tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Fixed authentication method selection for main mode PSK authentication	Martin Willi	2012-03-20	1	-1/+1
\|
*	Use virtual IP to substitute dynamic traffic selectors in quick mode	Martin Willi	2012-03-20	1	-6/+10
\|
*	Queue Mode Config tasks when required	Martin Willi	2012-03-20	1	-0/+7
\|
*	Added IKEv1 Mode Config task based on IKEv2 ike_config	Martin Willi	2012-03-20	4	-0/+471
\|
*	Use a common function to set IKE_SA to established	Martin Willi	2012-03-20	1	-29/+22
\|
*	Implemented responder part of XAUTH task	Martin Willi	2012-03-20	1	-12/+96
\|
*	Implemented initiator part of xauth task	Martin Willi	2012-03-20	1	-1/+167
\|
*	Remove unused task swap_initiator method	Martin Willi	2012-03-20	1	-5/+0
\|
*	Use a second authentication config to configure XAUTH authentication	Martin Willi	2012-03-20	1	-33/+102
\|
*	Replace xauth_request task with a new stub where we reimplement it	Martin Willi	2012-03-20	7	-856/+208
\|
*	Some notification errors added to main_mode process_r	Clavister OpenSource	2012-03-20	1	-4/+58
\|
*	Handling of initial contact	Clavister OpenSource	2012-03-20	1	-0/+51
\|
*	Cleaned up quick mode notify processing	Martin Willi	2012-03-20	1	-21/+33
\|
*	Add support for KE payloads in IKEv1 quick mode (PFS)	Martin Willi	2012-03-20	1	-5/+82
\|
*	Use authenticators in IKEv1 main mode	Martin Willi	2012-03-20	1	-247/+28
\|
*	Handle incoming delete messages	Clavister OpenSource	2012-03-20	2	-4/+26
\|
*	Implemented post-authentication certificate handling for IKEv1	Martin Willi	2012-03-20	2	-0/+399
\|
*	Cleanup CERT payload constructors	Martin Willi	2012-03-20	1	-5/+5
\|
*	Implemented pre-authentication certificate handling for IKEv1	Martin Willi	2012-03-20	2	-0/+570
\|
*	Added task types for IKEv1 certificate handling	Martin Willi	2012-03-20	2	-0/+8
\|
*	Reverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks	Martin Willi	2012-03-20	2	-497/+41
\|
*	Install SAs with UDP encapsulation during Quick Mode.	Tobias Brunner	2012-03-20	1	-16/+9
\|
*	Fix support for plain RSA authentication in IKEv1, both as initiator and ↵	Martin Willi	2012-03-20	1	-23/+37
\| \| \| \|	responder
*	Fix referencing of multiple CERTREQ payload with IKEv1, other cleanups	Martin Willi	2012-03-20	1	-60/+53
\|
*	XAUTH additions for certificates.	Clavister OpenSource	2012-03-20	1	-6/+17
\|
*	signature payload handling.	Clavister OpenSource	2012-03-20	1	-10/+188
\|
*	certificate handling for XAuth responder.	Clavister OpenSource	2012-03-20	2	-43/+506
\|
*	IKEv1: Added basic support for INFORMATIONAL exchange types, and for ↵	Clavister OpenSource	2012-03-20	1	-0/+29
\| \| \| \|	NOTIFY_V1 messages in the 3rd message in quick_mode.
*	IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, ↵	Clavister OpenSource	2012-03-20	1	-16/+37
\| \| \| \|	and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin.
*	Add NAT-OA payloads during Quick Mode if transport mode is used.	Tobias Brunner	2012-03-20	1	-2/+44
\| \| \| \| \|	We don't parse them currently, as the Linux kernel does not need them to fix the IP header checksum.
*	Negotiate UDP encapsulation during Quick Mode if NAT is detected.	Tobias Brunner	2012-03-20	1	-2/+14
\|
*	Task added for IKEv1 NAT detection.	Tobias Brunner	2012-03-20	4	-1/+495
\| \| \| \|	There is already support for both Main and Aggressive Mode.
*	Create negotiated hasher earlier during Main Mode so it is available for ↵	Tobias Brunner	2012-03-20	1	-0/+8
\| \| \| \|	building NAT-D payloads.
*	IKEv1 XAuth: Moving the state change to IKE_CONNECTED until after XAuth ↵	Clavister OpenSource	2012-03-20	2	-17/+37
\| \| \| \|	exchanges are complete.
*	Handle IKEv1 NAT-T vendor ID payload (only RFC 3947 for now).	Tobias Brunner	2012-03-20	1	-0/+18
\|
*	Added payloads for IKEv1 NAT-Traversal negotiation.	Tobias Brunner	2012-03-20	1	-1/+1
\|
*	IKEv1 XAuth: Clean up debug prints in xauth_request task.	Clavister OpenSource	2012-03-20	1	-13/+0
\|
*	IKEv1 XAuth + CfgMode: Added ability to process CfgMode messages in the ↵	Clavister OpenSource	2012-03-20	1	-76/+543
\| \| \| \|	xauth task. Migrated away from using the MIGRATE method to switch queues.
*	IKEv1 XAuth: Change the main_mode task to use the new initiate_xauth job ↵	Clavister OpenSource	2012-03-20	1	-4/+27
\| \| \| \|	instead of the old MIGRATE method.
*	IKEv1 XAuth: Fix main mode to work with XAuth PSK.	Clavister OpenSource	2012-03-20	1	-2/+2
\|
*	Use a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1	Martin Willi	2012-03-20	5	-30/+218
\|
*	Pass concrete auth_method to key derivation, as we have that as a responder	Martin Willi	2012-03-20	1	-5/+2
\|
*	Map auth_class to auth method and IKEv1 proposal attribute	Martin Willi	2012-03-20	1	-0/+5
\|
*	Exchange IKEv1 ESP SA proposal information	Martin Willi	2012-03-20	1	-2/+66
\|
*	Exchange IKEv1 SA specific proposal data with SA payload	Martin Willi	2012-03-20	1	-13/+69
\|
*	Added not-yet used sa_payload parameters used in IKEv1	Martin Willi	2012-03-20	4	-16/+12
\|
*	IKEv1 XAuth: Changed the xauth_request task to use the new MIGRATE status.	Clavister OpenSource	2012-03-20	1	-1/+1
\|
*	IKEv1 XAuth: Added new "swap_initiator" method to the standard task_t ↵	Clavister OpenSource	2012-03-20	2	-0/+23
\| \| \| \|	interface. This is needed for when we move a task from the passive queue to the active one. I'm not a huge fan of this method of doing things. Perhaps we should change task_t to have build_i, build_r, process_i, and process_r methods, and call the appropriate one from the task manager, since we have these methods for most tasks anyways.
*	IKEv1 XAuth: XAuthInitPreShared working for XAuth initiator (Main Mode ↵	Clavister OpenSource	2012-03-20	1	-15/+123
\| \| \| \|	responder). Creates USER/PASS request, retrieves the result and sends status.
*	IKEv1 XAuth: Added ability to initiate the XAuth transactions under a flag, ↵	Clavister OpenSource	2012-03-20	1	-1/+5
\| \| \| \|	default not to initiate XAuth.