denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,811 Commits 1 Branch 0 Tags
4eb6149ae83a30e485644ce0a51d278f6afa908f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen c1ebc7b1cc Fixed double free causing swapped ends to crash 2013-09-07 08:25:10 +02:00
Andreas Steffen 97346f2a7e Added ikev1/config-payload-push scenario 2013-09-07 08:23:58 +02:00
Andreas Steffen 847b148f91 Minor performance tuning 2013-09-07 07:39:03 +02:00
Andreas Steffen fa2f6aa19d Completed NEWS for 5.1.1dr3 2013-09-06 22:11:33 +02:00
Andreas Steffen 3adffcd9eb Implemented targeted SWID request 2013-09-06 22:06:39 +02:00
Andreas Steffen ae32172619 Make SWID directory where tags are stored configurable 2013-09-05 12:25:02 +02:00
Andreas Steffen 9b8137fdd3 Added tags table and some tag samples 2013-09-05 11:29:23 +02:00
Andreas Steffen b28686d530 swid_inventory object has a get_count method 2013-09-04 21:56:25 +02:00
Andreas Steffen bd3eaaef9b Count collected SWID tags or tag IDs 2013-09-04 21:30:36 +02:00
Andreas Steffen cee1a86385 Proceed with attestation only if Attestation IMC returns a discovery response 2013-09-04 21:30:36 +02:00
Andreas Steffen de4637718e Version bump to 5.1.1dr3 2013-09-04 16:15:52 +02:00
Andreas Steffen 7a425fb24c Use ipsec_DATA destination 2013-09-02 14:20:33 +02:00
Andreas Steffen 0c2348581c Install SWID tag also in /share/ 2013-09-02 14:01:05 +02:00
Andreas Steffen 9f85122af9 Generate strongSwan SWID tag 2013-09-02 13:08:41 +02:00
Andreas Steffen 86f00e6aff Added regids table and some sample reqid data 2013-09-02 12:00:47 +02:00
Andreas Steffen 6fc5cc003d Pull dave for OS info 2013-09-02 12:00:46 +02:00
Andreas Steffen d1696c0eaa Corrected debug class to DBG_IMC 2013-09-02 12:00:46 +02:00
Andreas Steffen 4e2a176229 SWID IMC implements recursive tag collection in /usr/share 2013-08-30 16:25:55 +02:00
Andreas Steffen ee2d6f8618 Version bump to 5.1.1dr2 2013-08-28 23:00:47 +02:00
Andreas Steffen 1e82e27ac5 Added TCG-SWID error handling 2013-08-28 22:53:57 +02:00
Andreas Steffen db4a072ca9 Added scripts/aes-test to .gitignore 2013-08-28 22:52:30 +02:00
Andreas Steffen 7bda0f0c8b Added tzset memory leak to whitelist 2013-08-28 22:51:17 +02:00
Andreas Steffen 0d9e375193 Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin 2013-08-26 20:36:07 +02:00
Andreas Steffen 03d673620d Cleaned configuration files in PT-TLS client scenario 2013-08-22 17:24:20 +02:00
Andreas Steffen 2b32884d39 Added stand-alone pt-tls-client to NEWS 2013-08-19 12:28:12 +02:00
Andreas Steffen aff4367907 Flush iptables rules on alice 2013-08-19 12:20:57 +02:00
Andreas Steffen f859645b12 Fixes in tnc scenarios 2013-08-19 11:44:51 +02:00
Andreas Steffen 10c7ca2399 Added tnc/tnccs-20-pt-tls scenario 2013-08-19 11:36:23 +02:00
Andreas Steffen e626821677 Version bump to 5.1.1dr1 2013-08-19 10:03:23 +02:00
Andreas Steffen 1e92d5f114 Process PB-TNC batches received via PT-TLS asynchronously 2013-08-19 09:52:12 +02:00
Andreas Steffen 9dc3b2053d Optimize TLS socket buffer for TLS_MAX_FRAGMENT_LEN 2013-08-19 09:50:57 +02:00
Andreas Steffen 70a80ef5d4 Output handler of a given workitem 2013-08-16 14:14:13 +02:00
