Andreas Steffen
0748517582
Version bump to 5.3.4dr3
2015-11-10 16:54:38 +01:00
Andreas Steffen
946bc3a3f5
testing: Fixed some more timing issues
2015-11-10 16:54:38 +01:00
Andreas Steffen
2533c857ba
testing: Added Debian 7.9 to IMV database
2015-11-09 15:18:39 +01:00
Andreas Steffen
529357f09a
testing: Use sha3 plugin in ikev2/rw-cert scenario
2015-11-09 15:18:38 +01:00
Andreas Steffen
f1f7134ecb
Version bump to 5.3.4dr2
2015-11-06 16:07:04 +01:00
Andreas Steffen
23a50e66f1
testing: Updated hasher tests
2015-11-06 16:05:44 +01:00
Andreas Steffen
a88d958933
Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes
2015-11-06 14:55:31 +01:00
Andreas Steffen
6590298dad
Version bump to 5.3.4dr1
2015-11-04 19:42:17 +01:00
Andreas Steffen
83c1883d0b
Use word-aligned XOR in sha3_absorb()
2015-11-03 21:35:09 +01:00
Andreas Steffen
a98360a64c
testing: BLISS CA uses SHA-3 in its CRL
2015-11-03 21:35:09 +01:00
Andreas Steffen
f6fede934b
Support BLISS signatures with SHA-3 hash
2015-11-03 21:35:09 +01:00
Andreas Steffen
a488584b5f
Implemented SHA-3 hash algorithm including test vectors
2015-11-03 21:35:09 +01:00
Andreas Steffen
de61e2cef4
Defined SHA-3 hashers
2015-11-03 19:07:15 +01:00
Andreas Steffen
a215008c11
Version bump to 5.3.3
2015-09-06 15:05:36 +02:00
Andreas Steffen
2b5c543051
testing: added ikev2/alg-chacha20poly1305 scenario
2015-09-01 17:30:15 +02:00
Andreas Steffen
57eb3b2b25
testing: update to Linux 4.2 kernel
2015-09-01 17:29:30 +02:00
Andreas Steffen
01604016f7
Version bump to 5.3.3rc2
2015-09-01 13:16:43 +02:00
Andreas Steffen
5de8703ee0
Version bump to 5.3.3rc1
2015-08-25 15:10:13 +02:00
Andreas Steffen
cdb61c3e88
Added some spaces in swanctl.conf
2015-08-25 15:10:13 +02:00
Andreas Steffen
46686372c6
Version bump to 5.3.3dr6
2015-08-19 07:18:30 +02:00
Andreas Steffen
5f60c55919
Extend HCD attribute data for tnc/tnccs-20-hcd-eap scenario
2015-08-18 21:25:39 +02:00
Andreas Steffen
b19ef52d51
Added reason string support to HCD IMV
2015-08-18 21:25:39 +02:00
Andreas Steffen
627e4b9659
Fixed patches format delimited by CR/LF
2015-08-18 21:25:39 +02:00
Andreas Steffen
6a3d035505
Added imc-hcd attributes to strongswan.conf
2015-08-18 21:25:39 +02:00
Andreas Steffen
ac28daac38
testing: Added tnc/tnccs-20-hcd-eap scenario
2015-08-18 21:25:39 +02:00
Andreas Steffen
18472ac21c
Use PWG HCD PA-TNC subtypes to transport HCD attributes
2015-08-18 21:25:39 +02:00
Andreas Steffen
6b68719dd3
Add default password determination capability to os_info
2015-08-18 21:25:39 +02:00
Andreas Steffen
9e13c2b2cc
Reintroduced ietf_attr_fwd_enabled()
2015-08-18 21:25:39 +02:00
Andreas Steffen
860df6bf75
Defined PWG HCD PA-TNC subtypes
2015-08-18 21:25:39 +02:00
Andreas Steffen
9c2e0a50a3
Added os_info support to HCD IMC
2015-08-18 21:25:38 +02:00
Andreas Steffen
9e88bb987d
Subscribed Scanner IMC/IMV to IETF_FIREWALL PA subtype
2015-08-18 21:25:38 +02:00
Andreas Steffen
ebed384887
testing: enable HCD IMC and IMV
2015-08-18 21:25:38 +02:00
Andreas Steffen
b48ffcb1b3
Implemented HCD IMC and IMV
2015-08-18 21:25:38 +02:00
Andreas Steffen
92a9c99c38
Defined HCD PA subtype in PWG namespace
2015-08-18 21:25:38 +02:00
Andreas Steffen
21b8051c10
Completed implementation of PWG HCD attributes
2015-08-18 21:25:38 +02:00
Andreas Steffen
981653a437
Defined generic non-nul terminated string PA-TNC attribute
2015-08-18 21:25:38 +02:00
Andreas Steffen
6a11c8a3f3
Support of HCD Firewall Setting PA-TNC attribute
2015-08-18 21:25:38 +02:00
Andreas Steffen
abb8a1ecd2
Defined generic boolean PA-TNC attribute
2015-08-18 21:25:38 +02:00
Andreas Steffen
5e1b06ff08
Defined PWG HCD IF-M attributes
2015-08-18 21:25:38 +02:00
Andreas Steffen
10f25a3dd9
Fixed the implemention of the IF-M segmentation protocol
...
