strongswan.git
10 years agoFixed length calculation of unknown payload
Martin Willi [Wed, 10 Nov 2010 16:40:43 +0000 (17:40 +0100)]
Fixed length calculation of unknown payload

10 years agoAdded a hook to set the critical bit on arbitrary payloads
Martin Willi [Wed, 10 Nov 2010 16:23:57 +0000 (17:23 +0100)]
Added a hook to set the critical bit on arbitrary payloads

10 years agoMove critical bit checking to ike_sa, notify payload includes unsupported payload...
Martin Willi [Wed, 10 Nov 2010 15:47:56 +0000 (16:47 +0100)]
Move critical bit checking to ike_sa, notify payload includes unsupported payload type

10 years agoHandle all error notifies in CREATE_CHILD_SA exchanges
Martin Willi [Wed, 10 Nov 2010 15:30:25 +0000 (16:30 +0100)]
Handle all error notifies in CREATE_CHILD_SA exchanges

10 years agoSupport encoding of UKNOWN_DATA
Martin Willi [Wed, 10 Nov 2010 15:29:59 +0000 (16:29 +0100)]
Support encoding of UKNOWN_DATA

10 years agoMoved our substructure identifiers above 255, ignore private payloads properly
Martin Willi [Wed, 10 Nov 2010 14:41:46 +0000 (15:41 +0100)]
Moved our substructure identifiers above 255, ignore private payloads properly

10 years agoCheck for exceeded payload count even if we have a found one flagged as sufficient
Martin Willi [Wed, 10 Nov 2010 14:34:38 +0000 (15:34 +0100)]
Check for exceeded payload count even if we have a found one flagged as sufficient

10 years agoAdded a hook to inject custom payloads with critical bit
Martin Willi [Wed, 10 Nov 2010 13:26:03 +0000 (14:26 +0100)]
Added a hook to inject custom payloads with critical bit

10 years agoAdded a constructor for custom uknown payloads
Martin Willi [Wed, 10 Nov 2010 13:21:23 +0000 (14:21 +0100)]
Added a constructor for custom uknown payloads

10 years agoUse the payloads actual type in unknown_payload_t
Martin Willi [Wed, 10 Nov 2010 13:17:03 +0000 (14:17 +0100)]
Use the payloads actual type in unknown_payload_t

10 years agoMigrated unknown payload to INIT/METHOD macros
Martin Willi [Wed, 10 Nov 2010 12:56:18 +0000 (13:56 +0100)]
Migrated unknown payload to INIT/METHOD macros

10 years agoAdded a short README about the conftest utility
Martin Willi [Tue, 9 Nov 2010 14:37:41 +0000 (15:37 +0100)]
Added a short README about the conftest utility

10 years agoSpecify the type of the certificate to load, currently X509 only
Martin Willi [Tue, 9 Nov 2010 13:19:59 +0000 (14:19 +0100)]
Specify the type of the certificate to load, currently X509 only

10 years agoBe a little more verbose about cert payload injection
Martin Willi [Tue, 9 Nov 2010 11:05:30 +0000 (12:05 +0100)]
Be a little more verbose about cert payload injection

10 years agoSupport hook suffixes to use the same hook multiple times
Martin Willi [Tue, 9 Nov 2010 10:17:20 +0000 (11:17 +0100)]
Support hook suffixes to use the same hook multiple times

10 years agoSupport arbitrary suffixes for actions, same action multiple times
Martin Willi [Tue, 9 Nov 2010 10:07:37 +0000 (11:07 +0100)]
Support arbitrary suffixes for actions, same action multiple times

10 years agoAdded a hook to ignore specific messages
Martin Willi [Tue, 9 Nov 2010 09:19:56 +0000 (10:19 +0100)]
Added a hook to ignore specific messages

10 years agoIngore messages with exchange type altered to UNDEFINED in message() hook
Martin Willi [Tue, 9 Nov 2010 09:19:09 +0000 (10:19 +0100)]
Ingore messages with exchange type altered to UNDEFINED in message() hook

10 years agoAdded a hook to send unencrypted notifies in established IKE_SAs
Martin Willi [Tue, 9 Nov 2010 08:59:56 +0000 (09:59 +0100)]
Added a hook to send unencrypted notifies in established IKE_SAs

