Dimitri Papadopoulos
|
fe795bf5b3
Reorganize #include
|
3 rokov pred |
David Woodhouse
|
931bdf10b4
Split out construct_esp_packet() to avoid duplication
|
5 rokov pred |
David Woodhouse
|
8349cfdecd
Add HMAC-SHA256-128 support for ESP
|
5 rokov pred |
David Woodhouse
|
347060a852
Consolidate common parts of setup_esp_keys()
|
5 rokov pred |
David Woodhouse
|
7f10000484
Generate ESP IV from previous packet instead of using RAND_bytes()
|
5 rokov pred |
David Woodhouse
|
7d5b9d7484
Reuse OpenSSL HMAC_CTX for ESP packets
|
5 rokov pred |
Daniel Lenski
|
4daac3fa2e
Save latest ESP sequence number even if replay protection isn't in use
|
6 rokov pred |
Daniel Lenski
|
0ca5974685
add new_keys argument to esp_setup_keys() in preparation for supporting GlobalProtect ESP
|
7 rokov pred |
David Woodhouse
|
d8b283f168
Fix build breakage in OpenSSL ESP
|
7 rokov pred |
Daniel Lenski
|
b2b1dd0702
store length of ESP encryption and HMAC keys so that they can be manipulated separately for both Juniper and GP
|
7 rokov pred |
Piotr Kubaj
|
9c36560d3e
Fix build with LibreSSL.
|
8 rokov pred |
David Woodhouse
|
585543bdd3
Fix crash in init_esp_ciphers with OpenSSL < 1.1
|
8 rokov pred |
David Woodhouse
|
e0689b5518
More OpenSSL 1.1 fixes
|
8 rokov pred |
David Woodhouse
|
c547093744
Fix build with OpenSSL 1.1 (HEAD)
|
9 rokov pred |
David Woodhouse
|
7a8630498f
Fix OpenSSL ESP HMAC calculation
|
9 rokov pred |
David Woodhouse
|
2c6174775f
Accept packets on old ESP setup during changeover
|
9 rokov pred |
David Woodhouse
|
92e374fae4
Handle ESP rekeying
|
9 rokov pred |
David Woodhouse
|
22021bc51b
Treat SPI as a uint32_t instead of char[]
|
9 rokov pred |
David Woodhouse
|
c43d15b5e2
Add ESP support for OpenSSL
|
9 rokov pred |