strongswan.git
8 years agoReject quick modes if IKE_SA not yet established
Martin Willi [Fri, 9 Dec 2011 14:18:23 +0000 (15:18 +0100)]
Reject quick modes if IKE_SA not yet established

8 years agoUse a common function to set IKE_SA to established
Martin Willi [Fri, 9 Dec 2011 14:10:38 +0000 (15:10 +0100)]
Use a common function to set IKE_SA to established

8 years agoBe less verbose if plugin dependecy not satisfied
Martin Willi [Wed, 7 Dec 2011 12:40:38 +0000 (13:40 +0100)]
Be less verbose if plugin dependecy not satisfied

8 years agoDon't complain when receiving XAuth or Unity configuration attributes
Martin Willi [Fri, 9 Dec 2011 13:57:51 +0000 (14:57 +0100)]
Don't complain when receiving XAuth or Unity configuration attributes

8 years agoInterpret attribute format correctly in IKEv1 configuration format
Martin Willi [Fri, 9 Dec 2011 13:54:23 +0000 (14:54 +0100)]
Interpret attribute format correctly in IKEv1 configuration format

8 years agoImplemented responder part of XAUTH task
Martin Willi [Thu, 8 Dec 2011 17:30:47 +0000 (18:30 +0100)]
Implemented responder part of XAUTH task

8 years agoImplemented initiator part of xauth task
Martin Willi [Thu, 8 Dec 2011 17:08:54 +0000 (18:08 +0100)]
Implemented initiator part of xauth task

8 years agoAsk for a username/password in xauth-null as XAUTH initiator
Martin Willi [Thu, 8 Dec 2011 17:08:13 +0000 (18:08 +0100)]
Ask for a username/password in xauth-null as XAUTH initiator

8 years agoGet first XAuth backend if none configured
Martin Willi [Thu, 8 Dec 2011 16:19:10 +0000 (17:19 +0100)]
Get first XAuth backend if none configured

8 years agoAccept a xauth backend name appended to left/rightauth
Martin Willi [Thu, 8 Dec 2011 15:57:38 +0000 (16:57 +0100)]
Accept a xauth backend name appended to left/rightauth

8 years agoAdded auth_cfg option to select XAUTH backend to use
Martin Willi [Thu, 8 Dec 2011 15:53:27 +0000 (16:53 +0100)]
Added auth_cfg option to select XAUTH backend to use

8 years agoRemove unused task swap_initiator method
Martin Willi [Thu, 8 Dec 2011 15:53:01 +0000 (16:53 +0100)]
Remove unused task swap_initiator method

8 years agoUse a string to identify xauth backends, no need for integer types
Martin Willi [Thu, 8 Dec 2011 15:42:11 +0000 (16:42 +0100)]
Use a string to identify xauth backends, no need for integer types

8 years agoRemove xauth_authenticator, we handle it in the task
Martin Willi [Thu, 8 Dec 2011 15:38:28 +0000 (15:38 +0000)]
Remove xauth_authenticator, we handle it in the task

8 years agoUse a second authentication config to configure XAUTH authentication
Martin Willi [Thu, 8 Dec 2011 15:20:46 +0000 (16:20 +0100)]
Use a second authentication config to configure XAUTH authentication

8 years agoReplace xauth_request task with a new stub where we reimplement it
Martin Willi [Thu, 8 Dec 2011 15:19:54 +0000 (16:19 +0100)]
Replace xauth_request task with a new stub where we reimplement it

8 years agoAdded missing auth_method_t enum names
Martin Willi [Thu, 8 Dec 2011 14:56:01 +0000 (15:56 +0100)]
Added missing auth_method_t enum names

8 years agoDefined hybrid IKEv1 authentication methods
Martin Willi [Thu, 8 Dec 2011 14:55:43 +0000 (15:55 +0100)]
Defined hybrid IKEv1 authentication methods

8 years agoSome notification errors added to main_mode process_r
Clavister OpenSource [Fri, 9 Dec 2011 15:05:17 +0000 (16:05 +0100)]
Some notification errors added to main_mode process_r

8 years agoEncrypt INFORMATIONAL exchange if needed
Clavister OpenSource [Fri, 9 Dec 2011 15:04:12 +0000 (16:04 +0100)]
Encrypt INFORMATIONAL exchange if needed

