 Andreas Steffen
|
541666b89f
|
added ikev2/rw-eap-tnc-radius-block scenario
|
2010-10-06 10:32:50 +02:00 |
|
|
Andreas Steffen
|
68de7267e1
|
added tnccs-11 plugin options to strongswan.conf
|
2010-10-06 07:53:50 +02:00 |
|
|
Andreas Steffen
|
9b04378ece
|
version bump to 4.5.0dr5
|
2010-10-06 07:07:14 +02:00 |
|
|
Andreas Steffen
|
bb43f25ad3
|
configure tnc_config path and preferred_language via strongswan.conf
|
2010-10-05 22:09:07 +02:00 |
|
|
Andreas Steffen
|
6d0e9cf046
|
created hull for TNCCS 2.0 plugin
|
2010-10-05 21:15:24 +02:00 |
|
|
Andreas Steffen
|
a1edf4d33e
|
use group membership to implement access/isolate redirection in filter-based TNC scenario
|
2010-10-05 20:40:36 +02:00 |
|
|
Andreas Steffen
|
48e16e0ae1
|
final version of ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 20:38:34 +02:00 |
|
|
Andreas Steffen
|
9ffa3f71f2
|
fixed typo in image path
|
2010-10-05 09:09:58 +02:00 |
|
|
Andreas Steffen
|
b540d19133
|
moved CHILD_SA selection out of attribute loop
|
2010-10-05 08:02:07 +02:00 |
|
|
Andreas Steffen
|
28b23fef11
|
receive name of preferred CHILD_SA via RADIUS Filter-Id attribute
|
2010-10-05 07:58:07 +02:00 |
|
|
Andreas Steffen
|
e7104a6ec9
|
updated ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 07:56:57 +02:00 |
|
|
Andreas Steffen
|
0cfdbaff2c
|
set EAP-TTLS/TNC version also in acknowledgement packets
|
2010-10-04 14:39:49 +02:00 |
|
|
Andreas Steffen
|
30f14b7066
|
added configuration files for dummyimc.so IMC
|
2010-10-01 00:14:44 +02:00 |
|
|
Andreas Steffen
|
ea893a5de2
|
The TNC@FHH TNC Serve does not like symbolic links
|
2010-09-30 23:35:24 +02:00 |
|
|
Andreas Steffen
|
a00a43e0f6
|
print XML as plaintext and process recieved TNCCS Batch
|
2010-09-30 23:34:00 +02:00 |
|
|
Andreas Steffen
|
cae4668ffb
|
added tnc_config files to TNC scenario
|
2010-09-30 12:42:18 +02:00 |
|
|
Andreas Steffen
|
f685b3aca0
|
started use of libtnc library
|
2010-09-29 23:24:59 +02:00 |
|
|
Andreas Steffen
|
3c354b6d11
|
NOTIFY error message types include 16383
|
2010-09-29 19:01:36 +02:00 |
|
|
Andreas Steffen
|
3f84e2d68e
|
added NEWS for 4.5dr3
|
2010-09-29 07:14:52 +02:00 |
|
|
Andreas Steffen
|
062e8faee1
|
version bump to 4.5dr4
|
2010-09-29 07:14:33 +02:00 |
|
|
Andreas Steffen
|
440231e863
|
load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario
|
2010-09-28 23:52:59 +02:00 |
|
|
Andreas Steffen
|
4e8e74fcfa
|
moved TNCCS layer out of eap_tnc plugin
|
2010-09-28 23:34:04 +02:00 |
|
|
Andreas Steffen
|
280c8ea2f0
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 11:31:39 +02:00 |
|
|
Andreas Steffen
|
1e6cc07ee4
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:58:28 +02:00 |
|
|
Andreas Steffen
|
234aaf2df2
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:35:12 +02:00 |
|
|
Andreas Steffen
|
2b3124c76d
|
fixed release of virtual IP for XAUTH identities
|
2010-09-26 10:17:01 +02:00 |
|
|
Andreas Steffen
|
f054606586
|
include RFC 5998
|
2010-09-20 20:03:20 +02:00 |
|
|
Andreas Steffen
|
824a040284
|
the updated IKEv2 RFC 5996 has been released
|
2010-09-15 12:55:31 +02:00 |
|
|
Andreas Steffen
|
004de55235
|
added notify messages defined in RFC 5996
|
2010-09-15 12:48:58 +02:00 |
|
|
Andreas Steffen
|
80f86acccb
|
show validity of OCSP responses
|
2010-09-10 22:26:03 +02:00 |
|
|
Andreas Steffen
|
3c1debeb59
|
version bump to 4.5.0dr2
|
2010-09-10 07:37:28 +02:00 |
|
|
Andreas Steffen
|
f3051ebf53
|
fixed memory leak
|
2010-09-09 21:38:41 +02:00 |
|
|
Andreas Steffen
|
f85f0c2795
|
has_subject() now resolves ID_KEY_IDs
|
2010-09-09 17:15:46 +02:00 |
|
|
Andreas Steffen
