 Andreas Steffen
|
aff81d3bac
|
updated strongswan.conf
|
2010-10-11 06:12:26 +02:00 |
|
|
Andreas Steffen
|
8efd583a64
|
explicit ikev1 key exchange for ikev1/esp-alg-null scenario
|
2010-10-09 22:07:51 +02:00 |
|
|
Andreas Steffen
|
1e6c92789e
|
fixed typo
|
2010-10-09 22:05:26 +02:00 |
|
|
Andreas Steffen
|
0bc5547d0c
|
*** HISTORICAL MOMENT: IKEv2 becomes the default! ***
|
2010-10-09 20:46:55 +02:00 |
|
|
Andreas Steffen
|
74e14ed631
|
define explicit IKEv1 key exchange mode II
|
2010-10-09 20:04:00 +02:00 |
|
|
Andreas Steffen
|
ed08f7ce83
|
use DBG_TNC for TNC debugging output
|
2010-10-09 16:01:19 +02:00 |
|
|
Andreas Steffen
|
db24b600fb
|
changed filter attribute from access to allow
|
2010-10-09 01:01:19 +02:00 |
|
|
Andreas Steffen
|
a1afa8d810
|
added ikev2/rw-eap-tnc scenario
|
2010-10-09 00:59:31 +02:00 |
|
|
Andreas Steffen
|
3cb3f85dfc
|
TNCCS debug cosmetics
|
2010-10-09 00:58:12 +02:00 |
|
|
Andreas Steffen
|
e9ba435fe3
|
revert to standard TNCC/TNCS Initialization function
|
2010-10-09 00:35:45 +02:00 |
|
|
Andreas Steffen
|
bfba1fdc92
|
implemented TNC isolation via group memberships
|
2010-10-09 00:34:53 +02:00 |
|
|
Andreas Steffen
|
db2f66c2df
|
implemented a makeshift non-scalable send buffer
|
2010-10-08 22:24:30 +02:00 |
|
|
Andreas Steffen
|
55960a170f
|
imc/imv cosmetics
|
2010-10-08 06:40:03 +02:00 |
|
|
Andreas Steffen
|
d1b94592a6
|
fixed notation
|
2010-10-07 23:34:37 +02:00 |
|
|
Andreas Steffen
|
8dcc56dcc0
|
created tnc-imc and tnc-imv plugins
|
2010-10-07 23:31:23 +02:00 |
|
|
Andreas Steffen
|
04d000210b
|
deactivate start_phase2_tnc flag after start
|
2010-10-07 15:42:00 +02:00 |
|
|
Andreas Steffen
|
888455587b
|
added server side support for EAP-TNC
|
2010-10-07 15:02:51 +02:00 |
|
|
Andreas Steffen
|
99dfc3c295
|
added --debug-tls to charon usage() function
|
2010-10-07 09:34:56 +02:00 |
|
|
Andreas Steffen
|
84babfb895
|
define explicit IKEv1 key exchange mode
|
2010-10-07 07:31:44 +02:00 |
|
|
Andreas Steffen
|
9b201cf859
|
host venus is used in ikev2/rw-eap-tnc-radius scenario
|
2010-10-06 10:38:18 +02:00 |
|
|
Andreas Steffen
|
541666b89f
|
added ikev2/rw-eap-tnc-radius-block scenario
|
2010-10-06 10:32:50 +02:00 |
|
|
Andreas Steffen
|
68de7267e1
|
added tnccs-11 plugin options to strongswan.conf
|
2010-10-06 07:53:50 +02:00 |
|
|
Andreas Steffen
|
9b04378ece
|
version bump to 4.5.0dr5
|
2010-10-06 07:07:14 +02:00 |
|
|
Andreas Steffen
|
bb43f25ad3
|
configure tnc_config path and preferred_language via strongswan.conf
|
2010-10-05 22:09:07 +02:00 |
|
|
Andreas Steffen
|
6d0e9cf046
|
created hull for TNCCS 2.0 plugin
|
2010-10-05 21:15:24 +02:00 |
|
|
Andreas Steffen
|
a1edf4d33e
|
use group membership to implement access/isolate redirection in filter-based TNC scenario
|
2010-10-05 20:40:36 +02:00 |
|
|
Andreas Steffen
|
48e16e0ae1
|
final version of ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 20:38:34 +02:00 |
|
|
Andreas Steffen
|
9ffa3f71f2
|
fixed typo in image path
|
2010-10-05 09:09:58 +02:00 |
|
|
Andreas Steffen
|
b540d19133
|
moved CHILD_SA selection out of attribute loop
|
2010-10-05 08:02:07 +02:00 |
|
|
Andreas Steffen
|
28b23fef11
|
receive name of preferred CHILD_SA via RADIUS Filter-Id attribute
|
2010-10-05 07:58:07 +02:00 |
|
|
Andreas Steffen
|
e7104a6ec9
|
updated ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 07:56:57 +02:00 |
|
|
Andreas Steffen
|
0cfdbaff2c
|
set EAP-TTLS/TNC version also in acknowledgement packets
|
2010-10-04 14:39:49 +02:00 |
|
|
Andreas Steffen
|
30f14b7066
|
added configuration files for dummyimc.so IMC