Andreas Steffen 4d2bac37c4 Implemented SWID Tag Inventory attribute 2013-08-16 14:13:35 +02:00
Andreas Steffen f405c15a59 deleted moved files 2013-08-15 23:34:23 +02:00
Andreas Steffen b38d9d5a54 Implemented SWID prototype IMC/IMV pair 2013-08-15 23:34:23 +02:00
Andreas Steffen 0bd29a438e Updated the SWID attributes 2013-08-15 23:34:23 +02:00
Andreas Steffen e689de6b8c Optimized PT-TLS data transfer 2013-08-15 23:34:23 +02:00
Andreas Steffen 6aff4b5ce8 Show host address of peer connecting to PT-TLS socket 2013-08-15 23:34:23 +02:00
Andreas Steffen 0a09b02dcf Set client identity with TLS certificate authentication 2013-08-15 23:34:23 +02:00
Andreas Steffen 9cc606d22a Fixed memory leak in SASL PLAIN 2013-08-15 23:34:23 +02:00
Andreas Steffen 663ea1407d added --optionsfrom capability 2013-08-15 23:34:23 +02:00
Andreas Steffen 7c027f7983 Use client identities from successful authentications, only 2013-08-15 23:34:23 +02:00
Andreas Steffen d6719c974c Add pt-tls-client to .gitignore 2013-08-15 23:34:23 +02:00
Andreas Steffen 97b1d39de5 Extract client identity and authentication type from SASL authentication 2013-08-15 23:34:22 +02:00
Andreas Steffen 6d6100c2bc Added some debug statements 2013-08-15 23:34:22 +02:00
Andreas Steffen f420d5f380 enabled SASL PLAIN authentication 2013-08-15 23:34:22 +02:00
Andreas Steffen 8327c44b74 PT-TLS connection is properly terminated 2013-08-15 23:34:22 +02:00
Andreas Steffen 12b3db5006 moved tnc_imv plugin to libtnccs thanks to recommendation callback function 2013-08-15 23:34:22 +02:00
Andreas Steffen 9d8c28e2f5 Documented plugin move from libcharon to libtnccs in strongswan.conf 2013-08-15 23:34:22 +02:00
Andreas Steffen e8f65c5cde Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon plugins to libtnccs 2013-08-15 23:34:22 +02:00
Andreas Steffen 180a2f2642 rapid PT-TLS AR/PDP prototype 2013-08-15 23:34:22 +02:00
Andreas Steffen f5b5d262e8 Add PT-TLS interface to strongSwan PDP 2013-08-15 23:34:22 +02:00
Andreas Steffen cc5bedbb98 Callback job is not needed any more 2013-07-31 22:13:49 +02:00
Andreas Steffen e8b8a6d958 version bump to 5.0.1 2013-07-29 17:16:41 +02:00
Andreas Steffen ef580b0137 tnc-pdp now uses watcher_t 2013-07-29 17:16:21 +02:00
Andreas Steffen 4c961168cc Updated PTS database scheme to new workitems model 2013-07-29 11:41:47 +02:00
Andreas Steffen 2b1ac51c9c fixed typo 2013-07-19 20:07:32 +02:00
Andreas Steffen 645e9291f0 updated some TNC scenarios 2013-07-19 19:36:07 +02:00
Andreas Steffen 3cd01df785 Version bump to 5.1.0rc1 2013-07-19 10:40:53 +02:00
Andreas Steffen 126778679f Recognize critical IssuingDistributionPoint CRL extension 2013-07-12 09:00:47 +02:00
Andreas Steffen 0a013e1af5 Override policy recommendation in enforcement 2013-07-11 10:34:00 +02:00
Andreas Steffen 9e0182b922 openssl plugin can replace random, hmac, and gcm plugins 2013-07-10 20:38:07 +02:00
Andreas Steffen 3910fb3715 Added openssl-ikev2/net2net-pkcs12 scenario 2013-07-10 20:25:49 +02:00
Andreas Steffen 49a26e5b57 Added ikev2/net2net-pkcs12 scenario 2013-07-10 20:17:44 +02:00
Andreas Steffen fad3396f96 Version bump to 5.1.0dr3 2013-07-10 17:50:25 +02:00
Andreas Steffen 3b569df215 conntrack -F makes ikev2/nat-rw scenario to work always 2013-07-10 17:50:25 +02:00