|
939c4bf2e8
|
added ikev1/net2net-same-nets scenario
|
2010-09-09 13:37:30 +02:00 |
|
|
Andreas Steffen
|
3f58022679
|
debug output of inbound and outbound TNCCS batches
|
2010-09-09 11:15:08 +02:00 |
|
|
Andreas Steffen
|
20ad62026e
|
support non EAP-TTLS conformant RADIUS-type attribute segmentation
|
2010-09-09 11:15:08 +02:00 |
|
|
Andreas Steffen
|
3b7eb3a9f4
|
added explanatory comments
|
2010-09-09 08:57:13 +02:00 |
|
|
Andreas Steffen
|
48b8cbb206
|
send well-formed TNCCS-Batch
|
2010-09-08 13:44:34 +02:00 |
|
|
Andreas Steffen
|
de29e3a683
|
max max_message_count configurable and move it into tls_eap_t
|
2010-09-08 12:58:45 +02:00 |
|
|
Andreas Steffen
|
99b0f633c2
|
handle TLS_PURPOSE_EAP_TNC
|
2010-09-08 12:58:45 +02:00 |
|
|
Andreas Steffen
|
51b385d44d
|
moved tls_t existance test into tls_eap_create() again
|
2010-09-08 11:09:11 +02:00 |
|
|
Andreas Steffen
|
d2b1d4378e
|
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
|
2010-09-08 11:01:53 +02:00 |
|
|
Andreas Steffen
|
91a0825c39
|
added non-standard SERPENT and TWOFISH support to kernel_netlink plugin
|
2010-09-08 07:22:31 +02:00 |
|
|
Andreas Steffen
|
2774826995
|
added openssl-ikev2/rw-eap-tls-only scenario
|
2010-09-07 17:14:32 +02:00 |
|
|
Andreas Steffen
|
52d4dc7fe2
|
added qcStatements OID
|
2010-09-07 11:17:51 +02:00 |
|
|
Andreas Steffen
|
1972102e1e
|
fixed typo
|
2010-09-03 13:30:40 +02:00 |
|
|
Andreas Steffen
|
6d71f4dcb9
|
updown script variable is called PLUTO_UDP_ENC
|
2010-09-03 12:58:10 +02:00 |
|
|
Andreas Steffen
|
6deeacd965
|
adapted debug options
|
2010-09-03 09:29:56 +02:00 |
|
|
Andreas Steffen
|
4cbe758cd4
|
adapted debug options
|
2010-09-03 09:27:16 +02:00 |
|
|
Andreas Steffen
|
c0071bde73
|
removed redundant debug output
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
25de08474b
|
version bump to 4.5.0dr2
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
5175adee66
|
optimized FreeRadius scenarios for debug output
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
0fb2980281
|
added ikev2/rw-eap-tnc-radius scenario
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
c0cecc0a0e
|
added radius init script mit increased debugging
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
f9cfb5c836
|
display configuration and log of FreeRadius servers
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
4171cbd60b
|
adapted evaltest.dat to new RULE_OCSP_VALIDATION
|
2010-09-01 22:22:27 +02:00 |
|
|
Andreas Steffen
|
54cba78573
|
cosmetics in debug output
|
2010-09-01 14:30:14 +02:00 |
|
|
Andreas Steffen
|
873604dd7f
|
defined aaa_identity
|
2010-09-01 00:16:19 +02:00 |
|
|
Andreas Steffen
|
3a01908060
|
increase number of message due to large certificate payloads
|
2010-09-01 00:11:23 +02:00 |
|
|
Andreas Steffen
|
5fb1311b2a
|
clarified debug output
|
2010-08-31 23:22:39 +02:00 |
|
|
Andreas Steffen
|
c3024a0848
|
fixed typo
|
2010-08-31 21:42:14 +02:00 |
|
|
Andreas Steffen
|
68eb610d81
|
fixed typos
|
2010-08-30 16:22:33 +02:00 |
|
|
Andreas Steffen
|
6ade82d5b7
|
fixed copy-and-paste errors
|
2010-08-30 15:42:44 +02:00 |
|
|
Andreas Steffen
|
d93e2e5409
|
created an eap-tnc method hull
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
577893612f
|
for the time being assume a single request/response exchange for a given EAP method
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
be63a48c36
|
defined EAP-TNC
|
2010-08-30 13:13:39 +02:00 |
|
|
Andreas Steffen
|
1bc8690f54
|
replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr
|
2010-08-29 21:52:08 +02:00 |
|
|
Andreas Steffen
|
6297dc390f
|