8 years agoAdded possibility to send notification if task_manager->process fails
Clavister OpenSource [Fri, 9 Dec 2011 15:03:37 +0000 (16:03 +0100)]
Added possibility to send notification if task_manager->process fails

8 years agoAdded status code to status_t
Clavister OpenSource [Fri, 9 Dec 2011 14:49:07 +0000 (15:49 +0100)]
Added status code to status_t

New status_t enum to allow packets to be sent to peer in task_manager->process

8 years agoadded functions for getting/setting ISAKMP SPI to notify payload
Clavister OpenSource [Fri, 9 Dec 2011 14:43:36 +0000 (15:43 +0100)]
added functions for getting/setting ISAKMP SPI to notify payload

8 years agoHandling of initial contact
Clavister OpenSource [Fri, 9 Dec 2011 10:41:26 +0000 (11:41 +0100)]
Handling of initial contact

8 years agoAdded retransmissions for initiator.
Clavister OpenSource [Thu, 8 Dec 2011 12:47:16 +0000 (13:47 +0100)]
Added retransmissions for initiator.

8 years agoCleaned up quick mode notify processing
Martin Willi [Wed, 7 Dec 2011 16:51:35 +0000 (17:51 +0100)]
Cleaned up quick mode notify processing

8 years agoAdd support for KE payloads in IKEv1 quick mode (PFS)
Martin Willi [Wed, 7 Dec 2011 16:43:58 +0000 (17:43 +0100)]
Add support for KE payloads in IKEv1 quick mode (PFS)

8 years agoEn- and decode DH group attribute in quick mode SA payloads
Martin Willi [Wed, 7 Dec 2011 16:41:16 +0000 (17:41 +0100)]
En- and decode DH group attribute in quick mode SA payloads

8 years agoUse authenticators in IKEv1 main mode
Martin Willi [Wed, 7 Dec 2011 14:10:05 +0000 (14:10 +0000)]
Use authenticators in IKEv1 main mode

8 years agoAdded a factory function for IKEv1 authenticators
Martin Willi [Wed, 7 Dec 2011 14:09:34 +0000 (14:09 +0000)]
Added a factory function for IKEv1 authenticators

8 years agoImplemented IKEv1 pubkey SIG payload processing in an authenticator
Martin Willi [Wed, 7 Dec 2011 14:08:06 +0000 (14:08 +0000)]
Implemented IKEv1 pubkey SIG payload processing in an authenticator

8 years agoImplemented IKEv1 PSK HASH payload processing in separated authenticator
Martin Willi [Wed, 7 Dec 2011 13:52:02 +0000 (14:52 +0100)]
Implemented IKEv1 PSK HASH payload processing in separated authenticator

8 years agoHandle incoming delete messages
Clavister OpenSource [Wed, 7 Dec 2011 12:30:53 +0000 (13:30 +0100)]
Handle incoming delete messages

8 years agouse untoh64 instead of non-portable be64toh
Andreas Steffen [Tue, 6 Dec 2011 14:15:40 +0000 (15:15 +0100)]
use untoh64 instead of non-portable be64toh

8 years agoImplemented post-authentication certificate handling for IKEv1
Martin Willi [Tue, 6 Dec 2011 12:38:27 +0000 (13:38 +0100)]
Implemented post-authentication certificate handling for IKEv1

8 years agoCleanup CERT payload constructors
Martin Willi [Tue, 6 Dec 2011 12:37:57 +0000 (13:37 +0100)]
Cleanup CERT payload constructors

8 years agoImplemented pre-authentication certificate handling for IKEv1
Martin Willi [Tue, 6 Dec 2011 11:14:48 +0000 (12:14 +0100)]
Implemented pre-authentication certificate handling for IKEv1

8 years agoAdded task types for IKEv1 certificate handling
Martin Willi [Tue, 6 Dec 2011 10:44:17 +0000 (11:44 +0100)]
Added task types for IKEv1 certificate handling

8 years agoCleaned up certreq payload for IKEv2/IKEv1 use
Martin Willi [Tue, 6 Dec 2011 09:56:39 +0000 (10:56 +0100)]
Cleaned up certreq payload for IKEv2/IKEv1 use

8 years agoReverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks
Martin Willi [Tue, 6 Dec 2011 09:55:15 +0000 (10:55 +0100)]
Reverted ike_cert tasks to IKEv2 only, we use dedicated IKEv1 tasks

8 years agoInstall SAs with UDP encapsulation during Quick Mode.
Tobias Brunner [Tue, 6 Dec 2011 09:33:10 +0000 (10:33 +0100)]
Install SAs with UDP encapsulation during Quick Mode.

