denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,723 Commits 1 Branch 0 Tags
6aff4b5ce86b2532edf973190c287bda4f9c521a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 6aff4b5ce8 Show host address of peer connecting to PT-TLS socket 2013-08-15 23:34:23 +02:00
Andreas Steffen 0a09b02dcf Set client identity with TLS certificate authentication 2013-08-15 23:34:23 +02:00
Andreas Steffen 9cc606d22a Fixed memory leak in SASL PLAIN 2013-08-15 23:34:23 +02:00
Andreas Steffen 663ea1407d added --optionsfrom capability 2013-08-15 23:34:23 +02:00
Andreas Steffen 7c027f7983 Use client identities from successful authentications, only 2013-08-15 23:34:23 +02:00
Andreas Steffen d6719c974c Add pt-tls-client to .gitignore 2013-08-15 23:34:23 +02:00
Andreas Steffen 97b1d39de5 Extract client identity and authentication type from SASL authentication 2013-08-15 23:34:22 +02:00
Andreas Steffen 6d6100c2bc Added some debug statements 2013-08-15 23:34:22 +02:00
Andreas Steffen f420d5f380 enabled SASL PLAIN authentication 2013-08-15 23:34:22 +02:00
Andreas Steffen 8327c44b74 PT-TLS connection is properly terminated 2013-08-15 23:34:22 +02:00
Andreas Steffen 12b3db5006 moved tnc_imv plugin to libtnccs thanks to recommendation callback function 2013-08-15 23:34:22 +02:00
Andreas Steffen 9d8c28e2f5 Documented plugin move from libcharon to libtnccs in strongswan.conf 2013-08-15 23:34:22 +02:00
Andreas Steffen e8f65c5cde Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon plugins to libtnccs 2013-08-15 23:34:22 +02:00
Andreas Steffen 180a2f2642 rapid PT-TLS AR/PDP prototype 2013-08-15 23:34:22 +02:00
Andreas Steffen f5b5d262e8 Add PT-TLS interface to strongSwan PDP 2013-08-15 23:34:22 +02:00
Andreas Steffen cc5bedbb98 Callback job is not needed any more 2013-07-31 22:13:49 +02:00
Andreas Steffen e8b8a6d958 version bump to 5.0.1 2013-07-29 17:16:41 +02:00
Andreas Steffen ef580b0137 tnc-pdp now uses watcher_t 2013-07-29 17:16:21 +02:00
Andreas Steffen 4c961168cc Updated PTS database scheme to new workitems model 2013-07-29 11:41:47 +02:00
Andreas Steffen 2b1ac51c9c fixed typo 2013-07-19 20:07:32 +02:00
Andreas Steffen 645e9291f0 updated some TNC scenarios 2013-07-19 19:36:07 +02:00
Andreas Steffen 3cd01df785 Version bump to 5.1.0rc1 2013-07-19 10:40:53 +02:00
Andreas Steffen 126778679f Recognize critical IssuingDistributionPoint CRL extension 2013-07-12 09:00:47 +02:00
Andreas Steffen 0a013e1af5 Override policy recommendation in enforcement 2013-07-11 10:34:00 +02:00
Andreas Steffen 9e0182b922 openssl plugin can replace random, hmac, and gcm plugins 2013-07-10 20:38:07 +02:00
Andreas Steffen 3910fb3715 Added openssl-ikev2/net2net-pkcs12 scenario 2013-07-10 20:25:49 +02:00
Andreas Steffen 49a26e5b57 Added ikev2/net2net-pkcs12 scenario 2013-07-10 20:17:44 +02:00
Andreas Steffen fad3396f96 Version bump to 5.1.0dr3 2013-07-10 17:50:25 +02:00
Andreas Steffen 3b569df215 conntrack -F makes ikev2/nat-rw scenario to work always 2013-07-10 17:50:25 +02:00
Andreas Steffen 979801278f Fixed alignment of device ID column 2013-07-10 11:37:22 +02:00
Andreas Steffen 51bc6a6e74 Cosmetics 2013-07-08 17:58:14 +02:00
Andreas Steffen 34f894b6cc Scanner IMV without workitems provides immediate recommendation, too 2013-07-08 17:53:05 +02:00
