denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
13,509 Commits 1 Branch 0 Tags
8b812065f04171944b8fc1e86775b6c9df8d23ff
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 8b812065f0 Support of multiple directed segmentation contracts 2014-10-11 14:50:08 +02:00
Andreas Steffen ab99939628 unit-tests: Updated Makefile 2014-10-11 14:50:08 +02:00
Andreas Steffen a05ca71d07 unit-tests: Added test for seg_contract_manager 2014-10-11 14:50:08 +02:00
Andreas Steffen a5e6a479d4 Added KVM config for 3.16 and 3.17 kernels 2014-10-11 14:50:08 +02:00
Andreas Steffen 4af020be37 Updated build-database.sh script to 3.13.0-37 kernel 2014-10-11 11:40:43 +02:00
Andreas Steffen f83215bbdb version bump to 5.2.1rc1 2014-10-06 23:14:13 +02:00
Andreas Steffen 100c1a4bf1 testing: Updated certificates and keys in sql scenarios 2014-10-06 09:42:58 +02:00
Andreas Steffen e9a93cb772 Added IF-M Segmentation support to NEWS 2014-10-05 23:00:19 +02:00
Andreas Steffen b95b664644 Incremental parsing fixes 2014-10-05 22:52:59 +02:00
Andreas Steffen 73af3a1b04 Updated revoked certificate in ikev2/ocsp-revoked scenario 2014-10-05 21:33:35 +02:00
Andreas Steffen 006518e859 The critical-extension scenarios need the old private keys 2014-10-05 20:58:03 +02:00
Andreas Steffen 1bea00651d Added add_segment() method to TCG/PTS attributes 2014-10-05 19:43:27 +02:00
Andreas Steffen 01be87d086 Added add_segment() method to TCG/SEG attributes 2014-10-05 19:14:38 +02:00
Andreas Steffen a5dfe7a29a OS IMV proposes IF-M segmentation contract 
The OS IMV sends a TCG IF-M Segmentation contract request.
All IETF standard attributes support segmentation. Additionally
the IETF Installed Packages standard attributes supports
incremental processing while segments are received.
 2014-10-05 18:43:55 +02:00
Andreas Steffen fc47211740 SWID IMC proposes IF-M segmentation contracts 2014-10-05 18:43:55 +02:00
Andreas Steffen 30774ee5d6 unit-tests: Updated libimcv test suite 2014-10-05 18:43:54 +02:00
Andreas Steffen 9a515a8856 Added add_segment() method to IETF attributes 2014-10-05 18:43:54 +02:00
Andreas Steffen 97ec4cb055 Added add_segment() method to ITA attributes 2014-10-05 18:43:54 +02:00
Andreas Steffen 903a427008 Implemented incremental processing of SWID tag [ID] inventory attribute 2014-10-05 18:43:54 +02:00
Andreas Steffen eba0cbcee3 Implemented add_segment method for PA-TNC attributes 2014-10-05 12:55:38 +02:00
Andreas Steffen e77df5a1f6 Added total length parameter in PA-TNC attribute constructor 2014-10-05 12:55:38 +02:00
Andreas Steffen ebfd8278f9 Assignment of flags starts with bit 0 2014-10-05 12:55:38 +02:00
Andreas Steffen 95e1524a64 Register the reception of the AIK attribute 2014-10-05 12:55:38 +02:00
Andreas Steffen 4f5b435fe9 Unit tests for libimcv 2014-10-05 12:55:38 +02:00
Andreas Steffen e23cad3564 Compacted chunk creation in ita_attr_command constructor 2014-10-05 12:55:38 +02:00
Andreas Steffen d6fb2cc6e3 Merged libpts into libimcv 2014-10-05 12:55:37 +02:00
Andreas Steffen c4d0987609 Added out message queue for imv_msg receive method 2014-10-05 12:55:37 +02:00
Andreas Steffen e911ac9a5f Implemented IF-M segmentation 2014-10-05 12:55:37 +02:00
Andreas Steffen 89d12654b3 Added request variable to get_info_string method 2014-10-03 22:25:09 +02:00
Andreas Steffen f50968976b Implemented IF-M segmentation contracts 2014-10-03 22:25:09 +02:00
