denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9,526 Commits 1 Branch 0 Tags
2bec193a1ba26f04f16169811c92df97ad3389dd
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen fa1baac315 implemented deletion of product_file database entries 2012-08-07 15:06:12 +02:00
Andreas Steffen ecfd714c78 updated NEWS 2012-07-31 17:25:30 +02:00
Andreas Steffen 3e7565eee0 libimcv requires nonce plugin 2012-07-31 16:46:46 +02:00
Andreas Steffen 6ff1d5bb32 update state before handling status 2012-07-30 23:19:25 +02:00
Andreas Steffen af8354da1a implemented support if functional sub-components 2012-07-30 20:49:42 +02:00
Andreas Steffen e0c66bebcf extended and documented ipsec attest 2012-07-30 20:49:42 +02:00
Andreas Steffen df0f88a4b3 measure all kernel modules and optimize firefox and thunderbird measurements 2012-07-27 11:47:22 +02:00
Andreas Steffen 9e99d2c378 with --relative --file do not insert absolute filenames into database 2012-07-27 11:47:22 +02:00
Andreas Steffen 15f78beb0f IMA SHA1 file measurement is not needed any more 2012-07-23 22:19:30 +02:00
Andreas Steffen 327dcf96db fixed typo 2012-07-23 22:19:30 +02:00
Andreas Steffen e6b01ce42d moved PA-TNC message logging to level 1 2012-07-23 13:04:28 +02:00
Andreas Steffen ab957aacce transport IMA file info via PTS Component Evidence Policy URI 2012-07-23 12:51:37 +02:00
Andreas Steffen 838f683cde ipsec attest now deletes file hashes 2012-07-22 09:29:39 +02:00
Andreas Steffen 2c9a833b7a buffer PA-TNC attributes until Generate Attestation Evidence attribute is received 2012-07-21 16:43:24 +02:00
Andreas Steffen 6f46681a48 allow --rel as an abbreviation for --relative 2012-07-21 15:58:13 +02:00
Andreas Steffen 4c02086241 moved all shadow PCR stuff to the pts_pcr class 2012-07-21 15:58:13 +02:00
Andreas Steffen 5a6c18853e created a pts_pcr class for PCR computations 2012-07-20 14:57:28 +02:00
Andreas Steffen cfa69fce13 renamed build_database.sh to build-database.sh 2012-07-20 14:04:16 +02:00
Andreas Steffen f524725474 why the hell do firefox, thunderbird and acroread their own Linux libraries? 2012-07-19 18:29:06 +02:00
Andreas Steffen 0ffd766c0a added some multiply defined libraries 2012-07-19 13:49:35 +02:00
Andreas Steffen 214097e804 queries with relative filenames might return multiple results 2012-07-19 13:49:35 +02:00
Andreas Steffen 96e8ba0f78 updated build_database.sh 2012-07-19 13:49:35 +02:00
Andreas Steffen 2f341c540d added index to files table 2012-07-19 13:49:35 +02:00
Andreas Steffen 14e14d913b updated build_database.sh 2012-07-19 13:49:35 +02:00
Andreas Steffen 9c48a31975 builds an Ubuntu 12.04 LTS measurement database 2012-07-18 11:33:59 +02:00
Andreas Steffen 4d4a09ab09 minor fixes in attest 2012-07-18 11:33:59 +02:00
Andreas Steffen 20ec024a94 various PTS fixes 2012-07-17 16:38:55 +02:00
Andreas Steffen 68b1a559cc parcel IMA file measurements into batches 2012-07-17 13:44:02 +02:00
Andreas Steffen 65cbe29cbc register _check_file_measurement() method 2012-07-17 13:42:58 +02:00
Andreas Steffen 964de0abde check IMA file measurements against database reference 2012-07-17 11:16:19 +02:00
Andreas Steffen 931da8202b handled return values in tnc-pdp 2012-07-16 22:54:38 +02:00
Andreas Steffen c8ff69402b fixed potential hasher problem in IMA template hash 2012-07-16 22:44:45 +02:00
