Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | farp plugin sends ARP responses for any tunneled address, not only virtual IPs | Martin Willi | 2012-03-06 | 3 | -81/+91 | |
| | | ||||||
* | | Re-resolve hosts on additional keyingtries | Martin Willi | 2012-03-06 | 1 | -0/+1 | |
| | | ||||||
* | | Renamed radius_server to radius_config, as some real RADIUS server ↵ | Martin Willi | 2012-03-05 | 1 | -29/+29 | |
| | | | | | | | | functionality is coming | |||||
* | | Prefer EAP-Identity to read radattr RADIUS attribute file | Martin Willi | 2012-03-05 | 1 | -2/+11 | |
| | | ||||||
* | | Invoke ike_updown hook on authentication failure not before response sent | Martin Willi | 2012-03-05 | 1 | -3/+2 | |
| | | ||||||
* | | Inject RADIUS attribute in radattr plugin read from an identity specific file | Martin Willi | 2012-03-05 | 1 | -0/+92 | |
| | | ||||||
* | | Added a radattr plugin that prints any received RADIUS notify to console | Martin Willi | 2012-03-05 | 6 | -0/+308 | |
| | | ||||||
* | | Moved generic RADIUS protocol support to a dedicated libradius | Martin Willi | 2012-03-05 | 16 | -1839/+62 | |
| | | ||||||
* | | Removed libcharon dependencies from generic RADIUS protocol support | Martin Willi | 2012-03-05 | 4 | -3/+10 | |
| | | ||||||
* | | Forward specifcied RADIUS attributes between AAA backend and client | Martin Willi | 2012-03-05 | 5 | -0/+545 | |
| | | ||||||
* | | Defined a private status notify to transport arbitrary RADIUS attributes | Martin Willi | 2012-03-05 | 2 | -7/+11 | |
| | | ||||||
* | | Implemented RADIUS DAE response retransmission | Martin Willi | 2012-03-05 | 1 | -21/+126 | |
| | | ||||||
* | | Be a little more verbose before starting IKE_SA reauthentication | Martin Willi | 2012-03-05 | 1 | -2/+9 | |
| | | ||||||
* | | Process RADIUS DAE CoA updates, updating lifetimes | Martin Willi | 2012-03-05 | 1 | -2/+91 | |
| | | ||||||
* | | Send an AUTH_LIFETIME update after updating the lifetime, but can not reauth ↵ | Martin Willi | 2012-03-05 | 3 | -9/+43 | |
| | | | | | | | | actively | |||||
* | | Use faster ike_sa_id and a delete job to handle RADIUS DAE Delete-Request | Martin Willi | 2012-03-05 | 1 | -6/+8 | |
| | | ||||||
* | | Refactored RADIUS DAE IKE_SA lookup | Martin Willi | 2012-03-05 | 1 | -17/+41 | |
| | | ||||||
* | | Pass RADIUS DAE client address a host_t instead of sockaddr struct | Martin Willi | 2012-03-05 | 1 | -22/+25 | |
| | | ||||||
* | | Send RADIUS DAE Disconnect-ACK/NAK on Disconnect-Request | Martin Willi | 2012-03-05 | 1 | -5/+45 | |
| | | ||||||
* | | Support signing of RADIUS response messages | Martin Willi | 2012-03-05 | 3 | -15/+26 | |
| | | ||||||
* | | Act on RADIUS DAE Disconnect requests | Martin Willi | 2012-03-05 | 1 | -1/+56 | |
| | | ||||||
* | | Verify received RADIUS DAE requests | Martin Willi | 2012-03-05 | 1 | -9/+51 | |
| | | ||||||
* | | Support verification of RADIUS request messages | Martin Willi | 2012-03-05 | 2 | -3/+10 | |
| | | ||||||
* | | Rename RADIUS message constructors to handle both, requests and responses | Martin Willi | 2012-03-05 | 6 | -15/+15 | |
| | | ||||||
* | | Enable RADIUS DAE listening if configured | Martin Willi | 2012-03-05 | 1 | -0/+13 | |
| | | ||||||
* | | Added infrastructure to listen to RADIUS Dynamic Authorization Extension ↵ | Martin Willi | 2012-03-05 | 3 | -0/+228 | |
