This website requires JavaScript.
ddd7e6c656
fixed bignum export if BN_num_bytes() != DH_size()
Martin Willi
2008-11-04 13:05:00 +00:00
dcbea444ee
fixed memleak
Martin Willi
2008-11-04 13:01:36 +00:00
480be6436a
added a delay option to delay initiations
Martin Willi
2008-11-04 12:59:53 +00:00
ec1bddc50c
corrected a copy-and-paste error
Andreas Steffen
2008-11-03 23:46:42 +00:00
c636285878
updated copyright of kernel interface code
Andreas Steffen
2008-11-03 23:34:23 +00:00
bab075b166
added support for xfrm remote kmaddress
Andreas Steffen
2008-11-03 23:29:34 +00:00
7de6da0c88
added locking mechanism for multithreaded use of OpenSSL
Martin Willi
2008-11-03 16:14:12 +00:00
4d901e3584
added fake_kernel option to make dummy kernel implementation optional
Martin Willi
2008-11-03 15:11:01 +00:00
ee66fa625e
removed accidently checked in debug code
Martin Willi
2008-11-03 12:40:42 +00:00
1145ca098d
load testing between different hosts
Martin Willi
2008-11-03 10:02:39 +00:00
64ff7a5142
log loaded plugins at startup
Martin Willi
2008-11-03 09:44:54 +00:00
d6dc9db5ef
reverted 4541, does not fix the problem
Martin Willi
2008-11-03 09:44:20 +00:00
9c33987471
migrate job creates a new IKE_SA
Andreas Steffen
2008-11-03 07:08:59 +00:00
cdf69f103a
replace tab by spaces
Andreas Steffen
2008-11-03 06:56:22 +00:00
a54e3d51c1
removed unused variables
Andreas Steffen
2008-11-03 03:56:03 +00:00
ef6d339c09
migrate_job() finds a matching child_cfg
Andreas Steffen
2008-11-03 02:05:41 +00:00
bd354bee5f
corrected parameter description
Andreas Steffen
2008-11-03 00:24:38 +00:00
a066f7e6c2
corrected captions
Andreas Steffen
2008-11-02 22:13:17 +00:00
5145ae48be
fully implemented the parsing of XFRM and PF_KEY MIGRATE messages
Andreas Steffen
2008-11-02 21:34:52 +00:00
e301a69d6c
removed 0-byte truncation, fixes random Openssl RSA signature verification failures
Martin Willi
2008-10-31 17:07:04 +00:00
a13862be61
fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit)
Martin Willi
2008-10-31 17:05:40 +00:00
b74bc4384c
identify attributes of XFRM ACQUIRE and MIGRATE messages
Andreas Steffen
2008-10-31 06:18:48 +00:00
e7f4fc537f
subscribing XFRM socket for MIGRATE messages
Andreas Steffen
2008-10-31 02:50:01 +00:00
08571955fb
adapted evaltest.dat to extended acquire job message
Andreas Steffen
2008-10-31 01:46:37 +00:00
e526d22818
parse xfrm and pf_key acquire messages and subscribe to migrate messages
Andreas Steffen
2008-10-31 01:43:23 +00:00
19aff61b19
reverted changeset 4529: Camellia is 22 in IKEv1, but not-yet defined in IKEv2 in IKEv2, 22 is reserved for AES-XTS
Martin Willi
2008-10-30 13:21:21 +00:00
5dffdea1d7
added hooks for IKE and CHILD keymat
Martin Willi
2008-10-30 12:58:54 +00:00
5a76bb7f7a
store plain skd, not the prf
Martin Willi
2008-10-30 09:18:52 +00:00
fdaed5289a
added Camellia CBC to list of encryption algorithms
Andreas Steffen
2008-10-30 03:31:36 +00:00
113a4afa55
corrected parameter description
Andreas Steffen
2008-10-30 00:35:37 +00:00
80853d8498
moved CHILD_SA key derivation to keymat_t passing key chunks to CHILD_SA, not the PRF
Martin Willi
2008-10-29 16:06:16 +00:00
f65ba4e978
prf handles zero-length allocations graceful
Martin Willi
2008-10-29 14:12:54 +00:00
a64cc8f75f
do not store DH redundant in keymat
Martin Willi
2008-10-29 13:35:06 +00:00
6faa0c3392
replaced not-maintained ChangeLog
Martin Willi
2008-10-29 09:27:51 +00:00