8 years agoFix support for plain RSA authentication in IKEv1, both as initiator and responder
Martin Willi [Mon, 5 Dec 2011 16:24:17 +0000 (17:24 +0100)]
Fix support for plain RSA authentication in IKEv1, both as initiator and responder

8 years agoFix referencing of multiple CERTREQ payload with IKEv1, other cleanups
Martin Willi [Mon, 5 Dec 2011 16:07:48 +0000 (17:07 +0100)]
Fix referencing of multiple CERTREQ payload with IKEv1, other cleanups

8 years agoEncode a single IP traffic selector as ID_IPV?_ADDRESS identity
Martin Willi [Mon, 5 Dec 2011 15:20:56 +0000 (16:20 +0100)]
Encode a single IP traffic selector as ID_IPV?_ADDRESS identity

8 years agoAdded missing break;s when converting ID_IP_ADDRESS types to ts, extracted function
Martin Willi [Mon, 5 Dec 2011 15:14:52 +0000 (16:14 +0100)]
Added missing break;s when converting ID_IP_ADDRESS types to ts, extracted function

8 years agoDon't use unportable htobe64 macro directly
Martin Willi [Mon, 5 Dec 2011 14:45:01 +0000 (15:45 +0100)]
Don't use unportable htobe64 macro directly

8 years agoImplement htoun/untoh64 with potentially faster htobe64/be64toh macros, if available
Martin Willi [Mon, 5 Dec 2011 14:44:51 +0000 (15:44 +0100)]
Implement htoun/untoh64 with potentially faster htobe64/be64toh macros, if available

8 years agofixed copy-and-paste error
Andreas Steffen [Sun, 4 Dec 2011 11:53:47 +0000 (12:53 +0100)]
fixed copy-and-paste error

8 years agoextended bio_reader and bio_writer to handle u_int64_t
Andreas Steffen [Wed, 26 Oct 2011 22:37:24 +0000 (00:37 +0200)]
extended bio_reader and bio_writer to handle u_int64_t

8 years agoXAUTH additions for certificates.
Clavister OpenSource [Mon, 5 Dec 2011 13:27:53 +0000 (14:27 +0100)]
XAUTH additions for certificates.

8 years agosignature payload handling.
Clavister OpenSource [Mon, 5 Dec 2011 13:22:11 +0000 (14:22 +0100)]
signature payload handling.

8 years agocertificate tasks added to passive list for responder
Clavister OpenSource [Mon, 5 Dec 2011 13:17:17 +0000 (14:17 +0100)]
certificate tasks added to passive list for responder

8 years agocertificate handling for XAuth responder.
Clavister OpenSource [Mon, 5 Dec 2011 13:11:48 +0000 (14:11 +0100)]
certificate handling for XAuth responder.

8 years agokeymat: derive_ike_keys updated with XAUTH RSA:s
Clavister OpenSource [Mon, 5 Dec 2011 12:54:54 +0000 (13:54 +0100)]
keymat: derive_ike_keys updated with XAUTH RSA:s

8 years agoSetting transform number in esp proposal.
Clavister OpenSource [Mon, 5 Dec 2011 12:44:22 +0000 (13:44 +0100)]
Setting transform number in esp proposal.

iPhone (racoon) fails quick mode when transform number is 0

8 years agoID_IPV4_ADDR and ID_IPV6_ADDR cases added to get_ts
Clavister OpenSource [Mon, 5 Dec 2011 11:48:14 +0000 (12:48 +0100)]
ID_IPV4_ADDR and ID_IPV6_ADDR cases added to get_ts

8 years agoversion bump to 5.0.0dr1
Andreas Steffen [Sat, 3 Dec 2011 14:12:14 +0000 (15:12 +0100)]
version bump to 5.0.0dr1

8 years agoIKEv1: Added basic support for INFORMATIONAL exchange types, and for NOTIFY_V1 messag...
Clavister OpenSource [Fri, 2 Dec 2011 15:22:42 +0000 (16:22 +0100)]
IKEv1: Added basic support for INFORMATIONAL exchange types, and for NOTIFY_V1 messages in the 3rd message in quick_mode.

