Andreas Steffen
|
022df06e1a
|
version bump to 5.0.4dr1
|
2013-04-09 15:20:49 +02:00 |
|
Andreas Steffen
|
676e862487
|
fixed another printf statement
|
2013-04-09 15:16:49 +02:00 |
|
Andreas Steffen
|
1a185ae14b
|
fixed printf statements
|
2013-04-08 22:21:14 +02:00 |
|
Andreas Steffen
|
12fa1784d0
|
emit a single assig_vips bus message for all VIPs
|
2013-04-06 14:16:30 +02:00 |
|
Andreas Steffen
|
ba2880d569
|
ifmap plugin subscribes to assing_vip bus signal
|
2013-04-06 11:09:41 +02:00 |
|
Andreas Steffen
|
8dade2d146
|
fixed configure options
|
2013-04-04 21:09:07 +02:00 |
|
Andreas Steffen
|
2a4915e87a
|
cleaned up XML code in tnccs-11 plugin
|
2013-04-04 17:12:07 +02:00 |
|
Andreas Steffen
|
93f53a78b5
|
fixed memory leak
|
2013-04-03 21:38:04 +02:00 |
|
Andreas Steffen
|
3ea6fcb593
|
properly handle orphaned renewSession jobs
|
2013-04-03 21:38:04 +02:00 |
|
Andreas Steffen
|
91503c2112
|
support chunked HTTP responses
|
2013-04-03 21:38:04 +02:00 |
|
Andreas Steffen
|
1044710b04
|
implemented periodic IF-MAP RenewSession request
|
2013-04-03 21:38:04 +02:00 |
|
Andreas Steffen
|
e019fa60b7
|
version bump to 5.0.3
|
2013-04-02 08:55:40 +02:00 |
|
Andreas Steffen
|
d4a1ae3af1
|
allow retrieval of private keys from other credential sets
|
2013-04-02 08:55:40 +02:00 |
|
Andreas Steffen
|
c2c4125cde
|
improve checking of sent and received http messages
|
2013-04-02 08:55:40 +02:00 |
|
Andreas Steffen
|
5a516a83da
|
fixed capability metadata
|
2013-03-31 22:15:42 +02:00 |
|
Andreas Steffen
|
fec7c824b8
|
fix start of wpa_supplicant
|
2013-03-31 19:48:07 +02:00 |
|
Andreas Steffen
|
0cf4dc53c7
|
updated strongswan.conf man page for tn_ifmap plugin
|
2013-03-31 19:05:53 +02:00 |
|
Andreas Steffen
|
45e2be2399
|
renamed tnc_ifmap2 plugin to tnc_ifmap
|
2013-03-31 16:37:30 +02:00 |
|
Andreas Steffen
|
bde8e287d9
|
removed obsoleted tnc_ifmap plugin
|
2013-03-31 16:07:08 +02:00 |
|
Andreas Steffen
|
4581767493
|
implemented http basic authentication
|
2013-03-31 15:59:32 +02:00 |
|
Andreas Steffen
|
e8675cb35d
|
parse IF-MAP server URI
|
2013-03-31 11:39:06 +02:00 |
|
Andreas Steffen
|
4f4875ff13
|
implemented publish_enforcement_report and endSession methods
|
2013-03-30 13:19:27 +01:00 |
|
Andreas Steffen
|
628fee4563
|
implemented publish_ike_sa method
|
2013-03-30 09:15:16 +01:00 |
|
Andreas Steffen
|
c6f9b1fb1f
|
ifmap message type is known
|
2013-03-30 08:22:33 +01:00 |
|
Andreas Steffen
|
b02bdc1e06
|
implemented publish_device_ip method
|
2013-03-30 08:11:10 +01:00 |
|
Andreas Steffen
|
14bf3cc1bd
|
added IF-MAP SOAP error handling
|
2013-03-30 08:10:39 +01:00 |
|
Andreas Steffen
|
cd13c9a90f
|
created tnc_ifmap2_soap_msg class
|
2013-03-29 23:09:11 +01:00 |
|
Andreas Steffen
|
b885c3cde6
|
implement NewSession and PurgePublisher messages using the libxml2 library
|
2013-03-29 22:29:12 +01:00 |
|
Andreas Steffen
|
e99aab35de
|
set up a new IF-MAP session
|
2013-03-29 09:42:06 +01:00 |
|
Andreas Steffen
|
5a8dd63433
|
fixed typo
|
2013-03-27 22:56:37 +01:00 |
|
Andreas Steffen
|
7e20062fdf
|
Added hostapd package to base image
|
2013-03-22 23:53:39 +01:00 |
|
Andreas Steffen
|
8f72ba4aff
|
Added Framed-IP-Address information to RADIUS accounting records
|
2013-03-22 23:52:01 +01:00 |
|
Andreas Steffen
|
9fa9f68d8d
|
enforce singular of packets
|
2013-03-22 21:14:04 +01:00 |
|
Andreas Steffen
|