217d95c82e
upgrade to linux-2.6.28 headers with support for kmaddress struct
Andreas Steffen
2008-10-29 05:32:38 +00:00
6a4ff35cc4
moved key derivation and management into keymat object allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now
Martin Willi
2008-10-28 16:07:06 +00:00
3c8234d408
store IKE proposal implicitly during derive_keys
Martin Willi
2008-10-28 10:12:21 +00:00
20fb671904
fixed reauthentication time in statusall
Martin Willi
2008-10-28 09:41:33 +00:00
f5ab7f5f57
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
Andreas Steffen
2008-10-28 01:59:01 +00:00
85ac2fa547
use more generic stats getter, introducing new stats
Martin Willi
2008-10-27 14:51:00 +00:00
ddc5b90db2
new release of NM debs
Martin Willi
2008-10-27 12:01:23 +00:00
0935ba328b
including a "none" tundev to make NM happy
Martin Willi
2008-10-27 11:30:27 +00:00
a1db79b31a
fixed some compiler warnings
Martin Willi
2008-10-27 11:13:33 +00:00
aeaa6a9b45
remove unused local DH_EXPONENT_ENTROPY definition
Andreas Steffen
2008-10-27 00:02:22 +00:00
21a45f2f2d
use 512 bits of entropy for secret DH exponents
Andreas Steffen
2008-10-26 23:53:52 +00:00
82d20c0588
additional getters for ipcomp and UDP encap
Martin Willi
2008-10-24 09:51:48 +00:00
6e10aeadab
more CHILD_SA refactorings
Martin Willi
2008-10-24 08:02:35 +00:00
f2a5aa4a9d
initiate connections simultaneously in load tester
Martin Willi
2008-10-22 09:01:36 +00:00
2d1000d14e
include updown plugin in sql scenarios
Andreas Steffen
2008-10-21 22:28:29 +00:00
0fd6e95562
a load testing plugin, to: find multi-threading issues do performance profiling
Martin Willi
2008-10-21 13:00:38 +00:00
6df2837a8c
fixed enumeration of CHILD_SA traffic selectors
Martin Willi
2008-10-21 10:57:40 +00:00
8ceb5fd566
use old algorithm nameagain in pfkey/alg-aes-xcbc scenario
Andreas Steffen
2008-10-21 03:42:32 +00:00
f2e1ff59ab
reset threads IKE_SA after checking other IKE_SAs invoke updown script only if we have valid IKE_SA
Martin Willi
2008-10-20 11:38:16 +00:00
7790ab0f37
re-established all previous AUD level messages
Andreas Steffen
2008-10-17 03:44:06 +00:00
104c28d603
fixed perl oid generation
Martin Willi
2008-10-16 15:38:48 +00:00
6f3ea4a516
loading updown plugin if required
Martin Willi
2008-10-16 12:48:27 +00:00
ad3af574a4
moved updown script invocation to an optional plugin
Martin Willi
2008-10-16 11:48:18 +00:00
e17353fc31
bus uses finally recusive locking other small fixes
Martin Willi
2008-10-16 11:32:43 +00:00
f868dc0ca2
condvar->wait() can handle recursive mutex
Martin Willi
2008-10-16 11:29:42 +00:00
229ee197a3
added missing EAP-AKA RFC
Martin Willi
2008-10-16 07:21:30 +00:00
61508be2f5
added a guest.mconsole() method to script mconsole (e.g. add additional conX=)
Martin Willi
2008-10-15 14:47:52 +00:00
1df106bf39
cache keys for in and outbound ESP SAs removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator()
Martin Willi
2008-10-15 12:24:44 +00:00
35379b2130
typedef fixed
Tobias Brunner
2008-10-15 11:34:29 +00:00
0b9728986a
reverted changeset [4440], [4443] uses old algorithm name again
Martin Willi
2008-10-15 08:50:14 +00:00
9f4e5f8c47
store ESP keys in CHILD_SA
Martin Willi
2008-10-15 08:37:56 +00:00
ff93a76cf1
activate compilation of the kernel_pfkey plugin
Andreas Steffen
2008-10-15 00:22:51 +00:00
deb079204e
added PFKEYv2 UML scenarios
Andreas Steffen
2008-10-15 00:11:00 +00:00
