Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• a1afa8d810 added ikev2/rw-eap-tnc scenario Andreas Steffen 2010-10-09 00:59:31 +02:00
• 3cb3f85dfc TNCCS debug cosmetics Andreas Steffen 2010-10-09 00:58:12 +02:00
• e9ba435fe3 revert to standard TNCC/TNCS Initialization function Andreas Steffen 2010-10-09 00:35:45 +02:00
• bfba1fdc92 implemented TNC isolation via group memberships Andreas Steffen 2010-10-09 00:34:53 +02:00
• db2f66c2df implemented a makeshift non-scalable send buffer Andreas Steffen 2010-10-08 22:24:30 +02:00
• 55960a170f imc/imv cosmetics Andreas Steffen 2010-10-08 06:40:03 +02:00
• d1b94592a6 fixed notation Andreas Steffen 2010-10-07 23:34:37 +02:00
• 8dcc56dcc0 created tnc-imc and tnc-imv plugins Andreas Steffen 2010-10-07 23:31:23 +02:00
• 04d000210b deactivate start_phase2_tnc flag after start Andreas Steffen 2010-10-07 15:42:00 +02:00
• 888455587b added server side support for EAP-TNC Andreas Steffen 2010-10-07 15:02:36 +02:00
• 962300b920 Show result of RADIUS authentication along with EAP identity Martin Willi 2010-10-07 11:13:48 +02:00
• 99dfc3c295 added --debug-tls to charon usage() function Andreas Steffen 2010-10-07 09:34:56 +02:00
• 84babfb895 define explicit IKEv1 key exchange mode Andreas Steffen 2010-10-07 07:31:44 +02:00
• 9b201cf859 host venus is used in ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-10-06 10:38:18 +02:00
• 541666b89f added ikev2/rw-eap-tnc-radius-block scenario Andreas Steffen 2010-10-06 10:32:50 +02:00
• 68de7267e1 added tnccs-11 plugin options to strongswan.conf Andreas Steffen 2010-10-06 07:53:50 +02:00
• 9b04378ece version bump to 4.5.0dr5 Andreas Steffen 2010-10-06 07:07:14 +02:00
• bb43f25ad3 configure tnc_config path and preferred_language via strongswan.conf Andreas Steffen 2010-10-05 22:09:07 +02:00
• 6d0e9cf046 created hull for TNCCS 2.0 plugin Andreas Steffen 2010-10-05 21:15:24 +02:00
• a1edf4d33e use group membership to implement access/isolate redirection in filter-based TNC scenario Andreas Steffen 2010-10-05 20:40:36 +02:00
• 48e16e0ae1 final version of ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-10-05 20:38:34 +02:00
• 9ffa3f71f2 fixed typo in image path Andreas Steffen 2010-10-05 09:09:58 +02:00
• b540d19133 moved CHILD_SA selection out of attribute loop Andreas Steffen 2010-10-05 08:02:07 +02:00
• 28b23fef11 receive name of preferred CHILD_SA via RADIUS Filter-Id attribute Andreas Steffen 2010-10-05 07:58:07 +02:00
• e7104a6ec9 updated ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-10-05 07:56:57 +02:00
• 0cfdbaff2c set EAP-TTLS/TNC version also in acknowledgement packets Andreas Steffen 2010-10-04 14:39:49 +02:00
• a8809bb0cb Fixed status_t enum names definition Martin Willi 2010-10-04 10:47:30 +02:00
• 30f14b7066 added configuration files for dummyimc.so IMC Andreas Steffen 2010-10-01 00:14:44 +02:00
• ea893a5de2 The TNC@FHH TNC Serve does not like symbolic links Andreas Steffen 2010-09-30 23:35:24 +02:00
• a00a43e0f6 print XML as plaintext and process recieved TNCCS Batch Andreas Steffen 2010-09-30 23:34:00 +02:00
• cae4668ffb added tnc_config files to TNC scenario Andreas Steffen 2010-09-30 12:42:18 +02:00
• f685b3aca0 started use of libtnc library Andreas Steffen 2010-09-29 23:24:59 +02:00
• 3c354b6d11 NOTIFY error message types include 16383 Andreas Steffen 2010-09-29 19:01:36 +02:00
