denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,360 Commits 1 Branch 0 Tags
fcc33c0cd476702010eb84d61895b4093ad373ad
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 71c7b43541 Support blacklist field in PTS database 2013-06-26 12:07:09 +02:00
Andreas Steffen de8de88fa7 Updated PTS demo database 2013-06-26 10:14:25 +02:00
Andreas Steffen f4dcbe3bf2 Device can be member of multiple groups 2013-06-25 18:43:07 +02:00
Andreas Steffen 72631301eb Some IMV policy managers expect a TEXT string 2013-06-25 12:47:07 +02:00
Andreas Steffen 59c9ec107f Assign default group to newly created devices 2013-06-25 11:49:32 +02:00
Andreas Steffen 632e5b0b99 Set device creation date if it hasn't been set yet 2013-06-24 20:18:16 +02:00
Andreas Steffen 7867c1a315 Aligned AR Identity types to IF-IMV 1.4 R5 draft 2013-06-24 00:23:50 +02:00
Andreas Steffen 69c4715bf8 Send PA-TNC assessment result even if no workitems are available 2013-06-24 00:22:38 +02:00
Andreas Steffen 02497901d0 Some pacman fixes 2013-06-23 16:23:19 +02:00
Andreas Steffen 226f34e0a0 version bump to 5.1.0dr1 2013-06-21 23:54:13 +02:00
Andreas Steffen 6b081a4c21 Some PTS database fixes 2013-06-21 23:25:25 +02:00
Andreas Steffen 45eb318ed4 Implemented pacman in a more reliable way 2013-06-21 23:25:25 +02:00
Andreas Steffen 4fe7294bb3 Define protocol string 2013-06-21 23:25:25 +02:00
Andreas Steffen 41dabbad41 Generate result string for port scan workitems 2013-06-21 23:25:25 +02:00
Andreas Steffen 8fbfe03e4e Ignore non-matching protocols 2013-06-21 23:25:25 +02:00
Andreas Steffen e5dd8a1d34 Introduced workitems to Scanner IMV 2013-06-21 23:25:24 +02:00
Andreas Steffen adf8a05a3d Removed obsoleted strongswan.conf options 2013-06-21 23:25:24 +02:00
Andreas Steffen da99df1443 Added ITA components to database 2013-06-21 23:25:24 +02:00
Andreas Steffen 10bb71261c Added soft dependency on database plugin 2013-06-21 23:25:24 +02:00
Andreas Steffen a2e30d601a fixed SQL query 2013-06-21 23:25:24 +02:00
Andreas Steffen 4cf568a785 Shortened names of default policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen 19ce03be73 Store device with product ID 2013-06-21 23:25:24 +02:00
Andreas Steffen bf250acb06 Database changes needed to integrate Cygnet backend 2013-06-21 23:25:24 +02:00
Andreas Steffen 01afff71cb Implemented get|set_action_flag() methods 2013-06-21 23:25:24 +02:00
Andreas Steffen a45a2c9291 Implemented hierarchical policy groups 2013-06-21 23:25:24 +02:00
Andreas Steffen b1da8368d0 Introduced workitems to Attestation IMV 2013-06-21 23:25:23 +02:00
Andreas Steffen 7e9bdd20aa pts_meas_algo_probe() and pts_dh_group_probe() got lost 2013-06-21 23:25:23 +02:00
Andreas Steffen c174c116fe Converted all IMVs to use generic IF-IMV API 2013-06-21 23:25:23 +02:00
Andreas Steffen ea2663ec03 Remove the constructor from the IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 97f0a7ea77 Defined a generic IMV agent interface 2013-06-21 23:25:23 +02:00
Andreas Steffen 7513a09ee5 Moved all functionality into imv_os_agent_t class turning imv_os_t into an IF-IMV skeleton 2013-06-21 23:25:23 +02:00
Andreas Steffen 99c6a5f8a4 Moved batch_ending into separate source file 2013-06-21 23:25:23 +02:00