The first segment only fit if the segmentation envelope attribute
was preceded by a Max Attribute Size Response attribute. The
improved implementation fills up the first PA-TNC message with
the first segment up to the maximum message size.
2015-08-18 21:24:26 +02:00
Andreas Steffen
cdd7d2b197
Version bump to 5.3.3dr5
2015-08-16 09:04:42 +02:00
Andreas Steffen
a330f72ecf
Fixed AR identities in mutual TNC measurements case
2015-08-15 22:46:21 +02:00
Andreas Steffen
16c4dd8f26
Version bump to 5.3.3dr4
2015-08-10 07:48:14 +02:00
Andreas Steffen
626b2e85f0
testing: Update AAA certificate on Freeradius as well
2015-08-05 10:01:21 +02:00
Andreas Steffen
9b1eaf083f
testing: Updated expired AAA server certificate
2015-08-04 21:50:01 +02:00
Andreas Steffen
e0d3a2a873
Version bump to 5.3.3dr3
2015-07-31 17:47:14 +02:00
Andreas Steffen
493ad293b7
testing: Adapted ha/both-active scenario to new jhash values
2015-07-31 14:43:40 +02:00
Andreas Steffen
41458e3362
Version bump to 5.3.3dr2
2015-07-28 14:28:58 +02:00
Andreas Steffen
fbcac07043
testing: Regenerated BLISS certificates due to oracle changes
2015-07-27 22:09:08 +02:00
Andreas Steffen
e57190c312
Use MGF1 with SHA-512 as BLISS random oracle
2015-07-27 22:09:08 +02:00
Andreas Steffen
2096d54198
Improved legibility of swanctl CRL listings
2015-07-22 17:46:15 +02:00
Andreas Steffen
aaeb524cea
testing: Updated loop ca certificates
2015-07-22 17:11:00 +02:00
Andreas Steffen
450c6e8dd9
testing: Added swanctl --list-authorities output to do-tests
2015-07-22 13:27:08 +02:00
Andreas Steffen
73cbd5c7f8
testing: Updated all swanctl scenarios and added some new ones
2015-07-22 13:27:08 +02:00
Andreas Steffen
db69295d2e
tests: Introduced IPV6 flag in tests.conf
2015-07-21 23:17:14 +02:00
Andreas Steffen
6b265c5e5c
tests: Introduced SWANCTL flag in test.conf
2015-07-21 23:17:14 +02:00
Andreas Steffen
3d9bfb607c
tests: fixed evaltest of swanctl/rw-cert scenario
2015-07-21 23:17:13 +02:00
Andreas Steffen
f335e2f848
tests: fixed description of swanctl ip-pool scenarios
2015-07-21 23:17:13 +02:00
Andreas Steffen
41aa7eb531
Version bump to 5.3.3dr1
2015-07-21 23:15:36 +02:00
Andreas Steffen
63d370387d
vici: Certification Authority support added.
...
CDP and OCSP URIs for a one or multiple certification authorities
can be added via the VICI interface. swanctl allows to read
definitions from a new authorities section.
2015-07-21 13:02:30 +02:00
Andreas Steffen
e194349148
vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets are defined
2015-07-20 21:34:09 +02:00
Andreas Steffen
3ea5d437fb
Version bump to 5.3.2
2015-06-08 09:56:34 +02:00
Andreas Steffen
9bb7307825
Fix timeattack script compilation under ARM
2015-06-05 12:09:38 +02:00
Andreas Steffen
bd60bcc3c2
Updated SWID attribute list
2015-06-02 06:51:41 +02:00
Andreas Steffen
f284c17890
Version bump to 5.3.1
2015-06-01 09:50:48 +02:00
Andreas Steffen
b8399a2edc
testing: use a decent PSK
2015-05-30 16:56:41 +02:00
Andreas Steffen
1047d44b57
testing: Added ha/active-passive scenario
2015-05-30 16:48:17 +02:00
Andreas Steffen
eb423ebb54
Added 5.3.1 caption to NEWS
2015-05-28 06:26:43 +02:00
Andreas Steffen
dedd0ad07c
Check for NULL installed packages enumerator
2015-05-24 11:15:36 +02:00
Andreas Steffen
5d5a74b077
Fixed os_info path in strongswan.conf
2015-05-24 11:13:51 +02:00
Andreas Steffen
d6b75c9563
List attribute request entries also during build
2015-05-24 09:17:29 +02:00
Andreas Steffen
e6952442f2
Exempt ignored PA-TNC attributes from error handling
2015-05-20 06:13:15 +02:00
Andreas Steffen
362e87e3e0
testing: Updated carol's certificate from research CA and dave's certificate from sales CA
2015-04-26 16:52:06 +02:00
Andreas Steffen
d04e47a9eb
testing: Wait for DH crypto tests to complete
2015-04-26 11:51:49 +02:00
Andreas Steffen
79b5a33c11
imv_policy_manager: Added capability to execute an allow or block shell command string
2015-04-26 10:55:24 +02:00
Andreas Steffen
ce354443bf
testing: Migration of KVM framework to Linux 4.x kernel
2015-04-25 18:05:00 +02:00
Andreas Steffen
17a2e00a31
Version bump to 5.3.1dr1
2015-04-24 11:35:42 +02:00
Andreas Steffen
c1c6506391
Fixed PB-TNC directionality debug message
2015-04-24 11:16:16 +02:00
Andreas Steffen
ff96400d13
Wipe auxiliary key store
2015-03-28 10:44:23 +01:00
Andreas Steffen
b07fb365ef
Added PB-TNC test options to strongswan.conf man page
2015-03-27 21:05:00 +01:00
Andreas Steffen
883c11caa0
Added tnc/tnccs-20-fail-init and tnc/tnccs-20-fail-resp scenarios
2015-03-27 20:56:44 +01:00
Andreas Steffen
ef5f96366e
Version bump to 5.3.0
2015-03-27 20:56:44 +01:00
Andreas Steffen
619e0b4235
Fixed PB-TNC error handling
2015-03-27 20:56:44 +01:00
Andreas Steffen
193e057509
Added configurations for 3.18 and 3.19 KMV guest kernels
2015-03-27 20:56:44 +01:00
Andreas Steffen
8b36323b8c
Fixed strongswan.conf man page entry of imc-attestation
2015-03-27 20:56:44 +01:00
Andreas Steffen
85aa509e84
Added tnc/tnccs-20-pt-tls scenario
2015-03-27 20:56:43 +01:00
Andreas Steffen
cf9befcba4
Version bump to 5.3.0rc1
2015-03-23 23:15:31 +01:00
Andreas Steffen
be04f90815
testing: added tnc/tnccs-20-mutual scenario
2015-03-23 23:01:13 +01:00
Andreas Steffen
7b4a96b2f7
Implemented PB-TNC mutual half-duplex protocol
2015-03-23 22:25:43 +01:00
Andreas Steffen
c6aed8aa21
Optionally announce PB-TNC mutual protocol capability
2015-03-23 22:25:43 +01:00
Andreas Steffen
80322d2cee
Split IF-TNCCS 2.0 protocol processing into separate TNC client and server handlers
2015-03-23 22:25:42 +01:00
Andreas Steffen
afc1b67344
Version bump to 5.3.0dr2
2015-03-16 17:15:58 +01:00
Andreas Steffen
08feb4548a
Replace kid by aik_id in ITA TBOOT functional component
2015-03-16 17:15:28 +01:00
Andreas Steffen
d35143bb8d
Fixed two BLISS key type identifier strings
2015-03-16 17:08:14 +01:00
Andreas Steffen
e035935068
Added availability of TNC AR IP address to IMVs to NEWS
2015-03-15 12:30:32 +01:00
Andreas Steffen
b6685211fb
Create TPM TBOOT Measurement group
2015-03-15 12:24:05 +01:00
Andreas Steffen
8fa9312f09
Updated products in imv database
2015-03-08 17:18:34 +01:00
Andreas Steffen
20f90d7160
attest: output trusted flag and device description
2015-03-08 17:17:11 +01:00
Andreas Steffen
00cd79b678
Make access requestor IP address available to TNC server
2015-03-08 17:17:11 +01:00
Andreas Steffen
3fcb59b62a
use SHA512 for moon's BLISS signature
2015-03-04 14:08:37 +01:00
Andreas Steffen