Andreas Steffen
4eaf08c35b
vici: list-conn reports DPD settings and swanctl displays them
2018-02-15 16:28:06 +01:00
Andreas Steffen
476200ecc6
Version bump to 5.6.2dr4
2018-02-03 11:05:21 +01:00
Andreas Steffen
3c5b010f5b
testing: Added Linux 4.14 and 4.15 config files
2018-01-31 21:32:45 +01:00
Andreas Steffen
3232cf68b9
libtpmtss: Return after failure
2018-01-09 16:12:40 +01:00
Andreas Steffen
344e1b6060
Version bump to 5.6.2dr3
2017-12-13 08:54:54 +01:00
Andreas Steffen
0fb293fc91
tpm_extendpcr: Extend digests into a TPM PCR
2017-12-13 07:10:28 +01:00
Andreas Steffen
5d3eb57cfd
Version bump to 5.6.2dr2
2017-12-10 21:42:02 +01:00
Andreas Steffen
ee402a22a3
asn1: Added tlsfeature OID
2017-12-10 19:56:14 +01:00
Andreas Steffen
3e7a19bfa9
pki: Extend pki --print with --keyid parameter
2017-12-10 19:31:10 +01:00
Andreas Steffen
acfd590ab6
imc-os: Derive device ID from private key bound to smartcard or TPM
2017-12-10 11:51:50 +01:00
Andreas Steffen
4f60b72a81
Version bump to 5.6.2dr1
2017-12-05 22:23:43 +01:00
Andreas Steffen
71cf3d709a
pt-tls-client: Load certificates via handle from smartcard or TPM
2017-12-05 21:31:31 +01:00
Andreas Steffen
e850d000b8
libtpmtss: Load X.509 certificates from TPM 2.0 NV RAM
2017-12-05 21:31:31 +01:00
Andreas Steffen
fb1cf320a2
libtpmtss: Extend TPM 2.0 capability info
2017-12-05 21:31:31 +01:00
Andreas Steffen
203a86ecb8
Version bump to 5.6.1
2017-11-17 22:42:28 +01:00
Andreas Steffen
f60b08ba0d
testing: Added swanctl/rw-cert-pss scenario
2017-11-17 22:42:07 +01:00
Andreas Steffen
859cb93d28
testing: Do not remove all swanctl subdirectories
2017-11-11 19:23:01 +01:00
Andreas Steffen
b20bf062e8
Version bump to 5.6.1rc1
2017-11-11 18:25:17 +01:00
Andreas Steffen
74f8ad7fd9
Merge branch 'swanctl-testing'
2017-11-11 16:42:38 +01:00
Andreas Steffen
7df35af7cc
libimcv: Updated imv database
2017-11-11 16:41:16 +01:00
Andreas Steffen
13a3f20f2e
testing: Converterd tnc to systemd
2017-11-11 16:41:16 +01:00
Andreas Steffen
323f0b05d7
testing: Converted sql to systemd
2017-11-11 16:41:15 +01:00
Andreas Steffen
70dc5bb8ad
testing: Converted swanctl to systemd
2017-11-11 16:41:15 +01:00
Andreas Steffen
65f74cd13d
testing: Added legacy ipv6-stroke scenarios
2017-11-11 16:41:15 +01:00
Andreas Steffen
4402013f05
testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:51 +01:00
Andreas Steffen
b3ccfcd05e
testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
da5aa6ae6a
testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
12dbca721e
testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
f0476c4a82
testing: Converted ipv6/rw-rfc3779-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
96d7d9392f
testing: Converted ipv6/rw-compress-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
34acd584e5
testing: Converted ipv6/rw-psk-ikev2 to swanctl
2017-11-10 11:49:49 +01:00
Andreas Steffen
0770b37f8f
testing: Converted ipv6/rw-psk-ikev1 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
ffe0d82c03
testing: Converted ipv6/rw-ikev2 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
a96238a0d0
testing: Converted ipv6/rw-ikev1 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
8215681a4a
testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
04b79bc98c
testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
fd3f6871c9
testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
f57ca13e28
testing: Converted ipv6/transport-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
4ae1f7c0e3
testing: Converted ipv6/transport-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
