Commit Graph

442 Commits

Author SHA1 Message Date
Tobias Brunner 2a59527659 Thread-safe wrapper around strerror(3)/strerror_r(3) added 2012-06-28 13:14:52 +02:00
Tobias Brunner bc6d944705 Added an option to rename the ipsec script during installation
Also rename the man page and adjust all references in the script, the
man page and other files.

Closes #194.
2012-06-25 16:53:38 +02:00
Tobias Brunner 720ba902c5 Enable xauth-generic by default but don't build it if IKEv1 is disabled 2012-06-25 11:07:49 +02:00
Andreas Steffen 83c75fd10f version bump to 5.0.0 2012-06-23 11:32:54 +02:00
Tobias Brunner 6d599fb964 Removed remaining pluto related configure options. 2012-06-13 11:33:32 +02:00
Tobias Brunner fff4b74db2 Bye bye Pluto!
Charon will take over IKEv1 duties from here.  This also removes
libfreeswan and whack.
2012-06-11 17:33:32 +02:00
Andreas Steffen 1527307ec9 version bump to 5.0.0rc1 2012-06-09 14:05:08 +02:00
Tobias Brunner 7a56c35fc9 Remove executable flag from source files. 2012-05-18 10:04:08 +02:00
Adrian-Ken Rueegsegger 04024b5de8 Add nonce plugin implementation
This nonce generator uses an RNG to generate nonces. The RNG quality is
currently set to RNG_WEAK which is the same value used in IKE init.

The plugin is enabled and thus built by default.
2012-05-18 08:15:40 +02:00
Tobias Brunner 0aa90701f6 It seems charon-nm has to be linked against libnm-util.
That's at least the case for NetworkManager 0.9.4 in Ubuntu 12.04.
2012-05-03 15:17:57 +02:00
Tobias Brunner b64f333612 Integrate nm plugin directly in charon-nm. 2012-05-03 13:57:03 +02:00
Tobias Brunner 1c7a733e36 Added a small libcharon wrapper intended to directly host the nm plugin.
For this reason it reclaims the --enable-nm configure option.
2012-05-03 13:38:14 +02:00
Tobias Brunner 94b48e071a Provide plugin list from charon, not internally in libcharon. 2012-05-03 13:14:07 +02:00
Martin Willi b24be29646 Merge branch 'ikev1'
Conflicts:
	configure.in
	man/ipsec.conf.5.in
	src/libcharon/encoding/generator.c
	src/libcharon/encoding/payloads/notify_payload.c
	src/libcharon/encoding/payloads/notify_payload.h
	src/libcharon/encoding/payloads/payload.c
	src/libcharon/network/receiver.c
	src/libcharon/sa/authenticator.c
	src/libcharon/sa/authenticator.h
	src/libcharon/sa/ikev2/tasks/ike_init.c
	src/libcharon/sa/task_manager.c
	src/libstrongswan/credentials/auth_cfg.c
2012-05-02 11:12:31 +02:00
Andreas Steffen 501c163859 version bump to 4.6.3 2012-04-30 09:48:21 +02:00
Andreas Steffen 6c97b16333 version bump to 4.6.3rc2 2012-04-22 17:41:20 +02:00
Andreas Steffen e90e106117 version bump to 4.6.3rc1 2012-04-05 09:11:47 +02:00
Tobias Brunner c0d39c205c Implemented AES-CMAC based PRF and signer.
The cmac plugin implements AES-CMAC as defined in RFC 4493 and the
signer and PRF based on it as defined in RFC 4494 and RFC 4615,
respectively.
2012-04-03 10:40:47 +02:00
Martin Willi b1f2f05c92 Merge branch 'ikev1-clean' into ikev1-master
Conflicts:
	configure.in
	man/ipsec.conf.5.in
	src/libcharon/daemon.c
	src/libcharon/plugins/eap_ttls/eap_ttls_peer.c
	src/libcharon/plugins/eap_radius/eap_radius_accounting.c
	src/libcharon/plugins/eap_radius/eap_radius_forward.c
	src/libcharon/plugins/farp/farp_listener.c
	src/libcharon/sa/ike_sa.c
	src/libcharon/sa/keymat.c
	src/libcharon/sa/task_manager.c
	src/libcharon/sa/trap_manager.c
	src/libstrongswan/plugins/x509/x509_cert.c
	src/libstrongswan/utils.h

