 Andreas Steffen
|
358dbe4835
|
ipsec attest supports ima template hashes
|
2012-07-16 17:17:08 +02:00 |
|
|
Andreas Steffen
|
0f236aacb5
|
ipsec attest now can measure all files in a directory
|
2012-07-16 09:54:11 +02:00 |
|
|
Andreas Steffen
|
12ef9fb1b5
|
moved listing of file measurements to pts_file_meas
|
2012-07-16 09:54:11 +02:00 |
|
|
Andreas Steffen
|
d7a8333c54
|
moved to debug level 3
|
2012-07-16 09:54:11 +02:00 |
|
|
Andreas Steffen
|
e0bfc4d63c
|
transfer IMA file measurements via PA-TNC
|
2012-07-13 14:46:42 +02:00 |
|
|
Andreas Steffen
|
ecfdce8cb6
|
some more copyright updates
|
2012-07-13 14:46:42 +02:00 |
|
|
Andreas Steffen
|
be735f0148
|
added PA-TNC max_msg_len option to man page
|
2012-07-13 11:02:23 +02:00 |
|
|
Andreas Steffen
|
22e97e4f1f
|
updated Copyright info
|
2012-07-13 10:42:40 +02:00 |
|
|
Andreas Steffen
|
dea7d74557
|
wait for the finalization of the Functional Component measurements
|
2012-07-13 10:06:43 +02:00 |
|
|
Andreas Steffen
|
a845e4ebc5
|
restrict PA-TNC message siz only if upper limit is defined
|
2012-07-12 22:18:24 +02:00 |
|
|
Andreas Steffen
|
baa6a292cf
|
a curly bracket got lost
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
4f7b2d7a6d
|
destroy oversized attributes
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
8ef43d8786
|
prevent endless loop with oversize attributes
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
968c83cdeb
|
restrict PA-TNC messages to maximum size
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
c5d2e61802
|
refactored PA-TNC attribute error handling
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
b6e23b24f3
|
fixed memory leak in the IETF standard error handling
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
ea67a75b98
|
static upper size limit for PA-TNC messages
|
2012-07-12 21:26:18 +02:00 |
|
|
Andreas Steffen
|
3f6392bc14
|
fixed a memory leak in imc|imv_agent
|
2012-07-12 00:03:24 +02:00 |
|
|
Andreas Steffen
|
246c9ad831
|
imc/imv->send_message() uses attr_list
|
2012-07-11 23:34:51 +02:00 |
|
|
Andreas Steffen
|
c9c3da66a8
|
removed unused variables
|
2012-07-11 23:15:44 +02:00 |
|
|
Andreas Steffen
|
d4cf9cdf28
|
fixed libstrongswan/Makefile.am
|
2012-07-11 23:13:55 +02:00 |
|
|
Andreas Steffen
|
ccceb82662
|
version bump to 5.0.1dr1
|
2012-07-11 17:46:45 +02:00 |
|
|
Andreas Steffen
|
c56667f1db
|
fixed logging of unsupported TNCCS version
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
1de4af66d5
|
PB-TNC Client sends empty CLOSE batch only in DECIDED state
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
a287a3cdcd
|
have_recommendation() accepts NULL arguments
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
b8b678a567
|
send empty SDATA batch if no recommendation is available yet, but in order to avoid loops only if no empty CDATA batch was received
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
a5c79d0175
|
moved batch size calculation into pb_tnc_batch_t
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
d7dcbc95a9
|
make maximum PB-TNC batch size configurable
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
3a16bec8f9
|
limit the size of a PB-TNC batch to the maximum EAP-TNC packet size
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
6067233193
|
remove pluto logging
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
6245edf37e
|
eliminate message length field in EAP-TNC
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
c8aabefd08
|
added charon.plugins.eap-tnc.protocol option
|
2012-07-11 17:09:05 +02:00 |
|
|
Andreas Steffen
|
a04c51aea9
|