10 years agoFail silently without INVALID_SYNTAX if message not verified
Martin Willi [Tue, 9 Nov 2010 08:55:20 +0000 (09:55 +0100)]
Fail silently without INVALID_SYNTAX if message not verified

10 years agoInclude suiteb test suite config in distribution
Martin Willi [Mon, 8 Nov 2010 15:45:48 +0000 (16:45 +0100)]
Include suiteb test suite config in distribution

10 years agoFixed loading of credentials using a relative path
Martin Willi [Tue, 2 Nov 2010 15:12:29 +0000 (16:12 +0100)]
Fixed loading of credentials using a relative path

10 years agoImplemented a add_notify hook to inject arbitrary Notify payloads
Martin Willi [Tue, 2 Nov 2010 14:51:56 +0000 (15:51 +0100)]
Implemented a add_notify hook to inject arbitrary Notify payloads

10 years agoMoved message()-hook invocation to generate_message(), catch pre-generated IKE_SA_INI...
Martin Willi [Tue, 2 Nov 2010 14:49:09 +0000 (15:49 +0100)]
Moved message()-hook invocation to generate_message(), catch pre-generated IKE_SA_INITs, too

10 years agoImplemented a hook to unsort payloads in messages
Martin Willi [Tue, 2 Nov 2010 13:55:18 +0000 (14:55 +0100)]
Implemented a hook to unsort payloads in messages

10 years agoSupport removal of payloads from messages
Martin Willi [Tue, 2 Nov 2010 13:30:45 +0000 (14:30 +0100)]
Support removal of payloads from messages

10 years agoAdded a message_t option to disable automatic payload sorting
Martin Willi [Tue, 2 Nov 2010 13:21:38 +0000 (14:21 +0100)]
Added a message_t option to disable automatic payload sorting

10 years agoAdded a fist hook to fill up IKE_AUTH messages with dummy certificates (1.1.1/1.2.1)
Martin Willi [Tue, 2 Nov 2010 11:14:03 +0000 (12:14 +0100)]
Added a fist hook to fill up IKE_AUTH messages with dummy certificates (1.1.1/1.2.1)

10 years agoImplemented cert payload constructor for custom encoding types
Martin Willi [Tue, 2 Nov 2010 11:13:03 +0000 (12:13 +0100)]
Implemented cert payload constructor for custom encoding types

10 years agoFix segfault if config not found
Martin Willi [Tue, 2 Nov 2010 11:12:42 +0000 (12:12 +0100)]
Fix segfault if config not found

10 years agoRead actions from test config, delayed execution
Martin Willi [Fri, 29 Oct 2010 13:45:58 +0000 (15:45 +0200)]
Read actions from test config, delayed execution

10 years agoSupport manually triggerd DPD check, even if DPD disabled in config
Martin Willi [Fri, 29 Oct 2010 13:36:19 +0000 (15:36 +0200)]
Support manually triggerd DPD check, even if DPD disabled in config

10 years agoLoad private keys from suite and test configs
Martin Willi [Fri, 29 Oct 2010 09:55:19 +0000 (11:55 +0200)]
Load private keys from suite and test configs

10 years agoLoad certificates from both, suite and test config
Martin Willi [Fri, 29 Oct 2010 09:47:25 +0000 (11:47 +0200)]
Load certificates from both, suite and test config

10 years agoLoad test and suite specific connection configurations
Martin Willi [Fri, 29 Oct 2010 08:34:08 +0000 (10:34 +0200)]
Load test and suite specific connection configurations

10 years agoLoad hooks based on listener dynamically
Martin Willi [Tue, 26 Oct 2010 08:51:28 +0000 (10:51 +0200)]
Load hooks based on listener dynamically

10 years agoLoad certificates from global suite configuration file
Martin Willi [Thu, 21 Oct 2010 14:36:40 +0000 (16:36 +0200)]
Load certificates from global suite configuration file

10 years agoAdded a Suite B conftest utility skeleton using libcharon
Martin Willi [Tue, 19 Oct 2010 12:42:47 +0000 (14:42 +0200)]
Added a Suite B conftest utility skeleton using libcharon

10 years agoAdded a CIDR notation based host constructor
Martin Willi [Fri, 29 Oct 2010 07:54:15 +0000 (09:54 +0200)]
Added a CIDR notation based host constructor

10 years agoMoved logger initialization from libcharon to charon
Martin Willi [Fri, 29 Oct 2010 07:39:19 +0000 (09:39 +0200)]
Moved logger initialization from libcharon to charon

