 Andreas Steffen
|
7828bd1bd6
|
defined a pb_tnc_message_t interface
|
2010-11-23 14:27:57 +01:00 |
|
|
Andreas Steffen
|
1f201db699
|
enabled ha plugin in UML scenarios
|
2010-11-20 21:52:40 +01:00 |
|
|
Andreas Steffen
|
d16ecc1753
|
fixed iptables script of gateway alice
|
2010-11-20 21:01:54 +01:00 |
|
|
Andreas Steffen
|
aafe3b090e
|
removed copy of strongswancCert.pem
|
2010-11-20 20:34:21 +01:00 |
|
|
Andreas Steffen
|
4a8ebe0b35
|
added ha/both-active scenario
|
2010-11-20 20:16:26 +01:00 |
|
|
Andreas Steffen
|
841b2b3ee9
|
created certificate and /etc/hosts entry for virtual gateway mars
|
2010-11-20 18:20:23 +01:00 |
|
|
Andreas Steffen
|
6ee5c912e7
|
implemented create_reason_enumerator() function
|
2010-11-19 17:23:06 +01:00 |
|
|
Andreas Steffen
|
8a5c7db860
|
implemented request_handshake_retry() function
|
2010-11-19 08:52:18 +01:00 |
|
|
Martin Willi
|
b78ca4b04c
|
Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20
|
2010-11-18 08:56:12 +01:00 |
|
|
Martin Willi
|
cfa18d14f1
|
Use static args for C_Initialize(), OpenSC does not get a copy of the pointers
|
2010-11-18 08:44:22 +01:00 |
|
|
Andreas Steffen
|
0ebff9f442
|
added ITA and strongSwan OIDs
|
2010-11-17 22:46:45 +01:00 |
|
|
Andreas Steffen
|
ba1ad6c430
|
corrected TCGID OID
|
2010-11-17 22:46:45 +01:00 |
|
|
Martin Willi
|
93a9926805
|
Added getter for arbitrary environment variables
|
2010-11-17 16:46:23 +01:00 |
|
|
Andreas Steffen
|
a423a96140
|
added IMC and IMV IDs as arguments to send_message()
|
2010-11-17 00:04:10 +01:00 |
|
|
Andreas Steffen
|
66c30fa244
|
get_attribute() and set_attribute() are not allowed to use TNC_CONNECTIONID_ANY
|
2010-11-16 22:43:48 +01:00 |
|
|
Andreas Steffen
|
04b132e088
|
initialize chunks and add debug output
|
2010-11-16 22:28:10 +01:00 |
|
|
Andreas Steffen
|
c957aaa411
|
load IMCs and IMVs with RTLD_LAZY
|
2010-11-16 22:14:20 +01:00 |
|
|
Andreas Steffen
|
ad7e3b1d1e
|
fixed memory leak
|
2010-11-16 21:37:38 +01:00 |
|
|
Andreas Steffen
|
343f4793a8
|
implement set_attribute() callback function
|
2010-11-16 21:07:02 +01:00 |
|
|
Andreas Steffen
|
92477a0625
|
implement GetAttribute() callback function
|
2010-11-16 20:14:48 +01:00 |
|
|
Andreas Steffen
|
4d178affbb
|
call is_complete() if tls protocol returns with SUCCESS
|
2010-11-16 11:52:06 +01:00 |
|
|
Andreas Steffen
|
2fe06d33c3
|
reformulated recommendation policies
|
2010-11-16 11:00:40 +01:00 |
|
|
Thomas Egerer
|
e66420566c
|
Do not checkin a previously destroyed SA
|
2010-11-16 10:25:33 +01:00 |
|
|
Martin Willi
|
d93060759e
|
Remove obsolete pool_size argument in processor_create()
|
2010-11-16 09:39:06 +01:00 |
|
|
Andreas Steffen
|
54b1896b31
|
mutex.h is not needed any more
|
2010-11-16 09:15:17 +01:00 |
|
|
Andreas Steffen
|
3b0e64d56e
|
imv_list consists of linked imv_t instances
|
2010-11-16 09:09:39 +01:00 |
|
|
Andreas Steffen
|
7c2201aded
|
implemented have_recommendation() based on a choice of 3 policies
|
2010-11-15 18:25:58 +01:00 |
|
|
Andreas Steffen
|
c06c7ce792
|
log configured recommendation policy
|
2010-11-14 11:29:27 +01:00 |
|
|
Andreas Steffen
|
de1cb3283a
|
configure recommendation policy via strongswan.conf
|
2010-11-14 11:23:47 +01:00 |
|
|
Andreas Steffen
|
77b6f245e4
|
re-establish null pointer if IMC/IMV manager plugin could not be installed
|
2010-11-14 09:50:01 +01:00 |
|
|
Andreas Steffen
|
10647add81
|
moved recommendation handling to the tnc_imv plugin
|
2010-11-13 10:02:02 +01:00 |
|
|
Thomas Egerer
|
8f927116be
|
Extend connected peers by peer family
This allows for simultanious IPv4 and IPv6 tunnel for same peers with
matching identities.
