Andreas Steffen
a96238a0d0
testing: Converted ipv6/rw-ikev1 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
8215681a4a
testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
04b79bc98c
testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
fd3f6871c9
testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
f57ca13e28
testing: Converted ipv6/transport-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
4ae1f7c0e3
testing: Converted ipv6/transport-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
7812b6e6cf
testing: Converted ipv6/net2net-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
e94db2b4ad
testing: Converted ipv6/net2net-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
47ec3326e7
testing: Converted ipv6/host2host-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
087b027f88
testing: Converted ipv6/host2host-ikev1 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
0a6f8644ef
testing: Removed libipsec/rw-suite-b
2017-11-10 11:49:39 +01:00
Andreas Steffen
9375c9c9db
testing: Converted libipsec/net2net-null to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
86d1b7a14d
testing: Converted libipsec/net2net-cert-ipv6 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
c3b8778fc9
testing: Converted libipsec/net2net-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
de42a67b79
testing: Converted libipsec/net2net-3des to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
6922d5e56a
testing: Converted libipsec/host2host-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
3659fda1a5
testing: Converted gcrypt-ikev2 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
b46deb8107
testing: Converted gcrypt-ikev1 to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
88a950d915
testing: Converted af-alg to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
67a97c18ae
testing: Enable systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
804784cc1c
testing: Updated some descriptions
2017-11-10 11:49:38 +01:00
Andreas Steffen
0d63255513
libtpmtss: Added missing argument in hasher_from_signature_scheme()
2017-11-10 11:47:27 +01:00
Andreas Steffen
7f86b0f639
libcharon: Added Cisco FlexVPN Supported VID
2017-10-27 20:14:57 +02:00
Andreas Steffen
7dd29ab4ed
libimcv: Renamed SW Request to SWIMA Request
2017-09-27 10:01:56 +02:00
Andreas Steffen
a9fb529b84
Version bump to 5.6.1dr3
2017-09-26 22:43:38 +02:00
Andreas Steffen
be7020dace
SWIMA attribute name changes
...
draft-ietf-sacm-nea-swima-patnc-01 changes some SWIMA attribute
names.
2017-09-26 20:35:39 +02:00
Andreas Steffen
c80cec2d5e
Version bump to 5.6.1dr2
2017-09-13 16:56:45 +02:00
Andreas Steffen
8aad7ffb11
sec-updater: Import SWID tags of updated packages
...
sec-updater downloads the deb package files from security updates from
a given linux repository and uses the swid_generator command to
derive a SWID tag. The SWID tag is then imported into strongTNC
using the manage.py importswid command.
2017-09-09 20:23:19 +02:00
Andreas Steffen
33a729fac2
libimcv: Corrected caption
2017-09-09 13:10:45 +02:00
Andreas Steffen
165d28174d
pt-tls-client: Introduced --options as a synonym for --optionsfrom
2017-09-09 10:31:02 +02:00
Andreas Steffen
94bdd463d8
sec-updater: Write to log only if at least one update is found.
2017-09-07 14:54:41 +02:00
Andreas Steffen
d43b84dcb4
Version bump to 5.6.1dr1
2017-09-01 13:49:09 +02:00
Andreas Steffen
fc373b64a6
imv-os: Updated security update evaluation
2017-09-01 12:42:24 +02:00
Andreas Steffen
7b75c18696
libimcv: Updated database scheme
2017-09-01 11:19:40 +02:00
Andreas Steffen
b84817375d
sec-updater: Checks for security updates
...
sec-updater checks for security updates and backports in Debian/
Ubuntu repositories and sets the security flags in the strongTNC
policy database accordingly.
2017-09-01 11:19:40 +02:00
Andreas Steffen
076aac7069
imv-attestation: Fixed file hash measurements
...
The introduction of file versions broke file hash measurements.
This has been fixed by using a generic product versions having an
empty package name.