10 years agoremoved superfluous s
Andreas Steffen [Wed, 5 Jan 2011 03:09:19 +0000 (04:09 +0100)]
removed superfluous s

10 years agoremove private_
Andreas Steffen [Wed, 5 Jan 2011 02:44:57 +0000 (03:44 +0100)]
remove private_

10 years agoremove private_
Andreas Steffen [Wed, 5 Jan 2011 02:44:28 +0000 (03:44 +0100)]
remove private_

10 years agocosmetics in debug output
Andreas Steffen [Wed, 5 Jan 2011 01:44:27 +0000 (02:44 +0100)]
cosmetics in debug output

10 years agodetect fragmentation of PB-TNC batch
Andreas Steffen [Wed, 5 Jan 2011 01:41:36 +0000 (02:41 +0100)]
detect fragmentation of PB-TNC batch

10 years agofixed typo
Andreas Steffen [Sun, 2 Jan 2011 05:52:32 +0000 (06:52 +0100)]
fixed typo

10 years agoreplaced spaces by tabs
Andreas Steffen [Thu, 30 Dec 2010 02:45:08 +0000 (03:45 +0100)]
replaced spaces by tabs

10 years agoversion bump to 4.5.1dr5
Andreas Steffen [Mon, 27 Dec 2010 12:49:32 +0000 (13:49 +0100)]
version bump to 4.5.1dr5

10 years agocommas are required
Andreas Steffen [Mon, 27 Dec 2010 07:26:29 +0000 (08:26 +0100)]
commas are required

10 years agoadded Sansar Choinambuu to copryright.c
Andreas Steffen [Mon, 27 Dec 2010 07:24:01 +0000 (08:24 +0100)]
added Sansar Choinambuu to copryright.c

10 years agounset RADIUSHOSTS after before loading new scenario
Andreas Steffen [Mon, 27 Dec 2010 05:26:17 +0000 (06:26 +0100)]
unset RADIUSHOSTS after before loading new scenario

10 years agoadded missing tfc argument to kernel_pfkey_ipsec interface
Andreas Steffen [Mon, 27 Dec 2010 04:53:36 +0000 (05:53 +0100)]
added missing tfc argument to kernel_pfkey_ipsec interface

10 years agoset tfcv3 flag TRUE in ha_dispatcher
Andreas Steffen [Sun, 26 Dec 2010 22:10:57 +0000 (23:10 +0100)]
set tfcv3 flag TRUE in ha_dispatcher

10 years agoimplemented wrap around of registered IKEv1 algorithm names
Andreas Steffen [Sun, 26 Dec 2010 16:11:02 +0000 (17:11 +0100)]
implemented wrap around of registered IKEv1 algorithm names

10 years agodisable AEAD crypto algorithm if no key size is supported
Andreas Steffen [Sat, 25 Dec 2010 15:14:55 +0000 (16:14 +0100)]
disable AEAD crypto algorithm if no key size is supported

10 years agodisable crypto algorithm if no key size is supported
Andreas Steffen [Sat, 25 Dec 2010 15:11:50 +0000 (16:11 +0100)]
disable crypto algorithm if no key size is supported

10 years agolog if an AEAD algorithm does not support a given key size
Andreas Steffen [Sat, 25 Dec 2010 14:53:15 +0000 (15:53 +0100)]
log if an AEAD algorithm does not support a given key size

10 years agolog if a crypto algorithm does not support a given key size
Andreas Steffen [Sat, 25 Dec 2010 14:49:29 +0000 (15:49 +0100)]
log if a crypto algorithm does not support a given key size

10 years agowrap list of IKEv2 algorithms after 120 characters per line
Andreas Steffen [Fri, 24 Dec 2010 16:29:51 +0000 (17:29 +0100)]
wrap list of IKEv2 algorithms after 120 characters per line

10 years agoMigrated stroke_list_t to INIT/METHOD macros
Andreas Steffen [Fri, 24 Dec 2010 13:29:09 +0000 (14:29 +0100)]
Migrated stroke_list_t to INIT/METHOD macros

10 years agoprinted plugin names have a hyphen
Andreas Steffen [Fri, 24 Dec 2010 04:53:27 +0000 (05:53 +0100)]
printed plugin names have a hyphen

