Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 501c163859 version bump to 4.6.3 2012-04-30 09:48:21 +02:00
Andreas Steffen 3577ec76a5 output validity of raw public key if available 2012-04-30 09:47:34 +02:00
Andreas Steffen fe23d9aaa4 ikev2/net2net-pubkey scenario does not need dnskey plugin 2012-04-30 07:02:08 +02:00
Andreas Steffen 86b79a5f6d added ikev2/net2net-pubkey scenario 2012-04-30 00:33:18 +02:00
Andreas Steffen 7ea31a17ea added ikev2/net2net-rsa scenario 2012-04-30 00:32:58 +02:00
Andreas Steffen 5f1931ada1 added support for raw RSA public keys to stroke 2012-04-30 00:31:42 +02:00
Andreas Steffen 2338b9f019 added ikev2/rw-eap-md5-id-prompt scenario 2012-04-29 19:10:25 +02:00
Andreas Steffen d2976167af CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject information 2012-04-25 20:53:08 +02:00
Andreas Steffen 5ff8fe5d48 activated cmac plugin in UML test suites 2012-04-22 22:22:25 +02:00
Andreas Steffen 86e50bd614 isolate a TNC client if an error occurs 2012-04-22 20:24:59 +02:00
Andreas Steffen 6c97b16333 version bump to 4.6.3rc2 2012-04-22 17:41:20 +02:00
Andreas Steffen 3092bf1090 exit if TBOOT dummy measurements are not defined 2012-04-22 17:40:59 +02:00
Andreas Steffen 7b910ce274 fixed parsing of port ranges in Scanner IMV 2012-04-15 23:39:27 +02:00
Andreas Steffen 367e1e22b8 checksum need a libradius_init() symbol 2012-04-05 16:52:37 +02:00
Andreas Steffen e90e106117 version bump to 4.6.3rc1 2012-04-05 09:11:47 +02:00
Andreas Steffen 4626e49ad9 remove leading zero in ASN.1 encoded serial numbers 2012-04-05 09:04:11 +02:00
Andreas Steffen 5ff99529e6 ASN.1 two's complement encoding prevents overflow in CRL serial number 2012-04-04 11:29:12 +02:00
Andreas Steffen 4670661d6d represent 0 as a single byte 2012-04-03 14:19:37 +02:00
Andreas Steffen 320fd5fe62 moved chunk_skip_zero to chunk.h 2012-04-03 14:12:50 +02:00
Andreas Steffen 4e5b7e09ee added IKEv2 Generic Secure Password Authentication Method 2012-04-03 12:49:05 +02:00
Andreas Steffen 5893d1b156 added IKEv2 Generic Secure Password Authentication Method 2012-04-03 12:48:48 +02:00
Andreas Steffen f54c4ed8d6 added GSPM IKEv2 payload 2012-04-03 12:21:39 +02:00
Andreas Steffen d1391b8fdb fixed typo 2012-04-03 12:07:13 +02:00
Andreas Steffen 0293f09597 updated supported EAP methods 2012-03-30 11:15:10 +02:00
Andreas Steffen e464894e8b remove leading zeros in ASN.1 encoded serial numbers 2012-03-27 15:05:36 +02:00
Andreas Steffen 80abe22f65 fixed parsing of IF-MAP SOAP responses 2012-03-21 14:25:19 +01:00
Andreas Steffen 3cea55b0c8 corrected description 2012-03-17 23:22:25 +01:00
Andreas Steffen 9da795392e added ikev2/esp-alg-sha1-160 scenario 2012-03-17 23:20:03 +01:00
Andreas Steffen d9b539dc33 added ikev2/esp-alg-md5-128 scenario 2012-03-17 22:56:37 +01:00
Andreas Steffen 584178c3bb version bump to 4.6.3dr2 2012-03-16 22:21:54 +01:00
Andreas Steffen f673958e59 added the strongswan.conf options of the tnc-pdp plugin 2012-03-16 11:14:40 +01:00
Andreas Steffen bd360b3911 keep a copy of refreshed carolCert-ocsp.pem 2012-03-15 07:59:42 +01:00
Andreas Steffen ebf292bad0 refreshed carolCert-ocsp.pem 2012-03-15 07:58:35 +01:00
