Andreas Steffen
755f2419a5
debug cosmetics
2010-12-10 11:55:02 +01:00
Martin Willi
cf5866b9c0
Renamed purgex509/crl to purgecerts/crls to be consistent with list commands
2010-12-10 11:21:55 +01:00
Andreas Steffen
7e7efa647e
implemented handling of received PB-TNC messages
2010-12-10 11:16:57 +01:00
Martin Willi
6aa144ddb7
Added options to flush CRLs/X509 certs from the cert cache
2010-12-10 09:45:22 +01:00
Andreas Steffen
68fada37b1
refactored PB-TNC state machine in receive direction
2010-12-09 23:38:38 +01:00
Andreas Steffen
7382a639fb
refactored PB-TNC state machine in send direction
2010-12-09 23:18:55 +01:00
Andreas Steffen
4333c48a1b
pb_tnc_batch_t class implements parsing and building of PB-TNC batches
2010-12-09 21:33:12 +01:00
Andreas Steffen
2f942ba67d
fixed memory corruption
2010-12-08 12:15:53 +01:00
Martin Willi
86993d6b90
Never register IKE_SA during checkout_new, as rekeying keeps it checked out
2010-12-07 16:30:38 +01:00
Andreas Steffen
4332cd7f95
added newline
2010-12-07 09:02:55 +01:00
Andreas Steffen
faccd69068
re-introduced comment
2010-12-07 09:01:28 +01:00
Andreas Steffen
a42aaed64f
Migrated stroke_control_t to INIT/METHOD macros
2010-12-07 08:58:57 +01:00
Andreas Steffen
d31aec9fa7
Migrated stroke_plugin_t to INIT/METHOD macros
2010-12-07 08:01:56 +01:00
Thomas Egerer
76ce213c43
Guarantee entry->other is set when calling put_connected_peers
...
Given the original intent of entry->host, the check for DoS attacks, it
can happen that this value remains NULL when an entry is created. This
is particularly awkward if put_connected_peers is called to check if a
connection to a given peer already exists, since it takes the address
family into consideration (git commit b74219d0) which is gleaned from
entry->host.
This patch guarantees that entry->other is a clone of host before
put_connected_peers is called.
2010-12-06 10:56:57 +01:00
Andreas Steffen
93cbe45c09
stupid typo
2010-12-05 15:48:22 +01:00
Andreas Steffen
fba18c5105
cosmetics
2010-12-05 15:23:18 +01:00
Andreas Steffen
02f08ef910
cosmetics
2010-12-05 15:16:15 +01:00
Andreas Steffen
a6bf8e9118
added parsing checks
2010-12-05 15:01:01 +01:00
Andreas Steffen
2da636fd9b
support of reqid field in SQL database
2010-12-05 11:21:40 +01:00
Andreas Steffen
e150442bed
fixed pb_reason_string_message_t class
2010-12-05 11:20:18 +01:00
Tobias Brunner
503e1c558e
CDP enumerator added to SQL plugin.
2010-12-03 18:07:17 +01:00
Tobias Brunner
37bc379951
Tables added for CAs and CDPs.
2010-12-03 18:07:17 +01:00
Tobias Brunner
ece5d52e38
Migrated sql_cred_t to INIT/METHOD macros.
2010-12-03 18:07:17 +01:00
Tobias Brunner
5b2d9f24f5
Refactored stroke_cred_t to use mem_cred_t.
2010-12-03 18:00:00 +01:00
Tobias Brunner
413d8fe0e3
Avoid calling globfree twice on failure.
2010-12-03 17:38:36 +01:00
Andreas Steffen
375dacca8e
removed superfluous whitespace
2010-12-03 11:26:13 +01:00
Sansar Choinyambuu
e1ee0e20f7
PB-TNC messages implemented
2010-12-03 10:23:04 +01:00
Andreas Steffen
a072c34a63
check for malformed IKE and ESP proposals
2010-12-01 09:50:30 +01:00
Andreas Steffen
e79567d07e
Migrated sql_plugin_t to INIT/METHOD macros
2010-11-30 23:31:24 +01:00
Andreas Steffen
e7f586131e
Migrated sql_config_t to INIT/METHOD macros
2010-11-30 23:27:51 +01:00
Andreas Steffen
cbdcca7fd7
renamed algorithm to proposal
2010-11-30 17:38:49 +01:00
Andreas Steffen
f4e5acef3a
store IKE and ESP proposals in SQL database
2010-11-30 17:03:21 +01:00
Andreas Steffen
c616d84c3f
start and route connections defined in an SQL database via start_action field and ipsec up %startall command
2010-11-28 11:57:49 +01:00
Andreas Steffen
a9ac8c51ea
Migrated stroke_config_t to INIT/METHOD macros
2010-11-27 01:12:58 +01:00
Andreas Steffen
a5ffb559d2
Migrated stroke_cat_t to INIT/METHOD macros
2010-11-27 00:49:15 +01:00
Andreas Steffen
31f6f1513d
Migrated child_cfg_t to INIT/METHOD macros
2010-11-26 16:32:15 +01:00
Andreas Steffen
03a6719f46
Merge branch 'master' of git.strongswan.org:strongswan
2010-11-26 14:07:18 +01:00
Andreas Steffen
6b7897728a
support PEM-encoded certificates stored in SQL databases
2010-11-26 13:47:37 +01:00
Andreas Steffen
efc1c86e21
Migrated backend_manager_t to INIT/METHOD macros
2010-11-25 22:43:19 +01:00
Andreas Steffen
3fe656fdc9
fixed a couple of bugs in the prototype
2010-11-23 16:33:23 +01:00
Andreas Steffen
8d6366e87a
set PB_MSG_PA message type
2010-11-23 16:32:09 +01:00
Andreas Steffen
7a39b9ebf8
prototype implementation using the pb_tnc_message_t class
2010-11-23 14:44:16 +01:00
Andreas Steffen
7828bd1bd6
defined a pb_tnc_message_t interface
2010-11-23 14:27:57 +01:00
Andreas Steffen
6ee5c912e7
implemented create_reason_enumerator() function
2010-11-19 17:23:06 +01:00
Andreas Steffen
8a5c7db860
implemented request_handshake_retry() function
2010-11-19 08:52:18 +01:00
Andreas Steffen
a423a96140
added IMC and IMV IDs as arguments to send_message()
2010-11-17 00:04:10 +01:00
Andreas Steffen
66c30fa244
get_attribute() and set_attribute() are not allowed to use TNC_CONNECTIONID_ANY
2010-11-16 22:43:48 +01:00
Andreas Steffen
04b132e088
initialize chunks and add debug output
2010-11-16 22:28:10 +01:00
Andreas Steffen
c957aaa411
load IMCs and IMVs with RTLD_LAZY
2010-11-16 22:14:20 +01:00
Andreas Steffen
ad7e3b1d1e
fixed memory leak
2010-11-16 21:37:38 +01:00
Andreas Steffen