GEANTLink

Amebis/GEANTLink

Fork 0

Commit Graph

Select branches

Hide Pull Requests

master

ver1.0

ver1.1

#26

1.0

1.0-alpha0

1.0-alpha1

1.0-alpha10

1.0-alpha10-owntls

1.0-alpha11

1.0-alpha12

1.0-alpha13

1.0-alpha14

1.0-alpha15

1.0-alpha16

1.0-alpha17

1.0-alpha2

1.0-alpha3

1.0-alpha4

1.0-alpha5

1.0-alpha6

1.0-alpha7

1.0-alpha8

1.0-alpha9

1.0-beta

1.0-beta1

1.0-beta2

1.0-beta3

1.0-beta4

1.0-beta5

1.0-beta6

1.0-beta7

1.0-beta8

1.0a

1.0b

1.0c

1.0d

1.0e

1.0f

1.0g

1.0h

1.0i

1.1

1.1-beta

1.1-beta1

1.1-beta2

1.1a

1.1b

1.1c

1.1d

1.1e

1.1f

1.1g

1.1h

1.2

1.2-beta

1.2-beta1

1.2-beta2

1.2a

1.2b

1.2c

1.2d

1.2e

1.2f

1.2g

1.3

1.3a

1.3b

1.3c

1.3d

1.3e

1.3f

1.3g

3d6849a523 Peer correctly returns providers configuration instead of method configuration in method_tls::get_result() Simon Rozman 2016-08-15 14:13:14 +02:00
217c3dd090 Issue with TLS credentials panel resetting PAP credentials in TTLS fixed Simon Rozman 2016-08-15 14:04:50 +02:00
e807336e7b The TLS phase can be determined from flags alone, therefore m_phase member eliminated Simon Rozman 2016-08-15 10:40:27 +02:00
95426cde7c Clean-up Simon Rozman 2016-08-15 10:09:01 +02:00
92c62c53d7 16B PAP password padding added (RFC 5281) Simon Rozman 2016-08-15 05:40:23 +02:00
99aa53726d - PPP authentication EAP response packet is correctly formed now - MS-MPPE-Send-Key/MS-MPPE-Recv-Key sorted out Simon Rozman 2016-08-14 21:00:59 +02:00
95e2f7e01b Encryption/decryption revised - Number of memory copying reduced - HMAC verification of server packets added - Handshake hashing simplified Simon Rozman 2016-08-14 18:51:18 +02:00
735d669887 Check for "change cipher spec" before server "finished" message added Simon Rozman 2016-08-14 16:32:28 +02:00
a8db309a76 Wrong HMAC byte order issue fixed Simon Rozman 2016-08-14 16:31:38 +02:00
7b94f01aa7 method_tls::create_key() optimization Simon Rozman 2016-08-14 16:31:07 +02:00
12beee54ad Ambiguous variable name changed Simon Rozman 2016-08-14 16:24:07 +02:00
956ef9bd4e CryptGenRandom() return status check added Simon Rozman 2016-08-14 16:22:59 +02:00
f9c5f608d0 Fixed missing server handshake message hashing Simon Rozman 2016-08-14 14:03:12 +02:00
4982fc1a9a Ambiguous logical expression equipped with parentheses Simon Rozman 2016-08-14 14:01:20 +02:00
e7e8a88f32 Initialization of eap::tls_conn_state introduced Simon Rozman 2016-08-14 13:32:19 +02:00
9a2663eb18 Non TLS1PRF case fixed in method_tls::prf() Simon Rozman 2016-08-14 13:31:39 +02:00
940def31e6 Unused tls_conn_state member removed Simon Rozman 2016-08-14 13:29:51 +02:00
47653492a2 Session key importing honours MSDN recommendation about exponent-one key usage Simon Rozman 2016-08-14 12:44:49 +02:00
d1925a0704 method_tls::prf() simplified Simon Rozman 2016-08-14 12:41:19 +02:00
a90a7722c7 PAP introduced Simon Rozman 2016-08-13 18:56:37 +02:00
ae37c9aa6c TLS and TTLS distinction Simon Rozman 2016-08-13 18:55:33 +02:00
cbda758178 MS-MPPE-Send-Key and MS-MPPE-Recv-Key are swapped now Simon Rozman 2016-08-13 18:52:20 +02:00
04444eb99d Encrypted pre-master secret byte order is correct now Simon Rozman 2016-08-13 18:51:14 +02:00
b7b45ea64c Cipher block length is correctly translated from bits to bytes now Simon Rozman 2016-08-13 18:50:09 +02:00
4528f2d1fc Simplification Simon Rozman 2016-08-13 18:48:56 +02:00
eb918f3141 Processing of vendor specific TLS messages introduced Simon Rozman 2016-08-13 18:48:02 +02:00
c749753c68 State constants renamed more systematically Simon Rozman 2016-08-13 18:45:40 +02:00
9f92a73aa1 make_handshake() renamed to make_message() and made more general Simon Rozman 2016-08-13 18:42:52 +02:00
6d54d45512 Pre-master secret encryption moved to make_client_key_exchange() Simon Rozman 2016-08-13 18:39:22 +02:00