• 3f84e2d68e added NEWS for 4.5dr3 Andreas Steffen 2010-09-29 07:14:52 +02:00
• 062e8faee1 version bump to 4.5dr4 Andreas Steffen 2010-09-29 07:14:33 +02:00
• 440231e863 load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario Andreas Steffen 2010-09-28 23:52:59 +02:00
• 4e8e74fcfa moved TNCCS layer out of eap_tnc plugin Andreas Steffen 2010-09-28 23:34:04 +02:00
• 280c8ea2f0 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 11:31:39 +02:00
• 1e6cc07ee4 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 10:58:28 +02:00
• 234aaf2df2 stop gateway after clients in order to check release of virtual IP Andreas Steffen 2010-09-26 10:35:12 +02:00
• 2b3124c76d fixed release of virtual IP for XAUTH identities Andreas Steffen 2010-09-26 10:16:30 +02:00
• f054606586 include RFC 5998 Andreas Steffen 2010-09-20 20:03:20 +02:00
• f22ba072e8 draft-ietf-ipsecme-eap-mutual will be released as RFC 5998. Tobias Brunner 2010-09-16 10:27:49 +02:00
• 824a040284 the updated IKEv2 RFC 5996 has been released Andreas Steffen 2010-09-15 12:55:31 +02:00
• 004de55235 added notify messages defined in RFC 5996 Andreas Steffen 2010-09-15 12:48:58 +02:00
• 80f86acccb show validity of OCSP responses Andreas Steffen 2010-09-10 22:14:12 +02:00
• 41f525becd Added missing options (corrected some default values). Tobias Brunner 2010-09-10 11:18:31 +02:00
• 3f71c5d95f Moved load-tester configuration to a separate section. Tobias Brunner 2010-09-10 10:00:02 +02:00
• b2bcc57737 Added information about logger configuration. Tobias Brunner 2010-09-09 18:55:26 +02:00
• fa8c06903f More information about IKEv2 retransmissions added. Tobias Brunner 2010-09-09 18:50:24 +02:00
• 320cecd2dd Adding most of the strongswan.conf options from the wiki. Tobias Brunner 2010-09-09 18:49:04 +02:00
• 483c1feb7e Added strongswan.conf(5) stub. Tobias Brunner 2010-09-09 14:03:22 +02:00
• 0a1233e642 Moved man pages for config files to a separate directory. Tobias Brunner 2010-09-09 13:15:36 +02:00
• 3c1debeb59 version bump to 4.5.0dr2 Andreas Steffen 2010-09-10 07:37:28 +02:00
• f3051ebf53 fixed memory leak Andreas Steffen 2010-09-09 21:38:22 +02:00
• 663e735553 Compare subject against all key identifiers in has_subject() Martin Willi 2010-09-09 17:40:16 +02:00
• f85f0c2795 has_subject() now resolves ID_KEY_IDs Andreas Steffen 2010-09-09 17:14:06 +02:00
• 89821331e0 Do not change cipherspec while we have buffered handshake fragments pending Martin Willi 2010-09-09 14:27:41 +02:00
• 939c4bf2e8 added ikev1/net2net-same-nets scenario Andreas Steffen 2010-09-09 13:37:22 +02:00
• 3f9ba3be66 Conditional exclusion of tls_test script completed. Tobias Brunner 2010-09-09 13:19:51 +02:00
• 6d4ae46768 Fixed typo. Tobias Brunner 2010-09-09 13:19:22 +02:00
• 3f58022679 debug output of inbound and outbound TNCCS batches Andreas Steffen 2010-09-09 11:14:48 +02:00
• 20ad62026e support non EAP-TTLS conformant RADIUS-type attribute segmentation Andreas Steffen 2010-09-09 11:13:48 +02:00
• b1baa90846 Fixed copy/paste error. Tobias Brunner 2010-09-09 10:10:43 +02:00
• 3b7eb3a9f4 added explanatory comments Andreas Steffen 2010-09-09 08:57:13 +02:00
• 48b8cbb206 send well-formed TNCCS-Batch Andreas Steffen 2010-09-08 13:44:34 +02:00
• de29e3a683 max max_message_count configurable and move it into tls_eap_t Andreas Steffen 2010-09-08 12:58:40 +02:00
