| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Some coding style cleanups | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | ||||||
| * | Do not trust unprotected INFORMATIONALS, just print that we got one | Martin Willi | 2012-03-20 | 1 | -13/+18 | |
| | | ||||||
| * | Remove executable flag from source code files | Martin Willi | 2012-03-20 | 1 | -0/+0 | |
| | | ||||||
| * | Encrypt INFORMATIONAL exchange if needed | Clavister OpenSource | 2012-03-20 | 1 | -11/+22 | |
| | | ||||||
| * | Handle incoming delete messages | Clavister OpenSource | 2012-03-20 | 1 | -0/+25 | |
| | | ||||||
| * | certificate handling for XAuth responder. | Clavister OpenSource | 2012-03-20 | 1 | -2/+2 | |
| | | ||||||
| * | IKEv1: Added basic support for INFORMATIONAL exchange types, and for ↵ | Clavister OpenSource | 2012-03-20 | 1 | -9/+13 | |
| | | | | | NOTIFY_V1 messages in the 3rd message in quick_mode. | |||||
| * | Message rules for IKEv1 NAT-T payloads added. | Tobias Brunner | 2012-03-20 | 1 | -0/+17 | |
| | | ||||||
| * | Added payloads for IKEv1 NAT-Traversal negotiation. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Handle invalid IKEv1 hashes more specifically. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Handle unsupported IKEv1 exchange types more specifically. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Handle INFORMATIONAL_V1 messages when no keys have been derived yet. | Tobias Brunner | 2012-03-20 | 1 | -2/+3 | |
| | | | | | | | | | This allows to gracefully process the INFORMATIONAL_V1 message rules which require the payloads to be encrypted and thus the exchange to be authenticated with a HASH payload. If such an exchange is now initiated before the ISAKMP_SA is established, the message is simply sent unencrypted and without HASH payload. | |||||
| * | Fixed encryption of IKEv2 messages. | Tobias Brunner | 2012-03-20 | 1 | -2/+2 | |
| | | ||||||
| * | Print message payload names after prepending IKEv1 HASH payload | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | ||||||
| * | Authenticate and verify Phase 2 IKEv1 messages with appropriate hashes. | Tobias Brunner | 2012-03-20 | 1 | -2/+44 | |
| | | ||||||
| * | Merged IKEv1 attribute payload/data into configuration payload/attribute | Martin Willi | 2012-03-20 | 1 | -5/+5 | |
| | | ||||||
| * | IKEv1 ConfigMode: Added TRANSACTION exchange type. Added attribute_payload ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+26 | |
| | | | | | (IKEv2 equiv cp_payload) and data_attribute (IKEv2 equiv configuration_attribute) payload types. Did not combine with IKEv2 because it wasn't trivial to do so. This might be a task worth investigating in the future, because there is a decent amount of shared code here. | |||||
| * | Set flags on message according to IKE version when parsing header. | Tobias Brunner | 2012-03-20 | 1 | -2/+8 | |
| | | ||||||
| * | Encrypt IKEv1 messages. | Tobias Brunner | 2012-03-20 | 1 | -17/+66 | |
| | | ||||||
| * | Decrypt IKEv1 messages. | Tobias Brunner | 2012-03-20 | 1 | -3/+43 | |
| | | ||||||
| * | Provide keymat_t to message_t to encrypt/decrypt data. | Tobias Brunner | 2012-03-20 | 1 | -7/+8 | |
| | | ||||||
| * | Print message ID as unsigned integer | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Added message encoding rules for quick mode | Martin Willi | 2012-03-20 | 1 | -0/+65 | |
| | | ||||||
| * | Don't clone chunk in message.get_packet_data | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Added IKEv1 support to notify payload | Martin Willi | 2012-03-20 | 1 | -11/+18 | |
| | | ||||||
