denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,474 Commits 1 Branch 0 Tags
0a013e1af5549fb042a9f4a8f95707f63061b97b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 0a013e1af5 Override policy recommendation in enforcement 2013-07-11 10:34:00 +02:00
Andreas Steffen 9e0182b922 openssl plugin can replace random, hmac, and gcm plugins 2013-07-10 20:38:07 +02:00
Andreas Steffen 3910fb3715 Added openssl-ikev2/net2net-pkcs12 scenario 2013-07-10 20:25:49 +02:00
Andreas Steffen 49a26e5b57 Added ikev2/net2net-pkcs12 scenario 2013-07-10 20:17:44 +02:00
Andreas Steffen fad3396f96 Version bump to 5.1.0dr3 2013-07-10 17:50:25 +02:00
Andreas Steffen 3b569df215 conntrack -F makes ikev2/nat-rw scenario to work always 2013-07-10 17:50:25 +02:00
Andreas Steffen 979801278f Fixed alignment of device ID column 2013-07-10 11:37:22 +02:00
Andreas Steffen 51bc6a6e74 Cosmetics 2013-07-08 17:58:14 +02:00
Andreas Steffen 34f894b6cc Scanner IMV without workitems provides immediate recommendation, too 2013-07-08 17:53:05 +02:00
Andreas Steffen 3dfa7a9eae Attestion IMV provides recommendation only once 2013-07-08 17:06:51 +02:00
Andreas Steffen ea6ab9fb49 skip enforcement if a recent measurement was successful 2013-07-08 16:08:05 +02:00
Andreas Steffen ef13480699 Added config-3.10 2013-07-04 23:17:10 +02:00
Andreas Steffen 090ff1fbab Version bump to 5.1.0dr2 2013-07-04 22:56:19 +02:00
Andreas Steffen 69c4e34859 Always return a result string for a processed workitem 2013-07-04 22:55:58 +02:00
Andreas Steffen 7658b399b7 Make Block stronger than Isolate in default policy 2013-07-04 22:54:47 +02:00
Andreas Steffen 9844f240f8 Register packages under Debian 7.0 x86_64 2013-07-04 22:53:41 +02:00
Andreas Steffen 2ea32e7964 Enable libipsec and charon-cmd in strongSwan recipe 2013-07-01 12:32:45 +02:00
Andreas Steffen bb802daacc Fixed libipsec/rw-suite-b scenario 2013-07-01 12:32:45 +02:00
Andreas Steffen 3405156f97 Added libipsec/rw-suite-b scenario 2013-07-01 11:04:14 +02:00
Andreas Steffen 9ea77350ce Fixed index.txt for strongSwan EC CA 2013-07-01 11:01:11 +02:00
Andreas Steffen 6c969fee94 Don't backup old package lists 2013-07-01 10:00:43 +02:00
Andreas Steffen 156e552caf Added libipsec/net2net-cert scenario 2013-06-29 22:23:45 +02:00
Andreas Steffen b1f1e5e5f2 5.1.0 changes for test cases 2013-06-29 00:07:15 +02:00
Andreas Steffen 5b7536c803 Attestation IMV requests platform info if not received 2013-06-27 17:30:14 +02:00
Andreas Steffen 71c7b43541 Support blacklist field in PTS database 2013-06-26 12:07:09 +02:00
Andreas Steffen de8de88fa7 Updated PTS demo database 2013-06-26 10:14:25 +02:00
Andreas Steffen f4dcbe3bf2 Device can be member of multiple groups 2013-06-25 18:43:07 +02:00
Andreas Steffen 72631301eb Some IMV policy managers expect a TEXT string 2013-06-25 12:47:07 +02:00
Andreas Steffen 59c9ec107f Assign default group to newly created devices 2013-06-25 11:49:32 +02:00
Andreas Steffen 632e5b0b99 Set device creation date if it hasn't been set yet 2013-06-24 20:18:16 +02:00
Andreas Steffen 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft 2013-06-24 00:23:50 +02:00
Andreas Steffen 69c4715bf8 Send PA-TNC assessment result even if no workitems are available 2013-06-24 00:22:38 +02:00
Andreas Steffen 02497901d0 Some pacman fixes 2013-06-23 16:23:19 +02:00
Andreas Steffen 226f34e0a0 version bump to 5.1.0dr1 2013-06-21 23:54:13 +02:00
Andreas Steffen 6b081a4c21 Some PTS database fixes 2013-06-21 23:25:25 +02:00
Andreas Steffen 45eb318ed4 Implemented pacman in a more reliable way 2013-06-21 23:25:25 +02:00
Andreas Steffen 4fe7294bb3 Define protocol string 2013-06-21 23:25:25 +02:00
Andreas Steffen 41dabbad41 Generate result string for port scan workitems 2013-06-21 23:25:25 +02:00
Andreas Steffen 8fbfe03e4e Ignore non-matching protocols 2013-06-21 23:25:25 +02:00
Andreas Steffen e5dd8a1d34 Introduced workitems to Scanner IMV 2013-06-21 23:25:24 +02:00
Andreas Steffen adf8a05a3d Removed obsoleted strongswan.conf options 2013-06-21 23:25:24 +02:00
Andreas Steffen da99df1443 Added ITA components to database 2013-06-21 23:25:24 +02:00
Andreas Steffen 10bb71261c Added soft dependency on database plugin 2013-06-21 23:25:24 +02:00
Andreas Steffen a2e30d601a fixed SQL query 2013-06-21 23:25:24 +02:00
Andreas Steffen 4cf568a785 Shortened names of default policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen 19ce03be73 Store device with product ID 2013-06-21 23:25:24 +02:00
Andreas Steffen bf250acb06 Database changes needed to integrate Cygnet backend 2013-06-21 23:25:24 +02:00
Andreas Steffen 01afff71cb Implemented get|set_action_flag() methods 2013-06-21 23:25:24 +02:00
Andreas Steffen a45a2c9291 Implemented hierarchical policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen b1da8368d0 Introduced workitems to Attestation IMV 2013-06-21 23:25:23 +02:00
Andreas Steffen 7e9bdd20aa pts_meas_algo_probe() and pts_dh_group_probe() got lost 2013-06-21 23:25:23 +02:00
Andreas Steffen c174c116fe Converted all IMVs to use generic IF-IMV API 2013-06-21 23:25:23 +02:00
Andreas Steffen ea2663ec03 Remove the constructor from the IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 97f0a7ea77 Defined a generic IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 7513a09ee5 Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton 2013-06-21 23:25:23 +02:00
Andreas Steffen 99c6a5f8a4 Moved batch_ending into separate source file 2013-06-21 23:25:23 +02:00
Andreas Steffen e1db511bbd do not process workitems with NULL result 2013-06-21 23:25:23 +02:00
Andreas Steffen c219d7e31f fixed enumeration of workitems for a given session 2013-06-21 23:25:23 +02:00
Andreas Steffen 65148217b0 generate workitems based on group policy 2013-06-21 23:25:23 +02:00
Andreas Steffen 0fca778254 Added file and directory reference measurements to workitems 2013-06-21 23:25:22 +02:00
Andreas Steffen 2964562199 add overall recommendation to session database entry 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f6bf1a843 don't define a default database URI 2013-06-21 23:25:22 +02:00
Andreas Steffen 1ecff25917 created a simple IMV Policy Manager 2013-06-21 23:25:22 +02:00
Andreas Steffen 1571a11fa4 register received scanner attributes 2013-06-21 23:25:22 +02:00
Andreas Steffen 9d63ad17d4 used tnc_policy_update functions for default policy 2013-06-21 23:25:22 +02:00
Andreas Steffen a6266485be refactored IMV policy management 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f9aabbfd7 implemented policy rules for OS IMV 2013-06-21 23:25:22 +02:00
Andreas Steffen 7daf6d8cc5 check for zero-length device ID 2013-06-21 23:25:22 +02:00
Andreas Steffen 033834719d ITA-HSR/Device ID attribute & IMV OS state machine 2013-06-21 23:25:22 +02:00
Andreas Steffen bb9d8b1853 execute an _imv_policy script 2013-06-21 23:25:22 +02:00
Andreas Steffen b8db66de15 implemented IMV session control 2013-06-21 23:25:21 +02:00
Andreas Steffen 1f179c63b3 Manage files and directories 2013-06-21 23:25:21 +02:00
Andreas Steffen 71d740cac6 Make plugins in standalone libimcv configurable 2013-05-24 12:56:21 +02:00
Andreas Steffen 0f499f41dc Use attest database in tnc/tnccs-20-os scenario 2013-04-21 16:31:23 +02:00
Andreas Steffen 9fab0a58d3 fixed a 64bit time_t issue 2013-04-21 16:07:13 +02:00
Andreas Steffen 70a7917e72 destroy SQL query 2013-04-21 16:00:23 +02:00
Andreas Steffen 6c998b8b9e Keep last AR ID 2013-04-21 08:19:30 +02:00
Andreas Steffen bec5bf02ac Added use of openssl-fips library to NEWS 2013-04-19 18:49:43 +02:00
Andreas Steffen 1b912ad384 check for successful activation of FIPS mode 2013-04-19 18:46:52 +02:00
Andreas Steffen b97dd59ba8 install FIPS-aware OpenSSL Debian packages 2013-04-19 18:36:38 +02:00
Andreas Steffen 545df30c18 Added openssl-ikev2/rw-cpa scenario 2013-04-19 18:34:35 +02:00
Andreas Steffen 70312e6596 build openssl-fips in KVM root-image 2013-04-19 18:34:35 +02:00
Andreas Steffen 2d902d7e7c fixed typo 2013-04-19 18:33:41 +02:00
Andreas Steffen 6b99da026c added libstrongswan.plugins.openssl.fips_mode to man page 2013-04-16 13:44:06 +02:00
Andreas Steffen f4de6496a2 support of OpenSSL FIPS-140-2 library 2013-04-16 12:37:04 +02:00
Andreas Steffen ef934caba8 build soup plugin in KVM test environment 2013-04-15 20:23:41 +02:00
Andreas Steffen 8d384fb7df disable reauth, too 2013-04-15 20:21:27 +02:00
Andreas Steffen 2e12fc4b0a version bump to 5.0.4 2013-04-14 19:58:17 +02:00
Andreas Steffen 654c88bca8 Added charon.initiator_only option which causes charon to ignore IKE initiation requests by peers 2013-04-14 19:57:49 +02:00
Andreas Steffen 022df06e1a version bump to 5.0.4dr1 2013-04-09 15:20:49 +02:00
Andreas Steffen 676e862487 fixed another printf statement 2013-04-09 15:16:49 +02:00
Andreas Steffen 1a185ae14b fixed printf statements 2013-04-08 22:21:14 +02:00
Andreas Steffen 12fa1784d0 emit a single assig_vips bus message for all VIPs 2013-04-06 14:16:30 +02:00
Andreas Steffen ba2880d569 ifmap plugin subscribes to assing_vip bus signal 2013-04-06 11:09:41 +02:00
Andreas Steffen 8dade2d146 fixed configure options 2013-04-04 21:09:07 +02:00
Andreas Steffen 2a4915e87a cleaned up XML code in tnccs-11 plugin 2013-04-04 17:12:07 +02:00
Andreas Steffen 93f53a78b5 fixed memory leak 2013-04-03 21:38:04 +02:00
Andreas Steffen 3ea6fcb593 properly handle orphaned renewSession jobs 2013-04-03 21:38:04 +02:00
Andreas Steffen 91503c2112 support chunked HTTP responses 2013-04-03 21:38:04 +02:00
Andreas Steffen 1044710b04 implemented periodic IF-MAP RenewSession request 2013-04-03 21:38:04 +02:00