denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,479 Commits 1 Branch 0 Tags
87fd83a91e32053e3ffee0b03ea56fca3fc2b2ba
Commit Graph
360 Commits
Author SHA1 Message Date
Andreas Steffen 8dcc56dcc0 created tnc-imc and tnc-imv plugins 2010-10-07 23:31:23 +02:00
Andreas Steffen 04d000210b deactivate start_phase2_tnc flag after start 2010-10-07 15:42:00 +02:00
Andreas Steffen 888455587b added server side support for EAP-TNC 2010-10-07 15:02:51 +02:00
Martin Willi 962300b920 Show result of RADIUS authentication along with EAP identity 2010-10-07 11:14:09 +02:00
Andreas Steffen bb43f25ad3 configure tnc_config path and preferred_language via strongswan.conf 2010-10-05 22:09:07 +02:00
Andreas Steffen 6d0e9cf046 created hull for TNCCS 2.0 plugin 2010-10-05 21:15:24 +02:00
Andreas Steffen a1edf4d33e use group membership to implement access/isolate redirection in filter-based TNC scenario 2010-10-05 20:40:36 +02:00
Andreas Steffen b540d19133 moved CHILD_SA selection out of attribute loop 2010-10-05 08:02:07 +02:00
Andreas Steffen 28b23fef11 receive name of preferred CHILD_SA via RADIUS Filter-Id attribute 2010-10-05 07:58:07 +02:00
Andreas Steffen a00a43e0f6 print XML as plaintext and process recieved TNCCS Batch 2010-09-30 23:34:00 +02:00
Andreas Steffen f685b3aca0 started use of libtnc library 2010-09-29 23:24:59 +02:00
Andreas Steffen 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin 2010-09-28 23:34:04 +02:00
Andreas Steffen 80f86acccb show validity of OCSP responses 2010-09-10 22:26:03 +02:00
Andreas Steffen 3f58022679 debug output of inbound and outbound TNCCS batches 2010-09-09 11:15:08 +02:00
Andreas Steffen 20ad62026e support non EAP-TTLS conformant RADIUS-type attribute segmentation 2010-09-09 11:15:08 +02:00
Tobias Brunner b1baa90846 Fixed copy/paste error. 2010-09-09 10:10:43 +02:00
Andreas Steffen 3b7eb3a9f4 added explanatory comments 2010-09-09 08:57:13 +02:00
Andreas Steffen 48b8cbb206 send well-formed TNCCS-Batch 2010-09-08 13:44:34 +02:00
Andreas Steffen de29e3a683 max max_message_count configurable and move it into tls_eap_t 2010-09-08 12:58:45 +02:00
Martin Willi 30cd31fb69 Added a simple led plugin to control Linux LEDs based on IKE activity 2010-09-08 12:00:57 +02:00
Andreas Steffen 51b385d44d moved tls_t existance test into tls_eap_create() again 2010-09-08 11:09:11 +02:00
Andreas Steffen d2b1d4378e generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol 2010-09-08 11:01:53 +02:00
Tobias Brunner f6697eadb9 Scheduler and processor have been moved to libstrongswan. 
Also reverts 0c21dc000d as the dependency
to libcharon is no longer required.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 34cf6def83 Fixing installation of trap policies (SPI=0) in kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner b4872c1e09 Replaced the protocol argument in add_policy with an optional SPI for an AH SA. 2010-09-02 19:04:19 +02:00
Tobias Brunner bb381e26c6 Refer to scheduler and processor via lib and not hydra. 2010-09-02 19:04:18 +02:00
Tobias Brunner 062a602216 Moved all kernel plugins to libhydra. 2010-09-02 19:01:26 +02:00
Tobias Brunner f6659688ab Refer to kernel interface via hydra and not charon. 2010-09-02 19:01:25 +02:00
Tobias Brunner 9f166d9ac2 Removed references to protocol_id_t from kernel interface. 
Instead we use the actual IP protocol identifier (the conversion now happens in
child_sa_t and kernel_handler_t).
 2010-09-02 19:01:25 +02:00
Tobias Brunner ba26508d05 Moved roam job creation to kernel event handler. 2010-09-02 19:01:25 +02:00
Tobias Brunner 61e8e73206 Refer to scheduler via hydra and not charon. 2010-09-02 19:01:24 +02:00
Tobias Brunner 4e258e63c3 Moved migrate job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner 01563352e8 Moved update SA job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner a22853b302 Moved delete/rekey CHILD_SA job creation to kernel event handler. 2010-09-02 19:01:24 +02:00
Tobias Brunner 81f6ec276b Moved acquire job creation to kernel event handler. 2010-09-02 19:01:23 +02:00
Tobias Brunner 211943be23 Some whitespace and code style fixes. 2010-09-02 19:01:23 +02:00
Tobias Brunner c5f7146b17 Refer to processor via hydra and not charon. 2010-09-02 19:01:22 +02:00
Martin Willi bbdc85b66e Respect key types in stroke key/certificate backend 2010-09-02 13:07:23 +02:00
Andreas Steffen 3a01908060 increase number of message due to large certificate payloads 2010-09-01 00:11:23 +02:00
Martin Willi 33b1a2567f Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined 2010-08-31 18:10:23 +02:00
Martin Willi 64d7b0733f Added support for the ipsec.conf aaa_identity keyword 2010-08-31 17:52:52 +02:00
Martin Willi f9fc5f2045 Added strongswan.conf options for EAP-TLS/TTLS fragment size 2010-08-31 16:17:01 +02:00
Martin Willi 1cf8c5f746 Migrated EAP-TTLS to the generic TLS helper 2010-08-31 16:17:01 +02:00
Martin Willi be751012c3 Migrated EAP-TLS to the generic TLS helper 2010-08-31 16:17:01 +02:00
Martin Willi ecd98efa9d Support output fragmentation of TLS records 2010-08-31 15:54:37 +02:00
Andreas Steffen 6ade82d5b7 fixed copy-and-paste errors 2010-08-30 15:42:44 +02:00
Andreas Steffen d93e2e5409 created an eap-tnc method hull 2010-08-30 15:36:34 +02:00
Andreas Steffen 577893612f for the time being assume a single request/response exchange for a given EAP method 2010-08-30 15:36:34 +02:00
Andreas Steffen 897c7a72cf Win7 might send up to 7k of certificate requests 2010-08-27 16:30:05 +02:00
Andreas Steffen d9b85e28b9 removed tls_record_t definition 2010-08-24 19:19:13 +02:00