7812b6e6cf
testing: Converted ipv6/net2net-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
e94db2b4ad
testing: Converted ipv6/net2net-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
47ec3326e7
testing: Converted ipv6/host2host-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
087b027f88
testing: Converted ipv6/host2host-ikev1 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
0a6f8644ef
testing: Removed libipsec/rw-suite-b
2017-11-10 11:49:39 +01:00
Andreas Steffen
9375c9c9db
testing: Converted libipsec/net2net-null to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
86d1b7a14d
testing: Converted libipsec/net2net-cert-ipv6 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
c3b8778fc9
testing: Converted libipsec/net2net-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
de42a67b79
testing: Converted libipsec/net2net-3des to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
6922d5e56a
testing: Converted libipsec/host2host-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
3659fda1a5
testing: Converted gcrypt-ikev2 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
b46deb8107
testing: Converted gcrypt-ikev1 to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
88a950d915
testing: Converted af-alg to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
67a97c18ae
testing: Enable systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
804784cc1c
testing: Updated some descriptions
2017-11-10 11:49:38 +01:00
Andreas Steffen
0d63255513
libtpmtss: Added missing argument in hasher_from_signature_scheme()
2017-11-10 11:47:27 +01:00
Andreas Steffen
7f86b0f639
libcharon: Added Cisco FlexVPN Supported VID
2017-10-27 20:14:57 +02:00
Andreas Steffen
7dd29ab4ed
libimcv: Renamed SW Request to SWIMA Request
2017-09-27 10:01:56 +02:00
Andreas Steffen
a9fb529b84
Version bump to 5.6.1dr3
2017-09-26 22:43:38 +02:00
Andreas Steffen
be7020dace
SWIMA attribute name changes
...
draft-ietf-sacm-nea-swima-patnc-01 changes some SWIMA attribute
names.
2017-09-26 20:35:39 +02:00
Andreas Steffen
c80cec2d5e
Version bump to 5.6.1dr2
2017-09-13 16:56:45 +02:00
Andreas Steffen
8aad7ffb11
sec-updater: Import SWID tags of updated packages
...
sec-updater downloads the deb package files from security updates from
a given linux repository and uses the swid_generator command to
derive a SWID tag. The SWID tag is then imported into strongTNC
using the manage.py importswid command.
2017-09-09 20:23:19 +02:00
Andreas Steffen
33a729fac2
libimcv: Corrected caption
2017-09-09 13:10:45 +02:00
Andreas Steffen
165d28174d
pt-tls-client: Introduced --options as a synonym for --optionsfrom
2017-09-09 10:31:02 +02:00
Andreas Steffen
94bdd463d8
sec-updater: Write to log only if at least one update is found.
2017-09-07 14:54:41 +02:00
Andreas Steffen
d43b84dcb4
Version bump to 5.6.1dr1
2017-09-01 13:49:09 +02:00
Andreas Steffen
fc373b64a6
imv-os: Updated security update evaluation
2017-09-01 12:42:24 +02:00
Andreas Steffen
7b75c18696
libimcv: Updated database scheme
2017-09-01 11:19:40 +02:00
Andreas Steffen
b84817375d
sec-updater: Checks for security updates
...
sec-updater checks for security updates and backports in Debian/
Ubuntu repositories and sets the security flags in the strongTNC
policy database accordingly.
2017-09-01 11:19:40 +02:00
Andreas Steffen
076aac7069
imv-attestation: Fixed file hash measurements
...
The introduction of file versions broke file hash measurements.
This has been fixed by using a generic product versions having an
empty package name.
