Commit Graph

188 Commits

Author SHA1 Message Date
Martin Willi 4e73f85b81 Remove xauth_authenticator, we handle it in the task 2012-03-20 17:31:15 +01:00
Martin Willi 69adeb5bf2 Replace xauth_request task with a new stub where we reimplement it 2012-03-20 17:31:15 +01:00
Martin Willi 7c27c914d4 Implemented IKEv1 pubkey SIG payload processing in an authenticator 2012-03-20 17:31:14 +01:00
Martin Willi 2792587875 Implemented IKEv1 PSK HASH payload processing in separated authenticator 2012-03-20 17:31:14 +01:00
Martin Willi c64a4b4f8e Implemented post-authentication certificate handling for IKEv1 2012-03-20 17:31:13 +01:00
Martin Willi 0bcdb8e571 Implemented pre-authentication certificate handling for IKEv1 2012-03-20 17:31:13 +01:00
Clavister OpenSource f00ffe4dd2 IKEv1 XAuth: Added changes to Makefile.am to compile the xauth_null plugin. 2012-03-20 17:31:11 +01:00
Clavister OpenSource 9c5366446a IKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins to talk to servers with different quirks for XAuth authentication. 2012-03-20 17:31:11 +01:00
Tobias Brunner 1cc4ec46cf Task added for IKEv1 NAT detection.
There is already support for both Main and Aggressive Mode.
2012-03-20 17:31:10 +01:00
Clavister OpenSource 2e210e3ef5 IKEv1 XAuth: Added a job to call the initiate_xauth method of ike_sa after the completion of the current set of tasks is complete. 2012-03-20 17:31:09 +01:00
Martin Willi a2f8fc9711 Use a dedicated IKEv1 vendor ID task to fix using IKEv2 payloads in IKEv1 2012-03-20 17:31:07 +01:00
Martin Willi 017d98bf39 Merged IKEv1 attribute payload/data into configuration payload/attribute 2012-03-20 17:30:49 +01:00
Clavister OpenSource 23f4e4b42d IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. 2012-03-20 17:30:49 +01:00
Clavister OpenSource 54a8a94fa9 IKEv1 ConfigMode: Added TRANSACTION exchange type. Added attribute_payload (IKEv2 equiv cp_payload) and data_attribute (IKEv2 equiv configuration_attribute) payload types. Did not combine with IKEv2 because it wasn't trivial to do so. This might be a task worth investigating in the future, because there is a decent amount of shared code here. 2012-03-20 17:30:49 +01:00
Martin Willi 2b04aa46ea Added a quick mode task stub 2012-03-20 17:30:44 +01:00
Tobias Brunner 273f2f8054 Added factory function to create task_manager_t implementations. 2012-03-20 17:30:43 +01:00
Tobias Brunner 4b64a1a17d Added factory function to create keymat_t implementations. 2012-03-20 17:30:43 +01:00
Tobias Brunner 0fc9acdd23 Added stub for IKEv1 keymat_t implementation. 2012-03-20 17:30:42 +01:00
Tobias Brunner 6ab936f046 Use keymat_t as common interface, renamed current implementation to _v2. 2012-03-20 17:30:42 +01:00
Martin Willi ee50a29385 Implemented IKEv1 hash payload 2012-03-20 17:30:42 +01:00
Martin Willi c73c832c5a Added an IKEv1 main mode task stub 2012-03-20 17:30:41 +01:00
Martin Willi 4a09d9ee7f Added a stub for a IKEv1 task manager 2012-03-20 17:30:41 +01:00
Martin Willi e69f7dcddf Use task manager as generic interface, renamed implementation to _v2. 2012-03-20 17:30:41 +01:00
Andreas Steffen 70fd2d1af7 created tnc-pdp policy decision point plugin 2012-03-13 16:27:16 +01:00