due to single fragment, total length does not have to be included
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
4492ffc907
|
EAP-TNC does not support fragmentation
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
c36680962c
|
allow to transmit 64k TLS Handshake and Application messages via EAP-[T]TLS
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
dfe82160e4
|
some tls_eap optimizations
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
87efdef35b
|
configure size of ITA Dummy PA-TNC attribute
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
3bd452f8f3
|
max_message_count = 0 disables limit
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
22f9174609
|
defined ITA Dummy PA-TNC attribute for test purposes
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
ee200bab61
|
use TSS_PCRS_STRUCT_DEFAULT
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
da67c37d65
|
log invalid TLS packet length
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
5b35214a87
|
check boot_aggregate value
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
ddafcda4d8
|
refactored PTS functional component measurements
|
2012-07-11 17:09:04 +02:00 |
|
|
Andreas Steffen
|
1e5634c9b3
|
remove virtual IP for moon's inner interface
|
2012-06-29 23:20:32 +02:00 |
|
|
Andreas Steffen
|
4271838f9c
|
an IKE daemon needs these plugins but a PDP doesn't
|
2012-06-29 06:24:02 +02:00 |
|
|
Andreas Steffen
|
36df6113fa
|
added Ubuntu 12.04 LTS i686 measurements
|
2012-06-28 22:20:44 +02:00 |
|
|
Andreas Steffen
|
5f451f2d6a
|
IMCs and IMVs might depend on X.509 certificates or trusted public keys
|
2012-06-28 17:55:02 +02:00 |
|
|
Andreas Steffen
|
1c959e4479
|
added ikev1/virtual-ip scenario
|
2012-06-28 14:52:07 +02:00 |
|
|
Andreas Steffen
|
5a86589d0c
|
corrected description of ikev1/ip-pool-db scenario
|
2012-06-28 14:44:10 +02:00 |
|
|
Andreas Steffen
|
5c0d1bccb0
|
corrected description of ikev1/ip-pool scenario
|
2012-06-28 14:42:34 +02:00 |
|
|
Andreas Steffen
|
788e512d58
|
added ikev1/ip-pool scenario
|
2012-06-28 14:37:04 +02:00 |
|
|
Andreas Steffen
|
f39a2f275e
|
merged xauth-id-rsa and xauth-rsa-config scenarios
|
2012-06-28 14:23:47 +02:00 |
|
|
Andreas Steffen
|
8cad9ed42c
|
charon automatically removes virtual interfaces
|
2012-06-28 09:30:24 +02:00 |
|
|
Andreas Steffen
|
5d476b4266
|
updated default configuration of UML hosts to 5.0.0
|
2012-06-25 13:04:55 +02:00 |
|
|
Andreas Steffen
|
c38d6905a2
|
added charon.cisco_unity to strongswan.conf.5 man page
|
2012-06-25 11:47:40 +02:00 |
|
|
Andreas Steffen
|
554a697a84
|
support Cisco Unity VID
|
2012-06-25 11:09:06 +02:00 |
|
|
Andreas Steffen
|
f84180bb89
|
removed AUTHORS and CREDITS
|
2012-06-25 08:45:10 +02:00 |
|
|
Andreas Steffen
|
a7b8e380dc
|
some copyright additions
|
2012-06-23 12:09:29 +02:00 |
|
|
Andreas Steffen
|
e398dfb4c3
|
update copyright
|
2012-06-23 11:57:42 +02:00 |
|
|
Andreas Steffen
|
83c75fd10f
|
version bump to 5.0.0
|
2012-06-23 11:32:54 +02:00 |
|
|
Andreas Steffen
|
fc16296391
|
adapted description to IKEv2
|
2012-06-22 09:53:37 +02:00 |
|
|
Andreas Steffen
|
bf577b6714
|
fixed typo
|
2012-06-20 11:15:09 +02:00 |
|
|
Andreas Steffen
|
0802b8359e
|
added ipv6/rw-ip6-in-ip4-ikev1 scenario
|
2012-06-20 11:13:20 +02:00 |
|
|
Andreas Steffen
|
36988a0a37
|
added ipv6/rw-ip6-in-ip4-ikev2 scenario
|
2012-06-20 11:03:51 +02:00 |
|
|
Andreas Steffen
|
f2fc138e8e
|
upgraded UML options to 5.0.0
|
2012-06-19 19:34:26 +02:00 |
|
|
Andreas Steffen
|
87f8ff168b
|
sleep one second more
|
2012-06-19 06:18:05 +02:00 |
|
|
Andreas Steffen
|
e4012ae386
|
use socket-default in scenario
