Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | |||||
* | libhydra: Move kernel interface to libcharon | Tobias Brunner | 2016-03-03 | 1 | -1/+0 |
| | | | | This moves hydra->kernel_interface to charon->kernel. | ||||
* | xauth: Call authorize() hook also when xauth-noauth is used | Tobias Brunner | 2015-11-09 | 1 | -2/+8 |
| | | | | Fixes #1138. | ||||
* | ikev1: Defer Mode Config push after CHILD adoption when using XAuth | Martin Willi | 2014-08-25 | 1 | -2/+21 |
| | |||||
* | ikev1: Allow late connection switching based on XAuth username | Tobias Brunner | 2014-06-18 | 1 | -6/+0 |
| | |||||
* | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 1 | -7/+7 |
| | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | ||||
* | xauth: add a configuration string option to be passed to XAuth instances | Martin Willi | 2013-09-03 | 1 | -1/+1 |
| | | | | | | The configuration string is appended to the XAuth backend name, separated by a colon. The configuration string is passed untouched to the backend, where it can change the behavior of the XAuth module. | ||||
* | Added xauth-noauth plugin | Tobias Brunner | 2013-03-19 | 1 | -29/+37 |
| | | | | | | | | This XAuth backend does not do any authentication of client credentials but simply sends a successful XAuth status to the client, thereby concluding the XAuth exchange. This can be useful to fallback to basic RSA authentication with clients that can not be configured without XAuth authentication. | ||||
* | Implement late peer config switching after XAuth authentication | Martin Willi | 2012-07-26 | 1 | -15/+80 |
| | | | | | | | If additional authentication constraints, such as group membership, is not fulfilled by an XAuth backend, we search for another peer configuration that fulfills all constraints, including those from phase1. | ||||
* | Check if XAuth round complies to configured authentication round | Martin Willi | 2012-07-26 | 1 | -7/+18 |
| | |||||
* | Merge auth config items added from XAuth backends to IKE_SA | Martin Willi | 2012-07-26 | 1 | -0/+1 |
| | |||||
* | Enforce uniqueids=keep based on XAuth identity | Martin Willi | 2012-06-25 | 1 | -0/+6 |
| | |||||
* | Don't send XAUTH_OK if a hook prevents SA to establish | Martin Willi | 2012-06-25 | 1 | -4/+14 |
| | |||||
* | Add missing XAuth name variable when complaining about missing XAuth backend | Martin Willi | 2012-06-25 | 1 | -1/+1 |
| | |||||
* | Adopt children as XAuth initiator (which is IKE responder) | Martin Willi | 2012-06-14 | 1 | -2/+2 |
| | |||||
* | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 1 | -0/+0 |
| | |||||
* | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 |
| | |||||
* | Invoke authorization hooks for IKEv1 connections | Martin Willi | 2012-03-20 | 1 | -4/+19 |
| | |||||
* | Try to detect reauthentication as responder and adopt children to new SA | Martin Willi | 2012-03-20 | 1 | -0/+3 |
| | |||||
* | Establish IKE_SA only once as XAuth responder | Martin Willi | 2012-03-20 | 1 | -1/+0 |
| | |||||
* | Set a condition flag if peer has been authenticated using XAuth | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | |||||
* | Setting Mode Cfg identifier for CFG_ACK messages. | Clavister OpenSource | 2012-03-20 | 1 | -0/+7 |
| | |||||
* | Implemented migration of XAuth task | Martin Willi | 2012-03-20 | 1 | -0/+18 |
| | |||||
* | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -0/+399 |