denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,883 Commits 1 Branch 0 Tags
384c1a32a220e27f2a462fa07e64f8eebdfbec0a
Commit Graph
655 Commits
Author SHA1 Message Date
Andreas Steffen 16ee58e036 TNC server did not issue a TNC_CONNECTION_STATE_HANDSHAKE NotifyConnection message 2011-03-19 16:43:22 +01:00
Martin Willi f8d2f903bf Added a strongswan.conf "enabled" option for duplicheck plugin 2011-03-17 17:34:11 +01:00
Martin Willi c236b214f2 Added strongswan.conf and runtime option to enable/disable whitelist plugin 2011-03-17 17:15:16 +01:00
Andreas Steffen 25ed5672a6 initiate or route all child configs if they have different names from their parent peer config 2011-03-04 07:02:31 +01:00
Andreas Steffen ea1c20d14b initiate or route child configs which don't have a peer config of the same name 2011-03-01 22:24:19 +01:00
Andreas Steffen a2ebc1bd69 put DN in double quotes 2011-03-01 22:19:59 +01:00
Martin Willi 007c47088c Implemented permanent certificate coupling plugin 2011-02-28 16:39:40 +01:00
Martin Willi 0d6d992589 Update duplicheck entry during IKE rekeying 2011-02-28 15:37:18 +00:00
Martin Willi b85be69079 Remove entry from active duplicate list only if it was not in checking 2011-02-28 15:37:18 +00:00
Martin Willi ee0f53e189 Added an example application listening to duplicheck notifications 2011-02-28 15:37:18 +00:00
Martin Willi 3883150779 Notify duplicate detections over a UNIX sockets to listening applications 2011-02-28 15:37:18 +00:00
Martin Willi 3e74ebbecc Added an advanced duplicate checking plugin with liveness check of old SA 2011-02-28 15:37:18 +00:00
Martin Willi c893bf7e5c Added a whitelist command line utility to control whitelist plugin 2011-02-28 15:00:46 +01:00
Martin Willi 53f2a7c712 Added a UNIX socket based control backend to whitelist plugin 2011-02-28 15:00:46 +01:00
Martin Willi 5e603aba4e Implemented a in-memory peer identity whitelist plugin 2011-02-28 15:00:46 +01:00
Andreas Steffen d390b3b901 [hopefully] fixed pathlen problem on ARM platforms 2011-02-10 15:51:18 +01:00
Andreas Steffen f04d1c2dfe replaced ipsec up %startall command by start_action job 2011-02-09 22:27:04 +01:00
Tobias Brunner feb8ada613 maemo: Create DBUS service file with correct path to charon. 2011-02-08 15:17:36 +01:00
Martin Willi 234955d1ea Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS 2011-02-08 11:11:01 +01:00
Martin Willi 91f8ce562d tnccs_11 does not link against libtls, just uses its headers 2011-02-08 11:09:27 +01:00
Martin Willi 6ccb23e80b Whitespace cleanups in tnc code 2011-02-08 11:03:10 +01:00
Martin Willi c6c7c7001c Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv 2011-02-08 11:03:10 +01:00
Martin Willi 3683c0424f Fixed compiler warning 2011-02-08 11:03:10 +01:00
Martin Willi 3af88e4657 tnccs_11 does not link to libtnc anymore 2011-02-08 11:03:10 +01:00
Martin Willi 10a6019ec6 Implement correct signature for pb_tnc_msg->process() 2011-02-08 10:57:41 +01:00
Martin Willi 6cc11bccd1 Fixed various doxygen errors in tnc plugins 2011-02-08 10:57:40 +01:00
Tobias Brunner 56f57e5814 maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes. 
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
 2011-02-04 18:02:48 +01:00
Andreas Steffen 88e15afc8c added comment to determine_tnccs_protocol() function 2011-01-31 05:31:22 +01:00
Andreas Steffen f652995b21 implemented dynamic detection of TNCCS protocol 2011-01-31 00:59:17 +01:00
Martin Willi 60b71def1a Use wrapped threading functions in ha plugin 2011-01-20 15:52:29 +01:00
Martin Willi 9bac426bf3 Fixed memory cleanup if no DHCP transaction found for an OFFER 2011-01-13 10:36:16 +01:00
Andreas Steffen 213281de04 terminate TNCCS 1.1 connection after sending recommendation 2011-01-11 01:17:40 +01:00
Andreas Steffen 4c8e9708ca fixed XML syntax for TNCCS-Recommendation messages 2011-01-11 01:17:40 +01:00
Andreas Steffen 59d1b15aea implemented check_and_build_recommendation() 2011-01-11 01:17:40 +01:00
Andreas Steffen 21d96f44f7 correct numbering of batches 2011-01-11 01:17:40 +01:00
Andreas Steffen 8d0d0f0fe9 initialize the reference count correctly 2011-01-11 01:17:40 +01:00
Andreas Steffen f33966fe8f handle zero size Base64 conversions 2011-01-11 01:17:40 +01:00
Andreas Steffen 8a284e0454 communicate DELETE state to IMCs and IMVs 2011-01-11 01:17:40 +01:00
Andreas Steffen 5fee822a93 implemented parsing of TNCCS 1.1 messages 2011-01-09 10:00:54 +01:00
Andreas Steffen 33749b879c send notifyConnectionChange() to IMCs 2011-01-09 10:00:13 +01:00
Andreas Steffen 8235528840 generate TNCCS-Error messages 2011-01-08 02:17:42 +01:00
Andreas Steffen 1c4b4f76ad created process() method for TNCCS messages 2011-01-08 02:17:42 +01:00
Martin Willi 44e513a320 Added support for trustchain key strength checking to rightauth option 2011-01-07 15:51:35 +01:00
Martin Willi 6367de28ad Added a left/rightcertpolicy keyword to specify certificatePolicy requirements 2011-01-07 15:51:35 +01:00
Andreas Steffen 3a04dfaaf6 corrected naming of tnccs_reason_strings_msg_t object 2011-01-07 07:18:42 +01:00
Andreas Steffen 87fd83a91e do not forget to advance node 2011-01-07 07:17:52 +01:00
Andreas Steffen 3e348daae5 fixed cert_validator_t:validate interface 2011-01-07 05:41:01 +01:00
Andreas Steffen d9e21bf180 implemented TNCCS 1.1 without libtnc 2011-01-07 05:29:59 +01:00
Martin Willi 2e90006f96 Show base CRL of delta CRLs in listcrls 2011-01-05 16:46:06 +01:00
Martin Willi b3d359e58f Use a generic getter for all numerical X.509 constraints 2011-01-05 16:46:05 +01:00