Commit Graph
889 Commits
Author SHA1 Message Date
Andreas Steffen a8bbdb1f26 log entry for outbound hash-and-url 2011-08-24 06:05:44 +02:00
Martin Willi 3f455c739d Added a certexpire empty_string option 2011-08-22 18:42:33 +02:00
Martin Willi e64fdfa172 Implemented CSV export functionality in certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi d2aeb8fdfd Added generic cron style callback execution to certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi f4bdc6a3aa Cache trustchain lifetimes for export 2011-08-22 18:42:33 +02:00
Martin Willi b274f20a1d Register a certexpire listener collecting trustchain information 2011-08-22 18:42:33 +02:00
Martin Willi ba2201edf0 Added plugin stub of certexpire plugin 2011-08-22 18:42:32 +02:00
Martin Willi bff1025201 Don't rekey but delete CHILD_SA to resying against NATed Windows clients 2011-08-19 09:16:17 +02:00
Martin Willi f54bcf35af Sync newer IKE_SA condition/extension flags in ha plugin 2011-08-19 09:16:16 +02:00
Martin Willi 61cf9f512c Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute 2011-08-19 09:16:16 +02:00
Andreas Steffen f69f067958 fix double delete of old IKE_SA during reauthentication 2011-08-16 23:25:45 +02:00
Andreas Steffen a022f0863d increased message buffer to cope with NCP's innumerable UNITY Configuration Payloads 2011-08-16 23:22:20 +02:00
Andreas Steffen 65d5f6bc2b some more typos 2011-08-15 21:43:26 +02:00
Tobias Brunner 7ebf021d37 typos: initator->initiator, authenticaion->authentication. 2011-08-15 16:31:04 +02:00
Andreas Steffen 7e85bbda19 implement MAP client certificate authentication 2011-08-12 15:16:05 +02:00
Andreas Steffen c7b8512cc0 cosmetics 2011-08-12 13:18:49 +02:00
Andreas Steffen 537205fa9d implemented enforcement-report metadata 2011-08-12 13:16:02 +02:00
Andreas Steffen ae8a984b5a use EAP identity 2011-08-12 11:34:56 +02:00
Andreas Steffen d6a69acba4 defined mapping of IKEv2 identity types to IF-MAP identity types 2011-08-12 11:07:29 +02:00
Tobias Brunner 9af9c6772b If we close a duplicate SA, it is also no authentication failure. 2011-08-12 10:11:39 +02:00
Tobias Brunner d9eaecd373 If local authentication fails, it is not really a peer auth failure. 2011-08-12 10:04:02 +02:00
Tobias Brunner ccbe380377 Throw an alert if authentication of the peer fails (not only for initiator). 2011-08-12 10:04:02 +02:00
Tobias Brunner 7ab19d571d Throw an alert when the peer address cannot be resolved during initiation. 2011-08-12 09:59:27 +02:00
Tobias Brunner ff4b25f9b7 Throw an alert via bus_t when remote authentication fails. 2011-08-12 09:59:27 +02:00
Andreas Steffen d0a9173ec9 support capability metadata 2011-08-11 15:06:19 +02:00
Andreas Steffen 3205e3be7a define server_cert in strongswan.conf 2011-08-10 09:29:35 +02:00
Andreas Steffen dcae107b5a getting rid of axis2.html configuration 2011-08-10 09:29:34 +02:00
Andreas Steffen 9d690477c9 output PEP device addresses as metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen e37f1fd6b7 classify an EAP identity as a username 2011-08-10 09:29:34 +02:00
Andreas Steffen e016913725 refactoring of tnc-ifmap plugin 2011-08-10 09:29:34 +02:00
Andreas Steffen 5144463634 publish all IKE_SA metadata after tnc-ifmap plugin reload 2011-08-10 09:29:34 +02:00
Andreas Steffen 8c78772a05 implemented tnc-ifmap reload method 2011-08-10 09:29:34 +02:00
Andreas Steffen cc7cfbc16e moved ifmap code into tnc_ifmap_soap 2011-08-10 09:29:34 +02:00
Andreas Steffen 2c5e71b0c5 free device_name in destroy() 2011-08-10 09:29:34 +02:00
Andreas Steffen 1bae34e1a0 set device_name via strongswan.conf 2011-08-10 09:29:34 +02:00
Andreas Steffen d0236f9353 fixed delete filters 2011-08-10 09:29:34 +02:00
Andreas Steffen a3686ce33a check for publishReceived response 2011-08-10 09:29:34 +02:00
Andreas Steffen 046db4f242 added authenticated-by metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen 55c0c5956c first working publish of metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen 024d2522d5 added some XML syntax checking 2011-08-10 09:29:34 +02:00
Andreas Steffen d13db9f99d implemented purgePublisher command 2011-08-10 09:29:34 +02:00
Andreas Steffen 875f217625 fixed typo 2011-08-10 09:29:34 +02:00
Andreas Steffen 9d267f7111 combined newSession and newSessionResult 2011-08-10 09:29:33 +02:00
Andreas Steffen 7ab854adf9 newSession and endSession work 2011-08-10 09:29:33 +02:00
Andreas Steffen c77af76807 created tnc-ifmap plugin 2011-08-10 09:29:33 +02:00
Tobias Brunner 1d5aae4b53 Fixed syntax in MySQL script. 2011-08-08 16:15:28 +02:00
Martin Willi efee3ed80f Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name 2011-08-08 13:36:56 +02:00
Martin Willi 4c199e6f81 Add a non-clonig variant of eap_payload_create_data 2011-08-08 13:36:55 +02:00
Tobias Brunner 6b444c5934 Migrated peer_cfg_t to INIT/METHOD macros. 2011-08-03 15:17:34 +02:00
Martin Willi 61e13630f8 Show error code of Microsoft specific error notify 2011-08-03 12:01:15 +02:00