| | | | | | | | | requests | |||||
* | | Added Dynamic Authorization Extension RADIUS message codes | Martin Willi | 2012-03-05 | 2 | -1/+14 | |
| | | ||||||
* | | Set IKE_SA lifetime based on RADIUS Session-Timeout attribute | Martin Willi | 2012-03-05 | 1 | -0/+26 | |
| | | ||||||
* | | Set hard timeouts when setting a lifetime | Martin Willi | 2012-03-05 | 1 | -7/+14 | |
| | | ||||||
* | | Fix IKE_SA timeout debug output on 64bit platforms | Martin Willi | 2012-03-05 | 1 | -3/+4 | |
| | | ||||||
* | | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. | Tobias Brunner | 2012-02-27 | 1 | -0/+2 | |
| | | | | | | | | This requires a Linux kernel >= 2.6.33. | |||||
* | | Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attribute | Martin Willi | 2012-02-24 | 1 | -1/+9 | |
| | | ||||||
* | | Refactored construction of RADIUS accounting messages | Martin Willi | 2012-02-24 | 1 | -23/+21 | |
| | | ||||||
* | | Include port numbers in Calling-Station-Id, too | Martin Willi | 2012-02-24 | 1 | -2/+2 | |
| | | ||||||
* | | Use large enough buffers for IPv6 addresses in Calling-Station-Id | Martin Willi | 2012-02-24 | 1 | -2/+2 | |
| | | ||||||
* | | Send client external address as Calling-Station-Id in RADIUS accounting | Martin Willi | 2012-02-24 | 1 | -6/+11 | |
| | | ||||||
* | | Some Doxygen fixes. | Tobias Brunner | 2012-02-07 | 2 | -2/+2 | |
| | | ||||||
* | | Update usage for all children in RADIUS accounting just before sending Stop | Martin Willi | 2012-02-06 | 1 | -1/+12 | |
| | | ||||||
* | | Check if ClusterIP directory could be opened before enumerating it | Martin Willi | 2012-02-06 | 1 | -17/+26 | |
| | | ||||||
* | | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-02-02 | 1 | -6/+8 | |
| | | ||||||
* | | Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE state | Martin Willi | 2012-02-02 | 1 | -0/+26 | |
| | | ||||||
* | | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 | |
| | | | | | | | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | |||||
* | | Support RADIUS accounting messages containing Framed-IP and ↵ | Martin Willi | 2012-01-30 | 4 | -0/+376 | |
| | | | | | | | | Inbound/Outbound-Octets | |||||
* | | Open RADIUS accounting sockets to exchange accounting messages | Martin Willi | 2012-01-30 | 5 | -46/+91 | |
| | | ||||||
* | | Support signing of RADIUS accounting messages | Martin Willi | 2012-01-30 | 3 | -10/+26 | |
| | | ||||||
* | | RADIUS message constructor accepts a message code parameter | Martin Willi | 2012-01-30 | 3 | -7/+8 | |
| | | ||||||
* | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 2 | -19/+5 | |
| | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
* | | Simplified logging of list of loaded plugins. | Tobias Brunner | 2012-01-19 | 2 | -23/+9 | |
| | | ||||||
* | | Destroy active task list before queued tasks | Thomas Egerer | 2012-01-18 | 1 | -3/+3 | |
| | | | | | | | | | | | | | | Since active task's destruction might result in adopting tasks from a rekeyed ike sa it seems better to first destroy the active task list and then destroy all queued tasks. This way adoption is possible at all, while otherwise the queued task list would be empty. | |||||
* | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. |