8 years agoIKEv1 XAuth: Added changes to Makefile.am to compile the xauth_null plugin.
Clavister OpenSource [Fri, 2 Dec 2011 14:39:09 +0000 (15:39 +0100)]
IKEv1 XAuth: Added changes to Makefile.am to compile the xauth_null plugin.

8 years agoDon't stop processing tasks if one returns SUCCESS.
Tobias Brunner [Fri, 2 Dec 2011 07:38:43 +0000 (08:38 +0100)]
Don't stop processing tasks if one returns SUCCESS.

Only send a response if at least one of the tasks requires it.

8 years agoIKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blind...
Clavister OpenSource [Thu, 1 Dec 2011 15:34:30 +0000 (16:34 +0100)]
IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blindly accepts whatever user/pass is sent it.  Changed the xauth_request task to use this new plugin.  Add --enable-xauth-null to your configure line to build with the new plugin.

8 years agoIKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins to talk...
Clavister OpenSource [Thu, 1 Dec 2011 13:08:24 +0000 (14:08 +0100)]
IKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins to talk to servers with different quirks for XAuth authentication.

8 years agoIKEv1 XAuth: Add XAuth defines for plugin types.
Clavister OpenSource [Thu, 1 Dec 2011 12:11:36 +0000 (13:11 +0100)]
IKEv1 XAuth: Add XAuth defines for plugin types.

8 years agoAdd NAT-OA payloads during Quick Mode if transport mode is used.
Tobias Brunner [Wed, 30 Nov 2011 17:03:06 +0000 (18:03 +0100)]
Add NAT-OA payloads during Quick Mode if transport mode is used.

We don't parse them currently, as the Linux kernel does not need them to fix
the IP header checksum.

8 years agoNegotiate UDP encapsulation during Quick Mode if NAT is detected.
Tobias Brunner [Wed, 30 Nov 2011 16:52:14 +0000 (17:52 +0100)]
Negotiate UDP encapsulation during Quick Mode if NAT is detected.

8 years agoTask added for IKEv1 NAT detection.
Tobias Brunner [Wed, 30 Nov 2011 16:09:42 +0000 (17:09 +0100)]
Task added for IKEv1 NAT detection.

There is already support for both Main and Aggressive Mode.

8 years agoCreate negotiated hasher earlier during Main Mode so it is available for building...
Tobias Brunner [Wed, 30 Nov 2011 16:04:21 +0000 (17:04 +0100)]
Create negotiated hasher earlier during Main Mode so it is available for building NAT-D payloads.

8 years agoAdded a function to keymat_v1 to create the hasher earlier than during key derivation.
Tobias Brunner [Wed, 30 Nov 2011 16:03:01 +0000 (17:03 +0100)]
Added a function to keymat_v1 to create the hasher earlier than during key derivation.

The negotiated hasher is also used to generate NAT-D payloads.

8 years agoMessage rules for IKEv1 NAT-T payloads added.
Tobias Brunner [Wed, 30 Nov 2011 15:55:24 +0000 (16:55 +0100)]
Message rules for IKEv1 NAT-T payloads added.

8 years agoIKEv1 XAuth: Moving the state change to IKE_CONNECTED until after XAuth exchanges...
Clavister OpenSource [Wed, 30 Nov 2011 09:43:38 +0000 (10:43 +0100)]
IKEv1 XAuth: Moving the state change to IKE_CONNECTED until after XAuth exchanges are complete.

8 years agoIKEv1 XAuth: Adding "initiate" flag parameter to the initiate_xauth method, signallin...
Clavister OpenSource [Wed, 30 Nov 2011 09:39:29 +0000 (10:39 +0100)]
IKEv1 XAuth: Adding "initiate" flag parameter to the initiate_xauth method, signalling whether or not to call the task_manager->initiate method after queueing the task.

8 years agoHandle IKEv1 NAT-T vendor ID payload (only RFC 3947 for now).
Tobias Brunner [Tue, 29 Nov 2011 13:26:52 +0000 (14:26 +0100)]
Handle IKEv1 NAT-T vendor ID payload (only RFC 3947 for now).