2017-09-01 10:51:15 +02:00
Andreas Steffen
d2a89e9407
sw-collector.8: Some cleanups
2017-08-25 11:28:06 +02:00
Andreas Steffen
9cc37212c6
Version bump to 5.6.0
2017-08-14 10:07:47 +02:00
Andreas Steffen
d35183e33e
Version bump to 5.6.0rc2
2017-08-09 14:23:28 +02:00
Andreas Steffen
e658fd475a
sw-collector: Moved info class to libimcv
2017-08-09 13:28:00 +02:00
Andreas Steffen
285c077d2c
Version bump to 5.6.0rc1
2017-08-07 18:25:52 +02:00
Andreas Steffen
3295b35c6a
imv-database: Improve performance by creating file_hashes index
2017-08-07 17:43:54 +02:00
Andreas Steffen
f0ae8c1761
Version bump to 5.6.0dr4
2017-08-04 21:15:45 +02:00
Andreas Steffen
808be1d57f
testing: Added tnc/tnccs-20-ev-pt-tls scenario
2017-08-04 19:15:51 +02:00
Andreas Steffen
88501a64ca
swid-gen: Share SWID generator between sw-collector, imc-swima and imc-swid
2017-08-04 19:15:26 +02:00
Andreas Steffen
073c179a88
sw-collector: Added --full option
2017-08-03 09:02:54 +02:00
Andreas Steffen
bea3f5d07f
sw-collector: Added --installed/removed options
2017-08-03 09:02:54 +02:00
Andreas Steffen
f35fbb2b5f
sw-collector: sw-collector.first_file setting retrieves creation date from file stats
2017-07-26 19:51:21 +02:00
Andreas Steffen
05f8e64d79
Version bump to 5.6.0dr3
2017-07-18 20:53:35 +02:00
Andreas Steffen
a3b3538630
testing: Fixed the path of pt-tls-client
2017-07-18 20:43:03 +02:00
Andreas Steffen
a9383c2b46
checksum: Compile sw-collector before checksum
2017-07-18 20:02:21 +02:00
Andreas Steffen
8362378a15
checksum: Added pt-tls-client and sw-collector
2017-07-18 07:25:46 +02:00
Andreas Steffen
964bf73237
sw-collector: Moved to its own directory and added man page
2017-07-18 07:25:45 +02:00
Andreas Steffen
34cade8b84
pt-tls-client: Added man page
2017-07-16 15:37:03 +02:00
Andreas Steffen
693705c74e
Version bump to 5.6.0dr2
2017-07-13 14:24:32 +02:00
Andreas Steffen
cab4cc3a10
sw-collector: strip arch suffix from package names
2017-07-13 12:03:27 +02:00
Andreas Steffen
5b1dbc3a8d
sw-collector: Check for epoch-less Debian package versions
2017-07-12 19:12:22 +02:00
Andreas Steffen
eab650d62f
libtpmtss: Support of Intel TABRMD interface
2017-07-12 17:07:34 +02:00
Andreas Steffen
991703007a
Version bump to 5.6.0dr1
...
This major version includes the new SWIMA IMC/IMV pair which
implements the "draft-ietf-sacm-nea-swima-patnc" Internet Draft.
Full compliance to the ISO 19770-2:2015 SWID tag standard has
been achieved.
2017-07-08 23:21:56 +02:00
Andreas Steffen
803ac56626
Merge branch 'swima'
2017-07-08 23:20:32 +02:00
Andreas Steffen
23e0d6dca3
testing: Added tnc/tnccs-20-nea-pt-tls scenario
2017-07-08 23:19:51 +02:00
Andreas Steffen
facf1c76ea
testing: Adaptation to ISO 19770-2:2015 SWID standard
2017-07-08 23:19:51 +02:00
Andreas Steffen
3bf8392d36
pt-tls-client: Support for TPM keyids
2017-07-08 23:19:51 +02:00
Andreas Steffen
49d56e1b39
imv-swima: Implemented SW event processing
2017-07-08 23:19:51 +02:00
Andreas Steffen
74aa1626d2
sw-collector: Query central collector database
2017-07-08 23:19:51 +02:00
Andreas Steffen
8ba6bf511e
libimcv: Moved REST API from imv_swid and imv_swima to libimcv
2017-07-08 23:19:51 +02:00
Andreas Steffen
7e796bba67
swidtag: strongSwan swidtag file with double underscores
2017-07-08 23:19:51 +02:00
Andreas Steffen
032a5767ad
sw-collector: Collects endpoint software events