Martin Willi caf4b88efc Added a radattr plugin that prints any received RADIUS notify to console 2012-03-05 18:08:04 +01:00
Martin Willi f0f94e2ce6 Moved generic RADIUS protocol support to a dedicated libradius 2012-03-05 18:08:04 +01:00
Tobias Brunner 856baca23e Fixed monolithic build of libcharon with libtnccs enabled. 2011-11-08 18:35:11 +01:00
Tobias Brunner 59c5f048bb Correctly refer to tnc-tnccs plugin when building monolithically. 2011-11-08 18:35:11 +01:00
Andreas Steffen f0a8bf47f7 refactored TNC framework 2011-10-25 01:10:16 +02:00
Andreas Steffen c008d2cc46 moved imv_manager to libtnccs 2011-10-25 01:10:16 +02:00
Andreas Steffen f0fa002fd1 moved imc_manager to libtnccs 2011-10-25 01:10:16 +02:00
Martin Willi 8b6881cfc5 Added socket plugin feature loading callback 2011-10-14 10:05:48 +02:00
Martin Willi ba2201edf0 Added plugin stub of certexpire plugin 2011-08-22 18:42:32 +02:00
Andreas Steffen c77af76807 created tnc-ifmap plugin 2011-08-10 09:29:33 +02:00
Martin Willi efee3ed80f Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name 2011-08-08 13:36:56 +02:00
Tobias Brunner 60d62b9e5c Don't install the libraries directly in lib/.
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
2011-07-05 14:42:14 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Andreas Steffen 7c4d4d209d make IMC/IMV pairs independent of libcharon 2011-06-01 16:33:44 +02:00
Andreas Steffen 3a47530e96 moved imc_test/imv_test plugins to libimcv 2011-06-01 07:55:07 +02:00
Andreas Steffen 510f37abd4 implemented the RFC 5792 PA-TNC protocol and an example IMC/IMV pair 2011-05-30 21:30:09 +02:00
Andreas Steffen 1be296dfb2 implemented the PEAP tunneling protocol as an EAP plugin 2011-04-06 14:42:02 +02:00
Duncan Salerno 80dca77a50 Added SIM card backend based on pcsc-lite 2011-04-04 08:51:50 +02:00
Martin Willi f58db72482 Splitted sim_manager.h header to sim_{card,provider,hooks}.h 2011-03-08 16:42:27 +01:00
Martin Willi 007c47088c Implemented permanent certificate coupling plugin 2011-02-28 16:39:40 +01:00
Martin Willi 3e74ebbecc Added an advanced duplicate checking plugin with liveness check of old SA 2011-02-28 15:37:18 +00:00
Martin Willi 5e603aba4e Implemented a in-memory peer identity whitelist plugin 2011-02-28 15:00:46 +01:00
Andreas Steffen f04d1c2dfe replaced ipsec up %startall command by start_action job 2011-02-09 22:27:04 +01:00
Martin Willi caf20266e0 Fixed tnc-imc/imv library names when building monolithic 2011-02-08 11:22:02 +01:00
Martin Willi c6c7c7001c Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv 2011-02-08 11:03:10 +01:00
Andreas Steffen f652995b21 implemented dynamic detection of TNCCS protocol 2011-01-31 00:59:17 +01:00
Andreas Steffen de1cb3283a configure recommendation policy via strongswan.conf 2010-11-14 11:23:47 +01:00
Andreas Steffen 10647add81 moved recommendation handling to the tnc_imv plugin 2010-11-13 10:02:02 +01:00
Andreas Steffen 3041956770 created enum names for action recommendations and evaluation results 2010-11-10 21:23:37 +01:00
Andreas Steffen b25633314e implement IMC and IMV manager classes 2010-11-09 20:43:50 +01:00
Andreas Steffen 1888dd6bd5 implemented IMC/IMV handler 2010-11-09 20:43:50 +01:00
Tobias Brunner f79161e866 Stub plugin for Maemo specific extensions added. 2010-10-14 17:36:17 +02:00