added ctr ccm and gcm plugins to ikev2/rw-cert scenario
|
2010-08-29 21:11:00 +02:00 |
|
|
Andreas Steffen
|
8eb74facfe
|
added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario
|
2010-08-29 21:09:25 +02:00 |
|
|
Andreas Steffen
|
6aa82ec280
|
added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario
|
2010-08-29 20:50:37 +02:00 |
|
|
Andreas Steffen
|
4f2a0bd839
|
replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm
|
2010-08-29 20:39:51 +02:00 |
|
|
Andreas Steffen
|
8318d88450
|
replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm
|
2010-08-29 20:24:12 +02:00 |
|
|
Andreas Steffen
|
897c7a72cf
|
Win7 might send up to 7k of certificate requests
|
2010-08-27 16:30:05 +02:00 |
|
|
Andreas Steffen
|
d9b85e28b9
|
removed tls_record_t definition
|
2010-08-24 19:19:13 +02:00 |
|
|
Andreas Steffen
|
421a529f88
|
added ikev2/rw-eap-tls-fragments scenario
|
2010-08-24 10:12:15 +02:00 |
|
|
Andreas Steffen
|
234aa8ee03
|
use correct network diagram
|
2010-08-24 10:09:58 +02:00 |
|
|
Andreas Steffen
|
79a5e391f8
|
support fragmentation in AVPs
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
c1a929daa7
|
removed some redundant debug output
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
4776500055
|
added debug-tls comand line option
|
2010-08-23 17:51:40 +02:00 |
|
|
Andreas Steffen
|
56a1167b07
|
fixed build_cipher_suite_list()
|
2010-08-21 12:52:55 +02:00 |
|
|
Andreas Steffen
|
906680029d
|
enable the ccm and gcm plugins in the UML scenarios
|
2010-08-20 12:47:44 +02:00 |
|
|
Andreas Steffen
|
fd86fb5183
|
removed debug output for TLS application data
|
2010-08-19 07:27:30 +02:00 |
|
|
Andreas Steffen
|
1894622df2
|
added EAP-TTLS debug output
|
2010-08-18 23:21:00 +02:00 |
|
|
Andreas Steffen
|
5ae4292cb9
|
added TLS record debug output
|
2010-08-18 22:52:42 +02:00 |
|
|
Andreas Steffen
|
ee346b54c1
|
add TLS handshake packet size to debug output
|
2010-08-18 22:07:27 +02:00 |
|
|
Andreas Steffen
|
53115857ae
|
some simplifications using the INIT macro
|
2010-08-17 20:09:32 +02:00 |
|
|
Andreas Steffen
|
f9a2d4bfcb
|
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
|
2010-08-16 19:29:39 +02:00 |
|
|
Andreas Steffen
|
cf95e162f2
|
added ikev2/rw-eap-ttls-phase2-piggyback scenario
|
2010-08-16 18:32:00 +02:00 |
|
|
Andreas Steffen
|
9ba53310ee
|
implemented server-initiated phase2 of EAP-TTLS authentication
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
f2b9b9725c
|
changed ikev2/rw-eap-ttls-only description
|
2010-08-16 18:30:41 +02:00 |
|
|
Andreas Steffen
|
d2be215a99
|
added ikev2/rw-eap-ttls-only scenario
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
79f2102cb4
|
implemented server side support for EAP-TTLS
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
06a207480e
|
fixed typo in eap-mschapv2 plugin
|
2010-08-16 16:44:13 +02:00 |
|
|
Andreas Steffen
|
b51ac45c48
|
optional certificate-based peer authentication on TLS server side
|
2010-08-15 13:02:57 +02:00 |
|
|
Andreas Steffen
|
758d7283fb
|
used default ipsec.secrets
|
2010-08-15 12:49:14 +02:00 |
|
|
Andreas Steffen
|
d662a7ffad
|
included bad case in ikev2/rw-eap-ttls-radius scenario
|
2010-08-15 11:13:41 +02:00 |
|
|
Andreas Steffen
|
eb4c9c609c
|
version bumps in testing.conf
|
2010-08-14 21:41:52 +02:00 |
|
|
Andreas Steffen
|
4618430f83
|
enable the eap-ttls and ctr plugins in the uml scenarios
|
2010-08-14 21:40:05 +02:00 |
|
|
Andreas Steffen
|
e8f971ee4e
|
added rw-eap-ttls-radius scenario
|
2010-08-14 20:05:21 +02:00 |
|
|
Andreas Steffen
|
16d8b4b6c1
|
removed some raw EAP debug output
|
2010-08-14 12:01:45 +02:00 |
|