 Andreas Steffen
|
486f4b5838
|
added some otherNames OIDs
|
2013-03-06 11:50:32 +01:00 |
|
|
Andreas Steffen
|
d7eec03815
|
removed unneeded DS files
|
2013-03-05 09:08:25 +01:00 |
|
|
Andreas Steffen
|
1a9dee5d22
|
instead of cloning use extract_buf() method
|
2013-03-04 23:21:21 +01:00 |
|
|
Andreas Steffen
|
c88104aa25
|
make TNC Access Requestor ID available to IMVs
|
2013-03-03 17:18:09 +01:00 |
|
|
Andreas Steffen
|
1fc609fed3
|
updated NEWS
|
2013-03-03 17:17:08 +01:00 |
|
|
Andreas Steffen
|
7b11a1dcdc
|
upgraded KVM test suite to Linux 3.8 kernel
|
2013-03-03 11:59:07 +01:00 |
|
|
Andreas Steffen
|
f7580a5a67
|
added openssl-ikev2/alg-aes-gcm scenario
|
2013-03-03 11:43:52 +01:00 |
|
|
Andreas Steffen
|
81419b9748
|
use DNs in tnc/tnccs-20-tls scenario
|
2013-03-03 10:47:17 +01:00 |
|
|
Andreas Steffen
|
c9418d4fd3
|
added getpwuid_r and initgroups to whitelist
|
2013-03-03 09:04:49 +01:00 |
|
|
Andreas Steffen
|
eeb69761ae
|
third parameter was not copied
|
2013-03-02 22:03:07 +01:00 |
|
|
Andreas Steffen
|
b038c62e4a
|
added ERX_SUPPORTED IKEv2 Notify
|
2013-03-02 17:18:37 +01:00 |
|
|
Andreas Steffen
|
de218eb09c
|
added some new TCG IF-M message subtypes and attributes
|
2013-03-02 17:03:37 +01:00 |
|
|
Andreas Steffen
|
9e9e12bbf8
|
version bump to 5.0.3dr3
|
2013-03-02 16:19:57 +01:00 |
|
|
Andreas Steffen
|
7a93844f21
|
version bump to 5.0.3dr2
|
2013-02-19 20:25:13 +01:00 |
|
|
Andreas Steffen
|
371b752f00
|
treat IF-M and IF-TNCCS remediation instructions/parameters in an equal way
|
2013-02-19 20:00:57 +01:00 |
|
|
Andreas Steffen
|
f0c102cbfa
|
Added ikev2/rw-dnssec scenario
|
2013-02-19 12:25:01 +01:00 |
|
|
Andreas Steffen
|
1d4ff25fb8
|
Added ikev2/net2net-dnssec scenario
|
2013-02-19 12:25:01 +01:00 |
|
|
Andreas Steffen
|
37c589f0e0
|
Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org, and root zones
|
2013-02-19 12:25:01 +01:00 |
|
|
Andreas Steffen
|
3fbc328d14
|
Build unbound and ipseckey plugins on KVM image
|
2013-02-19 12:25:01 +01:00 |
|
|
Andreas Steffen
|
65cdda5cf8
|
Streamlined log messages in ipseckey plugin
|
2013-02-19 12:25:00 +01:00 |
|
|
Andreas Steffen
|
a4ddc0bb26
|
Encode RSA public keys in RFC 3110 DNSKEY format
|
2013-02-19 12:25:00 +01:00 |
|
|
Andreas Steffen
|
f2145c8d3a
|
Moved configuration from resolver manager to unbound plugin
Also streamlined log messages in unbound plugin.
