Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 5374fe3a09 added ikev1/net2net-fragmentation scenario 2013-02-12 23:01:48 +01:00
Andreas Steffen bac1052dea treat EAP identities as user IDs 2013-02-12 21:58:03 +01:00
Andreas Steffen 7d355f853d use EAP identity in tnc/tnccs-20-pdp scenario 2013-02-12 20:41:37 +01:00
Andreas Steffen 2a421163bf make TNC client authentication type available to IMVs 2013-02-12 20:38:05 +01:00
Andreas Steffen 3e56352815 determine underlying IF-T transport protocol 2013-02-12 12:25:39 +01:00
Andreas Steffen bd1ee5bdc4 make AR identities available to IMVs via IF-IMV 1.4 draft 2013-02-11 15:30:44 +01:00
Andreas Steffen ebb87f08f7 Make IKE/EAP IDs available to TNC server/client 2013-02-11 15:30:44 +01:00
Andreas Steffen cf29fc075a time is a time_t pointer 2013-02-04 13:05:29 +01:00
Andreas Steffen 1f6ee9ec44 version bump to 5.0.3dr1 2013-02-04 07:51:07 +01:00
Andreas Steffen ba62be506a improved control when an attribute request is sent 2013-02-03 20:48:05 +01:00
Andreas Steffen 459c50ccb8 print PEN value 0xfffffe as Unassigned 2013-02-03 18:52:59 +01:00
Andreas Steffen 818fe7c024 send an error attribute if vendor ID or type of received attribute is reserved 2013-02-03 18:52:03 +01:00
Andreas Steffen d830174e3c version bump to 5.0.2 2013-01-30 07:51:44 +01:00
Andreas Steffen d82372fab8 Removed INSTALL from EXTRA_DIST 2013-01-17 23:20:37 +01:00
Andreas Steffen 44e533b88e converted ha/both-active iptables scenario 2013-01-17 16:55:03 +01:00
Andreas Steffen 5c09942d54 converted all ipv6 iptables/ip6tables scenarios 2013-01-17 16:55:03 +01:00
Andreas Steffen a0ffe67fab converted all p2pnat iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen b27836412b Rename UML to KVM tests 2013-01-17 16:55:02 +01:00
Andreas Steffen 472a411aa8 converted all tnc iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen 4aa32cc3fe List daemon.log on $RADIUSHOSTS 2013-01-17 16:55:02 +01:00
Andreas Steffen cedc96c2c4 implemented ip6tables.rules 2013-01-17 16:55:02 +01:00
Andreas Steffen 136f74161b converted all sql iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen 6fff9d9ace converted all pfkey iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen 8fbb9458d6 converted all openssl-ikev2 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen 44047e7adb converted all openssl-ikev1 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen 61ab7db386 converted all gcrypt-ikev2 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen 1dc14281fc converted all af-alg iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen ac09da8e50 added ikev1/nat-virtual-ip scenario 2013-01-17 16:55:00 +01:00
Andreas Steffen ca0128588f converted all ikev1 iptables scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen d815235d17 use iptables-restore in all ikev2 firewall scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen 28b7db2b3c Updated mark_update script in several IKEv2 scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen 9b4477d5b8 activated iptables in some ikev2 scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen 8e75e8dfa7 Fixed NO evaltest in tnc/tnccs-20-pdp scenario 2013-01-17 16:54:59 +01:00
Andreas Steffen 9c36018cc7 Disable IPv4 forwarding on carol in order to pass tnc/tnccs-20-os scenario 2013-01-17 16:54:59 +01:00
Andreas Steffen 7deb8bd905 Added less package to Debian base image 2013-01-17 16:54:59 +01:00
Andreas Steffen 54c526675e Added config directory to EXTRA-DIST 2013-01-17 16:54:59 +01:00
Andreas Steffen 8b8a4c5c45 Added config für Linux 3.6 guest kernels 2013-01-17 16:54:59 +01:00
Andreas Steffen 13b2804204 version bump to 5.0.2rc1 2013-01-15 02:41:22 +01:00
Andreas Steffen 1c65b6c305 make pacman.sh run under cron 2012-12-26 09:28:17 +01:00
Andreas Steffen 6be6a52405 deleted newly constructed attributes in send_assessment 2012-12-24 12:06:12 +01:00
Andreas Steffen 9787b9f2e0 Send empty CDATA batch if TNC client has no data to send 2012-12-23 22:16:30 +01:00
Andreas Steffen 45b5203f5d fixed memory leak in TPM Version Info 2012-12-13 11:10:38 +01:00
Andreas Steffen 133fb74841 add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins 2012-12-09 19:40:13 +01:00
Andreas Steffen 92e75e4535 optionally skip dlclose() of IMCs/IMVs in order to track memory leaks 2012-12-09 19:35:23 +01:00
Andreas Steffen 7d17eeb7ef fixed memory leak in error case 2012-12-09 17:07:51 +01:00
Andreas Steffen 965fce31c3 newer releases of dpkg-query does not have PackageSpec 2012-12-09 13:55:22 +01:00
Andreas Steffen 4037bb5288 ignore ports of the 127.0.1.1 internal system address 2012-12-09 13:26:34 +01:00
Andreas Steffen 81ee269d1f attest displays dates either in local time or UTC 2012-11-30 09:55:38 +01:00
