Tobias Brunner
4542920a3e
Added support for multiple overlays to the copy-on-write filesystem.
2010-10-12 15:03:19 +02:00
Tobias Brunner
1dbf0ed982
Do not add additional addresses to MOBIKE path probing messages.
2010-10-12 11:11:06 +02:00
Tobias Brunner
5774408898
Change behavior of responder during roaming.
...
If the current source address is not available anymore, the responder
uses ike_mobike_t.roam, thus, uses multiple address combinations when
trying to notify the initiator.
2010-10-12 11:11:05 +02:00
Tobias Brunner
c5770f864f
Allow responder to use ike_mobike_t.roam.
...
After getting a response the responder updates the IPsec SAs.
2010-10-12 11:11:05 +02:00
Tobias Brunner
261b2572d1
Send list of additional addresses even if current path is still valid.
2010-10-12 11:11:05 +02:00
Tobias Brunner
bab56a4abb
Extracted path checking in ike_sa_t.roam into separate functions.
2010-10-12 11:11:05 +02:00
Tobias Brunner
769c69facc
Added support for responders to change their address via MOBIKE.
...
If the original responder updates its list of additional addresses we
check if the remote endpoint changed and update the IPsec SAs if it did,
as we assume the original address became unavailable and the responder
already updated the SAs on its side.
2010-10-12 11:11:05 +02:00
Tobias Brunner
13876431d6
Explicitly configure MOBIKE tasks to update the list of additional addresses.
2010-10-12 11:11:05 +02:00
Tobias Brunner
31e7dc4dfd
Improved check for first IKE_AUTH message in ike_mobike task.
...
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
2010-10-12 11:11:05 +02:00
Tobias Brunner
c817e7bb90
Migrated ike_mobike task to INIT/METHOD macros.
2010-10-12 11:11:05 +02:00
Tobias Brunner
be90134211
Simplified apply_port function in mobike task.
2010-10-12 11:11:04 +02:00
Tobias Brunner
ec0c756d07
Do not fire roam events based on local route changes.
...
These kernel events are triggered on address changes, which is
problematic when deleting virtual IP addresses.
2010-10-12 11:11:04 +02:00
Tobias Brunner
29607690a8
If a changed route has no src, try to find it via interface.
2010-10-12 11:11:04 +02:00
Tobias Brunner
0ac6d2e658
Get source address from interface if the route does not provide one.
2010-10-12 11:11:04 +02:00
Tobias Brunner
cd26eedc5c
Do not update hosts based on retransmitted messages.
2010-10-12 11:11:04 +02:00
Tobias Brunner
d5bd775126
Do not update remote host if we are behind a NAT.
2010-10-12 11:11:04 +02:00
Andreas Steffen
e6f685b0fa
scenarios without RADIUS server can use default iptables script
2010-10-11 17:04:53 +02:00
Andreas Steffen
e5f5f612bd
fixed some evaltest.dat files
2010-10-11 16:58:12 +02:00
Andreas Steffen
7d8cb1f952
added ikev2/rw-eap-tnc-block scenario
2010-10-11 16:58:12 +02:00
Andreas Steffen
f2b1aa4962
added eap-radius-filter_id option to strongswan.conf
2010-10-11 12:20:45 +02:00
Andreas Steffen
456a4f398e
updated keyexchange entry in ipsec.conf.5 man page
2010-10-11 06:23:57 +02:00
Andreas Steffen
aff81d3bac
updated strongswan.conf
2010-10-11 06:12:26 +02:00
Andreas Steffen
8efd583a64
explicit ikev1 key exchange for ikev1/esp-alg-null scenario
2010-10-09 22:07:51 +02:00
Andreas Steffen
1e6c92789e
fixed typo
2010-10-09 22:05:26 +02:00
Andreas Steffen
0bc5547d0c
*** HISTORICAL MOMENT: IKEv2 becomes the default! ***
2010-10-09 20:46:55 +02:00
Andreas Steffen
74e14ed631
define explicit IKEv1 key exchange mode II
2010-10-09 20:04:00 +02:00
Andreas Steffen
ed08f7ce83
use DBG_TNC for TNC debugging output
2010-10-09 16:01:19 +02:00
Andreas Steffen
db24b600fb
changed filter attribute from access to allow
2010-10-09 01:01:19 +02:00
Andreas Steffen
a1afa8d810
added ikev2/rw-eap-tnc scenario
2010-10-09 00:59:31 +02:00
Andreas Steffen
3cb3f85dfc
TNCCS debug cosmetics
2010-10-09 00:58:12 +02:00
Andreas Steffen
e9ba435fe3
revert to standard TNCC/TNCS Initialization function
2010-10-09 00:35:45 +02:00
Andreas Steffen
bfba1fdc92
implemented TNC isolation via group memberships
2010-10-09 00:34:53 +02:00
Andreas Steffen
db2f66c2df
implemented a makeshift non-scalable send buffer
2010-10-08 22:24:30 +02:00
Andreas Steffen
55960a170f
imc/imv cosmetics
2010-10-08 06:40:03 +02:00
Andreas Steffen
d1b94592a6
fixed notation
2010-10-07 23:34:37 +02:00
Andreas Steffen
8dcc56dcc0
created tnc-imc and tnc-imv plugins
2010-10-07 23:31:23 +02:00
Andreas Steffen
04d000210b
deactivate start_phase2_tnc flag after start
2010-10-07 15:42:00 +02:00
Andreas Steffen
888455587b
added server side support for EAP-TNC
2010-10-07 15:02:51 +02:00
Martin Willi
962300b920
Show result of RADIUS authentication along with EAP identity
2010-10-07 11:14:09 +02:00
Andreas Steffen
99dfc3c295
added --debug-tls to charon usage() function
2010-10-07 09:34:56 +02:00
Andreas Steffen
84babfb895
define explicit IKEv1 key exchange mode
2010-10-07 07:31:44 +02:00
Andreas Steffen
9b201cf859
host venus is used in ikev2/rw-eap-tnc-radius scenario
2010-10-06 10:38:18 +02:00
Andreas Steffen
541666b89f
added ikev2/rw-eap-tnc-radius-block scenario
2010-10-06 10:32:50 +02:00
Andreas Steffen
68de7267e1
added tnccs-11 plugin options to strongswan.conf
2010-10-06 07:53:50 +02:00
Andreas Steffen
9b04378ece
version bump to 4.5.0dr5
2010-10-06 07:07:14 +02:00
Andreas Steffen
bb43f25ad3
configure tnc_config path and preferred_language via strongswan.conf
2010-10-05 22:09:07 +02:00
Andreas Steffen
6d0e9cf046
created hull for TNCCS 2.0 plugin
2010-10-05 21:15:24 +02:00
Andreas Steffen
a1edf4d33e
use group membership to implement access/isolate redirection in filter-based TNC scenario
2010-10-05 20:40:36 +02:00
Andreas Steffen
48e16e0ae1
final version of ikev2/rw-eap-tnc-radius scenario
2010-10-05 20:38:34 +02:00
Andreas Steffen
9ffa3f71f2
fixed typo in image path
2010-10-05 09:09:58 +02:00
Tobias Brunner