aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Removed libcharon dependencies from generic RADIUS protocol supportMartin Willi2012-03-054-3/+10
| |
* | Forward specifcied RADIUS attributes between AAA backend and clientMartin Willi2012-03-055-0/+545
| |
* | Defined a private status notify to transport arbitrary RADIUS attributesMartin Willi2012-03-052-7/+11
| |
* | Implemented RADIUS DAE response retransmissionMartin Willi2012-03-051-21/+126
| |
* | Be a little more verbose before starting IKE_SA reauthenticationMartin Willi2012-03-051-2/+9
| |
* | Process RADIUS DAE CoA updates, updating lifetimesMartin Willi2012-03-051-2/+91
| |
* | Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth ↵Martin Willi2012-03-053-9/+43
| | | | | | | | actively
* | Use faster ike_sa_id and a delete job to handle RADIUS DAE Delete-RequestMartin Willi2012-03-051-6/+8
| |
* | Refactored RADIUS DAE IKE_SA lookupMartin Willi2012-03-051-17/+41
| |
* | Pass RADIUS DAE client address a host_t instead of sockaddr structMartin Willi2012-03-051-22/+25
| |
* | Send RADIUS DAE Disconnect-ACK/NAK on Disconnect-RequestMartin Willi2012-03-051-5/+45
| |
* | Support signing of RADIUS response messagesMartin Willi2012-03-053-15/+26
| |
* | Act on RADIUS DAE Disconnect requestsMartin Willi2012-03-051-1/+56
| |
* | Verify received RADIUS DAE requestsMartin Willi2012-03-051-9/+51
| |
* | Support verification of RADIUS request messagesMartin Willi2012-03-052-3/+10
| |
* | Rename RADIUS message constructors to handle both, requests and responsesMartin Willi2012-03-056-15/+15
| |
* | Enable RADIUS DAE listening if configuredMartin Willi2012-03-051-0/+13
| |
* | Added infrastructure to listen to RADIUS Dynamic Authorization Extension ↵Martin Willi2012-03-053-0/+228
| | | | | | | | requests
* | Added Dynamic Authorization Extension RADIUS message codesMartin Willi2012-03-052-1/+14
| |
* | Set IKE_SA lifetime based on RADIUS Session-Timeout attributeMartin Willi2012-03-051-0/+26
| |
* | Set hard timeouts when setting a lifetimeMartin Willi2012-03-051-7/+14
| |
* | Fix IKE_SA timeout debug output on 64bit platformsMartin Willi2012-03-051-3/+4
| |
* | maemo: New upstream release.Tobias Brunner2012-02-271-0/+6
| |
* | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595.Tobias Brunner2012-02-273-3/+25
| | | | | | | | This requires a Linux kernel >= 2.6.33.
* | Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attributeMartin Willi2012-02-241-1/+9
| |
* | Refactored construction of RADIUS accounting messagesMartin Willi2012-02-241-23/+21
| |
* | Include port numbers in Calling-Station-Id, tooMartin Willi2012-02-241-2/+2
| |
* | Use large enough buffers for IPv6 addresses in Calling-Station-IdMartin Willi2012-02-241-2/+2
| |
* | Send client external address as Calling-Station-Id in RADIUS accountingMartin Willi2012-02-241-6/+11
| |
* | added missing x characterAndreas Steffen2012-02-211-1/+1
| |
* | handle case where subject = NULL but keyid is set4.6.2Andreas Steffen2012-02-201-1/+2
| |
* | libtnccs is required by the eap_tnc pluginAndreas Steffen2012-02-201-1/+1
| |
* | charon does not depend on libtncif any more but tnc_tnccs doesAndreas Steffen2012-02-201-1/+1
| |
* | build libstrongswan if libimcv is builtAndreas Steffen2012-02-161-1/+1
| |
* | version bump to 4.6.2Andreas Steffen2012-02-161-1/+1
| |
* | fixed attest sql query in list_measurements()Andreas Steffen2012-02-151-1/+1
| |
* | Compiler warnings fixed.Tobias Brunner2012-02-142-2/+2
| |
* | pluto: Print expiry time more properly.Tobias Brunner2012-02-141-2/+3
| |
* | pluto: Drop support for legacy PSK format.Tobias Brunner2012-02-081-15/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Any line in ipsec.secrets starting with " or ' was treated as PSK without ID selectors by pluto. This prevented it from supporting DNs like "C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org" as ID selectors. PSKs defined in this legacy format can easily be updated by changing "thisIsASecret" into : PSK "thisIsASecret"
* | completed imc/imv-attestation settingsAndreas Steffen2012-02-071-1/+20
| |
* | adapted debug output check in openssl-ikev2/rw-eap-tls-only scenarioAndreas Steffen2012-02-071-1/+1
| |
* | Double check if a cached suite is available, overwrite any old suite stateMartin Willi2012-02-071-2/+3
| |
* | Some Doxygen fixes.Tobias Brunner2012-02-073-11/+11
| |
* | Fix TLS EAP-MSK derivation, uses different order of randoms than key expansionMartin Willi2012-02-071-0/+1
| |
* | Filter TLS suite MAC by HMAC algorithm, as the hash is not necessarily the sameMartin Willi2012-02-071-4/+4
| |
* | open RADIUS accounting port in firewallAndreas Steffen2012-02-061-0/+4
| |
* | added ikev2/rw-radius-accounting scenarioAndreas Steffen2012-02-0618-0/+406
| |
* | Update usage for all children in RADIUS accounting just before sending StopMartin Willi2012-02-061-1/+12
| |
* | Check if ClusterIP directory could be opened before enumerating itMartin Willi2012-02-061-17/+26
| |
* | version bump to 4.6.2rc1Andreas Steffen2012-02-051-1/+1
| |