Andreas Steffen 3dfa7a9eae Attestion IMV provides recommendation only once 2013-07-08 17:06:51 +02:00
Andreas Steffen ea6ab9fb49 skip enforcement if a recent measurement was successful 2013-07-08 16:08:05 +02:00
Andreas Steffen ef13480699 Added config-3.10 2013-07-04 23:17:10 +02:00
Andreas Steffen 090ff1fbab Version bump to 5.1.0dr2 2013-07-04 22:56:19 +02:00
Andreas Steffen 69c4e34859 Always return a result string for a processed workitem 2013-07-04 22:55:58 +02:00
Andreas Steffen 7658b399b7 Make Block stronger than Isolate in default policy 2013-07-04 22:54:47 +02:00
Andreas Steffen 9844f240f8 Register packages under Debian 7.0 x86_64 2013-07-04 22:53:41 +02:00
Andreas Steffen 2ea32e7964 Enable libipsec and charon-cmd in strongSwan recipe 2013-07-01 12:32:45 +02:00
Andreas Steffen bb802daacc Fixed libipsec/rw-suite-b scenario 2013-07-01 12:32:45 +02:00
Andreas Steffen 3405156f97 Added libipsec/rw-suite-b scenario 2013-07-01 11:04:14 +02:00
Andreas Steffen 9ea77350ce Fixed index.txt for strongSwan EC CA 2013-07-01 11:01:11 +02:00
Andreas Steffen 6c969fee94 Don't backup old package lists 2013-07-01 10:00:43 +02:00
Andreas Steffen 156e552caf Added libipsec/net2net-cert scenario 2013-06-29 22:23:45 +02:00
Andreas Steffen b1f1e5e5f2 5.1.0 changes for test cases 2013-06-29 00:07:15 +02:00
Andreas Steffen 5b7536c803 Attestation IMV requests platform info if not received 2013-06-27 17:30:14 +02:00
Andreas Steffen 71c7b43541 Support blacklist field in PTS database 2013-06-26 12:07:09 +02:00
Andreas Steffen de8de88fa7 Updated PTS demo database 2013-06-26 10:14:25 +02:00
Andreas Steffen f4dcbe3bf2 Device can be member of multiple groups 2013-06-25 18:43:07 +02:00
Andreas Steffen 72631301eb Some IMV policy managers expect a TEXT string 2013-06-25 12:47:07 +02:00
Andreas Steffen 59c9ec107f Assign default group to newly created devices 2013-06-25 11:49:32 +02:00
Andreas Steffen 632e5b0b99 Set device creation date if it hasn't been set yet 2013-06-24 20:18:16 +02:00
Andreas Steffen 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft 2013-06-24 00:23:50 +02:00
Andreas Steffen 69c4715bf8 Send PA-TNC assessment result even if no workitems are available 2013-06-24 00:22:38 +02:00
Andreas Steffen 02497901d0 Some pacman fixes 2013-06-23 16:23:19 +02:00
Andreas Steffen 226f34e0a0 version bump to 5.1.0dr1 2013-06-21 23:54:13 +02:00
Andreas Steffen 6b081a4c21 Some PTS database fixes 2013-06-21 23:25:25 +02:00
Andreas Steffen 45eb318ed4 Implemented pacman in a more reliable way 2013-06-21 23:25:25 +02:00
Andreas Steffen 4fe7294bb3 Define protocol string 2013-06-21 23:25:25 +02:00
Andreas Steffen 41dabbad41 Generate result string for port scan workitems 2013-06-21 23:25:25 +02:00
Andreas Steffen 8fbfe03e4e Ignore non-matching protocols 2013-06-21 23:25:25 +02:00
Andreas Steffen e5dd8a1d34 Introduced workitems to Scanner IMV 2013-06-21 23:25:24 +02:00
Andreas Steffen adf8a05a3d Removed obsoleted strongswan.conf options 2013-06-21 23:25:24 +02:00
Andreas Steffen da99df1443 Added ITA components to database 2013-06-21 23:25:24 +02:00
Andreas Steffen 10bb71261c Added soft dependency on database plugin 2013-06-21 23:25:24 +02:00
