Changelog for ike-2.2.0-alpha-7


------------------------------------------------------------------------
r619 | mgrooms | 2009-04-29 05:42:47 +0000 (Wed, 29 Apr 2009) | 2 lines

Add the Unix UI support for Cisco Hybrid Authentication.

------------------------------------------------------------------------
r617 | mgrooms | 2009-04-29 05:18:03 +0000 (Wed, 29 Apr 2009) | 1 line

Add support for the Cisco Hybrid authentication mode. This is a variant
of the draft standard Hybrid authentication mode but augments it by
sending the group name as a key identifier identity and an additional
password hash notification payload. Support for this would have taken
much longer if this had not already been worked out by the good folks
over at the vpnc project.
------------------------------------------------------------------------
r616 | mgrooms | 2009-04-29 04:14:12 +0000 (Wed, 29 Apr 2009) | 1 line

Work around an issue with Adtran gateways. They request RADIUS-CHAP
during Xauth when they want generic credentials. To denote this, they do
not send a challenge attribute. We work around this by treating the
RADIUS-CHAP more or less like a generic request when the challenge
attribute is absent.
------------------------------------------------------------------------
r614 | mgrooms | 2009-04-26 19:54:05 +0000 (Sun, 26 Apr 2009) | 2 lines

Fix a build issue that caused some RSA conversion function to fail due
to const issues. We fix this by checking the openssl version and
defining our variable with the correct const type.

------------------------------------------------------------------------
r612 | mgrooms | 2009-04-11 19:02:07 +0000 (Sat, 11 Apr 2009) | 1 line

Revert the Cisco unity version number sent in our vendor ID. The
ipsec-tools racoon daemon only understands a single version so using
another version breaks compatibility. This problem was reported by
Tai-hwa Liang.
------------------------------------------------------------------------