9498e8c9a9 Fixed issue occurred after careless eap::tls_random::time elimination Simon Rozman 2016-08-13 18:32:40 +02:00
f9c6bce0f8 Diameter AVP helper structures added Simon Rozman 2016-08-13 18:26:19 +02:00
3d54c84430 method_ttls is now descendant of method_tls Simon Rozman 2016-08-13 08:48:24 +02:00
1306c958fc config_method_ttls is now descendant of config_method_tls Simon Rozman 2016-08-13 08:48:01 +02:00
09924ea3d2 credentials_ttls is descendant of credentials_tls again Simon Rozman 2016-08-13 08:36:10 +02:00
537d0c0cbc Changing TLS configuration resets TLS session resumption Simon Rozman 2016-08-13 08:31:03 +02:00
6408dbe237 Missing credentials error check lost with b71e30f642821afcc77ace8fdbb5feaf40c1ae5b reimplemented Simon Rozman 2016-08-13 08:29:01 +02:00
534f6f6d7d tls_conn_state is class now Simon Rozman 2016-08-13 08:09:47 +02:00
f7fdfb8dda EAP packet type check moved to Main.cpp Simon Rozman 2016-08-13 08:09:13 +02:00
c7a41d891a TLS work continues... Simon Rozman 2016-08-12 21:09:50 +02:00
a8c306953a TLS work continues... Simon Rozman 2016-08-11 15:13:50 +02:00
77fe6b1bed TLS connection state moved from eap::method_tls to eap::method_tls::conn_state to make reusable later Simon Rozman 2016-08-11 12:00:38 +02:00
659629ed93 Clean-up Simon Rozman 2016-08-11 09:44:01 +02:00
6b4f597f27 - Microsoft's HMAC had problems with secrets longer than 16B, therefore we implemented our own - Key generation finished - Additional memory sanitization Simon Rozman 2016-08-10 16:10:40 +02:00
fb0fa0de31 HMAC fixed to start with the correct key now Simon Rozman 2016-08-10 11:18:20 +02:00
e92f47677d TLS implementation continues... Simon Rozman 2016-08-09 18:37:12 +02:00
ba5bf1e533 HMAC cleanup Simon Rozman 2016-08-09 06:39:33 +02:00
1bf51fda25 win_runtime_error moved to WinStd; eapxml functions return HRESULT now Simon Rozman 2016-08-09 01:05:00 +02:00
b71e30f642 EAP_ERROR replaced with C++ exceptions for increased code readability Simon Rozman 2016-08-08 22:59:17 +02:00
788c8cdb16 TLS implementation continues... Simon Rozman 2016-08-08 18:52:13 +02:00
ce9e636840 TLS start packet processing logic made more robust Simon Rozman 2016-08-08 10:42:24 +02:00
8f4c177d49 eap namespace clean-up Simon Rozman 2016-08-08 10:13:34 +02:00
bf4b7f9787 Packet data updated correctly now; Missing server ACK detection added Simon Rozman 2016-08-08 08:59:11 +02:00
be3c591955 TLS fragmented message correctly assembled now & Event manifest revised Simon Rozman 2016-08-07 13:51:40 +02:00
d199cb68bb Work continues... - More event reporting added - unsigned long and DWORD replaced with unsigned int for code readability and (possibly) portability - Client hello message fixed - SSL version reverted to TLS 1.0, will catch-up later if required Simon Rozman 2016-08-07 12:15:45 +02:00
e649a86b1f Error checking and size asserts added Simon Rozman 2016-08-07 06:56:29 +02:00
a0efb6742d EAP-TTLS work continues... Simon Rozman 2016-08-06 16:27:15 +02:00
b39cc927d2 Session.h/cpp >> Method.h/cpp Simon Rozman 2016-08-06 10:36:58 +02:00
faadb712fc Sessions are actually methods now Simon Rozman 2016-08-06 10:28:15 +02:00
97d0f75f8d eap::method introduced Simon Rozman 2016-08-06 09:52:29 +02:00
4114863a94 Duplicate error logging removed Simon Rozman 2016-08-06 08:21:14 +02:00
afe5450b95 Peer (Main.cpp) no longer manipulates session directly. Session management moved to eap::peer. Simon Rozman 2016-08-06 07:57:39 +02:00
ac606b7a2e config_providers renamed to config_provider_list to avoid confusion with config_provider Simon Rozman 2016-08-06 07:06:48 +02:00
2aa4bce8cc eap::config::m_module reference again Simon Rozman 2016-08-06 07:01:12 +02:00