Andreas Steffen e1db511bbd do not process workitems with NULL result 2013-06-21 23:25:23 +02:00
Andreas Steffen c219d7e31f fixed enumeration of workitems for a given session 2013-06-21 23:25:23 +02:00
Andreas Steffen 65148217b0 generate workitems based on group policy 2013-06-21 23:25:23 +02:00
Andreas Steffen 0fca778254 Added file and directory reference measurements to workitems 2013-06-21 23:25:22 +02:00
Andreas Steffen 2964562199 add overall recommendation to session database entry 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f6bf1a843 don't define a default database URI 2013-06-21 23:25:22 +02:00
Andreas Steffen 1ecff25917 created a simple IMV Policy Manager 2013-06-21 23:25:22 +02:00
Andreas Steffen 1571a11fa4 register received scanner attributes 2013-06-21 23:25:22 +02:00
Andreas Steffen 9d63ad17d4 used tnc_policy_update functions for default policy 2013-06-21 23:25:22 +02:00
Andreas Steffen a6266485be refactored IMV policy management 2013-06-21 23:25:22 +02:00
Andreas Steffen 4f9aabbfd7 implemented policy rules for OS IMV 2013-06-21 23:25:22 +02:00
Andreas Steffen 7daf6d8cc5 check for zero-length device ID 2013-06-21 23:25:22 +02:00
Andreas Steffen 033834719d ITA-HSR/Device ID attribute & IMV OS state machine 2013-06-21 23:25:22 +02:00
Andreas Steffen bb9d8b1853 execute an _imv_policy script 2013-06-21 23:25:22 +02:00
Andreas Steffen b8db66de15 implemented IMV session control 2013-06-21 23:25:21 +02:00
Andreas Steffen 1f179c63b3 Manage files and directories 2013-06-21 23:25:21 +02:00
Andreas Steffen 71d740cac6 Make plugins in standalone libimcv configurable 2013-05-24 12:56:21 +02:00
Andreas Steffen 0f499f41dc Use attest database in tnc/tnccs-20-os scenario 2013-04-21 16:31:23 +02:00
Andreas Steffen 9fab0a58d3 fixed a 64bit time_t issue 2013-04-21 16:07:13 +02:00
Andreas Steffen 70a7917e72 destroy SQL query 2013-04-21 16:00:23 +02:00
Andreas Steffen 6c998b8b9e Keep last AR ID 2013-04-21 08:19:30 +02:00
Andreas Steffen bec5bf02ac Added use of openssl-fips library to NEWS 2013-04-19 18:49:43 +02:00
Andreas Steffen 1b912ad384 check for successful activation of FIPS mode 2013-04-19 18:46:52 +02:00
Andreas Steffen b97dd59ba8 install FIPS-aware OpenSSL Debian packages 2013-04-19 18:36:38 +02:00
Andreas Steffen 545df30c18 Added openssl-ikev2/rw-cpa scenario 2013-04-19 18:34:35 +02:00
Andreas Steffen 70312e6596 build openssl-fips in KVM root-image 2013-04-19 18:34:35 +02:00
Andreas Steffen 2d902d7e7c fixed typo 2013-04-19 18:33:41 +02:00
Andreas Steffen 6b99da026c added libstrongswan.plugins.openssl.fips_mode to man page 2013-04-16 13:44:06 +02:00
Andreas Steffen f4de6496a2 support of OpenSSL FIPS-140-2 library 2013-04-16 12:37:04 +02:00
Andreas Steffen ef934caba8 build soup plugin in KVM test environment 2013-04-15 20:23:41 +02:00
Andreas Steffen 8d384fb7df disable reauth, too 2013-04-15 20:21:27 +02:00
Andreas Steffen 2e12fc4b0a version bump to 5.0.4 2013-04-14 19:58:17 +02:00
Andreas Steffen 654c88bca8 Added charon.initiator_only option which causes charon to ignore IKE initiation requests by peers 2013-04-14 19:57:49 +02:00
Andreas Steffen 022df06e1a version bump to 5.0.4dr1 2013-04-09 15:20:49 +02:00