Andreas Steffen 68c2c7ece4 eliminate unneeded private variable 2012-03-14 21:38:30 +01:00
Andreas Steffen ea2f340e27 added tnc/tnccs-20-pdp scenario 2012-03-14 08:47:12 +01:00
Andreas Steffen 9b8053a63a edited description of tnc/tnccs-11-radius scenario 2012-03-14 08:46:52 +01:00
Andreas Steffen fb5450a435 use MAX_RADIUS_ATTRIBUTE_SIZE constant from radius_message header file 2012-03-14 07:51:56 +01:00
Andreas Steffen c224f7654d version bump to 4.6.3dr1 2012-03-14 07:45:35 +01:00
Andreas Steffen dae4ada4cd make the mppe salt unique 2012-03-14 07:31:19 +01:00
Andreas Steffen 3cff2b598b straightene radius_mppe header file 2012-03-14 06:52:26 +01:00
Andreas Steffen 6fd612913e implemented MS_MPPE encryption 2012-03-13 23:26:15 +01:00
Andreas Steffen 5fdb849293 use predefined Microsoft PEN 2012-03-13 19:23:35 +01:00
Andreas Steffen 4adc3c147e use MAX_RADIUS_ATTRIBUTE_SIZE constant 2012-03-13 18:06:56 +01:00
Andreas Steffen ff4e447954 use RADIUS_TUNNEL_TYPE_ESP defined in header file 2012-03-13 17:00:37 +01:00
Andreas Steffen d90ade8f79 implemented RADIUS Filter-ID attribute 2012-03-13 16:27:18 +01:00
Andreas Steffen dfa3084223 removed double library entry 2012-03-13 16:27:17 +01:00
Andreas Steffen 27a91de071 adapted debug output 2012-03-13 16:27:17 +01:00
Andreas Steffen 70b2bfa5cb keep a list of RADIUS connections with EAP method states 2012-03-13 16:27:17 +01:00
Andreas Steffen 595f44e9a3 apply maximum RADIUS attribute size to outbound EAP messages 2012-03-13 16:27:17 +01:00
Andreas Steffen d1a311f631 read PDP server name from strongswan.conf 2012-03-13 16:27:17 +01:00
Andreas Steffen 4853efe891 define MAX_RADIUS_ATTRIBUTE_SIZE 2012-03-13 16:27:17 +01:00
Andreas Steffen 135822e11b define peer and server identities 2012-03-13 16:27:17 +01:00
Andreas Steffen cd9bde335c added EAP_SUCCESS/FAILURE message to RADIUS Accept/Reject 2012-03-13 16:27:17 +01:00
Andreas Steffen b3ec652192 added msg_auth flag in radius_message_t sign() method 2012-03-13 16:27:17 +01:00
Andreas Steffen 4fc6c7d442 allow debug of raw RADIUS data 2012-03-13 16:27:17 +01:00
Andreas Steffen d4db9f44c2 simple RADIUS server example works 2012-03-13 16:27:17 +01:00
Andreas Steffen e9f32b010a first use of libradius 2012-03-13 16:27:17 +01:00
Andreas Steffen 21b0f216b9 created libradius shared by eap-radius and tnc-pdp plugins 2012-03-13 16:27:17 +01:00
Andreas Steffen 70fd2d1af7 created tnc-pdp policy decision point plugin 2012-03-13 16:27:16 +01:00
Andreas Steffen f3d6b9c88c added missing x character 2012-02-21 16:29:35 +01:00
Andreas Steffen e4f554404e handle case where subject = NULL but keyid is set 2012-02-20 12:12:31 +01:00
Andreas Steffen 81ce0cf67e libtnccs is required by the eap_tnc plugin 2012-02-20 09:04:02 +01:00
Andreas Steffen f8b1b32768 charon does not depend on libtncif any more but tnc_tnccs does 2012-02-20 08:00:48 +01:00
Andreas Steffen 05f421b7d3 build libstrongswan if libimcv is built 2012-02-16 23:28:38 +01:00
Andreas Steffen a54cf814e6 version bump to 4.6.2 2012-02-16 00:10:36 +01:00
Andreas Steffen 1b9c613b77 fixed attest sql query in list_measurements() 2012-02-15 23:13:05 +01:00
Andreas Steffen e01751035e completed imc/imv-attestation settings 2012-02-07 22:11:51 +01:00