Andreas Steffen 979801278f Fixed alignment of device ID column 2013-07-10 11:37:22 +02:00
Andreas Steffen 51bc6a6e74 Cosmetics 2013-07-08 17:58:14 +02:00
Andreas Steffen 34f894b6cc Scanner IMV without workitems provides immediate recommendation, too 2013-07-08 17:53:05 +02:00
Andreas Steffen 3dfa7a9eae Attestion IMV provides recommendation only once 2013-07-08 17:06:51 +02:00
Andreas Steffen ea6ab9fb49 skip enforcement if a recent measurement was successful 2013-07-08 16:08:05 +02:00
Andreas Steffen ef13480699 Added config-3.10 2013-07-04 23:17:10 +02:00
Andreas Steffen 090ff1fbab Version bump to 5.1.0dr2 2013-07-04 22:56:19 +02:00
Andreas Steffen 69c4e34859 Always return a result string for a processed workitem 2013-07-04 22:55:58 +02:00
Andreas Steffen 7658b399b7 Make Block stronger than Isolate in default policy 2013-07-04 22:54:47 +02:00
Andreas Steffen 9844f240f8 Register packages under Debian 7.0 x86_64 2013-07-04 22:53:41 +02:00
Andreas Steffen 2ea32e7964 Enable libipsec and charon-cmd in strongSwan recipe 2013-07-01 12:32:45 +02:00
Andreas Steffen bb802daacc Fixed libipsec/rw-suite-b scenario 2013-07-01 12:32:45 +02:00
Andreas Steffen 3405156f97 Added libipsec/rw-suite-b scenario 2013-07-01 11:04:14 +02:00
Andreas Steffen 9ea77350ce Fixed index.txt for strongSwan EC CA 2013-07-01 11:01:11 +02:00
Andreas Steffen 6c969fee94 Don't backup old package lists 2013-07-01 10:00:43 +02:00
Andreas Steffen 156e552caf Added libipsec/net2net-cert scenario 2013-06-29 22:23:45 +02:00
Andreas Steffen b1f1e5e5f2 5.1.0 changes for test cases 2013-06-29 00:07:15 +02:00
Andreas Steffen 5b7536c803 Attestation IMV requests platform info if not received 2013-06-27 17:30:14 +02:00
Andreas Steffen 71c7b43541 Support blacklist field in PTS database 2013-06-26 12:07:09 +02:00
Andreas Steffen de8de88fa7 Updated PTS demo database 2013-06-26 10:14:25 +02:00
Andreas Steffen f4dcbe3bf2 Device can be member of multiple groups 2013-06-25 18:43:07 +02:00
Andreas Steffen 72631301eb Some IMV policy managers expect a TEXT string 2013-06-25 12:47:07 +02:00
Andreas Steffen 59c9ec107f Assign default group to newly created devices 2013-06-25 11:49:32 +02:00
Andreas Steffen 632e5b0b99 Set device creation date if it hasn't been set yet 2013-06-24 20:18:16 +02:00
Andreas Steffen 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft 2013-06-24 00:23:50 +02:00
Andreas Steffen 69c4715bf8 Send PA-TNC assessment result even if no workitems are available 2013-06-24 00:22:38 +02:00
Andreas Steffen 02497901d0 Some pacman fixes 2013-06-23 16:23:19 +02:00
Andreas Steffen 226f34e0a0 version bump to 5.1.0dr1 2013-06-21 23:54:13 +02:00
Andreas Steffen 6b081a4c21 Some PTS database fixes 2013-06-21 23:25:25 +02:00
Andreas Steffen 45eb318ed4 Implemented pacman in a more reliable way 2013-06-21 23:25:25 +02:00
Andreas Steffen 4fe7294bb3 Define protocol string 2013-06-21 23:25:25 +02:00
Andreas Steffen 41dabbad41 Generate result string for port scan workitems 2013-06-21 23:25:25 +02:00
Andreas Steffen 8fbfe03e4e Ignore non-matching protocols 2013-06-21 23:25:25 +02:00
Andreas Steffen e5dd8a1d34 Introduced workitems to Scanner IMV 2013-06-21 23:25:24 +02:00