 Andreas Steffen
|
5443762491
|
Use strongSwan hash plugins for SHA-1 and SHA-256
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
d993a567b7
|
Extended NIST SP 800-90A HMAC_DRBG test cases
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
a7047cda59
|
Cleaned up ntru-crypto library
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
98c6421674
|
Implemented NIST SP 800-90A DRBG_HMAC with SHA-256
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
798a36dc14
|
Added NTRU key exchange to default IKE proposal
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
9013973cc8
|
unit-tests: Added ntru wrong ciphertext test
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
885e699b58
|
unit-tests: Added ntru entropy, retransmission and ciphertext tests
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
802eaf3789
|
Any of the four NTRU parameter sets can be selected
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
1f73969eb5
|
Make the NTRU parameter set configurable
|
2013-11-27 20:21:41 +01:00 |
|
|
Andreas Steffen
|
2c620cb089
|
unit-tests: first NTRU test case
|
2013-11-27 20:21:40 +01:00 |
|
|
Andreas Steffen
|
d5cd6eba2b
|
Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenarios
|
2013-11-27 20:21:40 +01:00 |
|
|
Andreas Steffen
|
146ad86be5
|
Prototype implementation of IKE key exchange via NTRU encryption
|
2013-11-27 20:21:40 +01:00 |
|
|
Andreas Steffen
|
194b69f0b8
|
Version bump to 5.1.2dr1
|
2013-11-19 10:27:07 +01:00 |
|
|
Andreas Steffen
|
b63246c5db
|
Implemented libstrongswan.plugins.random.strong_equals_true option
|
2013-11-16 00:11:40 +01:00 |
|
|
Andreas Steffen
|
2da887da35
|
unit-tests: completed asn1_suite
|
2013-11-04 18:35:25 +01:00 |
|
|
Andreas Steffen
|
79b8a384b5
|
Updated test_runner.h with new suites
|
2013-11-03 21:34:42 +01:00 |
|
|
Andreas Steffen
|
7817d88e1a
|
unit-tests: 100% function coverage for asn1.c
|
2013-11-03 17:40:51 +01:00 |
|
|
Andreas Steffen
|
54bce665c4
|
unit-tests: 12 asn1 functions tested
|
2013-11-02 21:20:04 +01:00 |
|
|
Andreas Steffen
|
c3103700fc
|
Some minor refactoring in asn1.c
|
2013-11-02 21:17:46 +01:00 |
|
|
Andreas Steffen
|
1347c936bd
|
Do not free zero-length integer
|
2013-11-02 02:11:32 +01:00 |
|
|
Andreas Steffen
|
a40c4bc28c
|
unit-tests: Added tests for pen_type_t
|
2013-11-01 22:29:29 +01:00 |
|
|
Andreas Steffen
|
6db81edac3
|
Added IFOM_CAPABILITY notify message type
|
2013-11-01 14:07:11 +01:00 |
|
|
Andreas Steffen
|
dc4dd88c42
|
Updated copyright statement
|
2013-11-01 13:46:58 +01:00 |
|
|
Andreas Steffen
|
7b8fbd7402
|
Added security info on CVE-2013-6075 and CVE-2013-6076
|
2013-10-31 22:11:11 +01:00 |
|
|
Andreas Steffen
|
2590cd20d3
|
PB-TNC PDP_REFERRAL message doesn't have to be in RESULT batch
|
2013-10-31 12:01:47 +01:00 |
|
|
Andreas Steffen
|
c501c78c5f
|
Version bump to 5.1.1
|
2013-10-31 09:42:15 +01:00 |
|
|
Andreas Steffen
|
6d18e23e9f
|
Added test-driver to .gitignore
|
2013-10-30 20:47:44 +01:00 |
|
|
Andreas Steffen
|
7967876257
|
Encrypt carol's PKCS#8 private key in openssl-ikve2/rw-suite-b-128|192 scenarios
|
2013-10-30 20:46:32 +01:00 |
|
|
Andreas Steffen
|
9043cb2f9c
|
Fixed sql/net2net-route-pem scenario evaluation
|
2013-10-23 22:23:47 +02:00 |
|
|
Andreas Steffen
|
5a7e98231b
|
Added some example Debian SWID tags
|
2013-10-23 22:12:12 +02:00 |
|
|
Andreas Steffen
|
34dff30ca0
|
Added Brainpool ECP support to NEWS
|
2013-10-23 21:11:28 +02:00 |
|
|
Andreas Steffen
|
2efe61e07b
|
Added two Brainpool IKEv2 scenarios
|
2013-10-23 21:11:28 +02:00 |
|
|
Andreas Steffen
|
b891c22aa9
|
Updated and split data.sql
