denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,009 Commits 1 Branch 0 Tags
8207a742007794ada5ed144e86eed4de3b89881d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen ce84a5cb1d version bump to 4.5.0rc2 2010-10-16 20:47:38 +02:00
Andreas Steffen 4b7d1262d9 define state_story for STATE_UNDEFINED 2010-10-16 16:15:10 +02:00
Andreas Steffen b14923ec50 IKEv2 is now the default key exchange protocol 2010-10-14 21:28:05 +02:00
Andreas Steffen 8a1353fc0e added TNC support to NEWS 2010-10-14 21:20:27 +02:00
Andreas Steffen 8d01a80819 do not send certificate requests in EAP-ONLY scenarios 2010-10-14 21:10:03 +02:00
Andreas Steffen 260d056170 suport certificate-based client authentication with EAP-TTLS 2010-10-14 21:00:41 +02:00
Andreas Steffen ea7c8b3880 added ikev2/rw-eap-tnc-ls scenario 2010-10-14 21:00:41 +02:00
Andreas Steffen cf76984c28 Define explicit IKEv1 keyexchange mode V 2010-10-14 16:13:52 +02:00
Andreas Steffen 6587f1a04d increase eap-tls max_message_count in fragments scenario 2010-10-14 16:09:44 +02:00
Andreas Steffen 095e0e7940 version bump to 4.5.0rc1 2010-10-14 15:50:42 +02:00
Andreas Steffen 897a9baaba define explicit IKEv1 keyexchange mode III 2010-10-14 07:34:13 +02:00
Andreas Steffen a885f0737c fixed ikev2/rw-eap-ttls-radius scenario 2010-10-14 07:26:10 +02:00
Andreas Steffen d8a379e1e4 fixed ikev2/rw-eap-tnc-radius-block scenario 2010-10-14 07:22:39 +02:00
Andreas Steffen adf5ebaa28 fixed ikev2/rw-eap-tnc scenario 2010-10-14 07:08:33 +02:00
Andreas Steffen c763ec09db fixed ikev2/rw-eap-sim-radius scenario 2010-10-14 07:01:06 +02:00
Andreas Steffen 15a7b95f86 fixed ikev2/rw-eap-sim-only-radius scenario 2010-10-14 06:55:06 +02:00
Andreas Steffen 907ca3d4df fixed ikev2/mult-auth-rsa-eap-sim-id 2010-10-14 06:41:26 +02:00
Andreas Steffen 8e91079f7f ignore : separator characters in chunk_from_hex() 2010-10-12 19:13:05 +02:00
Andreas Steffen e6f685b0fa scenarios without RADIUS server can use default iptables script 2010-10-11 17:04:53 +02:00
Andreas Steffen e5f5f612bd fixed some evaltest.dat files 2010-10-11 16:58:12 +02:00
Andreas Steffen 7d8cb1f952 added ikev2/rw-eap-tnc-block scenario 2010-10-11 16:58:12 +02:00
Andreas Steffen f2b1aa4962 added eap-radius-filter_id option to strongswan.conf 2010-10-11 12:20:45 +02:00
Andreas Steffen 456a4f398e updated keyexchange entry in ipsec.conf.5 man page 2010-10-11 06:23:57 +02:00
Andreas Steffen aff81d3bac updated strongswan.conf 2010-10-11 06:12:26 +02:00
Andreas Steffen 8efd583a64 explicit ikev1 key exchange for ikev1/esp-alg-null scenario 2010-10-09 22:07:51 +02:00
Andreas Steffen 1e6c92789e fixed typo 2010-10-09 22:05:26 +02:00
Andreas Steffen 0bc5547d0c *** HISTORICAL MOMENT: IKEv2 becomes the default! *** 2010-10-09 20:46:55 +02:00
Andreas Steffen 74e14ed631 define explicit IKEv1 key exchange mode II 2010-10-09 20:04:00 +02:00
Andreas Steffen ed08f7ce83 use DBG_TNC for TNC debugging output 2010-10-09 16:01:19 +02:00
Andreas Steffen db24b600fb changed filter attribute from access to allow 2010-10-09 01:01:19 +02:00
Andreas Steffen a1afa8d810 added ikev2/rw-eap-tnc scenario 2010-10-09 00:59:31 +02:00
Andreas Steffen 3cb3f85dfc TNCCS debug cosmetics 2010-10-09 00:58:12 +02:00
Andreas Steffen e9ba435fe3 revert to standard TNCC/TNCS Initialization function 2010-10-09 00:35:45 +02:00
