denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,113 Commits 1 Branch 0 Tags
f29a4f1c647151abc4a74d3ec4f029272ec0ec53
Commit Graph
669 Commits
Author SHA1 Message Date
Tobias Brunner f29a4f1c64 Added support for iKEIntermediate X.509 extended key usage flag. 
Mac OS X requires server certificates to have this flag set.
 2012-03-20 17:31:24 +01:00
Martin Willi 7a7efbf9d8 Added an identity getter to XAuth methods to query the actually used identity 2012-03-20 17:31:23 +01:00
Martin Willi 5f6a37eb9b Be a little more verbose about XAuth configs in ipsec statusall 2012-03-20 17:31:23 +01:00
Martin Willi 21a4fc832e Pass ipsec.conf xauth_identity option via stroke to charon configurations 2012-03-20 17:31:23 +01:00
Tobias Brunner 0a43f4b6c4 Log configured IKE version in stroke plugin. 2012-03-20 17:31:20 +01:00
Martin Willi e33510f8a3 Fixed leak of shared keys in xauth-generic plugin 2012-03-20 17:31:20 +01:00
Tobias Brunner 3d44d735c6 Added generic XAuth backend, using secrets provided by credential sets. 2012-03-20 17:31:17 +01:00
Tobias Brunner 41e1e435d9 Removed xauth-null dummy plugin. 2012-03-20 17:31:17 +01:00
Martin Willi 081b6dd3ed Ask for a username/password in xauth-null as XAUTH initiator 2012-03-20 17:31:16 +01:00
Martin Willi cbda13f6fe Accept a xauth backend name appended to left/rightauth 2012-03-20 17:31:15 +01:00
Martin Willi 1fe6cdfac2 Use a string to identify xauth backends, no need for integer types 2012-03-20 17:31:15 +01:00
Martin Willi 96c9159d96 Use a second authentication config to configure XAUTH authentication 2012-03-20 17:31:15 +01:00
Clavister OpenSource 4394d96844 IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin. 2012-03-20 17:31:11 +01:00
Martin Willi b4e815354c Map auth_class to auth method and IKEv1 proposal attribute 2012-03-20 17:30:53 +01:00
Clavister OpenSource 23f4e4b42d IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. 2012-03-20 17:30:49 +01:00
Martin Willi 17ec1c74de Don't compare initiator flag in IKE_SA manager, pass initiator parameter to IKE_SA constructor 2012-03-20 17:30:47 +01:00
Martin Willi cf1772f685 Do not ignore configs for IKEv1 in charon anymore 2012-03-20 17:30:43 +01:00
Tobias Brunner 0b611540ef Store IKE version of an SA on ike_sa_t. 2012-03-20 17:30:43 +01:00
Martin Willi 4ac22be0ec Fix unaligned aliasing warning in raw socket 2012-03-20 17:30:41 +01:00
Tobias Brunner f7a8fcedc0 Use enum to define IKE version on peer_cfg_t. 
Replaced all those magic numbers.
 2012-03-20 17:30:41 +01:00
Tobias Brunner 48e87e12ab Revert "fixed integrity tests of plugins using libtls or libtnccs" 
This reverts commit b597ac4a4c (not
completely).
 2011-11-08 18:35:11 +01:00
Tobias Brunner e034cc9ca9 Revert "fixed integrity tests of plugins using libsimaka" 
This reverts commit 8c42f16dee.

Conflicts:

	src/charon/Makefile.am
 2011-11-08 18:35:11 +01:00
Tobias Brunner 39b30518c2 Syntax error in sqlite.sql fixed. 2011-11-04 14:37:22 +01:00
Andreas Steffen 8c42f16dee fixed integrity tests of plugins using libsimaka 2011-11-04 11:27:19 +01:00
Andreas Steffen b597ac4a4c fixed integrity tests of plugins using libtls or libtnccs 2011-11-02 06:42:08 +01:00
Tobias Brunner abb89a97d1 Some Doxygen fixes. 2011-10-28 21:24:52 +02:00
Andreas Steffen b21cfa93f8 Cosmetics 2011-10-26 10:32:54 +02:00
Andreas Steffen 5d36af6936 share some code between IMC and IMV managers 2011-10-25 09:45:35 +02:00
Andreas Steffen 61f7036e69 removed unneeded includes 2011-10-25 09:45:35 +02:00
Andreas Steffen f0a8bf47f7 refactored TNC framework 2011-10-25 01:10:16 +02:00
Andreas Steffen c008d2cc46 moved imv_manager to libtnccs 2011-10-25 01:10:16 +02:00
Andreas Steffen f0fa002fd1 moved imc_manager to libtnccs 2011-10-25 01:10:16 +02:00
Tobias Brunner 677955e9d4 The load-tester plugin does not support SAD/SPD flushing. 2011-10-21 14:24:33 +02:00
Tobias Brunner bf3c2dde68 Fixed indention in load-tester kernel interface. 2011-10-21 14:18:14 +02:00
Andreas Steffen e50c853597 Add features support to tnccs plugins 2011-10-20 14:06:12 +02:00
Tobias Brunner 039a976745 Log messages with a loglevel > 1 to ANDROID_LOG_DEBUG. 2011-10-18 15:05:51 +02:00
Andreas Steffen 3c9dd593bb fixed copy-and-paste error 2011-10-17 14:08:50 +02:00
Andreas Steffen 0ebcbc017c Add features support to eap-radius plugin 2011-10-15 07:34:07 +02:00
Andreas Steffen 88f3fc97fe Add features support to eap-peap plugin 2011-10-14 22:33:06 +02:00
Andreas Steffen f21398fa84 Add features support to eap-tnc plugin 2011-10-14 21:14:49 +02:00
Andreas Steffen 9e65c13e63 Add features support to eap-gtc plugin 2011-10-14 17:41:08 +02:00
Andreas Steffen 6022b1558a Add features support to eap-md5 plugin 2011-10-14 17:31:16 +02:00
Andreas Steffen e0f4f26ded Add features support to eap-ttls plugin 2011-10-14 17:20:33 +02:00
Andreas Steffen aa1ecd7b83 Add features support to eap-identity plugin 2011-10-14 17:20:10 +02:00
Andreas Steffen 3732fe9e38 Add features support to eap-tls plugin 2011-10-14 16:37:21 +02:00
Martin Willi 67c1d36554 Add features support tp eap-simaka-reauth plugin 2011-10-14 10:05:49 +02:00
Martin Willi e9655e7417 Add features support to eap-simaka-pseudonym plugin 2011-10-14 10:05:49 +02:00
Martin Willi f91cba1874 Add features support to eap-simaka-sql plugin 2011-10-14 10:05:49 +02:00
Martin Willi 9894b91ca9 Don't load eap-sim-file plugin if no valid triplet file found 2011-10-14 10:05:49 +02:00
Martin Willi 9099e4fd3c Add features support to eap-sim-pcsc plugin 2011-10-14 10:05:49 +02:00