2017-09-01 10:51:15 +02:00
Andreas Steffen
d2a89e9407
sw-collector.8: Some cleanups
2017-08-25 11:28:06 +02:00
Andreas Steffen
9cc37212c6
Version bump to 5.6.0
2017-08-14 10:07:47 +02:00
Andreas Steffen
d35183e33e
Version bump to 5.6.0rc2
2017-08-09 14:23:28 +02:00
Andreas Steffen
e658fd475a
sw-collector: Moved info class to libimcv
2017-08-09 13:28:00 +02:00
Andreas Steffen
285c077d2c
Version bump to 5.6.0rc1
2017-08-07 18:25:52 +02:00
Andreas Steffen
3295b35c6a
imv-database: Improve performance by creating file_hashes index
2017-08-07 17:43:54 +02:00
Andreas Steffen
f0ae8c1761
Version bump to 5.6.0dr4
2017-08-04 21:15:45 +02:00
Andreas Steffen
808be1d57f
testing: Added tnc/tnccs-20-ev-pt-tls scenario
2017-08-04 19:15:51 +02:00
Andreas Steffen
88501a64ca
swid-gen: Share SWID generator between sw-collector, imc-swima and imc-swid
2017-08-04 19:15:26 +02:00
Andreas Steffen
073c179a88
sw-collector: Added --full option
2017-08-03 09:02:54 +02:00
Andreas Steffen
bea3f5d07f
sw-collector: Added --installed/removed options
2017-08-03 09:02:54 +02:00
Andreas Steffen
f35fbb2b5f
sw-collector: sw-collector.first_file setting retrieves creation date from file stats
2017-07-26 19:51:21 +02:00
Andreas Steffen
05f8e64d79
Version bump to 5.6.0dr3
2017-07-18 20:53:35 +02:00
Andreas Steffen
a3b3538630
testing: Fixed the path of pt-tls-client
2017-07-18 20:43:03 +02:00
Andreas Steffen
a9383c2b46
checksum: Compile sw-collector before checksum
2017-07-18 20:02:21 +02:00
Andreas Steffen
8362378a15
checksum: Added pt-tls-client and sw-collector
2017-07-18 07:25:46 +02:00
Andreas Steffen
964bf73237
sw-collector: Moved to its own directory and added man page
2017-07-18 07:25:45 +02:00
Andreas Steffen
34cade8b84
pt-tls-client: Added man page
2017-07-16 15:37:03 +02:00
Andreas Steffen
693705c74e
Version bump to 5.6.0dr2
2017-07-13 14:24:32 +02:00
Andreas Steffen
cab4cc3a10
sw-collector: strip arch suffix from package names
2017-07-13 12:03:27 +02:00
Andreas Steffen
5b1dbc3a8d
sw-collector: Check for epoch-less Debian package versions
2017-07-12 19:12:22 +02:00
Andreas Steffen
eab650d62f
libtpmtss: Support of Intel TABRMD interface
2017-07-12 17:07:34 +02:00
Andreas Steffen
991703007a
Version bump to 5.6.0dr1
...
This major version includes the new SWIMA IMC/IMV pair which
implements the "draft-ietf-sacm-nea-swima-patnc" Internet Draft.
Full compliance to the ISO 19770-2:2015 SWID tag standard has
been achieved.
2017-07-08 23:21:56 +02:00
Andreas Steffen
803ac56626
Merge branch 'swima'
2017-07-08 23:20:32 +02:00
Andreas Steffen
23e0d6dca3
testing: Added tnc/tnccs-20-nea-pt-tls scenario
2017-07-08 23:19:51 +02:00
Andreas Steffen
facf1c76ea
testing: Adaptation to ISO 19770-2:2015 SWID standard
2017-07-08 23:19:51 +02:00
Andreas Steffen
3bf8392d36
pt-tls-client: Support for TPM keyids
2017-07-08 23:19:51 +02:00
Andreas Steffen
49d56e1b39
imv-swima: Implemented SW event processing
2017-07-08 23:19:51 +02:00
Andreas Steffen
74aa1626d2
sw-collector: Query central collector database
2017-07-08 23:19:51 +02:00
Andreas Steffen
8ba6bf511e
libimcv: Moved REST API from imv_swid and imv_swima to libimcv
2017-07-08 23:19:51 +02:00
Andreas Steffen
7e796bba67
swidtag: strongSwan swidtag file with double underscores
2017-07-08 23:19:51 +02:00
Andreas Steffen