|
2013-02-19 12:25:00 +01:00 |
|
|
Andreas Steffen
|
c381e46855
|
added missing return statement
|
2013-02-19 10:24:23 +01:00 |
|
|
Andreas Steffen
|
0f7cb0caf4
|
reject PB-Experimental messages with NOSKIP flag set
|
2013-02-19 09:31:34 +01:00 |
|
|
Andreas Steffen
|
9b4a8e1ced
|
added parameter descriptions
|
2013-02-19 07:44:57 +01:00 |
|
|
Andreas Steffen
|
2c1219c217
|
removed superfluous debug output
|
2013-02-15 15:19:16 +01:00 |
|
|
Andreas Steffen
|
f838f457a8
|
resolve dependency on libtls
|
2013-02-14 17:15:33 +01:00 |
|
|
Andreas Steffen
|
5374fe3a09
|
added ikev1/net2net-fragmentation scenario
|
2013-02-12 23:01:48 +01:00 |
|
|
Andreas Steffen
|
bac1052dea
|
treat EAP identities as user IDs
|
2013-02-12 21:58:03 +01:00 |
|
|
Andreas Steffen
|
7d355f853d
|
use EAP identity in tnc/tnccs-20-pdp scenario
|
2013-02-12 20:41:37 +01:00 |
|
|
Andreas Steffen
|
2a421163bf
|
make TNC client authentication type available to IMVs
|
2013-02-12 20:38:05 +01:00 |
|
|
Andreas Steffen
|
3e56352815
|
determine underlying IF-T transport protocol
|
2013-02-12 12:25:39 +01:00 |
|
|
Andreas Steffen
|
bd1ee5bdc4
|
make AR identities available to IMVs via IF-IMV 1.4 draft
|
2013-02-11 15:30:44 +01:00 |
|
|
Andreas Steffen
|
ebb87f08f7
|
Make IKE/EAP IDs available to TNC server/client
|
2013-02-11 15:30:44 +01:00 |
|
|
Andreas Steffen
|
cf29fc075a
|
time is a time_t pointer
|
2013-02-04 13:05:29 +01:00 |
|
|
Andreas Steffen
|
1f6ee9ec44
|
version bump to 5.0.3dr1
|
2013-02-04 07:51:07 +01:00 |
|
|
Andreas Steffen
|
ba62be506a
|
improved control when an attribute request is sent
|
2013-02-03 20:48:05 +01:00 |
|
|
Andreas Steffen
|
459c50ccb8
|
print PEN value 0xfffffe as Unassigned
|
2013-02-03 18:52:59 +01:00 |
|
|
Andreas Steffen
|
818fe7c024
|
send an error attribute if vendor ID or type of received attribute is reserved
|
2013-02-03 18:52:03 +01:00 |
|
|
Andreas Steffen
|
d830174e3c
|
version bump to 5.0.2
|
2013-01-30 07:51:44 +01:00 |
|
|
Andreas Steffen
|
d82372fab8
|
Removed INSTALL from EXTRA_DIST
|
2013-01-17 23:20:37 +01:00 |
|
|
Andreas Steffen
|
44e533b88e
|
converted ha/both-active iptables scenario
|
2013-01-17 16:55:03 +01:00 |
|
|
Andreas Steffen
|
5c09942d54
|
converted all ipv6 iptables/ip6tables scenarios
|
2013-01-17 16:55:03 +01:00 |
|
|
Andreas Steffen
|
a0ffe67fab
|
converted all p2pnat iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
b27836412b
|
Rename UML to KVM tests
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
472a411aa8
|
converted all tnc iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
4aa32cc3fe
|
List daemon.log on $RADIUSHOSTS
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
cedc96c2c4
|
implemented ip6tables.rules
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
136f74161b
|
converted all sql iptables scenarios
|
2013-01-17 16:55:02 +01:00 |
|
|
Andreas Steffen
|
6fff9d9ace
|
converted all pfkey iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
|
Andreas Steffen
|
8fbb9458d6
|
converted all openssl-ikev2 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
|
Andreas Steffen
|
44047e7adb
|
converted all openssl-ikev1 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
|
Andreas Steffen
|
61ab7db386
|
converted all gcrypt-ikev2 iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
|
Andreas Steffen
|
1dc14281fc
|
converted all af-alg iptables scenarios
|
2013-01-17 16:55:01 +01:00 |
|
|
Andreas Steffen
|
ac09da8e50
|
added ikev1/nat-virtual-ip scenario
|
2013-01-17 16:55:00 +01:00 |
|
|
Andreas Steffen
|
ca0128588f
|
converted all ikev1 iptables scenarios
|
2013-01-17 16:55:00 +01:00 |
|
|
Andreas Steffen
|
d815235d17
|
use iptables-restore in all ikev2 firewall scenarios
|
2013-01-17 16:55:00 +01:00 |
|
|
Andreas Steffen
|
28b7db2b3c
|
Updated mark_update script in several IKEv2 scenarios
|
2013-01-17 16:55:00 +01:00 |
|
|
Andreas Steffen
|
9b4477d5b8
|
activated iptables in some ikev2 scenarios
|
2013-01-17 16:55:00 +01:00 |
|
|
Andreas Steffen
|
8e75e8dfa7
|
Fixed NO evaltest in tnc/tnccs-20-pdp scenario
|
2013-01-17 16:54:59 +01:00 |
|
|
Andreas Steffen
|
9c36018cc7
|
Disable IPv4 forwarding on carol in order to pass tnc/tnccs-20-os scenario
|
