Martin Willi
75fc9d3136
Linked list style cleanups
2011-07-06 09:43:46 +02:00
Tobias Brunner
629fd2f4f6
Finally removed deprecated iterator_t.
2011-07-06 09:43:46 +02:00
Tobias Brunner
203497d80e
Removed unneeded and confusing insert_after method from linked_list_t.
2011-07-06 09:43:46 +02:00
Tobias Brunner
47daa0e6fe
Replaced more complex iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
67405ce808
Added a function to reset the enumerator of a linked list.
2011-07-06 09:43:45 +02:00
Tobias Brunner
572abc6cbd
Replaced ike_sa_t.create_additional_address_iterator with enumerator.
2011-07-06 09:43:45 +02:00
Tobias Brunner
4bbce1ef37
Replaced ike_sa_t.create_child_sa_iterator with enumerator.
...
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
2011-07-06 09:43:45 +02:00
Tobias Brunner
4f9c691adb
Replaced pkcs7_t.create_certificate_iterator with enumerator.
...
The method is currently not used.
2011-07-06 09:43:45 +02:00
Tobias Brunner
e26304348c
Replaced simple iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
28623fc538
"this" removed from comments.
2011-07-06 09:43:45 +02:00
Tobias Brunner
f0ba8ae042
Record the history of a policy installed in the kernel.
...
This allows to properly delete a policy e.g. if reauth=yes and
auto=route, because reqids are increased during reauthentication.
It also avoids overriding an installed policy with a trap policy.
2011-07-06 09:43:45 +02:00
Tobias Brunner
328f22e1d3
Add the reqid to kernel_ipsec_t.del_policy.
2011-07-06 09:43:45 +02:00
Tobias Brunner
0b6ff2a9fe
Added a replace function to linked_list_t.
2011-07-06 09:43:45 +02:00
Tobias Brunner
fbf014b0c1
Added an insert_after and insert_before function to linked_list_t.
2011-07-06 09:43:45 +02:00
Tobias Brunner
178760012c
Migrated linked_list_t to INIT/METHOD macros.
2011-07-06 09:43:45 +02:00
Tobias Brunner
3ee8fed445
Cache the most recent reqid in the PF_KEY kernel interface.
...
This makes the PF_KEY kernel interface behave the same as the Netlink
kernel interface.
2011-07-06 09:43:45 +02:00
Andreas Steffen
06b5b61838
install PASS and DROP shunt policies via PFKEYv2 interface
2011-07-05 21:57:45 +02:00
Tobias Brunner
60d62b9e5c
Don't install the libraries directly in lib/.
...
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
2011-07-05 14:42:14 +02:00
Andreas Steffen
9b2b434fe7
ignore ports of IPv4 and IPv6 loopback interfaces
2011-07-05 09:16:01 +02:00
Andreas Steffen
7fd120d5b6
fixed UTF-8 representation of polish reason string
2011-07-05 07:44:46 +02:00
Andreas Steffen
e1976a7120
delete orphan file
2011-07-04 23:02:06 +02:00
Andreas Steffen
e760e0ad23
fixed debug statement
2011-07-04 22:27:46 +02:00
Andreas Steffen
d9cdab9249
added ITA Scanner IMC/IMV pair which detects open server ports on TNC clients
2011-07-04 21:40:25 +02:00
Andreas Steffen
956759533f
added support if the IETF port filter attribute
2011-07-01 18:10:33 +02:00
Andreas Steffen
294c25fa60
again a bitwise or is required
2011-06-30 22:26:36 +02:00
Andreas Steffen
f87991704e
implemented PASS and DROP shunt policies
2011-06-28 19:42:54 +02:00
Martin Willi
6a5c8ee7a5
Initialize trap_manager listener with INIT macro, too
2011-06-28 17:19:20 +02:00
Andreas Steffen
06356a2981
Migrated trap_manager_t to INIT/METHOD macros
2011-06-28 14:42:29 +02:00
Andreas Steffen
9d997f31f1
oops, should have been a bitwise and
2011-06-25 14:57:49 +02:00
Andreas Steffen
cb14d7379f
fixed copy-and-paste error
2011-06-25 14:21:20 +02:00
Andreas Steffen
b324976aa1
output all known PA-TNC subtype names
2011-06-24 17:31:47 +02:00
Andreas Steffen
7401269517
refactoring of change_state()
2011-06-23 19:52:30 +02:00
Andreas Steffen
315c554571
implemented server-initiated handshake retry in IMC/IMV Test pair
2011-06-23 15:23:53 +02:00
Andreas Steffen
43af575002
notify IMVs about handshake retries
2011-06-23 15:22:41 +02:00
Andreas Steffen
4d1a31632a
some cosmetics
2011-06-16 11:34:52 +02:00
Andreas Steffen
ec1eab0319
fixed XML parsing of TNCCS 1.1 ReasonString message
2011-06-16 11:30:38 +02:00
Andreas Steffen
26691de27f
clear reason strings after delivering them
2011-06-15 13:53:53 +02:00
Andreas Steffen
96d0ff1237
implemented handshake retry on the client side
2011-06-15 13:09:41 +02:00
Martin Willi
6fe53bde24
We actually need to link against libz, as neo libraries are often static
...
This reverts commit 3c0630a797 .
2011-06-15 12:23:21 +02:00
Martin Willi
38dc106cde
Set cookies for the complete domain
2011-06-15 12:22:41 +02:00
Martin Willi
7804b7f420
Migrated libfast to INIT/METHOD macros
2011-06-15 11:25:53 +02:00
Andreas Steffen
ea66b2f3c6
added missing single quotes
2011-06-14 17:26:54 +02:00
Andreas Steffen
892a1e4a04
fixed the IF-TNCCS 1.1 ReasonString XML encoding
2011-06-14 15:58:03 +02:00
Andreas Steffen
0dbfdece4f
send a reason string only if action recommendation is not allow
2011-06-14 15:45:34 +02:00
Andreas Steffen
08dc42b025
cosmetics
2011-06-14 14:26:05 +02:00
Andreas Steffen
12ac59a914
eat trailing space in preferred language string
2011-06-13 23:01:28 +02:00
Andreas Steffen
4c191ca6bb
support multiple language preferences
2011-06-13 15:58:27 +02:00
Andreas Steffen
44bd40a101
implemented sending of reason strings
2011-06-13 15:31:34 +02:00
Andreas Steffen
7d769bc6c5
added missing single quotes
2011-06-13 15:29:43 +02:00
Andreas Steffen
33f89d66a7
fixed length check
2011-06-12 21:49:53 +02:00