Martin Willi
76b6b19f8d
Verify received RADIUS DAE requests
2012-03-05 18:06:13 +01:00
Martin Willi
e8a8179706
Support verification of RADIUS request messages
2012-03-05 18:06:13 +01:00
Martin Willi
3bc1829211
Rename RADIUS message constructors to handle both, requests and responses
2012-03-05 18:06:13 +01:00
Martin Willi
6319ce63cf
Enable RADIUS DAE listening if configured
2012-03-05 18:06:13 +01:00
Martin Willi
85932ad24e
Added infrastructure to listen to RADIUS Dynamic Authorization Extension requests
2012-03-05 18:06:13 +01:00
Martin Willi
3a42c08904
Added Dynamic Authorization Extension RADIUS message codes
2012-03-05 18:06:13 +01:00
Martin Willi
c61341a58f
Set IKE_SA lifetime based on RADIUS Session-Timeout attribute
2012-03-05 18:06:13 +01:00
Martin Willi
3a2660f189
Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attribute
2012-02-24 11:20:16 +01:00
Martin Willi
d15ae70c8c
Refactored construction of RADIUS accounting messages
2012-02-24 11:12:18 +01:00
Martin Willi
d93f204ca5
Include port numbers in Calling-Station-Id, too
2012-02-24 10:49:29 +01:00
Martin Willi
802ed08dff
Use large enough buffers for IPv6 addresses in Calling-Station-Id
2012-02-24 10:13:08 +01:00
Martin Willi
434cdbac09
Send client external address as Calling-Station-Id in RADIUS accounting
2012-02-24 10:05:23 +01:00
Tobias Brunner
b96eb46d5c
Some Doxygen fixes.
2012-02-07 11:20:46 +01:00
Martin Willi
32dc2b0243
Update usage for all children in RADIUS accounting just before sending Stop
2012-02-06 10:51:40 +01:00
Martin Willi
e5747e7a83
Check if ClusterIP directory could be opened before enumerating it
2012-02-06 10:51:39 +01:00
Tobias Brunner
9ec66bc1a5
Added an option to load CA certificates without CA basic constraint.
...
Enabling this option treats all certificates in ipsec.d/cacerts and
ipsec.conf ca sections as CA certificates even if they do not contain a
CA basic constraint.
2012-02-01 14:34:52 +01:00
Martin Willi
0399edef71
Support RADIUS accounting messages containing Framed-IP and Inbound/Outbound-Octets
2012-01-30 19:16:49 +01:00
Martin Willi
8e5b4aa023
Open RADIUS accounting sockets to exchange accounting messages
2012-01-30 19:15:20 +01:00
Martin Willi
a69aff5f17
Support signing of RADIUS accounting messages
2012-01-30 19:13:20 +01:00
Martin Willi
370de553f8
RADIUS message constructor accepts a message code parameter
2012-01-30 19:11:08 +01:00
Tobias Brunner
f1ba06c1c6
Cache list of plugin names to further simplify its usage.
...
Also helpful for ipsec statusall to avoid having to enumerate plugins.
2012-01-19 12:37:42 +01:00
Tobias Brunner
576298a3ef
Simplified logging of list of loaded plugins.
2012-01-19 11:56:03 +01:00
Tobias Brunner
35a1986142
Fixed additional typos in comments and log messages.
2012-01-12 11:42:42 +01:00
Martin Willi
6a5c86b7ad
Implemented TLS session resumption both as client and as server
2011-12-31 13:14:49 +01:00
Tobias Brunner
7c0c2349a9
Make number of concurrently handled stroke messages configurable.
2011-12-29 18:41:39 +01:00
Tobias Brunner
8ff513a863
Limit the number of concurrently handled stroke messages.
...
This avoids clogging the thread pool with potentially blocking jobs.
2011-12-29 18:39:34 +01:00
Andreas Steffen
54f53f9081
implemented IMC/IMV ReceiveMessageLong functions
2011-12-09 23:32:30 +01:00
Andreas Steffen
ac3331e1cd
added IMC/IMV support for send_message_long() and reserve_additional_id() functions
2011-12-09 17:11:31 +01:00
Andreas Steffen
170f918596
implemented IF-IMC/IMV 1.3 attributes
2011-12-08 17:57:39 +01:00
Andreas Steffen
d6c892169c
added TNC_TNCC_GetAttribute() and TNC_TNCC_SetAttribute() functions
2011-12-08 14:52:08 +01:00
Andreas Steffen
584282d7c9
added TNC_IMC_ReceiveMessageLong() and TNC_IMV_ReceiveMessageLong() support
2011-12-08 12:38:45 +01:00
Andreas Steffen
115d49a748
fixed typo in function name
2011-12-08 12:30:57 +01:00
Andreas Steffen
aae76e9ba0
added TNC_TNCS_ReserveAdditionalIMVID() function
2011-12-07 17:55:26 +01:00
Andreas Steffen
194b23bb6e
return with TNC_RESULT_SUCCESS
2011-12-07 17:36:04 +01:00
Andreas Steffen
80ca4e50c9
added TNC_TNCC_ReserveAdditionalIMCID() function
2011-12-07 17:31:49 +01:00
Andreas Steffen
dcb5c5906e
added TNC_TNCC_SendMessageLong() and TNC_TNCS_SendMessageLong() functions
2011-12-07 11:44:29 +01:00
Andreas Steffen
f77505b8c8
corrected function name in error message
2011-12-07 00:12:15 +01:00
Andreas Steffen
10b9d52400
added TNC_TNCC_ReportMessageTypesLong() and TNC_TNCS_ReportMessageTypesLong() messages
2011-12-06 23:39:01 +01:00
Andreas Steffen
db183a92b7
upgraded IF-IMC/IMV inteface definitions to version 1.3
2011-12-04 12:48:30 +01:00
Sansar Choinyambuu
a66719d7d6
Reversed unintended commit
2011-11-28 21:17:16 +01:00
Sansar Choinyambuu
824ace105a
Changed the static function name in openssl_rsa_public_key object
...
Removed unused chunk variable from PTS verify_quote_signature function
2011-11-28 21:17:16 +01:00
Sansar Choinyambuu
103218b912
Reversed unintended commit
2011-11-28 14:39:53 +01:00
Sansar Choinyambuu
71741df078
Changed the static function name in openssl_rsa_public_key object
...
Removed unused chunk variable from PTS verify_quote_signature function
2011-11-28 14:39:53 +01:00
Tobias Brunner
b46a5cd4ef
Fixed check for log groups when debug_t is unsigned.
...
The range and signedness of enum types is up to the compiler.
2011-11-25 09:48:32 +01:00
Martin Willi
3fcacd283e
Fix unaligned aliasing warning in raw socket
2011-11-17 18:22:07 +01:00
Tobias Brunner
48e87e12ab
Revert "fixed integrity tests of plugins using libtls or libtnccs"
...
This reverts commit b597ac4a4c
2011-11-08 18:35:11 +01:00
Tobias Brunner
e034cc9ca9
Revert "fixed integrity tests of plugins using libsimaka"
...
This reverts commit 8c42f16dee
2011-11-08 18:35:11 +01:00
Tobias Brunner
39b30518c2
Syntax error in sqlite.sql fixed.
2011-11-04 14:37:22 +01:00
Andreas Steffen
8c42f16dee
fixed integrity tests of plugins using libsimaka
2011-11-04 11:27:19 +01:00
Andreas Steffen
b597ac4a4c
fixed integrity tests of plugins using libtls or libtnccs
2011-11-02 06:42:08 +01:00
Martin Willi