Andreas Steffen
ee8486afdb
adapted log message
2009-11-10 23:55:55 +01:00
Andreas Steffen
cc543182bc
added separating line
2009-11-10 21:50:34 +01:00
Martin Willi
67c3875c02
Install bypass policies after creating XFRM netlink socket, loading xfrm_user module
2009-11-09 15:07:00 +01:00
Andreas Steffen
8a650a2bc8
put PGP userid in single quotes
2009-11-08 23:58:41 +01:00
Andreas Steffen
ab5762e32a
list v3 or v4 fingerprint
2009-11-08 23:21:03 +01:00
Andreas Steffen
9a127590ac
stroke_list supports listing of PGP certificates
2009-11-08 21:01:12 +01:00
Andreas Steffen
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
Andreas Steffen
fae322219f
output optional pathLenConstraint in ipsec listcacerts
2009-11-04 07:30:07 +01:00
Martin Willi
4a38687ae7
Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface
2009-10-30 11:19:32 +01:00
Martin Willi
140816b055
Query secrets in EAP-MD5 with me/other identities, fixing lookup in NetworkManager
2009-10-26 08:47:40 +01:00
Martin Willi
c5f36782ca
Hand out shared secret of load tester for all identities
2009-10-22 16:44:07 +02:00
Martin Willi
4952dc11da
Fixed all doxygen warnings
2009-10-22 14:34:10 +02:00
Martin Willi
0d73fe88b2
Load-testers PSK is used for all purposes, including EAP authentication
2009-10-20 15:54:13 +02:00
Andreas Steffen
c51b78eb2a
hyphenate eap-radius
2009-10-17 09:23:09 +02:00
Andreas Steffen
1310fbd322
moved .gitignore for pool
2009-10-15 14:58:09 +02:00
Martin Willi
f48ceeb1d1
Renamed plugin configuration sections to the actual plugin name
2009-10-15 10:36:17 +02:00
Martin Willi
c4d53fe06b
Streamlined EAP plugins to use a dash between eap-method, as used in all other places
2009-10-15 10:36:17 +02:00
Martin Willi
406f335938
Updated configuration directive of resolve plugin, renamed from resolv_conf
2009-10-15 10:14:10 +02:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Martin Willi
bb56e3f962
Improved debugging log in SIM triplet lookup
2009-10-14 09:55:14 +02:00
Andreas Steffen
247794827e
move SQL-based pool functionality to new attr-sql libstrongswan plugin
2009-10-13 17:02:29 +02:00
Andreas Steffen
930443afff
moved attribute_manager to libstrongswan
2009-10-13 13:46:27 +02:00
Martin Willi
a2b50c5d60
Fixed assignment of get_triplet() dummy implementation
2009-10-13 11:05:01 +02:00
Martin Willi
073e7dc062
Merged SIM/USIM manager/card/provider, avoids code duplication
2009-10-12 14:40:21 +02:00
Martin Willi
f7897b64f6
Added ${shlibs:Depends} dependency to Debian package
2009-10-12 14:06:51 +02:00
Martin Willi
3690d31a2a
Added .gitignore for NM Debian package build
2009-10-12 14:06:51 +02:00
Martin Willi
68d23d2401
Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins
2009-10-12 09:51:46 +02:00
Martin Willi
9b2942f68d
Stroke plugin interprets NULL identities as ID_ANY in shared key lookup
2009-10-12 09:51:45 +02:00
Martin Willi
5d5e2853b6
SIM card interface takes IMSI as parameter (same as in USIM)
2009-10-09 13:02:20 +02:00
Martin Willi
424ddf801c
Do not use monotonic time for AKA sequence numbers, it has an undefined starting point
2009-10-09 13:02:20 +02:00
Martin Willi
655728621b
Use constants instead of sizeof(), sizeof() does not work for function arguments
2009-10-09 13:02:20 +02:00
Martin Willi
aba93dcc32
Calculate missing CK/IK values in USIM
2009-10-09 13:02:20 +02:00
Martin Willi
aca7ba0ffc
Link 3gpp2 EAP-AKA plugin to libgmp
2009-10-09 13:02:20 +02:00
Martin Willi
53a16b72ab
Separated 3gpp2 USIM card and provider functionality
2009-10-09 13:02:20 +02:00
Martin Willi
0030880c6b
Ported AKA functions to 3gpp2 plugin
2009-10-09 13:02:19 +02:00
Martin Willi
4720815774
Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software
2009-10-09 13:02:19 +02:00
Martin Willi
4b1cd5a367
Reenabled acq_expires SA timer using rekey timeout
...
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
2009-10-07 13:09:59 +02:00
Andreas Steffen
0da0f3fc3f
delete group attributes after use
2009-10-05 23:17:36 +02:00
Andreas Steffen
a9fe23cf53
stroke_list outputs group attributes
2009-10-05 23:13:51 +02:00
Andreas Steffen
408e46a324
ipsec pki --issue suports --flag authServer option
2009-10-05 22:44:01 +02:00
Martin Willi
6eacaffc72
Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads
2009-10-05 14:06:32 +02:00
Martin Willi
3b836fc759
Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads
2009-10-05 13:32:41 +02:00
Andreas Steffen
02bf410aa9
certificate subject DNs are in double quotes
2009-09-23 22:03:52 +02:00
Andreas Steffen
b362cc2382
streamlining of credential loading debug output
2009-09-23 21:55:48 +02:00
Martin Willi
0406ed7a16
Fixed a crash in source address lookup
2009-09-23 11:18:30 +02:00
Andreas Steffen
4b15ee8cd9
shortened file loading debug output
2009-09-22 12:33:13 +02:00
Martin Willi
cb64b21217
Do not assign SIM version to a volatile buffer on stack
2009-09-22 09:11:35 +02:00
Martin Willi
c84b139a87
Credential backends use has_fingerprint() methods to select keys/certificates
2009-09-21 17:03:00 +02:00
Martin Willi
fde7f5abf8
Correctly serve certificates if CERT_ANY requested
2009-09-21 15:34:29 +02:00
Martin Willi
c331bce51d
Return certificates of requested kind only
2009-09-21 14:43:57 +02:00
Andreas Steffen