Applied lost changes of moved files keymat.c and task_manager.c.
Updated listener_t.message hook signature in new plugins.
2012-03-20 17:57:53 +01:00
Martin Willi 85fc1eb640 Added an XAuth plugin that forwards authentication to EAP methods 2012-03-20 17:31:28 +01:00
Martin Willi e51a28fda8 Added a --disable-ikev2 option to disable IKEv2 support in charon 2012-03-20 17:31:26 +01:00
Tobias Brunner 3d44d735c6 Added generic XAuth backend, using secrets provided by credential sets. 2012-03-20 17:31:17 +01:00
Tobias Brunner 41e1e435d9 Removed xauth-null dummy plugin. 2012-03-20 17:31:17 +01:00
Andreas Steffen 8c583c110e version bump to 5.0.0dr1 2012-03-20 17:31:11 +01:00
Clavister OpenSource 4394d96844 IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin. 2012-03-20 17:31:11 +01:00
Tobias Brunner ccdd3a4cee Added configure option for the IKEv1 implementation in charon. 2012-03-20 17:30:39 +01:00
Andreas Steffen 584178c3bb version bump to 4.6.3dr2 2012-03-16 22:21:54 +01:00
Andreas Steffen c224f7654d version bump to 4.6.3dr1 2012-03-14 07:45:35 +01:00
Andreas Steffen 21b0f216b9 created libradius shared by eap-radius and tnc-pdp plugins 2012-03-13 16:27:17 +01:00
Andreas Steffen 70fd2d1af7 created tnc-pdp policy decision point plugin 2012-03-13 16:27:16 +01:00
Martin Willi 0853ff39c5 Build libradius if radattr plugin is enabled 2012-03-05 18:08:04 +01:00
Martin Willi caf4b88efc Added a radattr plugin that prints any received RADIUS notify to console 2012-03-05 18:08:04 +01:00
Martin Willi f0f94e2ce6 Moved generic RADIUS protocol support to a dedicated libradius 2012-03-05 18:08:04 +01:00
Andreas Steffen f3d6b9c88c added missing x character 2012-02-21 16:29:35 +01:00
Andreas Steffen 81ce0cf67e libtnccs is required by the eap_tnc plugin 2012-02-20 09:04:02 +01:00
Andreas Steffen f8b1b32768 charon does not depend on libtncif any more but tnc_tnccs does 2012-02-20 08:00:48 +01:00
Andreas Steffen 05f421b7d3 build libstrongswan if libimcv is built 2012-02-16 23:28:38 +01:00
Andreas Steffen a54cf814e6 version bump to 4.6.2 2012-02-16 00:10:36 +01:00
Andreas Steffen b3cbc53893 version bump to 4.6.2rc1 2012-02-05 22:24:56 +01:00
Andreas Steffen 2a77a27213 version bump to 4.6.2dr4 2012-02-02 18:26:12 +01:00
Tobias Brunner 5ec525c1d1 Added PKCS#8 stub plugin. 2012-02-01 18:27:45 +01:00
Martin Willi 023800ba62 Build libstrongswan if libfast gets built 2012-01-24 18:23:44 +01:00
Tobias Brunner 17e3a92661 Fix gettid() on Android, which is defined in unistd.h there. 2012-01-12 11:08:22 +01:00
Tobias Brunner 66f16d9629 Use native gettid() if available (which is the case on Android). 2012-01-10 18:31:33 +01:00
Andreas Steffen cb4da3f610 register aik certificate via ipsec attest 2011-12-25 14:31:26 +01:00
Andreas Steffen 005d981cc2 check for TrouSerS 2011-12-18 18:26:38 +01:00
Tobias Brunner c17f6f96e2 Log native thread ID when a thread is created.
If possible gettid() is used, otherwise pthread_self() is logged (which is
not completely portable, but seems to work on most supported platforms).
2011-12-16 16:44:38 +01:00
Andreas Steffen 0e94ae1286 Revert "fixed caption alignment"
This reverts commit d463def798.
2011-12-16 14:19:14 +01:00
Andreas Steffen d463def798 fixed caption alignment 2011-12-16 14:15:46 +01:00
Andreas Steffen bc74e1aaf0 version bump to 4.6.2dr2 2011-12-12 10:38:23 +01:00