 Tobias Brunner
|
31e7dc4dfd
|
Improved check for first IKE_AUTH message in ike_mobike task.
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
|
2010-10-12 11:11:05 +02:00 |
|
|
Tobias Brunner
|
c817e7bb90
|
Migrated ike_mobike task to INIT/METHOD macros.
|
2010-10-12 11:11:05 +02:00 |
|
|
Tobias Brunner
|
be90134211
|
Simplified apply_port function in mobike task.
|
2010-10-12 11:11:04 +02:00 |
|
|
Tobias Brunner
|
ec0c756d07
|
Do not fire roam events based on local route changes.
These kernel events are triggered on address changes, which is
problematic when deleting virtual IP addresses.
|
2010-10-12 11:11:04 +02:00 |
|
|
Tobias Brunner
|
29607690a8
|
If a changed route has no src, try to find it via interface.
|
2010-10-12 11:11:04 +02:00 |
|
|
Tobias Brunner
|
0ac6d2e658
|
Get source address from interface if the route does not provide one.
|
2010-10-12 11:11:04 +02:00 |
|
|
Tobias Brunner
|
cd26eedc5c
|
Do not update hosts based on retransmitted messages.
|
2010-10-12 11:11:04 +02:00 |
|
|
Tobias Brunner
|
d5bd775126
|
Do not update remote host if we are behind a NAT.
|
2010-10-12 11:11:04 +02:00 |
|
|
Andreas Steffen
|
e6f685b0fa
|
scenarios without RADIUS server can use default iptables script
|
2010-10-11 17:04:53 +02:00 |
|
|
Andreas Steffen
|
e5f5f612bd
|
fixed some evaltest.dat files
|
2010-10-11 16:58:12 +02:00 |
|
|
Andreas Steffen
|
7d8cb1f952
|
added ikev2/rw-eap-tnc-block scenario
|
2010-10-11 16:58:12 +02:00 |
|
|
Andreas Steffen
|
f2b1aa4962
|
added eap-radius-filter_id option to strongswan.conf
|
2010-10-11 12:20:45 +02:00 |
|
|
Andreas Steffen
|
456a4f398e
|
updated keyexchange entry in ipsec.conf.5 man page
|
2010-10-11 06:23:57 +02:00 |
|
|
Andreas Steffen
|
aff81d3bac
|
updated strongswan.conf
|
2010-10-11 06:12:26 +02:00 |
|
|
Andreas Steffen
|
8efd583a64
|
explicit ikev1 key exchange for ikev1/esp-alg-null scenario
|
2010-10-09 22:07:51 +02:00 |
|
|
Andreas Steffen
|
1e6c92789e
|
fixed typo
|
2010-10-09 22:05:26 +02:00 |
|
|
Andreas Steffen
|
0bc5547d0c
|
*** HISTORICAL MOMENT: IKEv2 becomes the default! ***
|
2010-10-09 20:46:55 +02:00 |
|
|
Andreas Steffen
|
74e14ed631
|
define explicit IKEv1 key exchange mode II
|
2010-10-09 20:04:00 +02:00 |
|
|
Andreas Steffen
|
ed08f7ce83
|
use DBG_TNC for TNC debugging output
|
2010-10-09 16:01:19 +02:00 |
|
|
Andreas Steffen
|
db24b600fb
|
changed filter attribute from access to allow
|
2010-10-09 01:01:19 +02:00 |
|
|
Andreas Steffen
|
a1afa8d810
|
added ikev2/rw-eap-tnc scenario
|
2010-10-09 00:59:31 +02:00 |
|
|
Andreas Steffen
|
3cb3f85dfc
|
TNCCS debug cosmetics
|
2010-10-09 00:58:12 +02:00 |
|
|
Andreas Steffen
|
e9ba435fe3
|
revert to standard TNCC/TNCS Initialization function
|
2010-10-09 00:35:45 +02:00 |
|
|
Andreas Steffen
|
bfba1fdc92
|
implemented TNC isolation via group memberships
|
2010-10-09 00:34:53 +02:00 |
|
|
Andreas Steffen
|
db2f66c2df
|