Andreas Steffen 8dcc56dcc0 created tnc-imc and tnc-imv plugins 2010-10-07 23:31:23 +02:00
Andreas Steffen 6d0e9cf046 created hull for TNCCS 2.0 plugin 2010-10-05 21:15:24 +02:00
Andreas Steffen 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin 2010-09-28 23:34:04 +02:00
Martin Willi 30cd31fb69 Added a simple led plugin to control Linux LEDs based on IKE activity 2010-09-08 12:00:57 +02:00
Tobias Brunner 062a602216 Moved all kernel plugins to libhydra. 2010-09-02 19:01:26 +02:00
Tobias Brunner 6f449d2efd Moved kernel interface to libhydra. 2010-09-02 19:01:25 +02:00
Tobias Brunner 8c387909eb Moved scheduler_t to libhydra. 2010-09-02 19:01:24 +02:00
Tobias Brunner 09ae31f13a Added kernel event handler stub. 2010-09-02 19:01:23 +02:00
Tobias Brunner bd50254ca9 Added an interface for kernel event listeners. 2010-09-02 19:01:23 +02:00
Tobias Brunner 07500cda69 Move callback_job_t to libhydra. 2010-09-02 19:01:22 +02:00
Tobias Brunner 633fbe4fde Move processor_t (thread-pool) to libhydra. 2010-09-02 19:01:22 +02:00
Andreas Steffen d93e2e5409 created an eap-tnc method hull 2010-08-30 15:36:34 +02:00
Martin Willi 8f01815143 Build dedicated plugin lists for each strongSwan component 2010-08-12 14:46:57 +02:00
Andreas Steffen 26eb9b2d17 added eap_ttls plugin configuration 2010-08-07 11:26:04 +02:00
Martin Willi 0f82a47063 Moved TLS stack to its own library 2010-08-03 15:39:26 +02:00
Martin Willi 0b71bc7af0 Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs 2010-08-03 15:39:25 +02:00
Martin Willi 1c8c924610 Moved addrblock plugin to libcharon 2010-07-13 10:26:07 +02:00
Martin Willi 2ccc02a4fd Moved credential manager to libstrongswan 2010-07-13 10:26:07 +02:00
Tobias Brunner b77e493bea Explicitly refer to LIBCAP in Makefiles. 2010-06-15 19:57:31 +02:00
Martin Willi d2c358742a Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database 2010-06-02 15:59:44 +02:00
Andreas Steffen 9a0333fa62 moved resolve plugin from libcharon to libhydra 2010-05-04 23:53:08 +02:00
Tobias Brunner 257e27df07 Fixing out-of-tree build after adding dependency to config.status. 2010-04-29 13:29:53 +02:00
Martin Willi b0e789035c Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated 2010-04-29 11:28:27 +02:00
Martin Willi 29a46aacad Moved ha plugin to libcharon 2010-04-07 13:55:16 +02:00
Tobias Brunner a5ec302547 Moved attr plugin from libcharon to libhydra. 2010-04-06 12:47:40 +02:00
Martin Willi 0d7b48a388 Added a farp plugin stop to spoof ARP requests 2010-03-25 14:39:32 +01:00
Martin Willi beaa048eed Added DHCP plugin stub. 2010-03-25 14:28:28 +01:00
Tobias Brunner 58f86d0f0f Changed all usages of lib->attributes to hydra->attributes. 2010-03-24 18:54:26 +01:00
Tobias Brunner 75dc019252 Moving attr-sql plugin from libstrongswan to libhydra. 2010-03-24 18:53:09 +01:00
Tobias Brunner 78060ba063 Do not link libcharon to libstrongswan.
Linking to libstrongswan breaks the integrity-tests because libtool
relinks libcharon to libstrongswan on install, thus changing the
checksum.
2010-03-19 13:34:53 +01:00
Tobias Brunner bd3f8ea30b Convert charon into libcharon. 2010-03-19 13:34:52 +01:00
Tobias Brunner 08c5572602 Moving charon to libcharon. 2010-03-19 13:34:52 +01:00