|
2013-10-23 00:26:02 +02:00 |
|
|
Andreas Steffen
|
252c04d3f9
|
Adapted recipe and patches to freeradius-2.2.1
|
2013-10-22 10:09:24 +02:00 |
|
|
Andreas Steffen
|
50d7a55c96
|
Support Ubuntu 13.10 measurements
|
2013-10-21 21:33:30 +02:00 |
|
|
Andreas Steffen
|
27bf5c06dc
|
check it specified IF-TNCCS protocol is enabled
|
2013-10-21 21:03:53 +02:00 |
|
|
Andreas Steffen
|
cca372465d
|
ecc: Added ECC Brainpool ECDH groups as registered with IANA
|
2013-10-17 11:57:04 +02:00 |
|
|
Andreas Steffen
|
a37ab690cc
|
Set recommendation in the case of PCR measurement failures
|
2013-10-13 22:17:18 +02:00 |
|
|
Andreas Steffen
|
b0761f1f0a
|
Add linux/fip_rules.h to include files
|
2013-10-13 20:51:10 +02:00 |
|
|
Andreas Steffen
|
6623dfa84d
|
Revert refactoring which broke CentOS build
|
2013-10-13 19:56:04 +02:00 |
|
|
Andreas Steffen
|
1ca57d497f
|
Increase debug level in libipsec/rw-suite-b scenario
|
2013-10-11 21:34:59 +02:00 |
|
|
Andreas Steffen
|
1486fe786a
|
Use bold font to display key size
|
2013-10-11 21:23:10 +02:00 |
|
|
Andreas Steffen
|
fcf355036f
|
Added swid_directory option
|
2013-10-11 20:59:24 +02:00 |
|
|
Andreas Steffen
|
3bd4536185
|
Added tnc/tnccs-11-supplicant scenario
|
2013-10-11 20:18:59 +02:00 |
|
|
Andreas Steffen
|
cae778147a
|
Define aaa.strongswan.org in /etc/hosts
|
2013-10-11 20:16:59 +02:00 |
|
|
Andreas Steffen
|
4524e128f8
|
Version bump to 5.1.1rc1
|
2013-10-11 09:53:42 +02:00 |
|
|
Andreas Steffen
|
3588299fb8
|
Keep a copy of the tnccs instance for PT-TLS handover
|
2013-10-09 19:03:07 +02:00 |
|
|
Andreas Steffen
|
2c4d772a79
|
Implemented TCG/PB-PDP_Referral message
|
2013-09-17 21:57:08 +02:00 |
|
|
Andreas Steffen
|
ddfc589600
|
Allow vendor-specific PB-TNC messages
|
2013-09-17 11:19:11 +02:00 |
|
|
Andreas Steffen
|
ab155e6907
|
ignore *.1 manpage files
|
2013-09-17 10:58:53 +02:00 |
|
|
Andreas Steffen
|
f4dd49a5fd
|
Version bump to 5.1.1dr4
|
2013-09-17 10:57:46 +02:00 |
|
|
Andreas Steffen
|
5ec08a6a05
|
Make sure libstrongswan is initialized first in IMCs and IMVs
|
2013-09-11 20:58:18 +02:00 |
|
|
Andreas Steffen
|
c1ebc7b1cc
|
Fixed double free causing swapped ends to crash
|
2013-09-07 08:25:10 +02:00 |
|
|
Andreas Steffen
|
97346f2a7e
|
Added ikev1/config-payload-push scenario
|
2013-09-07 08:23:58 +02:00 |
|
|
Andreas Steffen
|
847b148f91
|
Minor performance tuning
|
2013-09-07 07:39:03 +02:00 |
|
|
Andreas Steffen
|
fa2f6aa19d
|
Completed NEWS for 5.1.1dr3
|
2013-09-06 22:11:33 +02:00 |
|
|
Andreas Steffen
|
3adffcd9eb
|
Implemented targeted SWID request
|
2013-09-06 22:06:39 +02:00 |
|
|
Andreas Steffen
|
ae32172619
|
Make SWID directory where tags are stored configurable
|
2013-09-05 12:25:02 +02:00 |
|
|
Andreas Steffen
|
9b8137fdd3
|
Added tags table and some tag samples
|
2013-09-05 11:29:23 +02:00 |
|
|
Andreas Steffen
|
b28686d530
|
swid_inventory object has a get_count method
|
2013-09-04 21:56:25 +02:00 |
|
|
Andreas Steffen
|
bd3eaaef9b
|
Count collected SWID tags or tag IDs
|
2013-09-04 21:30:36 +02:00 |
|
|
Andreas Steffen
|
cee1a86385
|
Proceed with attestation only if Attestation IMC returns a discovery response
|
2013-09-04 21:30:36 +02:00 |
|
|
Andreas Steffen
|
de4637718e
|
Version bump to 5.1.1dr3
|
2013-09-04 16:15:52 +02:00 |
|
|
Andreas Steffen
|
7a425fb24c
|
Use ipsec_DATA destination
|
2013-09-02 14:20:33 +02:00 |
|
|
Andreas Steffen
|
0c2348581c
|
Install SWID tag also in /share/
|
2013-09-02 14:01:05 +02:00 |
|
|
Andreas Steffen
|
9f85122af9
|
Generate strongSwan SWID tag
|
2013-09-02 13:08:41 +02:00 |
|
|
Andreas Steffen
|
86f00e6aff
|