implemented a makeshift non-scalable send buffer
|
2010-10-08 22:24:30 +02:00 |
|
|
Andreas Steffen
|
55960a170f
|
imc/imv cosmetics
|
2010-10-08 06:40:03 +02:00 |
|
|
Andreas Steffen
|
d1b94592a6
|
fixed notation
|
2010-10-07 23:34:37 +02:00 |
|
|
Andreas Steffen
|
8dcc56dcc0
|
created tnc-imc and tnc-imv plugins
|
2010-10-07 23:31:23 +02:00 |
|
|
Andreas Steffen
|
04d000210b
|
deactivate start_phase2_tnc flag after start
|
2010-10-07 15:42:00 +02:00 |
|
|
Andreas Steffen
|
888455587b
|
added server side support for EAP-TNC
|
2010-10-07 15:02:51 +02:00 |
|
|
Martin Willi
|
962300b920
|
Show result of RADIUS authentication along with EAP identity
|
2010-10-07 11:14:09 +02:00 |
|
|
Andreas Steffen
|
99dfc3c295
|
added --debug-tls to charon usage() function
|
2010-10-07 09:34:56 +02:00 |
|
|
Andreas Steffen
|
84babfb895
|
define explicit IKEv1 key exchange mode
|
2010-10-07 07:31:44 +02:00 |
|
|
Andreas Steffen
|
9b201cf859
|
host venus is used in ikev2/rw-eap-tnc-radius scenario
|
2010-10-06 10:38:18 +02:00 |
|
|
Andreas Steffen
|
541666b89f
|
added ikev2/rw-eap-tnc-radius-block scenario
|
2010-10-06 10:32:50 +02:00 |
|
|
Andreas Steffen
|
68de7267e1
|
added tnccs-11 plugin options to strongswan.conf
|
2010-10-06 07:53:50 +02:00 |
|
|
Andreas Steffen
|
9b04378ece
|
version bump to 4.5.0dr5
|
2010-10-06 07:07:14 +02:00 |
|
|
Andreas Steffen
|
bb43f25ad3
|
configure tnc_config path and preferred_language via strongswan.conf
|
2010-10-05 22:09:07 +02:00 |
|
|
Andreas Steffen
|
6d0e9cf046
|
created hull for TNCCS 2.0 plugin
|
2010-10-05 21:15:24 +02:00 |
|
|
Andreas Steffen
|
a1edf4d33e
|
use group membership to implement access/isolate redirection in filter-based TNC scenario
|
2010-10-05 20:40:36 +02:00 |
|
|
Andreas Steffen
|
48e16e0ae1
|
final version of ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 20:38:34 +02:00 |
|
|
Andreas Steffen
|
9ffa3f71f2
|
fixed typo in image path
|
2010-10-05 09:09:58 +02:00 |
|
|
Andreas Steffen
|
b540d19133
|
moved CHILD_SA selection out of attribute loop
|
2010-10-05 08:02:07 +02:00 |
|
|
Andreas Steffen
|
28b23fef11
|
receive name of preferred CHILD_SA via RADIUS Filter-Id attribute
|
2010-10-05 07:58:07 +02:00 |
|
|
Andreas Steffen
|
e7104a6ec9
|
updated ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 07:56:57 +02:00 |
|
|
Andreas Steffen
|
0cfdbaff2c
|
set EAP-TTLS/TNC version also in acknowledgement packets
|
2010-10-04 14:39:49 +02:00 |
|
|
Martin Willi
|
a8809bb0cb
|
Fixed status_t enum names definition
|
2010-10-04 10:48:00 +02:00 |
|
|
Andreas Steffen
|
30f14b7066
|
added configuration files for dummyimc.so IMC
|
2010-10-01 00:14:44 +02:00 |
|
|
Andreas Steffen
|
ea893a5de2
|
The TNC@FHH TNC Serve does not like symbolic links
|
2010-09-30 23:35:24 +02:00 |
|
|
Andreas Steffen
|
a00a43e0f6
|
print XML as plaintext and process recieved TNCCS Batch
|
2010-09-30 23:34:00 +02:00 |
|