Andreas Steffen 2af22e1135 adapted debug output check in openssl-ikev2/rw-eap-tls-only scenario 2012-02-07 20:31:17 +01:00
Andreas Steffen 269e487567 open RADIUS accounting port in firewall 2012-02-06 20:45:21 +01:00
Andreas Steffen 9755910d7f added ikev2/rw-radius-accounting scenario 2012-02-06 12:52:48 +01:00
Andreas Steffen b3cbc53893 version bump to 4.6.2rc1 2012-02-05 22:24:56 +01:00
Andreas Steffen a74fab640a ipsec attest adds and deletes key/component pairs 2012-02-05 22:23:45 +01:00
Andreas Steffen 32aee74c73 check if TNC client has a valid and registered AIK 2012-02-05 19:37:58 +01:00
Andreas Steffen de4a0c8376 reformulated some NEWS entries 2012-02-03 16:13:34 +01:00
Andreas Steffen 48bf8ce9bd added openssl-ikev2/ecdsa-pkcs8 scenario 2012-02-03 11:44:04 +01:00
Andreas Steffen 6b4e0dd504 added ikev2/rw-pkcs8 scenario 2012-02-03 11:10:13 +01:00
Andreas Steffen 2a77a27213 version bump to 4.6.2dr4 2012-02-02 18:26:12 +01:00
Andreas Steffen cb4da3f610 register aik certificate via ipsec attest 2011-12-25 14:31:26 +01:00
Andreas Steffen a24f2241bc made ikev2/reauth-late scenario more robust 2011-12-21 06:00:13 +01:00
Andreas Steffen 12b6ba8771 additional state waiting for the EvidenceFinal attribute response 2011-12-20 07:04:21 +01:00
Andreas Steffen d670adb34a moved send_message() in front of recommendation evaluation 2011-12-18 21:05:52 +01:00
Andreas Steffen f994caf665 added case IMV_ATTESTATION_STATE_END 2011-12-18 19:39:25 +01:00
Andreas Steffen 005d981cc2 check for TrouSerS 2011-12-18 18:26:38 +01:00
Andreas Steffen 034b792b90 added Attestation IMC/IMV to UML build 2011-12-18 18:07:47 +01:00
Andreas Steffen 458c52d29d build PA-TNC message only if there are PA-TNC attributes to send 2011-12-18 17:55:20 +01:00
Andreas Steffen a98262ff6e destroy attributes, too 2011-12-18 17:34:53 +01:00
Andreas Steffen 8982b70298 added reference counts to all PA-TNC attribute classes 2011-12-18 17:20:13 +01:00
Andreas Steffen 4f91342702 reworded comments and debug output 2011-12-18 10:51:35 +01:00
Andreas Steffen 5da8b67625 Prepend Debian string to Debian version 2011-12-18 10:27:42 +01:00
Andreas Steffen 3f58e4c562 removed unused variable 2011-12-16 18:10:20 +01:00
Andreas Steffen cbf2ba54e1 moved management of additional IMC/IMV IDs to agent 2011-12-16 17:32:15 +01:00
Andreas Steffen c27e54a716 fixed caption alignment 2011-12-16 14:26:09 +01:00
Andreas Steffen 0e94ae1286 Revert "fixed caption alignment"
This reverts commit d463def798.
2011-12-16 14:19:14 +01:00
Andreas Steffen d463def798 fixed caption alignment 2011-12-16 14:15:46 +01:00
Andreas Steffen 19e9bdda1f added UML support for IF-MAP interface 2011-12-12 17:00:50 +01:00
Andreas Steffen 60e99b3761 some NEWS entries for 4.6.2 2011-12-12 10:44:53 +01:00
Andreas Steffen bc74e1aaf0 version bump to 4.6.2dr2 2011-12-12 10:38:23 +01:00
Andreas Steffen 15b3dc5b26 added libimcv.plugins.imc-attestation.aik_blob parameter 2011-12-11 22:03:43 +01:00
Andreas Steffen 63179fd459 upgraded Test IMC/IMV pair to fully support multple IMC IDs 2011-12-11 22:01:49 +01:00
Andreas Steffen 6f04ccff5e added IETF standard error handling method 2011-12-11 09:41:40 +01:00