Andreas Steffen bfba1fdc92 implemented TNC isolation via group memberships 2010-10-09 00:34:53 +02:00
Andreas Steffen db2f66c2df implemented a makeshift non-scalable send buffer 2010-10-08 22:24:30 +02:00
Andreas Steffen 55960a170f imc/imv cosmetics 2010-10-08 06:40:03 +02:00
Andreas Steffen d1b94592a6 fixed notation 2010-10-07 23:34:37 +02:00
Andreas Steffen 8dcc56dcc0 created tnc-imc and tnc-imv plugins 2010-10-07 23:31:23 +02:00
Andreas Steffen 04d000210b deactivate start_phase2_tnc flag after start 2010-10-07 15:42:00 +02:00
Andreas Steffen 888455587b added server side support for EAP-TNC 2010-10-07 15:02:51 +02:00
Andreas Steffen 99dfc3c295 added --debug-tls to charon usage() function 2010-10-07 09:34:56 +02:00
Andreas Steffen 84babfb895 define explicit IKEv1 key exchange mode 2010-10-07 07:31:44 +02:00
Andreas Steffen 9b201cf859 host venus is used in ikev2/rw-eap-tnc-radius scenario 2010-10-06 10:38:18 +02:00
Andreas Steffen 541666b89f added ikev2/rw-eap-tnc-radius-block scenario 2010-10-06 10:32:50 +02:00
Andreas Steffen 68de7267e1 added tnccs-11 plugin options to strongswan.conf 2010-10-06 07:53:50 +02:00
Andreas Steffen 9b04378ece version bump to 4.5.0dr5 2010-10-06 07:07:14 +02:00
Andreas Steffen bb43f25ad3 configure tnc_config path and preferred_language via strongswan.conf 2010-10-05 22:09:07 +02:00
Andreas Steffen 6d0e9cf046 created hull for TNCCS 2.0 plugin 2010-10-05 21:15:24 +02:00
Andreas Steffen a1edf4d33e use group membership to implement access/isolate redirection in filter-based TNC scenario 2010-10-05 20:40:36 +02:00
Andreas Steffen 48e16e0ae1 final version of ikev2/rw-eap-tnc-radius scenario 2010-10-05 20:38:34 +02:00
Andreas Steffen 9ffa3f71f2 fixed typo in image path 2010-10-05 09:09:58 +02:00
Andreas Steffen b540d19133 moved CHILD_SA selection out of attribute loop 2010-10-05 08:02:07 +02:00
Andreas Steffen 28b23fef11 receive name of preferred CHILD_SA via RADIUS Filter-Id attribute 2010-10-05 07:58:07 +02:00
Andreas Steffen e7104a6ec9 updated ikev2/rw-eap-tnc-radius scenario 2010-10-05 07:56:57 +02:00
Andreas Steffen 0cfdbaff2c set EAP-TTLS/TNC version also in acknowledgement packets 2010-10-04 14:39:49 +02:00
Andreas Steffen 30f14b7066 added configuration files for dummyimc.so IMC 2010-10-01 00:14:44 +02:00
Andreas Steffen ea893a5de2 The TNC@FHH TNC Serve does not like symbolic links 2010-09-30 23:35:24 +02:00
Andreas Steffen a00a43e0f6 print XML as plaintext and process recieved TNCCS Batch 2010-09-30 23:34:00 +02:00
Andreas Steffen cae4668ffb added tnc_config files to TNC scenario 2010-09-30 12:42:18 +02:00
Andreas Steffen f685b3aca0 started use of libtnc library 2010-09-29 23:24:59 +02:00
Andreas Steffen 3c354b6d11 NOTIFY error message types include 16383 2010-09-29 19:01:36 +02:00
Andreas Steffen 3f84e2d68e added NEWS for 4.5dr3 2010-09-29 07:14:52 +02:00
Andreas Steffen 062e8faee1 version bump to 4.5dr4 2010-09-29 07:14:33 +02:00
Andreas Steffen 440231e863 load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario 2010-09-28 23:52:59 +02:00
Andreas Steffen 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin 2010-09-28 23:34:04 +02:00
Andreas Steffen 280c8ea2f0 stop gateway after clients in order to check release of virtual IP 2010-09-26 11:31:39 +02:00