Andreas Steffen 676e862487 fixed another printf statement 2013-04-09 15:16:49 +02:00
Andreas Steffen 1a185ae14b fixed printf statements 2013-04-08 22:21:14 +02:00
Andreas Steffen 12fa1784d0 emit a single assig_vips bus message for all VIPs 2013-04-06 14:16:30 +02:00
Andreas Steffen ba2880d569 ifmap plugin subscribes to assing_vip bus signal 2013-04-06 11:09:41 +02:00
Andreas Steffen 8dade2d146 fixed configure options 2013-04-04 21:09:07 +02:00
Andreas Steffen 2a4915e87a cleaned up XML code in tnccs-11 plugin 2013-04-04 17:12:07 +02:00
Andreas Steffen 93f53a78b5 fixed memory leak 2013-04-03 21:38:04 +02:00
Andreas Steffen 3ea6fcb593 properly handle orphaned renewSession jobs 2013-04-03 21:38:04 +02:00
Andreas Steffen 91503c2112 support chunked HTTP responses 2013-04-03 21:38:04 +02:00
Andreas Steffen 1044710b04 implemented periodic IF-MAP RenewSession request 2013-04-03 21:38:04 +02:00
Andreas Steffen e019fa60b7 version bump to 5.0.3 2013-04-02 08:55:40 +02:00
Andreas Steffen d4a1ae3af1 allow retrieval of private keys from other credential sets 2013-04-02 08:55:40 +02:00
Andreas Steffen c2c4125cde improve checking of sent and received http messages 2013-04-02 08:55:40 +02:00
Andreas Steffen 5a516a83da fixed capability metadata 2013-03-31 22:15:42 +02:00
Andreas Steffen fec7c824b8 fix start of wpa_supplicant 2013-03-31 19:48:07 +02:00
Andreas Steffen 0cf4dc53c7 updated strongswan.conf man page for tn_ifmap plugin 2013-03-31 19:05:53 +02:00
Andreas Steffen 45e2be2399 renamed tnc_ifmap2 plugin to tnc_ifmap 2013-03-31 16:37:30 +02:00
Andreas Steffen bde8e287d9 removed obsoleted tnc_ifmap plugin 2013-03-31 16:07:08 +02:00
Andreas Steffen 4581767493 implemented http basic authentication 2013-03-31 15:59:32 +02:00
Andreas Steffen e8675cb35d parse IF-MAP server URI 2013-03-31 11:39:06 +02:00
Andreas Steffen 4f4875ff13 implemented publish_enforcement_report and endSession methods 2013-03-30 13:19:27 +01:00
Andreas Steffen 628fee4563 implemented publish_ike_sa method 2013-03-30 09:15:16 +01:00
Andreas Steffen c6f9b1fb1f ifmap message type is known 2013-03-30 08:22:33 +01:00
Andreas Steffen b02bdc1e06 implemented publish_device_ip method 2013-03-30 08:11:10 +01:00
Andreas Steffen 14bf3cc1bd added IF-MAP SOAP error handling 2013-03-30 08:10:39 +01:00
Andreas Steffen cd13c9a90f created tnc_ifmap2_soap_msg class 2013-03-29 23:09:11 +01:00
Andreas Steffen b885c3cde6 implement NewSession and PurgePublisher messages using the libxml2 library 2013-03-29 22:29:12 +01:00
Andreas Steffen e99aab35de set up a new IF-MAP session 2013-03-29 09:42:06 +01:00
Andreas Steffen 5a8dd63433 fixed typo 2013-03-27 22:56:37 +01:00
Andreas Steffen 7e20062fdf Added hostapd package to base image 2013-03-22 23:53:39 +01:00
Andreas Steffen 8f72ba4aff Added Framed-IP-Address information to RADIUS accounting records 2013-03-22 23:52:01 +01:00
Andreas Steffen 9fa9f68d8d enforce singular of packets 2013-03-22 21:14:04 +01:00
Andreas Steffen 0b6c43f038 Added ikev2/rw-eap-framed-ip-radius scenario 2013-03-22 19:08:42 +01:00
Andreas Steffen 4a3c1cdc2b Store debug output from standalone IMC/IMVs 2013-03-22 16:45:24 +01:00