8 years agoAdded payloads for IKEv1 NAT-Traversal negotiation.
Tobias Brunner [Tue, 29 Nov 2011 10:14:25 +0000 (11:14 +0100)]
Added payloads for IKEv1 NAT-Traversal negotiation.

8 years agoIKEv1 XAuth: Clean up debug prints in xauth_request task.
Clavister OpenSource [Tue, 29 Nov 2011 10:41:56 +0000 (11:41 +0100)]
IKEv1 XAuth: Clean up debug prints in xauth_request task.

8 years agoIKEv1 XAuth: Remove XAuth task from the passive task list for ID_PROT.
Clavister OpenSource [Tue, 29 Nov 2011 10:36:53 +0000 (11:36 +0100)]
IKEv1 XAuth: Remove XAuth task from the passive task list for ID_PROT.

8 years agoRevert "IKEv1 XAuth: Added new MIGRATE status type to status_t."
Clavister OpenSource [Tue, 29 Nov 2011 10:21:54 +0000 (11:21 +0100)]
Revert "IKEv1 XAuth: Added new MIGRATE status type to status_t."

This reverts commit b57df8310a867a0a65abf17279bf1b6e6bb2f5d3.

Conflicts:

src/libcharon/sa/task_manager_v1.c

8 years agoIKEv1 XAuth + CfgMode: Added ability to process CfgMode messages in the xauth task...
Clavister OpenSource [Tue, 29 Nov 2011 10:04:36 +0000 (11:04 +0100)]
IKEv1 XAuth + CfgMode: Added ability to process CfgMode messages in the xauth task.  Migrated away from using the MIGRATE method to switch queues.

8 years agoIKEv1 XAuth: Change the main_mode task to use the new initiate_xauth job instead...
Clavister OpenSource [Tue, 29 Nov 2011 09:52:31 +0000 (10:52 +0100)]
IKEv1 XAuth: Change the main_mode task to use the new initiate_xauth job instead of the old MIGRATE method.

8 years agoIKEv1 XAuth: Added XAuthResp authentication modes.
Clavister OpenSource [Tue, 29 Nov 2011 09:42:31 +0000 (10:42 +0100)]
IKEv1 XAuth: Added XAuthResp authentication modes.

8 years agoIKEv1 XAuth: Added a job to call the initiate_xauth method of ike_sa after the comple...
Clavister OpenSource [Tue, 29 Nov 2011 08:24:29 +0000 (09:24 +0100)]
IKEv1 XAuth: Added a job to call the initiate_xauth method of ike_sa after the completion of the current set of tasks is complete.

8 years agoIKEv1 XAuth: Add "initiate xauth" method, which adds the xauth task into the queue...
Clavister OpenSource [Tue, 29 Nov 2011 08:15:59 +0000 (09:15 +0100)]
IKEv1 XAuth: Add "initiate xauth" method, which adds the xauth task into the queue for initiation.

8 years agoUse quiet generator when creating IKEv1 message hashes.
Tobias Brunner [Fri, 25 Nov 2011 17:58:18 +0000 (18:58 +0100)]
Use quiet generator when creating IKEv1 message hashes.

This avoids cluttering the log with duplicate log messages when
generating and especially confusing log messages when parsing
authenticated messages.

8 years agoAdded an option to create a generator that does not log debug messages.
Tobias Brunner [Fri, 25 Nov 2011 17:57:03 +0000 (18:57 +0100)]
Added an option to create a generator that does not log debug messages.

8 years agoRespond with NO_PROPOSAL_CHOSEN, if we don't find an ike_cfg.
Tobias Brunner [Fri, 25 Nov 2011 17:01:25 +0000 (18:01 +0100)]
Respond with NO_PROPOSAL_CHOSEN, if we don't find an ike_cfg.

8 years agoDon't respond to malformed INFORMATIONAL_V1 messages with another INFORMATIONAL_V1...
Tobias Brunner [Fri, 25 Nov 2011 17:00:06 +0000 (18:00 +0100)]
Don't respond to malformed INFORMATIONAL_V1 messages with another INFORMATIONAL_V1 exchange.

8 years agoHandle invalid IKEv1 hashes more specifically.
Tobias Brunner [Fri, 25 Nov 2011 16:59:39 +0000 (17:59 +0100)]
Handle invalid IKEv1 hashes more specifically.

