Martin Willi
|
a777155ffe
|
diffie-hellman: Add a bool return value to set_other_public_value()
|
2015-03-23 17:54:03 +01:00 |
|
Martin Willi
|
42431690e0
|
diffie-hellman: Add a bool return value to get_my_public_value()
|
2015-03-23 17:54:03 +01:00 |
|
Martin Willi
|
520d58e010
|
encoding: Allow ke_payload_create_from_diffie_hellman() to fail
|
2015-03-23 17:54:02 +01:00 |
|
Tobias Brunner
|
1d94b7950b
|
ikev2: Consider signature schemes in rightauth when sending hash algorithms
|
2015-03-04 13:54:12 +01:00 |
|
Tobias Brunner
|
fff3576b6b
|
ikev2: Add a global option to disable RFC 7427 signature authentication
This is mostly for testing.
|
2015-03-04 13:54:09 +01:00 |
|
Tobias Brunner
|
f6329cae9c
|
ikev2: Enable signature authentication by transmitting supported hash algorithms
|
2015-03-04 13:54:08 +01:00 |
|
Tobias Brunner
|
691d00f166
|
ikev2: Only touch the DH object if we have a matching proposal
|
2014-12-23 15:40:01 +01:00 |
|
Tobias Brunner
|
34dc37f3cb
|
ikev2: Negotiate support for IKEv2 fragmentation
|
2014-10-10 09:31:16 +02:00 |
|
Martin Willi
|
3ecfc83c6b
|
payload: Use common prefixes for all payload type identifiers
The old identifiers did not use a proper namespace and often clashed with
other defines.
|
2014-06-04 15:53:03 +02:00 |
|
Martin Willi
|
00080d2b8b
|
Raise an ALERT_PROPOSAL_MISMATCH_IKE also when receiving NO_PROPOSAL_CHOSEN
|
2013-05-06 14:56:50 +02:00 |
|
Tobias Brunner
|
ef33a4ab82
|
Fixed some typos, courtesy of codespell
|
2012-12-20 09:35:26 +01:00 |
|
Martin Willi
|
bab949bb26
|
Raise an alert if IKE proposals mismatch
|
2012-12-19 10:40:32 +01:00 |
|
Reto Buerki
|
605985d122
|
Nonce: Let get_nonce, allocate_nonce return boolean
|
2012-07-16 14:53:34 +02:00 |
|
Adrian-Ken Rueegsegger
|
afaf1bdf5e
|
Use nonce_gen instead of rng to generate nonces
Replace usage of rng plugin with nonce generator to create nonces in
IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper.
|
2012-05-18 08:15:41 +02:00 |
|
Martin Willi
|
b24be29646
|
Merge branch 'ikev1'
Conflicts:
configure.in
man/ipsec.conf.5.in
src/libcharon/encoding/generator.c
src/libcharon/encoding/payloads/notify_payload.c
src/libcharon/encoding/payloads/notify_payload.h
src/libcharon/encoding/payloads/payload.c
src/libcharon/network/receiver.c
src/libcharon/sa/authenticator.c
src/libcharon/sa/authenticator.h
src/libcharon/sa/ikev2/tasks/ike_init.c
src/libcharon/sa/task_manager.c
src/libstrongswan/credentials/auth_cfg.c
|
2012-05-02 11:12:31 +02:00 |
|
Martin Willi
|
23f9e7a18d
|
Pass IKEv1 specific keymat to ike_keys hook
|
2012-03-20 17:31:37 +01:00 |
|
Martin Willi
|
15a682f4c2
|
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
|
2012-03-20 17:31:26 +01:00 |