|
2010-10-01 00:14:44 +02:00 |
|
|
Andreas Steffen
|
ea893a5de2
|
The TNC@FHH TNC Serve does not like symbolic links
|
2010-09-30 23:35:24 +02:00 |
|
|
Andreas Steffen
|
a00a43e0f6
|
print XML as plaintext and process recieved TNCCS Batch
|
2010-09-30 23:34:00 +02:00 |
|
|
Andreas Steffen
|
cae4668ffb
|
added tnc_config files to TNC scenario
|
2010-09-30 12:42:18 +02:00 |
|
|
Andreas Steffen
|
f685b3aca0
|
started use of libtnc library
|
2010-09-29 23:24:59 +02:00 |
|
|
Andreas Steffen
|
3c354b6d11
|
NOTIFY error message types include 16383
|
2010-09-29 19:01:36 +02:00 |
|
|
Andreas Steffen
|
3f84e2d68e
|
added NEWS for 4.5dr3
|
2010-09-29 07:14:52 +02:00 |
|
|
Andreas Steffen
|
062e8faee1
|
version bump to 4.5dr4
|
2010-09-29 07:14:33 +02:00 |
|
|
Andreas Steffen
|
440231e863
|
load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario
|
2010-09-28 23:52:59 +02:00 |
|
|
Andreas Steffen
|
4e8e74fcfa
|
moved TNCCS layer out of eap_tnc plugin
|
2010-09-28 23:34:04 +02:00 |
|
|
Andreas Steffen
|
280c8ea2f0
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 11:31:39 +02:00 |
|
|
Andreas Steffen
|
1e6cc07ee4
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:58:28 +02:00 |
|
|
Andreas Steffen
|
234aaf2df2
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:35:12 +02:00 |
|
|
Andreas Steffen
|
2b3124c76d
|
fixed release of virtual IP for XAUTH identities
|
2010-09-26 10:17:01 +02:00 |
|
|
Andreas Steffen
|
f054606586
|
include RFC 5998
|
2010-09-20 20:03:20 +02:00 |
|
|
Andreas Steffen
|
824a040284
|
the updated IKEv2 RFC 5996 has been released
|
2010-09-15 12:55:31 +02:00 |
|
|
Andreas Steffen
|
004de55235
|
added notify messages defined in RFC 5996
|
2010-09-15 12:48:58 +02:00 |
|
|
Andreas Steffen
|
80f86acccb
|
show validity of OCSP responses
|
2010-09-10 22:26:03 +02:00 |
|
|
Andreas Steffen
|
3c1debeb59
|
version bump to 4.5.0dr2
|
2010-09-10 07:37:28 +02:00 |
|
|
Andreas Steffen
|
f3051ebf53
|
fixed memory leak
|
2010-09-09 21:38:41 +02:00 |
|
|
Andreas Steffen
|
f85f0c2795
|
has_subject() now resolves ID_KEY_IDs
|
2010-09-09 17:15:46 +02:00 |
|
|
Andreas Steffen
|
939c4bf2e8
|
added ikev1/net2net-same-nets scenario
|
2010-09-09 13:37:30 +02:00 |
|
|
Andreas Steffen
|
3f58022679
|
debug output of inbound and outbound TNCCS batches
|
2010-09-09 11:15:08 +02:00 |
|
|
Andreas Steffen
|
20ad62026e
|
support non EAP-TTLS conformant RADIUS-type attribute segmentation
|
2010-09-09 11:15:08 +02:00 |
|
|
Andreas Steffen
|
3b7eb3a9f4
|
added explanatory comments
|
2010-09-09 08:57:13 +02:00 |
|
|
Andreas Steffen
|
48b8cbb206
|
send well-formed TNCCS-Batch
|
2010-09-08 13:44:34 +02:00 |
|
|
Andreas Steffen
|
de29e3a683
|
max max_message_count configurable and move it into tls_eap_t
|
2010-09-08 12:58:45 +02:00 |
|
|
Andreas Steffen
|
99b0f633c2
|
handle TLS_PURPOSE_EAP_TNC
|
2010-09-08 12:58:45 +02:00 |
|
|
Andreas Steffen
|
51b385d44d
|
moved tls_t existance test into tls_eap_create() again
|
2010-09-08 11:09:11 +02:00 |
|
|
Andreas Steffen
|
d2b1d4378e
|
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
|
2010-09-08 11:01:53 +02:00 |
|
|
Andreas Steffen
|
91a0825c39
|
added non-standard SERPENT and TWOFISH support to kernel_netlink plugin
|
2010-09-08 07:22:31 +02:00 |
|
|
Andreas Steffen
|
2774826995
|
added openssl-ikev2/rw-eap-tls-only scenario
|
2010-09-07 17:14:32 +02:00 |
|
|
Andreas Steffen
|
52d4dc7fe2
|
added qcStatements OID
|
2010-09-07 11:17:51 +02:00 |
|
|
Andreas Steffen
|
1972102e1e
|
fixed typo
|
2010-09-03 13:30:40 +02:00 |
|
|
Andreas Steffen
|
6d71f4dcb9