2013-01-17 16:54:59 +01:00 |
|
|
Andreas Steffen
|
7deb8bd905
|
Added less package to Debian base image
|
2013-01-17 16:54:59 +01:00 |
|
|
Andreas Steffen
|
54c526675e
|
Added config directory to EXTRA-DIST
|
2013-01-17 16:54:59 +01:00 |
|
|
Andreas Steffen
|
8b8a4c5c45
|
Added config für Linux 3.6 guest kernels
|
2013-01-17 16:54:59 +01:00 |
|
|
Andreas Steffen
|
13b2804204
|
version bump to 5.0.2rc1
|
2013-01-15 02:41:22 +01:00 |
|
|
Andreas Steffen
|
1c65b6c305
|
make pacman.sh run under cron
|
2012-12-26 09:28:17 +01:00 |
|
|
Andreas Steffen
|
6be6a52405
|
deleted newly constructed attributes in send_assessment
|
2012-12-24 12:06:12 +01:00 |
|
|
Andreas Steffen
|
9787b9f2e0
|
Send empty CDATA batch if TNC client has no data to send
|
2012-12-23 22:16:30 +01:00 |
|
|
Andreas Steffen
|
45b5203f5d
|
fixed memory leak in TPM Version Info
|
2012-12-13 11:10:38 +01:00 |
|
|
Andreas Steffen
|
133fb74841
|
add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins
|
2012-12-09 19:40:13 +01:00 |
|
|
Andreas Steffen
|
92e75e4535
|
optionally skip dlclose() of IMCs/IMVs in order to track memory leaks
|
2012-12-09 19:35:23 +01:00 |
|
|
Andreas Steffen
|
7d17eeb7ef
|
fixed memory leak in error case
|
2012-12-09 17:07:51 +01:00 |
|
|
Andreas Steffen
|
965fce31c3
|
newer releases of dpkg-query does not have PackageSpec
|
2012-12-09 13:55:22 +01:00 |
|
|
Andreas Steffen
|
4037bb5288
|
ignore ports of the 127.0.1.1 internal system address
|
2012-12-09 13:26:34 +01:00 |
|
|
Andreas Steffen
|
81ee269d1f
|
attest displays dates either in local time or UTC
|
2012-11-30 09:55:38 +01:00 |
|
|
Andreas Steffen
|
2b61f7baa3
|
store detected improper OS settings in database
|
2012-11-30 00:12:48 +01:00 |
|
|
Andreas Steffen
|
f0d4756eb0
|
allow update of file hashes
|
2012-11-28 23:18:33 +01:00 |
|
|
Andreas Steffen
|
e8a491c01a
|
removed unused header include
|
2012-11-28 14:37:15 +01:00 |
|
|
Andreas Steffen
|
b8f0bf00b7
|
differentiate attestation reason strings
|
2012-11-28 14:14:41 +01:00 |
|
|
Andreas Steffen
|
7b6cc33eb2
|
store collected device information in database
|
2012-11-28 10:51:11 +01:00 |
|
|
Andreas Steffen
|
ac6dd7d404
|
store unique device_id in database
|
2012-11-27 23:48:40 +01:00 |
|
|
Andreas Steffen
|
2810d934e5
|
cosmetics
|
2012-11-23 18:31:44 +01:00 |
|
|
Andreas Steffen
|
9cbdfdb988
|
implemented output of item lists in remediation instructions
|
2012-11-23 18:30:00 +01:00 |
|
|
Andreas Steffen
|
ee6aeca892
|
refactored reason string and remediation instructions framework
|
2012-11-23 12:30:33 +01:00 |
|
|
Andreas Steffen
|
48b23d06a8
|
allow the optional sharing if RSA private keys
|
2012-11-22 00:34:42 +01:00 |
|
|
Andreas Steffen
|
ef214f2855
|
added ike2/rw-eap-md5-class-radius scenario
|
2012-11-21 06:05:34 +01:00 |
|
|
Andreas Steffen
|
76bd0d7c1f
|
overwrite sensitive prime with zeroes
|
2012-11-18 22:55:22 +01:00 |
|
|
Andreas Steffen
|
bf1cecdb6b
|
strndup() requires string.h header file
|
2012-11-18 19:41:03 +01:00 |
|
|
Andreas Steffen
|
168ee460c6
|
implemented generation of safe primes
|
2012-11-18 19:22:31 +01:00 |
|
|
Andreas Steffen
|
c1c98f5f4a
|
generate reason strings and remediation instructions for improper OS settings
|
2012-11-18 11:44:03 +01:00 |
|
|
Andreas Steffen
|
602c6b6be2
|
precautionary measures
|
2012-11-17 14:53:27 +01:00 |
|
|
Andreas Steffen
|
3294cbd61e
|
fixed a memory leak in pacman
|
2012-11-17 08:16:53 +01:00 |
|
|
Andreas Steffen
|
aa3061d432
|
removed unused variable
|
2012-11-17 08:16:23 +01:00 |
|
|
Andreas Steffen
|
d287c14436
|
version bump to 5.0.2dr4
|
2012-11-15 21:56:27 +01:00 |
|
|
Andreas Steffen
|
bacffb890e
|
discovered the use of strndup()
|
2012-11-15 11:48:57 +01:00 |
|
|
Andreas Steffen
|
a95959cce6
|
implemented blacklisting of software packages
|
2012-11-14 11:38:45 +01:00 |
|
|
Andreas Steffen
|
f94d32dba9
|
fixed remediation instructions output
|
2012-11-13 07:15:46 +01:00 |
|
|
Andreas Steffen
|
e6a2de344d
|
fixed memory leak
|
2012-11-12 13:08:58 +01:00 |
|
|
Andreas Steffen
|
a40372d82d
|
fixed typo in strcpy() function call
|
2012-11-12 12:31:26 +01:00 |
|
|
Andreas Steffen
|
7c49d77982
|
updated parameters
|
2012-11-12 10:45:38 +01:00 |
|