c126cdc270
name of ESP algorithm changed to AES_XCBC_96-128
Andreas Steffen
2008-10-14 23:55:19 +00:00
e517b4b174
passing chunks, not prf+, to kernel interface gives us better control of keymat in CHILD_SA
Martin Willi
2008-10-14 15:17:44 +00:00
c25c8dce60
typos
Tobias Brunner
2008-10-14 12:18:53 +00:00
35ae2d7fe7
directory 'build' renamed as 'packages'
Tobias Brunner
2008-10-14 11:53:23 +00:00
a985db3ff3
reintegrated bus-refactoring branch
Martin Willi
2008-10-14 08:52:13 +00:00
1adaa02bb2
merging kernel_pfkey plugin back from kernel-interface branch
Tobias Brunner
2008-10-14 08:46:31 +00:00
9257c3a287
version bump to 4.2.9
Andreas Steffen
2008-10-14 01:53:37 +00:00
f2780731b0
corrected typo
Andreas Steffen
2008-10-13 22:54:09 +00:00
5dadb16ef8
added bug fix for addr_in_subnet() to NEWS
Andreas Steffen
2008-10-13 00:15:16 +00:00
35c365c2e3
add support of --enable-eap-sim-file and --enable-kernel-pfkey configuration options
Andreas Steffen
2008-10-13 00:09:44 +00:00
405e8ecfe3
set guest-specific kernel parameters removed memory setting, use mem= instead
Martin Willi
2008-10-10 11:20:04 +00:00
79a878466c
reintegrated two-sim branch providing SIM card plugin API
Martin Willi
2008-10-10 08:36:01 +00:00
c5ebb635a1
trimming additial / in some cases
Martin Willi
2008-10-10 07:33:37 +00:00
88f65cd589
use busybox compatible kill
Martin Willi
2008-10-10 06:59:03 +00:00
b165cfa945
remove intermediate CA certs after UML test
Andreas Steffen
2008-10-09 22:20:56 +00:00
f0974eb2c2
fixed MOBIKE roaming if clients address changes
Martin Willi
2008-10-09 08:25:11 +00:00
03d5f41137
faster implementation of addr_in_subnet()
Andreas Steffen
2008-10-09 05:44:00 +00:00
bb2059c60a
added proposal parsing of uncommon DH groups 3072/6144
Martin Willi
2008-10-08 12:57:11 +00:00
4f0241e6cf
some mobike improvement NEWS
Martin Willi
2008-10-08 12:24:08 +00:00
85be7e5b75
ignore routing events for our own routes
Martin Willi
2008-10-08 08:29:49 +00:00
ce5b17082d
mobike: try to keep existing source address before switching to another
Martin Willi
2008-10-08 08:23:46 +00:00
e39b271b17
raw public key support for charon
Andreas Steffen
2008-10-08 07:03:39 +00:00
d1cbe55127
implemented ipsec listalgs as a stroke command
Andreas Steffen
2008-10-08 07:00:13 +00:00
51358f9f72
correct fix that replaces Changeset 4378
Andreas Steffen
2008-10-08 06:57:52 +00:00
c85862931f
removing fix applied by Changeset 4378
Andreas Steffen
2008-10-08 06:15:41 +00:00
ec6a88f617
added the sql/rw-rsa and sql/rw-rsa-keyid scenarios using raw RSA public keys
Andreas Steffen
2008-10-08 03:37:40 +00:00
af09048e35
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
Andreas Steffen
2008-10-08 03:35:52 +00:00
95fd1dedb3
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
Andreas Steffen
2008-10-08 01:19:26 +00:00
7a07cd1c75
fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau
Andreas Steffen
2008-10-07 21:41:45 +00:00
c8ba5125d6
guest bootup waits for init, not for network stack (fixes 2.6.27 guest kernels)
Martin Willi
2008-10-07 16:31:41 +00:00
693a244d0f
ported mconsole-exec patch to 2.6.27-rc7
Martin Willi
2008-10-07 09:09:34 +00:00
aa9a300677
userland support to process notifies for new NAT mappings detected in UDP encapsulation
Martin Willi
2008-10-07 07:55:28 +00:00
41b1cd6b87
wait 5 seconds before deactivating eth1 interface on alice
Andreas Steffen
2008-10-07 04:56:50 +00:00