b0323d894a Issues with pre-shared credentials after being moved to heap fixed Simon Rozman 2016-08-05 16:28:21 +02:00
42459ff16a EAP events changed to use numerical EAP type Simon Rozman 2016-08-05 16:15:08 +02:00
2711425677 Documentation update Simon Rozman 2016-08-05 15:52:27 +02:00
54bb2050fa peer and peer_ui are no longer templates; method specific BLOB management moved from Main(_UI).cpp to modules. Simon Rozman 2016-08-05 15:45:45 +02:00
437f5f91b8 eap::peer<> and eap::session<> redundant template argument removed Simon Rozman 2016-08-05 13:45:18 +02:00
91dcc0bbbc peer_base eliminated Simon Rozman 2016-08-05 13:40:54 +02:00
a60458cdab eap::module is no longer abstract Simon Rozman 2016-08-05 13:18:25 +02:00
4fc029138c config_method_with_cred is no longer a template Simon Rozman 2016-08-05 11:51:59 +02:00
f4be571499 Pre-shared credentials moved to heap Simon Rozman 2016-08-05 11:38:43 +02:00
460adb9858 m_module is now a pointer instead of reference Simon Rozman 2016-08-05 11:23:59 +02:00
a9ecde86d9 TLS specific package communication moved from TTLS to TLS session Simon Rozman 2016-08-05 11:01:30 +02:00
7e7c657358 Documentation update Simon Rozman 2016-08-05 10:55:23 +02:00
f2aa43913d EAP-TTLS session development continues... Simon Rozman 2016-08-05 00:32:57 +02:00
a102b43a19 eap::type_t >> winstd::eap_type_t Simon Rozman 2016-08-04 12:08:20 +02:00
22a87bf90d eap::session::get_response_packet() implemented Simon Rozman 2016-08-04 10:07:03 +02:00
caf0352833 Packet processing methods made pure virtual in eap::session<>, stubs created in eap::session_ttls Simon Rozman 2016-08-03 15:31:06 +02:00
f68a65f8f8 eap::session<> remembers basic EAP session parameters now Simon Rozman 2016-08-03 15:22:52 +02:00
3e82b7df49 eap::method_property => winstd::eap_method_prop Simon Rozman 2016-08-03 15:09:58 +02:00
cb24fbd6a3 eap::peer_ttls::get_method_properties() implemented Simon Rozman 2016-08-03 13:50:12 +02:00
b32b63631a Guests are not allowed to save credentials Simon Rozman 2016-08-03 12:36:29 +02:00
5fe06deb97 Provider-locked configuration notice removed from credential prompt for aesthetic reasons Simon Rozman 2016-08-03 12:35:51 +02:00
cadf7272df Credential UI revised to honor read-only, allow-save, and config/prompt mode correctly Simon Rozman 2016-08-03 12:34:49 +02:00
2868fd3848 Cached credentials have priority now Simon Rozman 2016-08-03 10:17:40 +02:00
9fed6dcf9d Sub-module update Simon Rozman 2016-08-03 09:22:52 +02:00
a81ddde411 MSVC specific __super keyword replaced Simon Rozman 2016-08-03 09:22:41 +02:00
aafd012809 Credential dialog is no longer displayed partially off the screen Simon Rozman 2016-07-21 23:53:40 +02:00
3e60bebe3a Credential's "Remember" checkbox logic revised Simon Rozman 2016-07-21 23:52:36 +02:00
6ae8029a47 config_method split into config_method and config_method_with_cred<> Simon Rozman 2016-07-21 22:01:08 +02:00
ac88d55fe4 EapPeerInvokeConfigUI() checks for blank configuration now Simon Rozman 2016-07-21 21:57:31 +02:00
955d7f5dc1 Missing credentials are correctly honoured now Simon Rozman 2016-07-21 14:21:33 +02:00
b4667cac18 Inner-method-name-determining-from-NULL-pointer-crash fixed :) Simon Rozman 2016-07-21 14:15:39 +02:00
98f20668c3 credentials_ttls::target_suffix() implemented Simon Rozman 2016-07-21 14:11:59 +02:00
df773b649c Event colours updated for greater disambiguation between EAPHost and GÉANTLink entries Simon Rozman 2016-07-21 13:29:55 +02:00
6d8bd3f1c1 Cached credentials are correctly honored now Simon Rozman 2016-07-21 13:21:40 +02:00
fa84cf93b9 32-bit C compiler warning fixed Simon Rozman 2016-07-21 12:52:30 +02:00
f459a036da peer_ttls::get_identity() finished Simon Rozman 2016-07-21 12:36:18 +02:00
cc43b44d91 credentials_ttls::get_identity() introduced Simon Rozman 2016-07-21 12:35:19 +02:00