|
2010-11-12 16:28:04 +01:00 |
|
|
Martin Willi
|
9cda39923e
|
Added a PKCS#11 module option to enforce OS Locking functions
|
2010-11-12 16:14:03 +01:00 |
|
|
Martin Willi
|
213884f947
|
Print full source route on DBG2 that gets installed
|
2010-11-11 09:59:02 +01:00 |
|
|
Andreas Steffen
|
46ddebbf13
|
removed debug output in IMC bind functions
|
2010-11-11 07:51:56 +01:00 |
|
|
Andreas Steffen
|
e2a0bea5d6
|
added get_preferred_language() to tnc_imc
|
2010-11-11 07:30:13 +01:00 |
|
|
Andreas Steffen
|
c2835ef29f
|
created dummy have_recommendation() function
|
2010-11-10 22:42:36 +01:00 |
|
|
Andreas Steffen
|
3db904641e
|
implemented mutex locking the batch in construction
|
2010-11-10 22:22:27 +01:00 |
|
|
Andreas Steffen
|
c0cb1f8a09
|
fixed received test message
|
2010-11-10 22:02:20 +01:00 |
|
|
Andreas Steffen
|
b777d2a46b
|
implemented mutex locking the recommendations list
|
2010-11-10 21:53:17 +01:00 |
|
|
Andreas Steffen
|
e7fe3fe2c3
|
display ID of registered IMCs/IMVs
|
2010-11-10 21:30:50 +01:00 |
|
|
Andreas Steffen
|
cc5f7aa3d8
|
implemented recommendation storage
|
2010-11-10 21:23:37 +01:00 |
|
|
Andreas Steffen
|
3041956770
|
created enum names for action recommendations and evaluation results
|
2010-11-10 21:23:37 +01:00 |
|
|
Andreas Steffen
|
7785452fc4
|
removed debug output of tnc_imv_bind_functions
|
2010-11-10 21:23:37 +01:00 |
|
|
Martin Willi
|
57398f621a
|
Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted
|
2010-11-10 18:36:15 +01:00 |
|
|
Martin Willi
|
59df2d2a6f
|
Add flags for PKCS#11 libraries with reduced feature set
|
2010-11-10 18:36:15 +01:00 |
|
|
Andreas Steffen
|
41ec04c34d
|
enforce_recommendation inserts TNC group membership rules for IKE_SA
|
2010-11-10 17:59:41 +01:00 |
|
|
Andreas Steffen
|
498a583f4a
|
defined PB-TNC types
|
2010-11-10 15:44:51 +01:00 |
|
|
Andreas Steffen
|
b55310b3a8
|
append any previously collection messages to batch
|
2010-11-10 15:44:09 +01:00 |
|
|
Andreas Steffen
|
7ead19a700
|
read IMC/IMV configurations from /etc/tnc_config
|
2010-11-10 10:57:01 +01:00 |
|