denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
12,681 Commits 1 Branch 0 Tags
65cc8f55813a008d587a4d9210aa48c27616673b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 41a4d5a4a6 Updated NEWS for 5.2.0dr2 release 2014-05-04 21:37:05 +02:00
Andreas Steffen 9be1c8d175 aikgen generates AIK private/public key pairs 
aikgen outputs a binary AIK private key blob and the AIK public key.
Optionally the Identity Request encrypted with the public key of
the Privacy CA can be output.
 2014-05-03 15:28:17 +02:00
Andreas Steffen a81bd670b0 Added PUBKEY_RSA_MODULUS encoding type 2014-05-02 19:50:43 +02:00
Andreas Steffen 60634df383 Extended Ubuntu 14.04 database build 2014-05-02 07:30:17 +02:00
Andreas Steffen 48064815ea Moved BIOS and IMA measurement lists into classes of their own 2014-05-02 07:30:17 +02:00
Andreas Steffen 9b9d522303 Added NEWS for 5.2.0dr2 2014-05-01 17:00:50 +02:00
Andreas Steffen ab6e7d6975 Fixed typo 2014-05-01 17:00:50 +02:00
Andreas Steffen 7bd8ea2fdd Use global status variable for IMA runtime 2014-05-01 16:58:59 +02:00
Andreas Steffen 887a88d55b Similar statistics for packages and file measurements 2014-05-01 09:17:33 +02:00
Andreas Steffen 660f3200ad Updated build_database.sh to Ubuntu 14.04 2014-05-01 09:17:33 +02:00
Andreas Steffen eebc1e75b2 Updated ITA-IMA finalize messages 2014-05-01 08:16:50 +02:00
Andreas Steffen bc2721b2f2 Implemented IMA-NG support 2014-05-01 08:16:49 +02:00
Andreas Steffen f2eb226653 Version bump to 5.2.0dr2 2014-04-27 19:15:11 +02:00
Andreas Steffen f5b0558b15 Improved finalize messages in ITA-IMA component 2014-04-27 19:13:15 +02:00
Andreas Steffen f5a1cfe3f8 pacman.sh now fetches Ubuntu 14.04 security updates 2014-04-24 09:08:07 +02:00
Andreas Steffen 37cb91d737 Added NEWS for 5.2.0dr1 2014-04-15 10:04:27 +02:00
Andreas Steffen fa6c5f3506 Handle tag separators 2014-04-15 09:28:38 +02:00
Andreas Steffen edd2ed860f Renewed expired user certificate 2014-04-15 09:28:37 +02:00
Andreas Steffen 9b7f9ab5d2 Updated SWID scenarios 2014-04-15 09:21:06 +02:00
Andreas Steffen 14007fd1d9 swid_generator software-id does not generate empty lines any more 2014-04-15 09:21:06 +02:00
Andreas Steffen 975472e42f Added result information to TPMRA workitems 
On the occasion got rid of complicated functional component stuff
 2014-04-15 09:21:06 +02:00
Andreas Steffen 1d7324133b Indicate IMV in assessment log statement 2014-04-15 09:21:06 +02:00
Andreas Steffen 3e7044b45e Implemented segmented SWID tag attributes on IMV side 2014-04-15 09:21:06 +02:00
Andreas Steffen 8c40609f96 Use python-based swidGenerator to generated SWID tags 2014-04-15 09:21:06 +02:00
Andreas Steffen 8505ce1cc6 Updated imv database templates 2014-04-15 09:21:05 +02:00
Andreas Steffen b138bbee4e Optimized PTS measurements 2014-04-15 09:21:05 +02:00
Andreas Steffen 40e8c67392 Use cached pid for product-based package access 2014-04-15 09:21:05 +02:00
Andreas Steffen 48f37c448c Make Attestation IMV independent of OS IMV 2014-04-15 09:21:05 +02:00
Andreas Steffen 4894bfa227 Separated IMV session management from IMV policy database 2014-04-15 09:21:05 +02:00
Andreas Steffen 0bd64fa5bf Renamed the AIK public key parameter to imc-attestation.aik_pubkey 2014-04-15 09:21:05 +02:00
Andreas Steffen c54c26dd17 Implemented configurable Device ID in OS IMC 2014-04-15 09:21:05 +02:00
Andreas Steffen 6d1b4b6baf Version bump to 5.2.0dr1 2014-04-15 09:20:38 +02:00
Andreas Steffen 266fcdce2b Version bump to 5.1.3 2014-04-14 15:18:38 +02:00
Andreas Steffen 98ae0492b6 Added support for msSmartcardLogon EKU 2014-04-08 13:09:03 +02:00
Andreas Steffen e2df745122 Added some more OIDs 2014-04-08 11:32:30 +02:00
Andreas Steffen 6a44fcf929 Initialize m1 to suppress compiler warning 2014-04-07 13:29:39 +02:00
Andreas Steffen 4e9123a0b1 Fixed another dirname/basename refactoring bug. 
file was freed before use.