0b6c43f038
|
Added ikev2/rw-eap-framed-ip-radius scenario
|
2013-03-22 19:08:42 +01:00 |
|
Andreas Steffen
|
4a3c1cdc2b
|
Store debug output from standalone IMC/IMVs
|
2013-03-22 16:45:24 +01:00 |
|
Andreas Steffen
|
1eada67bcb
|
Added ikev2/ip-two-pools-v4v6-db scenario
|
2013-03-22 12:18:43 +01:00 |
|
Andreas Steffen
|
753e0a0099
|
version bump to 5.0.3rc1
|
2013-03-22 10:38:25 +01:00 |
|
Andreas Steffen
|
a1bc67d6c9
|
Switch encoding of AR Identity Value from binary to UTF-8
|
2013-03-22 10:37:49 +01:00 |
|
Andreas Steffen
|
2c80ab3def
|
Build TNC-enabled wpa_supplicant
|
2013-03-22 10:33:39 +01:00 |
|
Andreas Steffen
|
6e58f0a34f
|
activate logging before loading plugins
|
2013-03-21 18:04:31 +01:00 |
|
Andreas Steffen
|
f361a85ebb
|
added ITA Echo PA-TNC Subtype and ITA Echo Attribute type
|
2013-03-11 09:30:20 +01:00 |
|
Andreas Steffen
|
e99cf029dc
|
version bump to 5.0.3dr4
|
2013-03-11 09:29:22 +01:00 |
|
Andreas Steffen
|
a498c7a9c3
|
moved ar_id from imv_agent to imv_state
|
2013-03-11 08:54:02 +01:00 |
|
Andreas Steffen
|
486f4b5838
|
added some otherNames OIDs
|
2013-03-06 11:50:32 +01:00 |
|
Andreas Steffen
|
d7eec03815
|
removed unneeded DS files
|
2013-03-05 09:08:25 +01:00 |
|
Andreas Steffen
|
1a9dee5d22
|
instead of cloning use extract_buf() method
|
2013-03-04 23:21:21 +01:00 |
|
Andreas Steffen
|
c88104aa25
|
make TNC Access Requestor ID available to IMVs
|
2013-03-03 17:18:09 +01:00 |
|
Andreas Steffen
|
1fc609fed3
|
updated NEWS
|
2013-03-03 17:17:08 +01:00 |
|
Andreas Steffen
|
7b11a1dcdc
|
upgraded KVM test suite to Linux 3.8 kernel
|
2013-03-03 11:59:07 +01:00 |
|
Andreas Steffen
|
f7580a5a67
|
added openssl-ikev2/alg-aes-gcm scenario
|
2013-03-03 11:43:52 +01:00 |
|
Andreas Steffen
|
81419b9748
|
use DNs in tnc/tnccs-20-tls scenario
|
2013-03-03 10:47:17 +01:00 |
|
Andreas Steffen
|
c9418d4fd3
|
added getpwuid_r and initgroups to whitelist
|
2013-03-03 09:04:49 +01:00 |
|
Andreas Steffen
|
eeb69761ae
|
third parameter was not copied
|
2013-03-02 22:03:07 +01:00 |
|
Andreas Steffen
|
b038c62e4a
|
added ERX_SUPPORTED IKEv2 Notify
|
2013-03-02 17:18:37 +01:00 |
|
Andreas Steffen
|
de218eb09c
|
added some new TCG IF-M message subtypes and attributes
|
2013-03-02 17:03:37 +01:00 |
|
Andreas Steffen
|
9e9e12bbf8
|
version bump to 5.0.3dr3
|
2013-03-02 16:19:57 +01:00 |
|
Andreas Steffen
|
7a93844f21
|
version bump to 5.0.3dr2
|
2013-02-19 20:25:13 +01:00 |
|
Andreas Steffen
|
371b752f00
|
treat IF-M and IF-TNCCS remediation instructions/parameters in an equal way
|
2013-02-19 20:00:57 +01:00 |
|
Andreas Steffen
|
f0c102cbfa
|
Added ikev2/rw-dnssec scenario
|
2013-02-19 12:25:01 +01:00 |
|
Andreas Steffen
|
1d4ff25fb8
|
Added ikev2/net2net-dnssec scenario
|
2013-02-19 12:25:01 +01:00 |
|
Andreas Steffen
|
37c589f0e0
|
Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org, and root zones
|
2013-02-19 12:25:01 +01:00 |
|
Andreas Steffen
|
3fbc328d14
|
Build unbound and ipseckey plugins on KVM image
|
2013-02-19 12:25:01 +01:00 |
|
Andreas Steffen
|
65cdda5cf8
|
Streamlined log messages in ipseckey plugin
|
2013-02-19 12:25:00 +01:00 |
|
Andreas Steffen
|
a4ddc0bb26
|
Encode RSA public keys in RFC 3110 DNSKEY format
|
2013-02-19 12:25:00 +01:00 |
|
Andreas Steffen
|
f2145c8d3a
|
Moved configuration from resolver manager to unbound plugin
Also streamlined log messages in unbound plugin.