Andreas Steffen 1e6cc07ee4 stop gateway after clients in order to check release of virtual IP 2010-09-26 10:58:28 +02:00
Andreas Steffen 234aaf2df2 stop gateway after clients in order to check release of virtual IP 2010-09-26 10:35:12 +02:00
Andreas Steffen 2b3124c76d fixed release of virtual IP for XAUTH identities 2010-09-26 10:17:01 +02:00
Andreas Steffen f054606586 include RFC 5998 2010-09-20 20:03:20 +02:00
Andreas Steffen 824a040284 the updated IKEv2 RFC 5996 has been released 2010-09-15 12:55:31 +02:00
Andreas Steffen 004de55235 added notify messages defined in RFC 5996 2010-09-15 12:48:58 +02:00
Andreas Steffen 80f86acccb show validity of OCSP responses 2010-09-10 22:26:03 +02:00
Andreas Steffen 3c1debeb59 version bump to 4.5.0dr2 2010-09-10 07:37:28 +02:00
Andreas Steffen f3051ebf53 fixed memory leak 2010-09-09 21:38:41 +02:00
Andreas Steffen f85f0c2795 has_subject() now resolves ID_KEY_IDs 2010-09-09 17:15:46 +02:00
Andreas Steffen 939c4bf2e8 added ikev1/net2net-same-nets scenario 2010-09-09 13:37:30 +02:00
Andreas Steffen 3f58022679 debug output of inbound and outbound TNCCS batches 2010-09-09 11:15:08 +02:00
Andreas Steffen 20ad62026e support non EAP-TTLS conformant RADIUS-type attribute segmentation 2010-09-09 11:15:08 +02:00
Andreas Steffen 3b7eb3a9f4 added explanatory comments 2010-09-09 08:57:13 +02:00
Andreas Steffen 48b8cbb206 send well-formed TNCCS-Batch 2010-09-08 13:44:34 +02:00
Andreas Steffen de29e3a683 max max_message_count configurable and move it into tls_eap_t 2010-09-08 12:58:45 +02:00
Andreas Steffen 99b0f633c2 handle TLS_PURPOSE_EAP_TNC 2010-09-08 12:58:45 +02:00
Andreas Steffen 51b385d44d moved tls_t existance test into tls_eap_create() again 2010-09-08 11:09:11 +02:00
Andreas Steffen d2b1d4378e generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol 2010-09-08 11:01:53 +02:00
Andreas Steffen 91a0825c39 added non-standard SERPENT and TWOFISH support to kernel_netlink plugin 2010-09-08 07:22:31 +02:00
Andreas Steffen 2774826995 added openssl-ikev2/rw-eap-tls-only scenario 2010-09-07 17:14:32 +02:00
Andreas Steffen 52d4dc7fe2 added qcStatements OID 2010-09-07 11:17:51 +02:00
Andreas Steffen 1972102e1e fixed typo 2010-09-03 13:30:40 +02:00
Andreas Steffen 6d71f4dcb9 updown script variable is called PLUTO_UDP_ENC 2010-09-03 12:58:10 +02:00
Andreas Steffen 6deeacd965 adapted debug options 2010-09-03 09:29:56 +02:00
Andreas Steffen 4cbe758cd4 adapted debug options 2010-09-03 09:27:16 +02:00
Andreas Steffen c0071bde73 removed redundant debug output 2010-09-02 22:19:37 +02:00
Andreas Steffen 25de08474b version bump to 4.5.0dr2 2010-09-02 22:19:37 +02:00
Andreas Steffen 5175adee66 optimized FreeRadius scenarios for debug output 2010-09-02 22:19:37 +02:00
Andreas Steffen 0fb2980281 added ikev2/rw-eap-tnc-radius scenario 2010-09-02 22:19:37 +02:00
Andreas Steffen c0cecc0a0e added radius init script mit increased debugging 2010-09-02 22:19:37 +02:00
Andreas Steffen f9cfb5c836 display configuration and log of FreeRadius servers 2010-09-02 22:19:37 +02:00
Andreas Steffen 4171cbd60b adapted evaltest.dat to new RULE_OCSP_VALIDATION 2010-09-01 22:22:27 +02:00
Andreas Steffen 54cba78573 cosmetics in debug output 2010-09-01 14:30:14 +02:00