 2014-04-07 12:07:00 +02:00
Andreas Steffen d982e38b8b Fixed dirname/basename refactoring bug. 
Variables used in a database query have to be kept until the end of the enumeration
 2014-04-07 12:05:55 +02:00
Andreas Steffen 60451e2fb6 Added SHA3 OIDs 2014-04-04 23:44:55 +02:00
Andreas Steffen ab8ed95bfc Fixed pretest script in tnc/tnccs-20-pt-tls scenario 2014-04-04 23:04:54 +02:00
Andreas Steffen 96e3142c39 Test TLS AEAD cipher suites 2014-04-01 10:12:15 +02:00
Andreas Steffen 37ef086ea7 Added Ubuntu 14.04 to IMV database 2014-03-31 22:22:58 +02:00
Andreas Steffen 05eb83e986 Slightly edited evaltest of ikev2/ocsp-untrusted-cert scenario 2014-03-31 22:22:58 +02:00
Andreas Steffen 959ef1a2e4 Added libipsec/net2net-3des scenario 2014-03-28 09:21:51 +01:00
Andreas Steffen 7afd217ff9 Renewed self-signed OCSP signer certificate 2014-03-27 22:52:11 +01:00
Andreas Steffen 045f25fc81 Version bump to 5.1.3rc1 2014-03-26 22:00:00 +01:00
Andreas Steffen c6d173a1f1 Check that valid OCSP responses are received in the ikev2/ocsp-multi-level scenario 2014-03-24 23:57:55 +01:00
Andreas Steffen bee64a82d7 Updated expired certificates issued by the Research and Sales Intermediate CAs 2014-03-24 23:38:45 +01:00
Andreas Steffen 2d79f6d81e Renewed revoked Research CA certificate 2014-03-22 15:16:15 +01:00
Andreas Steffen f0388684cd unit-test: added missing TEST_FUNCTION macros 2014-03-22 10:26:02 +01:00
Andreas Steffen 07e7cb146f Added openssl-ikev2/net2net-pgp-v3 scenario 2014-03-22 09:55:03 +01:00
Andreas Steffen 22e1aa51f9 Completed integration of ntru_crypto library into ntru plugin 2014-03-22 09:51:00 +01:00
Andreas Steffen 0b408faef1 Added TPMRA workitem support for [dummy] Trusted Boot measurements 2014-03-19 20:26:31 +01:00
Andreas Steffen 337f0c8a2f Implemented ntru_private_key class 2014-03-18 10:03:16 +01:00
Andreas Steffen 3933798cb1 11 bits are needed to encode a maximum index of 1086 2014-03-15 19:22:16 +01:00
Andreas Steffen c683b389ba Merged libstrongswan options into charon section 2014-03-15 14:07:34 +01:00
Andreas Steffen f2a3a01134 strongswan.conf is not needed on RADIUS server alice 2014-03-15 14:07:33 +01:00
Andreas Steffen 9483f8ec59 Version bump to 5.1.3dr1 2014-03-07 21:56:34 +01:00
Andreas Steffen 342bc6e545 Disable mandatory ECP support for attestion 2014-03-07 21:56:34 +01:00
Andreas Steffen ac17ca1ad7 Refactored NTRU parameter set selection 2014-03-07 21:56:34 +01:00
Andreas Steffen 7befce8c3f Refactored ntru_param_sets 2014-03-07 21:56:33 +01:00
Andreas Steffen d6ce8da6c0 Optimize ntru_poly constructors some more 2014-02-27 23:06:51 +01:00
Andreas Steffen 1d252e9dec Version bump to 5.1.2 2014-02-27 22:46:52 +01:00
Andreas Steffen 2bb793f131 Optimized initialisation of indices 2014-02-27 22:39:47 +01:00
Andreas Steffen 222b88a302 Added get_array() method to ntru_poly_t class 2014-02-27 22:08:22 +01:00
Andreas Steffen d12a4a67bf Defined ntru_poly_create_from_seed() and ntru_poly_create_from_data() constructors and built some unit tests for the latter) 2014-02-27 20:36:17 +01:00
Andreas Steffen f87f28ec68 Optimized use of temporary arrays in polynomial multiplication 2014-02-27 15:22:59 +01:00
Andreas Steffen bf24960cbe Implement ring multiplication method 2014-02-27 15:22:58 +01:00
