Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| | * | Don't set IKEv2 only header flags when using IKEv1 | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | | ||||||
| | * | Set default IKE header initiator flag in IKEv2 only | Martin Willi | 2012-03-20 | 1 | -2/+5 | |
| | | | ||||||
| | * | Compile error fixed. | Tobias Brunner | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Message parsing slightly refactored, allows parsing of unencrypted IKEv1 ↵ | Tobias Brunner | 2012-03-20 | 1 | -40/+52 | |
| | | | | | | | | | | | | messages. | |||||
| | * | Allow creation of message_t objects for IKEv1 packets. | Tobias Brunner | 2012-03-20 | 2 | -42/+55 | |
| | | | ||||||
| | * | Certificate request payloads can be sent in pretty much any IKEv1 message. | Tobias Brunner | 2012-03-20 | 1 | -5/+18 | |
| | | | ||||||
| | * | Implemented limited payload parsing for IKEv1 SA payloads | Martin Willi | 2012-03-20 | 7 | -176/+557 | |
| | | | ||||||
| | * | Added additional IKEv1 payload and encoding identifiers | Martin Willi | 2012-03-20 | 5 | -40/+83 | |
| | | | ||||||
| | * | Extend sa_payload for IKEv1 support | Martin Willi | 2012-03-20 | 6 | -30/+147 | |
| | | | ||||||
| | * | Message rules for IKEv1 INFORMATIONAL exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+24 | |
| | | | | | | | | | | | | | | | Since INFORMATIONAL "exchanges" are actually unidirectionally sent message we don't have any responder rules. | |||||
| | * | Message rules for IKEv1 AGGRESSIVE exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+72 | |
| | | | | | | | | | | | | | | | These are basically the same as for ID_PROT but no payloads are expected to be encrypted (at least if using PSK or signatures for authentication). | |||||
| | * | Message rules for IKEv1 ID_PROT exchange added. | Tobias Brunner | 2012-03-20 | 1 | -0/+77 | |
| | | | | | | | | | | | | | | | These rules are quite broad and cover main mode with at least PSK and signature based authentication. | |||||
| | * | Typo fixed. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Use vendor id payload for IKEv1 payloads, too | Martin Willi | 2012-03-20 | 3 | -9/+20 | |
| | | | ||||||
| | * | Added IKEv1 payload identifiers to "known" payload list | Martin Willi | 2012-03-20 | 1 | -2/+9 | |
| | | | ||||||
| | * | Added IKEv1 payload identifiers | Martin Willi | 2012-03-20 | 2 | -4/+97 | |
| | | | ||||||
| | * | Extended IKE header for IKEv1 support | Martin Willi | 2012-03-20 | 3 | -57/+235 | |
| | | | ||||||
* | | | Accept zero-length certificate request payloads | Martin Willi | 2012-04-11 | 1 | -2/+1 | |
| | | | ||||||
* | | | added IKEv2 Generic Secure Password Authentication Method | Andreas Steffen | 2012-04-03 | 2 | -6/+17 | |
| | | | ||||||
* | | | added GSPM IKEv2 payload | Andreas Steffen | 2012-04-03 | 2 | -8/+20 | |
| | | | ||||||
* | | | Don't cast second argument of mem_printf_hook (%b) to size_t. | Tobias Brunner | 2012-03-27 | 2 | -2/+2 | |
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int. | |||||
* | | Defined a private status notify to transport arbitrary RADIUS attributes | Martin Willi | 2012-03-05 | 2 | -7/+11 | |
| | | ||||||
* | | Fixed proposal numbering check in sa_payload | Martin Willi | 2011-11-21 | 1 | -10/+0 | |
|/ | ||||||
* | Made create_endpoint_notify_create() private. | Tobias Brunner | 2011-10-04 | 2 | -21/+18 | |
| | ||||||
* | Migrated parser_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-04 | 1 | -35/+23 | |
| | ||||||
* | Fixed compiler warnings for endpoint_notify_t. | Tobias Brunner | 2011-10-04 | 1 | -4/+4 | |
| | ||||||
* | Migrated endpoint_notify to INIT/METHOD macros | Andreas Steffen | 2011-10-03 | 1 | -62/+49 | |
| | ||||||
* | increased message buffer to cope with NCP's innumerable UNITY Configuration ↵ | Andreas Steffen | 2011-08-16 | 1 | -2/+2 | |
| | | | | Payloads | |||||
* | typos: initator->initiator, authenticaion->authentication. | Tobias Brunner | 2011-08-15 | 1 | -1/+1 | |
| | ||||||
* | Add a non-clonig variant of eap_payload_create_data | Martin Willi | 2011-08-08 | 2 | -2/+23 | |
| | ||||||
* | Show error code of Microsoft specific error notify | Martin Willi | 2011-08-03 | 1 | -3/+17 | |
| | ||||||
* | Added Microsoft specific error notify | Martin Willi | 2011-08-03 | 2 | -2/+9 | |
| | ||||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 6 | -10/+10 | |
| | | | | Mostly found by 'codespell'. | |||||
* | added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723 | Andreas Steffen | 2011-07-15 | 2 | -4/+10 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2011-07-14 | 2 | -2/+2 | |
| | ||||||
* | updated IANA IKEv2 Notify Message Types | Andreas Steffen | 2011-07-14 | 2 | -8/+28 | |
| | ||||||
* | Use has_more in decrypt_payloads instead of calling enumerate twice. | Tobias Brunner | 2011-07-06 | 1 | -1/+1 | |
| | ||||||
* | Replaced simple iterator usages. | Tobias Brunner | 2011-07-06 | 1 | -1/+1 | |
| | ||||||
* | Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable | Martin Willi | 2011-05-19 | 1 | -2/+0 | |
| | ||||||
* | Be a little more liberal in checking maximum payload count | Martin Willi | 2011-04-20 | 1 | -12/+22 | |
| | ||||||
* | Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs | Martin Willi | 2011-04-20 | 1 | -1/+1 | |
| | ||||||
* | Compiler warning fixed. | Tobias Brunner | 2011-02-10 | 1 | -5/+7 | |
| | ||||||
* | Fixed function parameter description | Martin Willi | 2011-02-08 | 1 | -1/+1 | |
| | ||||||
* | Some typos fixed. | Tobias Brunner | 2011-02-07 | 1 | -2/+2 | |
| | ||||||
* | Accept non-encrypted INFORMATIONALs for ME connectivity checks | Martin Willi | 2011-02-01 | 1 | -1/+27 | |
| | ||||||
* | Provide CRLs received in CERT payloads to trustchain verification | Martin Willi | 2011-01-05 | 1 | -5/+13 | |
| | ||||||
* | Added substructure enumerators to sa_payload, proposal_substructure | Martin Willi | 2011-01-05 | 4 | -0/+28 | |
| | ||||||
* | Moved check if packet already encoded to ike_sa, avoids message() hook ↵ | Martin Willi | 2011-01-05 | 2 | -17/+11 | |
| | | | | invocation twice | |||||
* | Added a message method to set the "higher version supported" flag | Martin Willi | 2011-01-05 | 4 | -0/+33 | |
| | ||||||
* | Added reserved bit mangling wrapper functions to message | Martin Willi | 2011-01-05 | 2 | -1/+64 | |
| |