denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,528 Commits 1 Branch 0 Tags
eb7bf91e1259c6e8ea9e5b2c6eedf88f627f8af5
Commit Graph
549 Commits
Author SHA1 Message Date
Martin Willi eb7bf91e12 Added option to disable identity requests completely (old behavior) 2009-11-12 10:34:01 +01:00
Martin Willi 0107f5b687 Fixed replacing existing reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi 2dbac2ab9c Initiate full authentication if reauthentication identity is unknown 2009-11-12 10:34:01 +01:00
Martin Willi edcb2dd35b Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend 2009-11-12 10:34:01 +01:00
Martin Willi acb561373a eap-sim-file plugin supports volatile in-memory storage of fast reauthentication data 2009-11-12 10:34:01 +01:00
Martin Willi c5ec0f48e7 Initial support for fast reauthentication in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi 454b59c5fd EAP-SIM/AKA crypto helper supports key derivation for fast reauthentication 2009-11-12 10:34:00 +01:00
Martin Willi e1a8729de0 Fallback to permanent identity request if pseudonym mapping failed 2009-11-12 10:34:00 +01:00
Martin Willi c2f8c6a11e Query triplet/quintuplet functions with permanent identity only, 
extended sim_provider with a is_pseudonym() function.
 2009-11-12 10:34:00 +01:00
Martin Willi 2d112ca310 eap-sim-file plugin can store pseudonym information volatile in memory 2009-11-12 10:34:00 +01:00
Martin Willi 0328fe940d Impemented basic pseudonym support in EAP-SIM 2009-11-12 10:34:00 +01:00
Martin Willi 0e20893d81 Pass SIM/AKA crypto helper to constructor of message 2009-11-12 10:34:00 +01:00
Martin Willi 13f418b442 Added a doxygen group for libsimaka, some cleanups 2009-11-12 10:34:00 +01:00
Martin Willi 4735965fc0 EAP servers check if the received EAP message was expected 2009-11-12 10:33:59 +01:00
Martin Willi 02f785b050 Use existing triplet length definitions 2009-11-12 10:33:59 +01:00
Martin Willi aea334ec1c Splitted EAP-AKA in peer and server implementations, use libsimaka helper library 2009-11-12 10:33:59 +01:00
Martin Willi 6d90881573 Proper handling of non-skippable attributes and client error codes in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi e9c03f5243 Use the EAP-SIM/AKA crypto helper in EAP-SIM 2009-11-12 10:33:59 +01:00
Martin Willi ac4dd5439b Migrated EAP-SIM to libsimaka, separated server/peer implementations 2009-11-12 10:33:58 +01:00
Martin Willi 44e8eea17a sim_provider_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Martin Willi 8f364b5433 sim_card_t API gained support for pseudonym/fast reauthentication 2009-11-12 10:33:58 +01:00
Andreas Steffen ee8486afdb adapted log message 2009-11-10 23:55:55 +01:00
Andreas Steffen cc543182bc added separating line 2009-11-10 21:50:34 +01:00
Martin Willi 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module 2009-11-09 15:07:00 +01:00
Andreas Steffen 8a650a2bc8 put PGP userid in single quotes 2009-11-08 23:58:41 +01:00
Andreas Steffen ab5762e32a list v3 or v4 fingerprint 2009-11-08 23:21:03 +01:00
Andreas Steffen 9a127590ac stroke_list supports listing of PGP certificates 2009-11-08 21:01:12 +01:00
Andreas Steffen 4c68a85a75 implemented path length constraint checkinf for IKEv2 2009-11-04 23:37:15 +01:00
Andreas Steffen fae322219f output optional pathLenConstraint in ipsec listcacerts 2009-11-04 07:30:07 +01:00
Martin Willi 4a38687ae7 Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface 2009-10-30 11:19:32 +01:00
Martin Willi 140816b055 Query secrets in EAP-MD5 with me/other identities, fixing lookup in NetworkManager 2009-10-26 08:47:40 +01:00
Martin Willi c5f36782ca Hand out shared secret of load tester for all identities 2009-10-22 16:44:07 +02:00
Martin Willi 4952dc11da Fixed all doxygen warnings 2009-10-22 14:34:10 +02:00
Martin Willi 0d73fe88b2 Load-testers PSK is used for all purposes, including EAP authentication 2009-10-20 15:54:13 +02:00
Andreas Steffen c51b78eb2a hyphenate eap-radius 2009-10-17 09:23:09 +02:00
Andreas Steffen 1310fbd322 moved .gitignore for pool 2009-10-15 14:58:09 +02:00
Martin Willi f48ceeb1d1 Renamed plugin configuration sections to the actual plugin name 2009-10-15 10:36:17 +02:00
Martin Willi c4d53fe06b Streamlined EAP plugins to use a dash between eap-method, as used in all other places 2009-10-15 10:36:17 +02:00
Martin Willi 406f335938 Updated configuration directive of resolve plugin, renamed from resolv_conf 2009-10-15 10:14:10 +02:00
Andreas Steffen 270bb348e3 pluto now supports SQL-based virtual IP pools 2009-10-14 14:30:14 +02:00
Martin Willi bb56e3f962 Improved debugging log in SIM triplet lookup 2009-10-14 09:55:14 +02:00
Andreas Steffen 247794827e move SQL-based pool functionality to new attr-sql libstrongswan plugin 2009-10-13 17:02:29 +02:00
Andreas Steffen 930443afff moved attribute_manager to libstrongswan 2009-10-13 13:46:27 +02:00
Martin Willi a2b50c5d60 Fixed assignment of get_triplet() dummy implementation 2009-10-13 11:05:01 +02:00
Martin Willi 073e7dc062 Merged SIM/USIM manager/card/provider, avoids code duplication 2009-10-12 14:40:21 +02:00
Martin Willi f7897b64f6 Added ${shlibs:Depends} dependency to Debian package 2009-10-12 14:06:51 +02:00
Martin Willi 3690d31a2a Added .gitignore for NM Debian package build 2009-10-12 14:06:51 +02:00
Martin Willi 68d23d2401 Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins 2009-10-12 09:51:46 +02:00
Martin Willi 9b2942f68d Stroke plugin interprets NULL identities as ID_ANY in shared key lookup 2009-10-12 09:51:45 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00