Added regids table and some sample reqid data
|
2013-09-02 12:00:47 +02:00 |
|
|
Andreas Steffen
|
6fc5cc003d
|
Pull dave for OS info
|
2013-09-02 12:00:46 +02:00 |
|
|
Andreas Steffen
|
d1696c0eaa
|
Corrected debug class to DBG_IMC
|
2013-09-02 12:00:46 +02:00 |
|
|
Andreas Steffen
|
4e2a176229
|
SWID IMC implements recursive tag collection in /usr/share
|
2013-08-30 16:25:55 +02:00 |
|
|
Andreas Steffen
|
ee2d6f8618
|
Version bump to 5.1.1dr2
|
2013-08-28 23:00:47 +02:00 |
|
|
Andreas Steffen
|
1e82e27ac5
|
Added TCG-SWID error handling
|
2013-08-28 22:53:57 +02:00 |
|
|
Andreas Steffen
|
db4a072ca9
|
Added scripts/aes-test to .gitignore
|
2013-08-28 22:52:30 +02:00 |
|
|
Andreas Steffen
|
7bda0f0c8b
|
Added tzset memory leak to whitelist
|
2013-08-28 22:51:17 +02:00 |
|
|
Andreas Steffen
|
0d9e375193
|
Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin
|
2013-08-26 20:36:07 +02:00 |
|
|
Andreas Steffen
|
03d673620d
|
Cleaned configuration files in PT-TLS client scenario
|
2013-08-22 17:24:20 +02:00 |
|
|
Andreas Steffen
|
2b32884d39
|
Added stand-alone pt-tls-client to NEWS
|
2013-08-19 12:28:12 +02:00 |
|
|
Andreas Steffen
|
aff4367907
|
Flush iptables rules on alice
|
2013-08-19 12:20:57 +02:00 |
|
|
Andreas Steffen
|
f859645b12
|
Fixes in tnc scenarios
|
2013-08-19 11:44:51 +02:00 |
|
|
Andreas Steffen
|
10c7ca2399
|
Added tnc/tnccs-20-pt-tls scenario
|
2013-08-19 11:36:23 +02:00 |
|
|
Andreas Steffen
|
e626821677
|
Version bump to 5.1.1dr1
|
2013-08-19 10:03:23 +02:00 |
|
|
Andreas Steffen
|
1e92d5f114
|
Process PB-TNC batches received via PT-TLS asynchronously
|
2013-08-19 09:52:12 +02:00 |
|
|
Andreas Steffen
|
9dc3b2053d
|
Optimize TLS socket buffer for TLS_MAX_FRAGMENT_LEN
|
2013-08-19 09:50:57 +02:00 |
|
|
Andreas Steffen
|
70a80ef5d4
|
Output handler of a given workitem
|
2013-08-16 14:14:13 +02:00 |
|
|
Andreas Steffen
|
4d2bac37c4
|
Implemented SWID Tag Inventory attribute
|
2013-08-16 14:13:35 +02:00 |
|
|
Andreas Steffen
|
f405c15a59
|
deleted moved files
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
b38d9d5a54
|
Implemented SWID prototype IMC/IMV pair
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
0bd29a438e
|
Updated the SWID attributes
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
e689de6b8c
|
Optimized PT-TLS data transfer
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
6aff4b5ce8
|
Show host address of peer connecting to PT-TLS socket
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
0a09b02dcf
|
Set client identity with TLS certificate authentication
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
9cc606d22a
|
Fixed memory leak in SASL PLAIN
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
663ea1407d
|
added --optionsfrom capability
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
7c027f7983
|
Use client identities from successful authentications, only
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
d6719c974c
|
Add pt-tls-client to .gitignore
|
2013-08-15 23:34:23 +02:00 |
|
|
Andreas Steffen
|
97b1d39de5
|
Extract client identity and authentication type from SASL authentication
|
2013-08-15 23:34:22 +02:00 |
|
|
Andreas Steffen
|
6d6100c2bc
|
Added some debug statements
|
2013-08-15 23:34:22 +02:00 |
|
|
Andreas Steffen
|
f420d5f380
|
enabled SASL PLAIN authentication
|
2013-08-15 23:34:22 +02:00 |
|
|
Andreas Steffen
|
8327c44b74
|
PT-TLS connection is properly terminated
|
2013-08-15 23:34:22 +02:00 |
|
|
Andreas Steffen
|
12b3db5006
|
moved tnc_imv plugin to libtnccs thanks to recommendation callback function
|
2013-08-15 23:34:22 +02:00 |
|