8 years agoHandle unsupported IKEv1 exchange types more specifically.
Tobias Brunner [Fri, 25 Nov 2011 16:58:37 +0000 (17:58 +0100)]
Handle unsupported IKEv1 exchange types more specifically.

8 years agoSend an INFORMATIONAL message on IKEv1 parse errors.
Tobias Brunner [Fri, 25 Nov 2011 16:54:28 +0000 (17:54 +0100)]
Send an INFORMATIONAL message on IKEv1 parse errors.

8 years agoHandle INFORMATIONAL_V1 messages when no keys have been derived yet.
Tobias Brunner [Fri, 25 Nov 2011 16:45:30 +0000 (17:45 +0100)]
Handle INFORMATIONAL_V1 messages when no keys have been derived yet.

This allows to gracefully process the INFORMATIONAL_V1 message rules which
require the payloads to be encrypted and thus the exchange to be
authenticated with a HASH payload.  If such an exchange is now initiated
before the ISAKMP_SA is established, the message is simply sent unencrypted
and without HASH payload.

8 years agoError reporting for invalid IKEv2 responses fixed.
Tobias Brunner [Fri, 25 Nov 2011 15:24:32 +0000 (16:24 +0100)]
Error reporting for invalid IKEv2 responses fixed.

8 years agoSet request flag to proper value for IKEv1 messages before parsing them.
Tobias Brunner [Fri, 25 Nov 2011 15:08:12 +0000 (16:08 +0100)]
Set request flag to proper value for IKEv1 messages before parsing them.

8 years agoAvoid parsing retransmits we already responded to.
Tobias Brunner [Fri, 25 Nov 2011 15:05:00 +0000 (16:05 +0100)]
Avoid parsing retransmits we already responded to.

Decryption will fail as we already moved the IV when we sent the
response. Without this change, encrypted retransmits would have been
discarded during parsing already.

8 years agoMoved main part of message processing to task managers.
Tobias Brunner [Fri, 25 Nov 2011 14:53:23 +0000 (15:53 +0100)]
Moved main part of message processing to task managers.

This will allow individual error handling for each IKE version and should
allow better handling of IKEv1 retransmits.

8 years agoAddded ike_sa_t.set_statistic to set timestamps from task manager.
Tobias Brunner [Fri, 25 Nov 2011 13:48:57 +0000 (14:48 +0100)]
Addded ike_sa_t.set_statistic to set timestamps from task manager.

8 years agoCompiler warning fixed in prf_plus_t.
Tobias Brunner [Fri, 25 Nov 2011 10:26:20 +0000 (11:26 +0100)]
Compiler warning fixed in prf_plus_t.

8 years agoUse proper enum types in proposal_substructure.
Tobias Brunner [Fri, 25 Nov 2011 10:25:45 +0000 (11:25 +0100)]
Use proper enum types in proposal_substructure.

8 years agoIKEv1 XAuth: Fix XAuth task so that it reinitiates.
Clavister OpenSource [Fri, 25 Nov 2011 07:45:42 +0000 (08:45 +0100)]
IKEv1 XAuth: Fix XAuth task so that it reinitiates.

8 years agoRevert "IKEv1 XAuth: Temporarilty add an "initiate_later" flag to the task manager...
Clavister OpenSource [Fri, 25 Nov 2011 07:41:41 +0000 (08:41 +0100)]
Revert "IKEv1 XAuth: Temporarilty add an "initiate_later" flag to the task manager.  When set to TRUE it will cause "initiate" to be called when the current process_response call is finished. This change should be reverted once we have a better method in place."

This reverts commit c6c28f4ac522dd8afb457847bca79eee77f78706.

Revert "IKEv1 XAuth: Added temporary "initiate_xauth" public method to ike_sa_t.  This allows us to initiate an XAuth password authentication exchange after responding to the final message of Main Mode.  This change should be reverted once we have a better method to initiate this exchange."

This reverts commit 5529dc50477e25df9dd5f3c442bb1521c0baf225.

8 years agoIKEv1 XAuth: Fix main mode to work with XAuth PSK.
Clavister OpenSource [Fri, 25 Nov 2011 07:24:30 +0000 (08:24 +0100)]
IKEv1 XAuth: Fix main mode to work with XAuth PSK.

8 years agoUse a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1
Martin Willi [Thu, 24 Nov 2011 15:32:14 +0000 (16:32 +0100)]
Use a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1