Andreas Steffen a21d4096e5 Use logical AND function 2014-02-23 16:44:32 +01:00
Andreas Steffen e80014f1e8 index limit can be easily computed 2014-02-19 20:18:53 +01:00
Andreas Steffen 6dd05e0d58 Created ntru_poly class for sparse trinary polynomials 2014-02-18 16:17:38 +01:00
Andreas Steffen a334ac80ae Added ikev2/lookip scenario 2014-02-17 12:04:21 +01:00
Andreas Steffen 8f57961f4c Version bump to 5.1.2rc2 2014-02-17 12:02:23 +01:00
Andreas Steffen 1f9e4d029e Fixed a minor vulnerability in which a malformed ASN.1 length field could cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled. 2014-02-14 15:06:57 +01:00
Andreas Steffen f03441c4dd pacman.sh creates /etc/pts/dists directory if it doesn't exist yet 2014-02-13 13:21:47 +01:00
Andreas Steffen f0ffb9f9af Fixed description of ikev1/rw-ntru-psk scenario 2014-02-12 13:21:46 +01:00
Andreas Steffen ccb7630ca1 Updated test kvm tests to Linux 3.13 kernel 2014-02-12 13:16:34 +01:00
Andreas Steffen 83caf0827c Added ikev1/net2net-ntru-cert and ikev1/rw-ntru-psk scenarios 2014-02-12 13:16:34 +01:00
Andreas Steffen d9c7fcd0ee unit-tests: added asn1_parser tests 2014-02-10 21:29:34 +01:00
Andreas Steffen e62c6b0a24 unit-tests: added some more ASN.1 length tests 2014-02-10 21:29:34 +01:00
Andreas Steffen 0edd13b6c8 Document ipsec attest --session command 2014-02-05 12:06:46 +01:00
Andreas Steffen 24f59868c4 Allow output of session time in UTC 2014-02-05 12:06:22 +01:00
Andreas Steffen d6804e3041 Added missing semicolon in SQL statements 2014-02-05 10:15:56 +01:00
Andreas Steffen 523c2874fb Added Android 4.3.1 to products database table 2014-02-04 19:49:34 +01:00
Andreas Steffen 2a43f7fd9e Added new Android versions to PTS database 2014-02-04 06:59:01 +01:00
Andreas Steffen 800b361e19 Version bump to 5.1.2rc1 2014-01-16 01:47:34 +01:00
Andreas Steffen eeaa8a2417 Added TPMRA workitem support in PTS database 2014-01-16 01:46:55 +01:00
Andreas Steffen a48d19a3bf Do PTS measurements only if session initialisation was successful 2014-01-15 12:06:22 +01:00
Andreas Steffen fde42c15fd Starting with 3.1.7 kernel.org replaced bz2 with xz format 2014-01-15 02:14:08 +01:00
Andreas Steffen f74c8be19b Version bump to 5.1.2dr3 2014-01-13 12:12:52 +01:00
Andreas Steffen 8b36021b5b Catch AIK errors 2014-01-13 12:06:18 +01:00
Andreas Steffen fbddf52c80 Do TPM measurements only if there is a TPMRA workitem 2014-01-13 12:06:18 +01:00
Andreas Steffen 81d49c5cfd Allow reason strings to be used as workitem result string 2014-01-13 12:06:17 +01:00
Andreas Steffen 6009b6e0dd Attestation IMV processes TPMRA workitem 2014-01-13 12:06:17 +01:00
Andreas Steffen 3254f8b00a Added TPM Remote Attestation (TPMRA) workitem 2014-01-10 11:55:21 +01:00
Andreas Steffen 6810388064 Update PCR even if measurement does not equal reference value 2013-12-21 00:40:45 +01:00
Andreas Steffen f5fd12b932 Fixed check_file_measurement method in pts_database_t 2013-12-13 14:37:31 +01:00
Andreas Steffen 953a922e9b unit-tests: NTRU test to check a special branch 2013-12-08 10:18:33 +01:00
Andreas Steffen 84814a6b7c min_MGF_hash_calls parameter is not needed anymore 2013-12-07 23:54:53 +01:00
Andreas Steffen 5da659523e Optimized MGF1 implementation 2013-12-07 23:29:04 +01:00