• 99b0f633c2 handle TLS_PURPOSE_EAP_TNC Andreas Steffen 2010-09-08 12:11:44 +02:00
• 30cd31fb69 Added a simple led plugin to control Linux LEDs based on IKE activity Martin Willi 2010-09-08 11:59:00 +02:00
• 51b385d44d moved tls_t existance test into tls_eap_create() again Andreas Steffen 2010-09-08 11:09:11 +02:00
• d2b1d4378e generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol Andreas Steffen 2010-09-08 11:01:47 +02:00
• 7b3c01845f Read the compression type byte for EC groups, only Martin Willi 2010-09-08 10:32:55 +02:00
• 91a0825c39 added non-standard SERPENT and TWOFISH support to kernel_netlink plugin Andreas Steffen 2010-09-08 07:22:31 +02:00
• 2774826995 added openssl-ikev2/rw-eap-tls-only scenario Andreas Steffen 2010-09-07 17:14:32 +02:00
• 52d4dc7fe2 added qcStatements OID Andreas Steffen 2010-09-07 11:17:51 +02:00
• 61df42ccf3 Fixed typos Martin Willi 2010-09-07 10:24:40 +02:00
• 00755453e3 Build tls_test script only if TLS stack is enabled Martin Willi 2010-09-07 10:21:44 +02:00
• 84c9bc4254 Added PKCS#11 NEWS Martin Willi 2010-09-07 10:21:25 +02:00
• a782b52f6a Added (EAP-)TLS NEWS Martin Willi 2010-09-07 10:10:36 +02:00
• 31c65eb362 Include ec_point_format extension in ClientHello Martin Willi 2010-09-06 18:51:38 +02:00
• 02281c87a4 Added TLS specific EC point formats Martin Willi 2010-09-06 18:42:43 +02:00
• ec7d4e70d3 Renamed ecp_format to ansi_format, as point formats in TLS use different identifiers Martin Willi 2010-09-06 18:36:27 +02:00
• 3f5de7b65f Enable the random plugin for scripts Martin Willi 2010-09-06 18:11:05 +02:00
• fe559b5156 Accept TLS records with zero-length plaintext Martin Willi 2010-09-06 17:04:59 +02:00
• adb913adeb Added strongswan.conf option to filter for specific TLS suites Martin Willi 2010-09-06 16:44:47 +02:00
• 24a5b935e7 Added strongswan.conf options to filter cipher suites by specific algorithms Martin Willi 2010-09-06 16:37:45 +02:00
• a92a348092 Register missing AUTH_HMAC_SHA384 algorithm without truncation Martin Willi 2010-09-06 16:36:16 +02:00
• a03eebdf93 Fixed key type in TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA Martin Willi 2010-09-06 16:35:53 +02:00
• e6cce7ff0d Prepend point format to ECDH public key Martin Willi 2010-09-06 15:31:32 +02:00
• e4fd2bb428 Log the selected (EC)DH group Martin Willi 2010-09-06 11:19:47 +02:00
• 0f89143b84 Parse unsupported TLS Hello extensions properly Martin Willi 2010-09-06 10:55:15 +02:00
• 6cf85b35a4 Added TLS extension identifiers from RFC 3546 Martin Willi 2010-09-06 10:54:11 +02:00
• 3255e489be Of course, mark is also supported by pluto. Tobias Brunner 2010-09-06 12:04:26 +02:00
• a674c79a37 mark_in and mark_out are also supported by pluto. Tobias Brunner 2010-09-06 11:53:59 +02:00
• 4e68c1cfdc Do not propose (EC)DHE suites if we do not support them Martin Willi 2010-09-03 18:24:03 +02:00
• 4254257f9d Offer only algorithms/suites we have a registered public key backend for Martin Willi 2010-09-03 18:11:03 +02:00
• d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms Martin Willi 2010-09-03 18:09:48 +02:00
• f9c0cf862c Fixed key type of ECDHE_RSA groups Martin Willi 2010-09-03 17:24:39 +02:00
• 3f7bb88ba3 Use a dynamic curve enumerator to list/convert TLS named curves Martin Willi 2010-09-03 17:05:39 +02:00
• f4c98ae664 Use ECDH group check where appropriate Martin Willi 2010-09-03 16:22:49 +02:00