|
2013-02-19 12:25:00 +01:00 |
|
Andreas Steffen
|
c381e46855
|
added missing return statement
|
2013-02-19 10:24:23 +01:00 |
|
Andreas Steffen
|
0f7cb0caf4
|
reject PB-Experimental messages with NOSKIP flag set
|
2013-02-19 09:31:34 +01:00 |
|
Andreas Steffen
|
9b4a8e1ced
|
added parameter descriptions
|
2013-02-19 07:44:57 +01:00 |
|
Andreas Steffen
|
2c1219c217
|
removed superfluous debug output
|
2013-02-15 15:19:16 +01:00 |
|
Andreas Steffen
|
f838f457a8
|
resolve dependency on libtls
|
2013-02-14 17:15:33 +01:00 |
|
Andreas Steffen
|
5374fe3a09
|
added ikev1/net2net-fragmentation scenario
|
2013-02-12 23:01:48 +01:00 |
|
Andreas Steffen
|
bac1052dea
|
treat EAP identities as user IDs
|
2013-02-12 21:58:03 +01:00 |
|
Andreas Steffen
|
7d355f853d
|
use EAP identity in tnc/tnccs-20-pdp scenario
|
2013-02-12 20:41:37 +01:00 |
|
Andreas Steffen
|
2a421163bf
|
make TNC client authentication type available to IMVs
|
2013-02-12 20:38:05 +01:00 |
|
Andreas Steffen
|
3e56352815
|
determine underlying IF-T transport protocol
|
2013-02-12 12:25:39 +01:00 |
|
Andreas Steffen
|
bd1ee5bdc4
|
make AR identities available to IMVs via IF-IMV 1.4 draft
|
2013-02-11 15:30:44 +01:00 |
|
Andreas Steffen
|
ebb87f08f7
|
Make IKE/EAP IDs available to TNC server/client
|
2013-02-11 15:30:44 +01:00 |
|
Andreas Steffen
|
cf29fc075a
|
time is a time_t pointer
|
2013-02-04 13:05:29 +01:00 |
|
Andreas Steffen
|
1f6ee9ec44
|
version bump to 5.0.3dr1
|
2013-02-04 07:51:07 +01:00 |
|
Andreas Steffen
|
ba62be506a
|
improved control when an attribute request is sent
|
2013-02-03 20:48:05 +01:00 |
|
Andreas Steffen
|
459c50ccb8
|
print PEN value 0xfffffe as Unassigned
|
2013-02-03 18:52:59 +01:00 |
|
Andreas Steffen
|
818fe7c024
|
send an error attribute if vendor ID or type of received attribute is reserved
|
2013-02-03 18:52:03 +01:00 |
|
Andreas Steffen
|
d830174e3c
|
version bump to 5.0.2
|
2013-01-30 07:51:44 +01:00 |
|
Andreas Steffen
|
d82372fab8
|
Removed INSTALL from EXTRA_DIST
|
2013-01-17 23:20:37 +01:00 |
|
Andreas Steffen
|
44e533b88e
|
converted ha/both-active iptables scenario
|
2013-01-17 16:55:03 +01:00 |
|
Andreas Steffen
|
5c09942d54
|
converted all ipv6 iptables/ip6tables scenarios
|
2013-01-17 16:55:03 +01:00 |
|
Andreas Steffen
|
a0ffe67fab
|
converted all p2pnat iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
b27836412b
|
Rename UML to KVM tests
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
472a411aa8
|
converted all tnc iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
4aa32cc3fe
|
List daemon.log on $RADIUSHOSTS
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
cedc96c2c4
|
implemented ip6tables.rules
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
136f74161b
|
converted all sql iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
Andreas Steffen
|
6fff9d9ace
|
converted all pfkey iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
Andreas Steffen
|
8fbb9458d6
|
converted all openssl-ikev2 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
Andreas Steffen
|
44047e7adb
|
converted all openssl-ikev1 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
Andreas Steffen
|
61ab7db386
|
converted all gcrypt-ikev2 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
Andreas Steffen
|
1dc14281fc
|
converted all af-alg iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
Andreas Steffen
|
ac09da8e50
|
added ikev1/nat-virtual-ip scenario
|
2013-01-17 16:55:00 +01:00 |
|
Andreas Steffen
|
ca0128588f
|
converted all ikev1 iptables scenarios
|
2013-01-17 16:55:00 +01:00 |
|
Andreas Steffen
|
d815235d17
|
use iptables-restore in all ikev2 firewall scenarios
|
2013-01-17 16:55:00 +01:00 |
|