|
2012-06-19 06:17:37 +02:00 |
|
|
Andreas Steffen
|
bc60bb8bf4
|
added ikev1/xauth-id-rsa-hybrid scenario
|
2012-06-18 22:51:50 +02:00 |
|
|
Andreas Steffen
|
771a66c6a0
|
added ikev1/xauth-id-rsa-aggressive scenario
|
2012-06-18 22:30:26 +02:00 |
|
|
Andreas Steffen
|
2045a9d36d
|
added secret as valid authby argument
|
2012-06-18 22:11:18 +02:00 |
|
|
Andreas Steffen
|
8b8f5c6141
|
rsasig is not recognized as authentication method
|
2012-06-18 22:03:36 +02:00 |
|
|
Andreas Steffen
|
49d18a8e06
|
enable potentially unsafe aggressive mode
|
2012-06-18 21:34:48 +02:00 |
|
|
Andreas Steffen
|
7a892288fb
|
change ikev1/xauth scenarios to modern notation
|
2012-06-18 21:22:01 +02:00 |
|
|
Andreas Steffen
|
e49f18f74d
|
thanks to narrowing treat right|leftsubnetwithin as synonyms for right|leftsubnet
|
2012-06-14 07:55:12 +02:00 |
|
|
Andreas Steffen
|
daa857029f
|
removed plutostart parameter
|
2012-06-13 21:19:05 +02:00 |
|
|
Andreas Steffen
|
4745fce666
|
deleted IKEv1 charon-pluto interoperability scenarios
|
2012-06-12 10:00:21 +02:00 |
|
|
Andreas Steffen
|
fd03443f42
|
added missing parameter in get_my_addr() and get_other_addr() calls
|
2012-06-09 14:06:45 +02:00 |
|
|
Andreas Steffen
|
1527307ec9
|
version bump to 5.0.0rc1
|
2012-06-09 14:05:08 +02:00 |
|
|
Andreas Steffen
|
47f8ae7cfd
|
added ikev1/dynamic scenarios using allow-any
|
2012-06-08 22:54:12 +02:00 |
|
|
Andreas Steffen
|
7cc65a0376
|
removed whitespace
|
2012-06-08 22:34:49 +02:00 |
|
|
Andreas Steffen
|
d9e1b4c033
|
added ikev2/dynamic-two-peers scenario
|
2012-06-08 21:52:20 +02:00 |
|
|
Andreas Steffen
|
68f3e2462a
|
added ikev2/dynamic-responder scenario
|
2012-06-08 21:24:42 +02:00 |
|
|
Andreas Steffen
|
420e77c2d0
|
added ikev2/dynamic-initiator scenario
|
2012-06-08 21:24:41 +02:00 |
|
|
Andreas Steffen
|
1d315bddd3
|
implemented the right|leftallowany feature
|
2012-06-08 21:24:41 +02:00 |
|
|
Andreas Steffen
|
6f948c5c8d
|
added nonce plugin to gcrypt scenarios
|
2012-05-30 07:21:03 +02:00 |
|
|
Andreas Steffen
|
08951eb7a8
|
upgraded ipv6 scenarios to 5.0.0
|
2012-05-29 23:40:01 +02:00 |
|
|
Andreas Steffen
|
be982b4c03
|
enable xauth-eap plugin in UML scenarios
|
2012-05-25 17:02:39 +02:00 |
|
|
Andreas Steffen
|
2be46da56d
|
added nonce plugin in default host configurations
|
2012-05-25 17:00:03 +02:00 |
|
|
Andreas Steffen
|
da7a46b73b
|
upgraded ike scenarios to 5.0.0
|
2012-05-25 16:58:17 +02:00 |
|
|
Andreas Steffen
|
d2933125d5
|
added IKEv1 IPCOMP pluto-charon interoperability scenarios
|
2012-05-25 12:52:21 +02:00 |
|
|
Andreas Steffen
|
b253008544
|
upgraded ikev1/compress to 5.0.0
|
2012-05-24 17:36:27 +02:00 |
|
|
Andreas Steffen
|
fa50a89c95
|
added ikev1/xauth-rsa-eap-md5-radius scenario
|
2012-05-24 09:26:00 +02:00 |
|
|
Andreas Steffen
|
31c83b973e
|
load nonce plugin
|
2012-05-23 15:05:57 +02:00 |
|
|
Andreas Steffen
|
ad59f3a91a
|
added ikev1 pluto-charon interoperability scenarios
|
2012-05-23 14:47:41 +02:00 |
|
|
Andreas Steffen
|
148b643880
|
upgraded ikev1 scenarios to 5.0.0
|
2012-05-23 14:45:15 +02:00 |
|
|
Andreas Steffen
|
2ac996cb71
|
list IKEv1 Aggressive Mode in ipsec statusall
|
2012-05-23 11:12:27 +02:00 |
|
|
Andreas Steffen
|
80c5b17d1a
|
make IKEv1 DPD timeout configurable in charon
|
2012-05-17 19:49:22 +02:00 |
|
|
Andreas Steffen
|
5cc6dc8b39
|
check for ESP in UDP encapsulation
|
2012-05-12 12:15:58 +02:00 |
|
|
Andreas Steffen
|
a56fdff194
|
upgraded ikev2 scenarios to 5.0.0
|
2012-05-11 11:00:32 +02:00 |
|
|
Andreas Steffen
|
0e1c6fa2a9
|
suppress leak detective output
|
2012-05-11 05:48:11 +02:00 |
|