functions for both SIM and AKA plugins 2009-11-12 10:34:01 +01:00
Martin Willi eb7bf91e12 Added option to disable identity requests completely (old behavior) 2009-11-12 10:34:01 +01:00
Martin Willi 0107f5b687 Fixed replacing existing reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown 2009-11-12 10:34:01 +01:00
Martin Willi edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend 2009-11-12 10:34:01 +01:00
Martin Willi acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication 2009-11-12 10:34:00 +01:00
Martin Willi e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed 2009-11-12 10:34:00 +01:00
Martin Willi c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, 
extended sim_provider with a is_pseudonym() function.
 2009-11-12 10:34:00 +01:00
Martin Willi 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory 2009-11-12 10:34:00 +01:00
Martin Willi 8aad8f6faf Some coding style cleanups 2009-11-12 10:34:00 +01:00
Martin Willi 0328fe940d Impemented basic pseudonym support in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi f81760dcd1 A SIM/AKA message can be parsed twice, without and with decryption 2009-11-12 10:34:00 +01:00
Martin Willi 0e20893d81 Pass SIM/AKA crypto helper to constructor of message 2009-11-12 10:34:00 +01:00
Martin Willi 13f418b442 Added a doxygen group for libsimaka, some cleanups 2009-11-12 10:34:00 +01:00
Martin Willi bcf8a0ff94 Added missing hasher include 2009-11-12 10:33:59 +01:00
Martin Willi 4735965fc0 EAP servers check if the received EAP message was expected 2009-11-12 10:33:59 +01:00
Martin Willi 02f785b050 Use existing triplet length definitions 2009-11-12 10:33:59 +01:00
Martin Willi aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library 2009-11-12 10:33:59 +01:00
Martin Willi 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi fad4e5f393 Centralized SIM/AKA notifications and client errors 2009-11-12 10:33:59 +01:00
Martin Willi e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi 55916dcc9e libsimaka provides cryptographic functionality used in EAP-SIM and EAP-AKA 2009-11-12 10:33:58 +01:00
Martin Willi ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations 2009-11-12 10:33:58 +01:00
Martin Willi f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA 2009-11-12 10:33:58 +01:00
Martin Willi 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Andreas Steffen 6ae43b9333 mixed fingerprint / userid 2009-11-11 11:17:59 +01:00
Andreas Steffen 209f52cb63 fixed 4.3.6 ocsp regression 2009-11-11 11:06:07 +01:00
Andreas Steffen ee8486afdb adapted log message 2009-11-10 23:55:55 +01:00
Andreas Steffen a618e33e8b merged pluto's PGP certificate parsing with charon's 2009-11-10 23:54:51 +01:00
Andreas Steffen f565d0c575 merged pluto's PGP certificate parsing with charon's 2009-11-10 23:54:04 +01:00
Andreas Steffen cc543182bc added separating line 2009-11-10 21:50:34 +01:00
Andreas Steffen bb7ae382fd added some debugging to pgp certificate parsing 2009-11-10 10:04:55 +01:00
Andreas Steffen 262af16179 accept PGP v3 or v4 fingerprint as alternative to PGP user_id 2009-11-09 23:15:17 +01:00
Martin Willi 5269150ebc If cross-compiling, test for the existence of pthread_condattr_setclock only 2009-11-09 15:07:01 +01:00
Martin Willi 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module 2009-11-09 15:07:00 +01:00
Andreas Steffen 8a650a2bc8 put PGP userid in single quotes 2009-11-08 23:58:41 +01:00
Andreas Steffen b25311fbe2 added ikev2/net2net-pgp-v3 scenario 2009-11-08 23:49:04 +01:00
Andreas Steffen bc662125c2 removed nocrsend=yes statement 2009-11-08 23:48:26 +01:00
Andreas Steffen 2846e51a5b added ikev2/net2net-pgp-v4 scenario 2009-11-08 23:23:45 +01:00
Andreas Steffen ab5762e32a list v3 or v4 fingerprint 2009-11-08 23:21:03 +01:00
Andreas Steffen 9a127590ac stroke_list supports listing of PGP certificates 2009-11-08 21:01:12 +01:00
Andreas Steffen 9f0327e652 define TIME_32_BITS_SIGNED_MAX in utils.h 2009-11-08 18:55:52 +01:00
Andreas Steffen e92e19c177 pluto ignores proprietary Juniper SRX notification 40001 2009-11-05 08:38:00 +01:00
Andreas Steffen 16dca5c2f2 moved multi-level-ca-pathlen scenario 2009-11-04 23:43:43 +01:00
Andreas Steffen 4c68a85a75 implemented path length constraint checkinf for IKEv2 2009-11-04 23:37:15 +01:00
Andreas Steffen fef3b0b7fd display printable characters in dntoa() 2009-11-04 20:17:12 +01:00