2017-07-08 23:19:51 +02:00
Andreas Steffen
3a7c594c14
imv-swima: Created SWIMA IMV plugin
2017-07-08 23:19:51 +02:00
Andreas Steffen
2821c0f740
imc-swima: Created SWIMA IMC plugin
2017-07-08 23:19:51 +02:00
Andreas Steffen
bf22470623
unit-tests: Added IETF SWIMA PA-TNC attribute tests
2017-07-08 23:19:51 +02:00
Andreas Steffen
84c0366bd3
libimcv: Implemented IETF SW PA-TNC attributes
2017-07-08 23:19:51 +02:00
Andreas Steffen
bb87af2a73
libimcv: Fixed memory leak
2017-07-08 23:19:51 +02:00
Andreas Steffen
37205b05e6
libimcv: Corrected order of subscription flags
2017-07-08 23:19:51 +02:00
Andreas Steffen
0cc0b53b2f
libimcv: Added IETF Software PA-TNC attributes
2017-07-08 23:19:51 +02:00
Andreas Steffen
8c4c824706
libtncif: Added IETF Software PA-TNC message subtype
2017-07-08 23:19:51 +02:00
Andreas Steffen
6795de0408
libimcv: SWID tag generation and discovery
2017-07-08 23:19:51 +02:00
Andreas Steffen
60da0153ee
libimcv: Update database to ISO 19770-2:2015 SWID standard
2017-07-08 23:19:51 +02:00
Andreas Steffen
88b941939f
testing: Fixed typo in openssl-ikev2/rw-suite-b-192 scenario
2017-07-08 23:19:18 +02:00
Andreas Steffen
65ce7ec0c4
Version bump to 5.5.3
2017-05-29 12:02:48 +02:00
Andreas Steffen
38a8ecadb7
x509: nameConstraints sequence does not require a loop
...
Fixes: CVE-2017-9023
2017-05-29 11:05:04 +02:00
Andreas Steffen
f2f9edbbc0
unit-tests: Updated asn1-parser tests
2017-05-29 11:05:04 +02:00
Andreas Steffen
407fcca200
asn1-parser: Fix CHOICE parsing
...
Fixes: CVE-2017-9023
2017-05-29 11:05:04 +02:00
Andreas Steffen
89f05ed5a9
imv-swid: Fixed memory leak in http REST interface
2017-05-29 10:59:22 +02:00
Andreas Steffen
29e1c58643
leak-detective: Whitelisted memory leaks in FHH IMCs and IMVs
2017-05-29 10:59:04 +02:00
Andreas Steffen
c82be739bc
imv-test: Fixed memory leak in server retry use case
2017-05-29 10:58:33 +02:00
Andreas Steffen
fca4e70bd3
libtnccs: Fixed memory leak of global variables in libxml2
2017-05-29 10:57:34 +02:00
Andreas Steffen
2d5a79bf59
testing: Added swanctl/rw-eap-md5-id-rsa scenario
2017-05-26 14:36:25 +02:00
Andreas Steffen
7272fa0c8d
README: Converted to swanctl configuration scheme
2017-05-26 14:36:25 +02:00
Andreas Steffen
a5f7a4c790
Version bump to 5.3.3dr2
2017-05-08 22:38:12 +02:00
Andreas Steffen
b0dcf33f0f
x509: Evaluate return codes of parsing functions
2017-05-08 16:44:25 +02:00
Andreas Steffen
d38d1fcd68
Version bump to 5.5.3dr1
2017-04-26 21:29:42 +02:00
Andreas Steffen
25217488d2
testing: Created swanctl/rw-eap-aka-sql-rsa scenario
2017-04-26 20:38:23 +02:00
Andreas Steffen
64f9fa9e9f
testing: Created ikev2/rw-eap-aka-sql-rsa scenario
...
This test scenario tests the eap-simaka-sql plugin.
2017-04-26 20:38:23 +02:00
Andreas Steffen
2fad3460fa
eap-simaka-sql: Fixed database column from use to used
2017-04-26 20:38:00 +02:00
Andreas Steffen
bb2ba9f15d
Version bump to 5.5.2
2017-03-27 16:57:03 +02:00
Andreas Steffen
c5ccf933ec
testing: List BLIS certs in swanctl/rw-newhope-bliss scenario
2017-03-27 16:56:50 +02:00
Andreas Steffen
7c672e6118
Version bump to 5.2.2rc1
2017-03-21 09:09:43 +01:00
Andreas Steffen
1732ca7b5b
testing: Updated OCSP certificate for carol
2017-03-21 09:09:06 +01:00
Andreas Steffen
efc1b98461
Allow x25519 as an alias of the curve25519 KE algorithm
2017-03-20 21:18:00 +01:00
Andreas Steffen