Andreas Steffen 2b61f7baa3 store detected improper OS settings in database 2012-11-30 00:12:48 +01:00
Andreas Steffen f0d4756eb0 allow update of file hashes 2012-11-28 23:18:33 +01:00
Andreas Steffen e8a491c01a removed unused header include 2012-11-28 14:37:15 +01:00
Andreas Steffen b8f0bf00b7 differentiate attestation reason strings 2012-11-28 14:14:41 +01:00
Andreas Steffen 7b6cc33eb2 store collected device information in database 2012-11-28 10:51:11 +01:00
Andreas Steffen ac6dd7d404 store unique device_id in database 2012-11-27 23:48:40 +01:00
Andreas Steffen 2810d934e5 cosmetics 2012-11-23 18:31:44 +01:00
Andreas Steffen 9cbdfdb988 implemented output of item lists in remediation instructions 2012-11-23 18:30:00 +01:00
Andreas Steffen ee6aeca892 refactored reason string and remediation instructions framework 2012-11-23 12:30:33 +01:00
Andreas Steffen 48b23d06a8 allow the optional sharing if RSA private keys 2012-11-22 00:34:42 +01:00
Andreas Steffen ef214f2855 added ike2/rw-eap-md5-class-radius scenario 2012-11-21 06:05:34 +01:00
Andreas Steffen 76bd0d7c1f overwrite sensitive prime with zeroes 2012-11-18 22:55:22 +01:00
Andreas Steffen bf1cecdb6b strndup() requires string.h header file 2012-11-18 19:41:03 +01:00
Andreas Steffen 168ee460c6 implemented generation of safe primes 2012-11-18 19:22:31 +01:00
Andreas Steffen c1c98f5f4a generate reason strings and remediation instructions for improper OS settings 2012-11-18 11:44:03 +01:00
Andreas Steffen 602c6b6be2 precautionary measures 2012-11-17 14:53:27 +01:00
Andreas Steffen 3294cbd61e fixed a memory leak in pacman 2012-11-17 08:16:53 +01:00
Andreas Steffen aa3061d432 removed unused variable 2012-11-17 08:16:23 +01:00
Andreas Steffen d287c14436 version bump to 5.0.2dr4 2012-11-15 21:56:27 +01:00
Andreas Steffen bacffb890e discovered the use of strndup() 2012-11-15 11:48:57 +01:00
Andreas Steffen a95959cce6 implemented blacklisting of software packages 2012-11-14 11:38:45 +01:00
Andreas Steffen f94d32dba9 fixed remediation instructions output 2012-11-13 07:15:46 +01:00
Andreas Steffen e6a2de344d fixed memory leak 2012-11-12 13:08:58 +01:00
Andreas Steffen a40372d82d fixed typo in strcpy() function call 2012-11-12 12:31:26 +01:00
Andreas Steffen 7c49d77982 updated parameters 2012-11-12 10:45:38 +01:00
Andreas Steffen e6b117491f implemented reason string and remediation instructions for OS IMV 2012-11-12 10:45:38 +01:00
Andreas Steffen 742722e2f5 updated strongswan.conf man page 2012-11-12 10:45:38 +01:00
Andreas Steffen 3de9a31a49 centralized processing of assessment information 2012-11-12 10:45:38 +01:00
Andreas Steffen eda87d1a95 define TSS_TROUSERS compile option 2012-11-11 00:27:55 +01:00
Andreas Steffen af83700f88 implemented get_remediation_instructions() 2012-11-10 23:47:06 +01:00
Andreas Steffen b217e16f7e removed debug output 2012-11-10 21:37:33 +01:00
Andreas Steffen db15c6dac1 implement a preferred language enumerator 2012-11-10 21:35:46 +01:00
Andreas Steffen 4ccc4fd97c abort if fatal error is received from peer 2012-11-09 16:07:03 +01:00
Andreas Steffen 84f9b9f9bd corrected debug class 2012-11-09 15:50:10 +01:00
Andreas Steffen 236eb5851a added missing method assignments 2012-11-09 15:08:14 +01:00
Andreas Steffen d425f30e80 added missing --update parameter 2012-11-08 11:02:17 +01:00
Andreas Steffen da72eb388a created packman daily update script 2012-11-08 09:19:10 +01:00
Andreas Steffen b18b924b2f pacman supports differential security updates 2012-11-07 22:20:39 +01:00
Andreas Steffen 8cae17431a fixed Android product string 2012-11-07 14:57:41 +01:00
Andreas Steffen f77d425da3 accumulate package counts over multiple attributes 2012-11-07 14:20:47 +01:00
Andreas Steffen 538c13fe5c use OS type on IMV side 2012-11-07 13:40:52 +01:00
Andreas Steffen dad76a5828 fixed debug output 2012-11-05 21:56:49 +01:00
Andreas Steffen d78c869cff eliminate deinstalled packages 2012-11-05 21:40:19 +01:00
Andreas Steffen a08fc61ea3 check installed packages in OS database 2012-11-05 21:00:56 +01:00
Andreas Steffen 68cf283cd3 Define and use an OS enumeration type 2012-11-05 14:48:43 +01:00
Andreas Steffen 7b0330d285 check if assessment has already been done 2012-11-05 14:46:50 +01:00
Andreas Steffen 5e8987689a compute the optimum Installed Packages attribute size 2012-11-05 12:13:13 +01:00
Andreas Steffen 6ac6dbd3fb Added ITA Start/Stop Angel attributes to split bulk data into multiple attributes 2012-11-05 10:24:12 +01:00
Andreas Steffen 3b057d66cf enumerate over installed Debian/Ubuntu packages 2012-11-04 23:54:36 +01:00
Andreas Steffen 9d41e0f362 debug output in lower case letters 2012-11-04 23:52:34 +01:00
Andreas Steffen 3867eaab89 added second index 2012-11-04 23:51:04 +01:00
Andreas Steffen 9074186345 add generation time to package versions 2012-11-04 18:55:37 +01:00