Andreas Steffen 915bceb4c7 fixed potential hasher problems 2012-07-16 22:39:34 +02:00
Andreas Steffen e51c527e68 use a nonce for a PA-TNC message identifier 2012-07-16 18:08:49 +02:00
Andreas Steffen 358dbe4835 ipsec attest supports ima template hashes 2012-07-16 17:17:08 +02:00
Andreas Steffen 0f236aacb5 ipsec attest now can measure all files in a directory 2012-07-16 09:54:11 +02:00
Andreas Steffen 12ef9fb1b5 moved listing of file measurements to pts_file_meas 2012-07-16 09:54:11 +02:00
Andreas Steffen d7a8333c54 moved to debug level 3 2012-07-16 09:54:11 +02:00
Andreas Steffen e0bfc4d63c transfer IMA file measurements via PA-TNC 2012-07-13 14:46:42 +02:00
Andreas Steffen ecfdce8cb6 some more copyright updates 2012-07-13 14:46:42 +02:00
Andreas Steffen be735f0148 added PA-TNC max_msg_len option to man page 2012-07-13 11:02:23 +02:00
Andreas Steffen 22e97e4f1f updated Copyright info 2012-07-13 10:42:40 +02:00
Andreas Steffen dea7d74557 wait for the finalization of the Functional Component measurements 2012-07-13 10:06:43 +02:00
Andreas Steffen a845e4ebc5 restrict PA-TNC message siz only if upper limit is defined 2012-07-12 22:18:24 +02:00
Andreas Steffen baa6a292cf a curly bracket got lost 2012-07-12 21:26:18 +02:00
Andreas Steffen 4f7b2d7a6d destroy oversized attributes 2012-07-12 21:26:18 +02:00
Andreas Steffen 8ef43d8786 prevent endless loop with oversize attributes 2012-07-12 21:26:18 +02:00
Andreas Steffen 968c83cdeb restrict PA-TNC messages to maximum size 2012-07-12 21:26:18 +02:00
Andreas Steffen c5d2e61802 refactored PA-TNC attribute error handling 2012-07-12 21:26:18 +02:00
Andreas Steffen b6e23b24f3 fixed memory leak in the IETF standard error handling 2012-07-12 21:26:18 +02:00
Andreas Steffen ea67a75b98 static upper size limit for PA-TNC messages 2012-07-12 21:26:18 +02:00
Andreas Steffen 3f6392bc14 fixed a memory leak in imc|imv_agent 2012-07-12 00:03:24 +02:00
Andreas Steffen 246c9ad831 imc/imv->send_message() uses attr_list 2012-07-11 23:34:51 +02:00
Andreas Steffen c9c3da66a8 removed unused variables 2012-07-11 23:15:44 +02:00
Andreas Steffen d4cf9cdf28 fixed libstrongswan/Makefile.am 2012-07-11 23:13:55 +02:00
Andreas Steffen ccceb82662 version bump to 5.0.1dr1 2012-07-11 17:46:45 +02:00
Andreas Steffen c56667f1db fixed logging of unsupported TNCCS version 2012-07-11 17:09:05 +02:00
Andreas Steffen 1de4af66d5 PB-TNC Client sends empty CLOSE batch only in DECIDED state 2012-07-11 17:09:05 +02:00
Andreas Steffen a287a3cdcd have_recommendation() accepts NULL arguments 2012-07-11 17:09:05 +02:00
Andreas Steffen b8b678a567 send empty SDATA batch if no recommendation is available yet, but in order to avoid loops only if no empty CDATA batch was received 2012-07-11 17:09:05 +02:00
Andreas Steffen a5c79d0175 moved batch size calculation into pb_tnc_batch_t 2012-07-11 17:09:05 +02:00
Andreas Steffen d7dcbc95a9 make maximum PB-TNC batch size configurable 2012-07-11 17:09:05 +02:00
Andreas Steffen 3a16bec8f9 limit the size of a PB-TNC batch to the maximum EAP-TNC packet size 2012-07-11 17:09:05 +02:00
Andreas Steffen 6067233193 remove pluto logging 2012-07-11 17:09:05 +02:00
Andreas Steffen 6245edf37e eliminate message length field in EAP-TNC 2012-07-11 17:09:05 +02:00