| * | Don't set IKEv2 only header flags when using IKEv1 | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | ||||||
| * | Compile error fixed. | Tobias Brunner | 2012-03-20 | 1 | -1/+2 | |
| | | ||||||
| * | Message parsing slightly refactored, allows parsing of unencrypted IKEv1 ↵ | Tobias Brunner | 2012-03-20 | 1 | -40/+52 | |
| | | | | | messages. | |||||
| * | Allow creation of message_t objects for IKEv1 packets. | Tobias Brunner | 2012-03-20 | 1 | -20/+32 | |
| | | ||||||
| * | Certificate request payloads can be sent in pretty much any IKEv1 message. | Tobias Brunner | 2012-03-20 | 1 | -5/+18 | |
| | | ||||||
| * | Message rules for IKEv1 INFORMATIONAL exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+24 | |
| | | | | | | Since INFORMATIONAL "exchanges" are actually unidirectionally sent message we don't have any responder rules. | |||||
| * | Message rules for IKEv1 AGGRESSIVE exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+72 | |
| | | | | | | These are basically the same as for ID_PROT but no payloads are expected to be encrypted (at least if using PSK or signatures for authentication). | |||||
| * | Message rules for IKEv1 ID_PROT exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+77 | |
| | | | | | | These rules are quite broad and cover main mode with at least PSK and signature based authentication. | |||||
| * | Extended IKE header for IKEv1 support | Martin Willi | 2012-03-20 | 1 | -5/+4 | |
| | | ||||||
| * | increased message buffer to cope with NCP's innumerable UNITY Configuration ↵ | Andreas Steffen | 2011-08-16 | 1 | -2/+2 | |
| | | | | | Payloads | |||||
| * | Show error code of Microsoft specific error notify | Martin Willi | 2011-08-03 | 1 | -3/+17 | |
| | | ||||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -5/+5 | |
| | | | | | Mostly found by 'codespell'. | |||||
| * | Use has_more in decrypt_payloads instead of calling enumerate twice. | Tobias Brunner | 2011-07-06 | 1 | -1/+1 | |
| | | ||||||
| * | Be a little more liberal in checking maximum payload count | Martin Willi | 2011-04-20 | 1 | -12/+22 | |
| | | ||||||
| * | Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs | Martin Willi | 2011-04-20 | 1 | -1/+1 | |
| | | ||||||
| * | Accept non-encrypted INFORMATIONALs for ME connectivity checks | Martin Willi | 2011-02-01 | 1 | -1/+27 | |
| | | ||||||
| * | Moved check if packet already encoded to ike_sa, avoids message() hook ↵ | Martin Willi | 2011-01-05 | 1 | -17/+4 | |
| | | | | | invocation twice | |||||
| * | Added a message method to set the "higher version supported" flag | Martin Willi | 2011-01-05 | 1 | -0/+13 | |
| | | ||||||
| * | Added reserved bit mangling wrapper functions to message | Martin Willi | 2011-01-05 | 1 | -1/+49 | |
| | | ||||||
| * | Apply IKE major/minor version set on message to IKE header | Martin Willi | 2011-01-05 | 1 | -0/+4 | |
| | | ||||||
| * | Move critical bit checking to ike_sa, notify payload includes unsupported ↵ | Martin Willi | 2011-01-05 | 1 | -13/+1 | |
| | | | | | payload type | |||||
| * | Check for exceeded payload count even if we have a found one flagged as ↵ | Martin Willi | 2011-01-05 | 1 | -3/+4 | |
| | | | | | sufficient | |||||
| * | Use the payloads actual type in unknown_payload_t | Martin Willi | 2011-01-05 | 1 | -5/+4 | |
| | | ||||||
| * | Fail silently without INVALID_SYNTAX if message not verified | Martin Willi | 2011-01-05 | 1 | -10/+8 | |
| | | ||||||
| * | Support removal of payloads from messages | Martin Willi | 2011-01-05 | 1 | -0/+7 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |