Tobias Brunner
178760012c
Migrated linked_list_t to INIT/METHOD macros.
2011-07-06 09:43:45 +02:00
Tobias Brunner
3ee8fed445
Cache the most recent reqid in the PF_KEY kernel interface.
...
This makes the PF_KEY kernel interface behave the same as the Netlink
kernel interface.
2011-07-06 09:43:45 +02:00
Andreas Steffen
06b5b61838
install PASS and DROP shunt policies via PFKEYv2 interface
2011-07-05 21:57:45 +02:00
Tobias Brunner
60d62b9e5c
Don't install the libraries directly in lib/.
...
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
2011-07-05 14:42:14 +02:00
Andreas Steffen
9b2b434fe7
ignore ports of IPv4 and IPv6 loopback interfaces
2011-07-05 09:16:01 +02:00
Andreas Steffen
7fd120d5b6
fixed UTF-8 representation of polish reason string
2011-07-05 07:44:46 +02:00
Andreas Steffen
e1976a7120
delete orphan file
2011-07-04 23:02:06 +02:00
Andreas Steffen
e760e0ad23
fixed debug statement
2011-07-04 22:27:46 +02:00
Andreas Steffen
d9cdab9249
added ITA Scanner IMC/IMV pair which detects open server ports on TNC clients
2011-07-04 21:40:25 +02:00
Andreas Steffen
956759533f
added support if the IETF port filter attribute
2011-07-01 18:10:33 +02:00
Andreas Steffen
294c25fa60
again a bitwise or is required
2011-06-30 22:26:36 +02:00
Andreas Steffen
f87991704e
implemented PASS and DROP shunt policies
2011-06-28 19:42:54 +02:00
Martin Willi
6a5c8ee7a5
Initialize trap_manager listener with INIT macro, too
2011-06-28 17:19:20 +02:00
Andreas Steffen
06356a2981
Migrated trap_manager_t to INIT/METHOD macros
2011-06-28 14:42:29 +02:00
Andreas Steffen
9d997f31f1
oops, should have been a bitwise and
2011-06-25 14:57:49 +02:00
Andreas Steffen
cb14d7379f
fixed copy-and-paste error
2011-06-25 14:21:20 +02:00
Andreas Steffen
b324976aa1
output all known PA-TNC subtype names
2011-06-24 17:31:47 +02:00
Andreas Steffen
7401269517
refactoring of change_state()
2011-06-23 19:52:30 +02:00
Andreas Steffen
315c554571
implemented server-initiated handshake retry in IMC/IMV Test pair
2011-06-23 15:23:53 +02:00
Andreas Steffen
43af575002
notify IMVs about handshake retries
2011-06-23 15:22:41 +02:00
Andreas Steffen
4d1a31632a
some cosmetics
2011-06-16 11:34:52 +02:00
Andreas Steffen
ec1eab0319
fixed XML parsing of TNCCS 1.1 ReasonString message
2011-06-16 11:30:38 +02:00
Andreas Steffen
26691de27f
clear reason strings after delivering them
2011-06-15 13:53:53 +02:00
Andreas Steffen
96d0ff1237
implemented handshake retry on the client side
2011-06-15 13:09:41 +02:00
Martin Willi
6fe53bde24
We actually need to link against libz, as neo libraries are often static
...
This reverts commit 3c0630a797
2011-06-15 12:23:21 +02:00
Martin Willi
38dc106cde
Set cookies for the complete domain
2011-06-15 12:22:41 +02:00
Martin Willi
7804b7f420
Migrated libfast to INIT/METHOD macros
2011-06-15 11:25:53 +02:00
Andreas Steffen
ea66b2f3c6
added missing single quotes
2011-06-14 17:26:54 +02:00
Andreas Steffen
892a1e4a04
fixed the IF-TNCCS 1.1 ReasonString XML encoding
2011-06-14 15:58:03 +02:00
Andreas Steffen
0dbfdece4f
send a reason string only if action recommendation is not allow
2011-06-14 15:45:34 +02:00
Andreas Steffen
08dc42b025
cosmetics
2011-06-14 14:26:05 +02:00
Andreas Steffen
12ac59a914
eat trailing space in preferred language string
2011-06-13 23:01:28 +02:00
Andreas Steffen
4c191ca6bb
support multiple language preferences
2011-06-13 15:58:27 +02:00
Andreas Steffen
44bd40a101
implemented sending of reason strings
2011-06-13 15:31:34 +02:00
Andreas Steffen
7d769bc6c5
added missing single quotes
2011-06-13 15:29:43 +02:00
Andreas Steffen
33f89d66a7
fixed length check
2011-06-12 21:49:53 +02:00
Andreas Steffen
ac592f2387
unfinished MS SoH Request
2011-06-09 08:56:55 +02:00
Tobias Brunner
289c424589
Fix integrity checks with monolithic build.
2011-06-08 15:46:07 +02:00
Tobias Brunner
dcc1ad6a23
Prevent deadlock while shutting down thread pool.
...
During destruction the main thread locks the mutex in processor_t and
waits on a condvar for threads to have terminated. Because the mutex
has also to be locked to decrement the thread count the condvar cannot
be signaled before doing that as otherwise the main thread might already
be waiting to join the threads while locking the mutex and thus causing
a deadlock.
2011-06-08 11:44:42 +02:00
Tobias Brunner
876961cf0e
Properly print time differences.
...
time_t is not necessarily of type int.
2011-06-07 17:52:34 +02:00
Tobias Brunner
1b185ea490
Use proper printf specifiers to print u_int64_t and uintptr_t.
2011-06-07 17:30:57 +02:00
Laurent Bigonville
cb7a9862c6
Fix compilation with GCC 4.6.
2011-06-07 15:45:18 +02:00
Andreas Steffen
328b377efa
explicitly activate use of TNC headers
2011-06-07 12:19:32 +02:00
Martin Willi
f34ebc845b
Add a closeaction ipsec.conf keyword to configure close action
2011-06-07 12:07:21 +02:00
Andreas Steffen
0eb23d7be2
separated tncif_names from standard TCG TNC header files
2011-06-06 20:36:58 +02:00
Andreas Steffen
d8f7f2f004
nearly completed PA-TNC error handling
2011-06-05 23:24:48 +02:00
Andreas Steffen
eeef482242
show PB-PA message type/subtype
2011-06-05 15:46:01 +02:00
Andreas Steffen
c722ab035c
cosmetics
2011-06-05 15:06:55 +02:00
Andreas Steffen
3cfd8393bf
enum names for ietf_attr_t
2011-06-05 14:17:47 +02:00
Andreas Steffen
a82ff71cd7
map action recommendation codes to PB access recommendation codes
2011-06-05 12:27:20 +02:00
Tobias Brunner