10 years agoFixed public key construction from PKCS#11 private key
Martin Willi [Thu, 23 Dec 2010 09:29:01 +0000 (10:29 +0100)]
Fixed public key construction from PKCS#11 private key

10 years agoeliminated whitespace
Andreas Steffen [Tue, 21 Dec 2010 16:51:27 +0000 (17:51 +0100)]
eliminated whitespace

10 years agoMigrated child_create_t to INIT/METHOD macros
Andreas Steffen [Tue, 21 Dec 2010 16:45:10 +0000 (17:45 +0100)]
Migrated child_create_t to INIT/METHOD macros

10 years agoAdded NEWS for af-alg plugin
Martin Willi [Mon, 20 Dec 2010 09:22:14 +0000 (10:22 +0100)]
Added NEWS for af-alg plugin

10 years agoProbe for supported AF_ALG algorithms, register dynamically
Martin Willi [Mon, 8 Nov 2010 13:56:23 +0000 (14:56 +0100)]
Probe for supported AF_ALG algorithms, register dynamically

10 years agoRegister algorithms with dependencies only if dependency available
Martin Willi [Mon, 8 Nov 2010 13:20:15 +0000 (14:20 +0100)]
Register algorithms with dependencies only if dependency available

10 years agoRegister some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
Martin Willi [Mon, 8 Nov 2010 10:58:01 +0000 (11:58 +0100)]
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)

10 years agoImplemented PRFs using AF_ALG
Martin Willi [Mon, 8 Nov 2010 10:41:01 +0000 (11:41 +0100)]
Implemented PRFs using AF_ALG

10 years agoUse the AF_ALG wrapper in hasher, crypter and signer
Martin Willi [Mon, 8 Nov 2010 10:02:35 +0000 (10:02 +0000)]
Use the AF_ALG wrapper in hasher, crypter and signer

10 years agoUse a generic AF_ALG wrapper for common operations
Martin Willi [Mon, 8 Nov 2010 09:59:54 +0000 (10:59 +0100)]
Use a generic AF_ALG wrapper for common operations

10 years agoImplemented crypter on top of AF_ALG
Martin Willi [Sat, 6 Nov 2010 10:03:12 +0000 (11:03 +0100)]
Implemented crypter on top of AF_ALG

10 years agoImplemented signer interface using AF_ALG
Martin Willi [Fri, 5 Nov 2010 20:29:43 +0000 (21:29 +0100)]
Implemented signer interface using AF_ALG

10 years agoImplemented hasher based on AF_ALG
Martin Willi [Fri, 5 Nov 2010 15:55:53 +0000 (15:55 +0000)]
Implemented hasher based on AF_ALG

10 years agoAdded Linux AF_ALG header
Martin Willi [Fri, 5 Nov 2010 15:15:51 +0000 (16:15 +0100)]
Added Linux AF_ALG header

10 years agoAdded plugin stub for AF_ALG
Martin Willi [Fri, 5 Nov 2010 15:15:13 +0000 (16:15 +0100)]
Added plugin stub for AF_ALG

10 years agoAdded NEWS about TFC padding
Martin Willi [Mon, 20 Dec 2010 08:51:33 +0000 (09:51 +0100)]
Added NEWS about TFC padding

10 years agoAdded a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
Martin Willi [Tue, 30 Nov 2010 18:19:56 +0000 (19:19 +0100)]
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality

10 years agoDo not use TFC padding if peer does not support ESPv3
Martin Willi [Wed, 8 Dec 2010 12:41:51 +0000 (12:41 +0000)]
Do not use TFC padding if peer does not support ESPv3

10 years agoAdded a TFC padding option to child_cfg
Martin Willi [Wed, 8 Dec 2010 12:41:04 +0000 (12:41 +0000)]
Added a TFC padding option to child_cfg

10 years agoImplemented Traffic Flow Confidentiality padding in kernel_interface
Martin Willi [Tue, 30 Nov 2010 16:17:30 +0000 (16:17 +0000)]
Implemented Traffic Flow Confidentiality padding in kernel_interface

10 years agoversion bump to 4.5.1dr4
Andreas Steffen [Sun, 19 Dec 2010 08:46:59 +0000 (09:46 +0100)]
version bump to 4.5.1dr4

10 years agocast enumerated algorithm type as int
Andreas Steffen [Sat, 18 Dec 2010 19:24:53 +0000 (20:24 +0100)]
cast enumerated algorithm type as int

10 years agoupdated NEWS with new ipsec listalgs feature
Andreas Steffen [Sat, 18 Dec 2010 15:44:29 +0000 (16:44 +0100)]
updated NEWS with new ipsec listalgs feature

10 years agotrace back crypto algorithms to the plugins that registered them
Andreas Steffen [Sat, 18 Dec 2010 15:31:01 +0000 (16:31 +0100)]
trace back crypto algorithms to the plugins that registered them

10 years agoAdded news about changes regarding strongswan.conf.
Tobias Brunner [Fri, 17 Dec 2010 16:32:14 +0000 (17:32 +0100)]
Added news about changes regarding strongswan.conf.

10 years agoMoved "Reading values" section, typo fixed.
Tobias Brunner [Fri, 17 Dec 2010 16:31:42 +0000 (17:31 +0100)]
Moved "Reading values" section, typo fixed.

10 years agoversion bump to 4.5.1dr3
Andreas Steffen [Wed, 15 Dec 2010 07:56:32 +0000 (08:56 +0100)]
version bump to 4.5.1dr3

10 years agoInstall selectors on transport mode IPsec SAs.
Jiri Bohac [Mon, 13 Dec 2010 14:28:40 +0000 (15:28 +0100)]
Install selectors on transport mode IPsec SAs.

This fixes several test cases in IKEv2_Self_Test (part of the IPv6 Ready
Logo Program) which is required for USGv6 certification, namely:

  - IKEv2.EN.I.1.1.7.1, IKEv2.EN.I.1.1.7.1: Narrowing the range of members
    of the set of traffic selectors
  - IKEv2.EN.R.1.1.7.3: Narrowing multiple traffic selector

When traffic selectors of a triggered SA are narrowed by the responder, the
installed policy and the broader trap policy share the same reqid.  Without
selectors on the IPsec SA packets matching the trap policy, but not the
narrowed policy, would incorrectly be handled by that IPsec SA.  Since only
one selector can be specified per IPsec SA, there is currently no solution
for tunnel mode SAs.

10 years agoincrease sleep time in mediation scenarios
Andreas Steffen [Sun, 12 Dec 2010 20:54:44 +0000 (21:54 +0100)]
increase sleep time in mediation scenarios

10 years agofixed bug in mem_cred.c:add_crl()
Andreas Steffen [Sun, 12 Dec 2010 20:34:27 +0000 (21:34 +0100)]
fixed bug in mem_cred.c:add_crl()

10 years agoreverted Connection ID to capital letters
Andreas Steffen [Sun, 12 Dec 2010 11:55:14 +0000 (12:55 +0100)]
reverted Connection ID to capital letters

10 years agofixed a bug in enum_from_name() function
Andreas Steffen [Sun, 12 Dec 2010 11:54:36 +0000 (12:54 +0100)]
fixed a bug in enum_from_name() function

10 years agoreorganized ikev2/rw-eap-tnc scenarios
Andreas Steffen [Sun, 12 Dec 2010 11:51:14 +0000 (12:51 +0100)]
reorganized ikev2/rw-eap-tnc scenarios

10 years agoadded the ikev2/rw-eap-tnc-20 scenario
Andreas Steffen [Sun, 12 Dec 2010 09:47:16 +0000 (10:47 +0100)]
added the ikev2/rw-eap-tnc-20 scenario

10 years agoNEWS for the 4.5.1dr2 release
Andreas Steffen [Sun, 12 Dec 2010 09:46:43 +0000 (10:46 +0100)]
NEWS for the 4.5.1dr2 release

10 years agosome more cosmetics
Andreas Steffen [Sun, 12 Dec 2010 09:19:54 +0000 (10:19 +0100)]
some more cosmetics

10 years agofinal cosmetics in PB-TNC debug output
Andreas Steffen [Sun, 12 Dec 2010 09:17:43 +0000 (10:17 +0100)]
final cosmetics in PB-TNC debug output

10 years agoimplemented PB-TNC message parsing checks
Andreas Steffen [Sat, 11 Dec 2010 23:42:31 +0000 (00:42 +0100)]
implemented PB-TNC message parsing checks

10 years agosome code optimizations
Andreas Steffen [Fri, 10 Dec 2010 23:52:53 +0000 (00:52 +0100)]
some code optimizations