Andreas Steffen 38b5f527e2 Allow to treat specified Attribute-Type-Not-Supported errors as non-fatal 2014-10-03 22:25:09 +02:00
Andreas Steffen 51da5b920b Generated new test certificates 2014-08-28 21:34:40 +02:00
Andreas Steffen eafe8795ca Added Debian 7.6 to IMV database 2014-08-06 08:04:42 +02:00
Andreas Steffen 78ec8c6085 unused os_info_t object removed 2014-08-06 07:55:54 +02:00
Andreas Steffen bc14124147 Updated build-database.sh to 3.13.0-32-generic Ubuntu kernel 2014-08-06 07:54:57 +02:00
Andreas Steffen 13ec4cf2ad Version bump to 5.2.1dr1 2014-07-16 15:59:56 +02:00
Andreas Steffen 3b96147353 Determine type of unsupported PA-TNC attribute in error message 2014-07-16 15:57:15 +02:00
Andreas Steffen 924ed795af Replaced Tag File Path by Instance ID field 
This update reflects the latest changes in the TCG TNC
SWID Messages and Attributes for IF-M specification
 2014-07-16 15:57:15 +02:00
Andreas Steffen 4ccfc879b5 Updated URL to swidGenerator in recipe 2014-07-09 15:08:18 +02:00
Andreas Steffen af494268fb Version bump to 5.2.0 2014-07-08 15:24:31 +02:00
Andreas Steffen cac71ff00c Update KVM test framework to 3.15 guest kernel 2014-06-27 10:07:27 +02:00
Andreas Steffen 644fc4e1ff Added Android 4.4.4 to IMV database 2014-06-27 08:27:28 +02:00
Andreas Steffen d96328fbc4 Updated build-database.sh to 3.13.0-30-generic Ubuntu kernel 2014-06-26 11:09:25 +02:00
Andreas Steffen 75598e5053 Updated description of TNC scenarios concerning RFC 7171 PT-EAP support 2014-06-26 09:47:03 +02:00
Andreas Steffen 21aebe3781 Removed django.db from swid scenarios 2014-06-26 09:45:54 +02:00
Andreas Steffen d82aa931db Auxiliary swid_tagstats table boosts performance 2014-06-23 13:32:50 +02:00
Andreas Steffen d345f0b75d Added swanctl/net2net-route scenario 2014-06-18 14:57:33 +02:00
Andreas Steffen 3f5f0b8940 Added swanctl/net2net-start scenario 2014-06-18 14:35:59 +02:00
Andreas Steffen 4402bae77d Minor changes in swanctl scenarios 2014-06-18 14:35:36 +02:00
Andreas Steffen 927dff2366 The policy_started check is not needed any more 2014-06-18 14:01:02 +02:00
Andreas Steffen ed42874645 Added swanctl --list-pols and swanctl --stats do scenario log 2014-06-18 13:16:18 +02:00
Andreas Steffen b16e177e06 Version bump to 5.2.0rc1 2014-06-15 11:40:15 +02:00
Andreas Steffen 733037009f Mentioned first six swanctl scenarios in NEWS 2014-06-14 15:43:44 +02:00
Andreas Steffen 39d6469d76 Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenarios 2014-06-14 15:40:23 +02:00
Andreas Steffen 3eb22f1f00 Single-line --raw mode simplifies evaltest of swanctl scenarios 2014-06-14 15:40:23 +02:00
Andreas Steffen dacb75f5c0 Split swanctl --raw mode into single-line and --pretty mode 2014-06-14 15:40:22 +02:00
Andreas Steffen 12d618e280 Added swanctl/ip-pool-db scenario 2014-06-11 18:12:35 +02:00
Andreas Steffen cda2a1e4dc Updated strongTNC configuration 2014-06-11 18:12:34 +02:00
Andreas Steffen d643f2cf91 Added swanctl/ip-pool scenario 2014-06-10 16:48:16 +02:00
Andreas Steffen 3a9602d58b Allow multiple hash values in the file reference database 2014-06-10 16:48:15 +02:00
Andreas Steffen c621847395 Added swanctl/rw-cert scenario 2014-06-10 16:48:15 +02:00
Andreas Steffen 8fc0eae37b Added Android 4.3 and 4.4.3 to imv database 2014-06-10 16:19:00 +02:00
Andreas Steffen b09016377a Define default swanctl credentials in hosts directory 2014-06-10 16:19:00 +02:00