Andreas Steffen a2e30d601a fixed SQL query 2013-06-21 23:25:24 +02:00
Andreas Steffen 4cf568a785 Shortened names of default policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen 19ce03be73 Store device with product ID 2013-06-21 23:25:24 +02:00
Andreas Steffen bf250acb06 Database changes needed to integrate Cygnet backend 2013-06-21 23:25:24 +02:00
Andreas Steffen 01afff71cb Implemented get|set_action_flag() methods 2013-06-21 23:25:24 +02:00
Andreas Steffen a45a2c9291 Implemented hierarchical policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen b1da8368d0 Introduced workitems to Attestation IMV 2013-06-21 23:25:23 +02:00
Andreas Steffen 7e9bdd20aa pts_meas_algo_probe() and pts_dh_group_probe() got lost 2013-06-21 23:25:23 +02:00
Andreas Steffen c174c116fe Converted all IMVs to use generic IF-IMV API 2013-06-21 23:25:23 +02:00
Andreas Steffen ea2663ec03 Remove the constructor from the IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 97f0a7ea77 Defined a generic IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 7513a09ee5 Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton 2013-06-21 23:25:23 +02:00
Andreas Steffen 99c6a5f8a4 Moved batch_ending into separate source file 2013-06-21 23:25:23 +02:00
Andreas Steffen e1db511bbd do not process workitems with NULL result 2013-06-21 23:25:23 +02:00
Andreas Steffen c219d7e31f fixed enumeration of workitems for a given session 2013-06-21 23:25:23 +02:00
Andreas Steffen 65148217b0 generate workitems based on group policy 2013-06-21 23:25:23 +02:00
Andreas Steffen 0fca778254 Added file and directory reference measurements to workitems 2013-06-21 23:25:22 +02:00
Andreas Steffen 2964562199 add overall recommendation to session database entry 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f6bf1a843 don't define a default database URI 2013-06-21 23:25:22 +02:00
Andreas Steffen 1ecff25917 created a simple IMV Policy Manager 2013-06-21 23:25:22 +02:00
Andreas Steffen 1571a11fa4 register received scanner attributes 2013-06-21 23:25:22 +02:00
Andreas Steffen 9d63ad17d4 used tnc_policy_update functions for default policy 2013-06-21 23:25:22 +02:00
Andreas Steffen a6266485be refactored IMV policy management 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f9aabbfd7 implemented policy rules for OS IMV 2013-06-21 23:25:22 +02:00
Andreas Steffen 7daf6d8cc5 check for zero-length device ID 2013-06-21 23:25:22 +02:00
Andreas Steffen 033834719d ITA-HSR/Device ID attribute & IMV OS state machine 2013-06-21 23:25:22 +02:00
Andreas Steffen bb9d8b1853 execute an _imv_policy script 2013-06-21 23:25:22 +02:00
Andreas Steffen b8db66de15 implemented IMV session control 2013-06-21 23:25:21 +02:00
Andreas Steffen 1f179c63b3 Manage files and directories 2013-06-21 23:25:21 +02:00
Andreas Steffen 71d740cac6 Make plugins in standalone libimcv configurable 2013-05-24 12:56:21 +02:00
Andreas Steffen 0f499f41dc Use attest database in tnc/tnccs-20-os scenario 2013-04-21 16:31:23 +02:00
Andreas Steffen 9fab0a58d3 fixed a 64bit time_t issue 2013-04-21 16:07:13 +02:00
Andreas Steffen 70a7917e72 destroy SQL query 2013-04-21 16:00:23 +02:00
Andreas Steffen 6c998b8b9e Keep last AR ID 2013-04-21 08:19:30 +02:00