|
updown script variable is called PLUTO_UDP_ENC
|
2010-09-03 12:58:10 +02:00 |
|
|
Andreas Steffen
|
6deeacd965
|
adapted debug options
|
2010-09-03 09:29:56 +02:00 |
|
|
Andreas Steffen
|
4cbe758cd4
|
adapted debug options
|
2010-09-03 09:27:16 +02:00 |
|
|
Andreas Steffen
|
c0071bde73
|
removed redundant debug output
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
25de08474b
|
version bump to 4.5.0dr2
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
5175adee66
|
optimized FreeRadius scenarios for debug output
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
0fb2980281
|
added ikev2/rw-eap-tnc-radius scenario
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
c0cecc0a0e
|
added radius init script mit increased debugging
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
f9cfb5c836
|
display configuration and log of FreeRadius servers
|
2010-09-02 22:19:37 +02:00 |
|
|
Andreas Steffen
|
4171cbd60b
|
adapted evaltest.dat to new RULE_OCSP_VALIDATION
|
2010-09-01 22:22:27 +02:00 |
|
|
Andreas Steffen
|
54cba78573
|
cosmetics in debug output
|
2010-09-01 14:30:14 +02:00 |
|
|
Andreas Steffen
|
873604dd7f
|
defined aaa_identity
|
2010-09-01 00:16:19 +02:00 |
|
|
Andreas Steffen
|
3a01908060
|
increase number of message due to large certificate payloads
|
2010-09-01 00:11:23 +02:00 |
|
|
Andreas Steffen
|
5fb1311b2a
|
clarified debug output
|
2010-08-31 23:22:39 +02:00 |
|
|
Andreas Steffen
|
c3024a0848
|
fixed typo
|
2010-08-31 21:42:14 +02:00 |
|
|
Andreas Steffen
|
68eb610d81
|
fixed typos
|
2010-08-30 16:22:33 +02:00 |
|
|
Andreas Steffen
|
6ade82d5b7
|
fixed copy-and-paste errors
|
2010-08-30 15:42:44 +02:00 |
|
|
Andreas Steffen
|
d93e2e5409
|
created an eap-tnc method hull
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
577893612f
|
for the time being assume a single request/response exchange for a given EAP method
|
2010-08-30 15:36:34 +02:00 |
|
|
Andreas Steffen
|
be63a48c36
|
defined EAP-TNC
|
2010-08-30 13:13:39 +02:00 |
|
|
Andreas Steffen
|
1bc8690f54
|
replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr
|
2010-08-29 21:52:08 +02:00 |
|
|
Andreas Steffen
|
6297dc390f
|
added ctr ccm and gcm plugins to ikev2/rw-cert scenario
|
2010-08-29 21:11:00 +02:00 |
|
|
Andreas Steffen
|
8eb74facfe
|
added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario
|
2010-08-29 21:09:25 +02:00 |
|
|
Andreas Steffen
|
6aa82ec280
|
added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario
|
2010-08-29 20:50:37 +02:00 |
|
|
Andreas Steffen
|
4f2a0bd839
|
replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm
|
2010-08-29 20:39:51 +02:00 |
|
|
Andreas Steffen
|
8318d88450
|
replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm
|
2010-08-29 20:24:12 +02:00 |
|
|
Andreas Steffen
|
897c7a72cf
|
Win7 might send up to 7k of certificate requests
|
2010-08-27 16:30:05 +02:00 |
|
|
Andreas Steffen
|
d9b85e28b9
|
removed tls_record_t definition
|
2010-08-24 19:19:13 +02:00 |
|
|
Andreas Steffen
|
421a529f88
|
added ikev2/rw-eap-tls-fragments scenario
|
2010-08-24 10:12:15 +02:00 |
|
|
Andreas Steffen
|
234aa8ee03
|
use correct network diagram
|
2010-08-24 10:09:58 +02:00 |
|
|
Andreas Steffen
|
79a5e391f8
|
support fragmentation in AVPs
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
c1a929daa7
|
removed some redundant debug output
|
2010-08-24 09:02:51 +02:00 |
|
|
Andreas Steffen
|
4776500055
|
added debug-tls comand line option
|
2010-08-23 17:51:40 +02:00 |
|
|
Andreas Steffen
|
56a1167b07
|
fixed build_cipher_suite_list()
|
2010-08-21 12:52:55 +02:00 |
|