Andreas Steffen 6d092615e3 Added missing units (s = seconds) 2014-06-10 16:18:23 +02:00
Andreas Steffen 352fd7a94b Fixes in SWID entity support 2014-06-08 11:13:51 +02:00
Andreas Steffen 9d228ddb04 Version bump to 5.2.0dr6 2014-06-06 11:18:17 +02:00
Andreas Steffen e247acb8a9 Ubuntu 14.04 updated to 3.13.0-29 kernel 2014-06-06 11:18:17 +02:00
Andreas Steffen 438df3d696 Extended pt-tls-client PLUGINS list 2014-06-06 11:18:17 +02:00
Andreas Steffen b23c7d6a38 Updated REST API 2014-06-06 10:56:12 +02:00
Andreas Steffen 18ba2a3035 Fixed typo in strongswan.conf 2014-06-05 11:26:54 +02:00
Andreas Steffen 2721832a45 First swanctl scenario 2014-06-01 21:12:15 +02:00
Andreas Steffen 6048d773c7 Added SWID IMV REST API implementation to NEWS 2014-05-31 21:25:47 +02:00
Andreas Steffen 7a6d2f2bce Allow large lines output by swid_generator to be processed 2014-05-31 21:25:47 +02:00
Andreas Steffen 3d4818bf18 Make REST POST request timeout configurable 2014-05-31 21:25:47 +02:00
Andreas Steffen 2382d45b1c Test SWID REST API ins tnc/tnccs-20-pdp scenarios 2014-05-31 21:25:46 +02:00
Andreas Steffen 59db666094 Detect RADIUS packet retransmissions 2014-05-31 20:37:57 +02:00
Andreas Steffen bfd8f8c5fe Updated IMC/IMV entries in strongswan.conf man page 2014-05-31 20:37:57 +02:00
Andreas Steffen 2997077bae Migration from Debian 7.4 to 7.5 2014-05-31 20:37:57 +02:00
Andreas Steffen 9635a92187 Fixed swid_generator interface 2014-05-31 20:37:57 +02:00
Andreas Steffen a5ce2f0b23 Detect oversize SWID tags 2014-05-31 20:37:57 +02:00
Andreas Steffen ed27e0e7c7 max_attr_size is an uint32_t value 2014-05-31 20:37:57 +02:00
Andreas Steffen 13a87236c2 Update of Ubuntu 14.04 kernel 2014-05-31 20:37:57 +02:00
Andreas Steffen 543447cb6b Wait for the arrival of the TCPG_PTS_DH_NONCE_PARAMS_RESP 2014-05-31 20:37:57 +02:00
Andreas Steffen 3a726816a2 Increased maximum PT-TLS message size to 2MB 2014-05-31 20:37:56 +02:00
Andreas Steffen 096c726b5b log SWID tags and tag IDs on debug level 3 2014-05-31 20:37:56 +02:00
Andreas Steffen 4dda2984e3 Automatic determination of maximum PB-TNC batch and PA-TNC message size 2014-05-31 20:37:56 +02:00
Andreas Steffen 75498e6b33 Completed the command line options of the pt-tls-client 2014-05-31 20:37:56 +02:00
Andreas Steffen 34cd3e102e Split TCG SWID Request attribute into chunks if needed 2014-05-31 20:37:56 +02:00
Andreas Steffen bee82725eb Check for libjson 2014-05-31 20:37:56 +02:00
Andreas Steffen 32cb700cd0 Added Debian 7.5 product and all Debian armv6l products 2014-05-31 20:37:56 +02:00
Andreas Steffen 7b05b0bc28 Fixed typo in tables.sql 2014-05-31 20:37:56 +02:00
Andreas Steffen a123f470f0 Additional index to improve performance 2014-05-31 20:37:56 +02:00
Andreas Steffen b7679e90e3 Support targeted retrieval of SWID tags 2014-05-31 20:37:56 +02:00
Andreas Steffen 344c9f91f3 Implemented SWID REST API 2014-05-31 20:37:55 +02:00
Andreas Steffen 8c26db8c62 Set entity_name to strongSwan Project 2014-05-31 20:37:55 +02:00
Andreas Steffen 6b6b857cb6 Updated strongSwan SWID Tag from ISO 2009 to 2014 format 2014-05-31 20:37:55 +02:00
Andreas Steffen e2c9f6ce04 Version bump to 5.2.0dr5 2014-05-31 20:37:26 +02:00
Andreas Steffen 58c639e584 Some more files to measure 2014-05-21 14:00:31 +02:00
Andreas Steffen ba6c27f063 Added all SWID tables and example regids 2014-05-21 14:00:31 +02:00
Andreas Steffen 0f000cdd6c Minor changes in the test environment 2014-05-15 21:30:42 +02:00