Andreas Steffen c8aabefd08 added charon.plugins.eap-tnc.protocol option 2012-07-11 17:09:05 +02:00
Andreas Steffen a04c51aea9 due to single fragment, total length does not have to be included 2012-07-11 17:09:04 +02:00
Andreas Steffen 4492ffc907 EAP-TNC does not support fragmentation 2012-07-11 17:09:04 +02:00
Andreas Steffen c36680962c allow to transmit 64k TLS Handshake and Application messages via EAP-[T]TLS 2012-07-11 17:09:04 +02:00
Andreas Steffen dfe82160e4 some tls_eap optimizations 2012-07-11 17:09:04 +02:00
Andreas Steffen 87efdef35b configure size of ITA Dummy PA-TNC attribute 2012-07-11 17:09:04 +02:00
Andreas Steffen 3bd452f8f3 max_message_count = 0 disables limit 2012-07-11 17:09:04 +02:00
Andreas Steffen 22f9174609 defined ITA Dummy PA-TNC attribute for test purposes 2012-07-11 17:09:04 +02:00
Andreas Steffen ee200bab61 use TSS_PCRS_STRUCT_DEFAULT 2012-07-11 17:09:04 +02:00
Andreas Steffen da67c37d65 log invalid TLS packet length 2012-07-11 17:09:04 +02:00
Andreas Steffen 5b35214a87 check boot_aggregate value 2012-07-11 17:09:04 +02:00
Andreas Steffen ddafcda4d8 refactored PTS functional component measurements 2012-07-11 17:09:04 +02:00
Andreas Steffen 1e5634c9b3 remove virtual IP for moon's inner interface 2012-06-29 23:20:32 +02:00
Andreas Steffen 4271838f9c an IKE daemon needs these plugins but a PDP doesn't 2012-06-29 06:24:02 +02:00
Andreas Steffen 36df6113fa added Ubuntu 12.04 LTS i686 measurements 2012-06-28 22:20:44 +02:00
Andreas Steffen 5f451f2d6a IMCs and IMVs might depend on X.509 certificates or trusted public keys 2012-06-28 17:55:02 +02:00
Andreas Steffen 1c959e4479 added ikev1/virtual-ip scenario 2012-06-28 14:52:07 +02:00
Andreas Steffen 5a86589d0c corrected description of ikev1/ip-pool-db scenario 2012-06-28 14:44:10 +02:00
Andreas Steffen 5c0d1bccb0 corrected description of ikev1/ip-pool scenario 2012-06-28 14:42:34 +02:00
Andreas Steffen 788e512d58 added ikev1/ip-pool scenario 2012-06-28 14:37:04 +02:00
Andreas Steffen f39a2f275e merged xauth-id-rsa and xauth-rsa-config scenarios 2012-06-28 14:23:47 +02:00
Andreas Steffen 8cad9ed42c charon automatically removes virtual interfaces 2012-06-28 09:30:24 +02:00
Andreas Steffen 5d476b4266 updated default configuration of UML hosts to 5.0.0 2012-06-25 13:04:55 +02:00
Andreas Steffen c38d6905a2 added charon.cisco_unity to strongswan.conf.5 man page 2012-06-25 11:47:40 +02:00
Andreas Steffen 554a697a84 support Cisco Unity VID 2012-06-25 11:09:06 +02:00
Andreas Steffen f84180bb89 removed AUTHORS and CREDITS 2012-06-25 08:45:10 +02:00
Andreas Steffen a7b8e380dc some copyright additions 2012-06-23 12:09:29 +02:00
Andreas Steffen e398dfb4c3 update copyright 2012-06-23 11:57:42 +02:00
Andreas Steffen 83c75fd10f version bump to 5.0.0 2012-06-23 11:32:54 +02:00
Andreas Steffen fc16296391 adapted description to IKEv2 2012-06-22 09:53:37 +02:00
Andreas Steffen bf577b6714 fixed typo 2012-06-20 11:15:09 +02:00
Andreas Steffen 0802b8359e added ipv6/rw-ip6-in-ip4-ikev1 scenario 2012-06-20 11:13:20 +02:00
Andreas Steffen 36988a0a37 added ipv6/rw-ip6-in-ip4-ikev2 scenario 2012-06-20 11:03:51 +02:00
Andreas Steffen f2fc138e8e upgraded UML options to 5.0.0 2012-06-19 19:34:26 +02:00
Andreas Steffen 87f8ff168b sleep one second more 2012-06-19 06:18:05 +02:00