Martin Willi
ba2201edf0
Added plugin stub of certexpire plugin
2011-08-22 18:42:32 +02:00
Martin Willi
bff1025201
Don't rekey but delete CHILD_SA to resying against NATed Windows clients
2011-08-19 09:16:17 +02:00
Martin Willi
f54bcf35af
Sync newer IKE_SA condition/extension flags in ha plugin
2011-08-19 09:16:16 +02:00
Andreas Steffen
7e85bbda19
implement MAP client certificate authentication
2011-08-12 15:16:05 +02:00
Andreas Steffen
c7b8512cc0
cosmetics
2011-08-12 13:18:49 +02:00
Andreas Steffen
537205fa9d
implemented enforcement-report metadata
2011-08-12 13:16:02 +02:00
Andreas Steffen
ae8a984b5a
use EAP identity
2011-08-12 11:34:56 +02:00
Andreas Steffen
d6a69acba4
defined mapping of IKEv2 identity types to IF-MAP identity types
2011-08-12 11:07:29 +02:00
Andreas Steffen
d0a9173ec9
support capability metadata
2011-08-11 15:06:19 +02:00
Andreas Steffen
3205e3be7a
define server_cert in strongswan.conf
2011-08-10 09:29:35 +02:00
Andreas Steffen
dcae107b5a
getting rid of axis2.html configuration
2011-08-10 09:29:34 +02:00
Andreas Steffen
9d690477c9
output PEP device addresses as metadata
2011-08-10 09:29:34 +02:00
Andreas Steffen
e37f1fd6b7
classify an EAP identity as a username
2011-08-10 09:29:34 +02:00
Andreas Steffen
e016913725
refactoring of tnc-ifmap plugin
2011-08-10 09:29:34 +02:00
Andreas Steffen
5144463634
publish all IKE_SA metadata after tnc-ifmap plugin reload
2011-08-10 09:29:34 +02:00
Andreas Steffen
8c78772a05
implemented tnc-ifmap reload method
2011-08-10 09:29:34 +02:00
Andreas Steffen
cc7cfbc16e
moved ifmap code into tnc_ifmap_soap
2011-08-10 09:29:34 +02:00
Andreas Steffen
2c5e71b0c5
free device_name in destroy()
2011-08-10 09:29:34 +02:00
Andreas Steffen
1bae34e1a0
set device_name via strongswan.conf
2011-08-10 09:29:34 +02:00
Andreas Steffen
d0236f9353
fixed delete filters
2011-08-10 09:29:34 +02:00
Andreas Steffen
a3686ce33a
check for publishReceived response
2011-08-10 09:29:34 +02:00
Andreas Steffen
046db4f242
added authenticated-by metadata
2011-08-10 09:29:34 +02:00
Andreas Steffen
55c0c5956c
first working publish of metadata
2011-08-10 09:29:34 +02:00
Andreas Steffen
024d2522d5
added some XML syntax checking
2011-08-10 09:29:34 +02:00
Andreas Steffen
d13db9f99d
implemented purgePublisher command
2011-08-10 09:29:34 +02:00
Andreas Steffen
875f217625
fixed typo
2011-08-10 09:29:34 +02:00
Andreas Steffen
9d267f7111
combined newSession and newSessionResult
2011-08-10 09:29:33 +02:00
Andreas Steffen
7ab854adf9
newSession and endSession work
2011-08-10 09:29:33 +02:00
Andreas Steffen
c77af76807
created tnc-ifmap plugin
2011-08-10 09:29:33 +02:00
Tobias Brunner
1d5aae4b53
Fixed syntax in MySQL script.
2011-08-08 16:15:28 +02:00
Martin Willi
efee3ed80f
Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name
2011-08-08 13:36:56 +02:00
Martin Willi
caa451557f
ha plugin does not need Linux headers anymore
2011-08-02 17:08:41 +02:00
Martin Willi
6e5118e9e3
Check for kernel version and use appropriate jhash version in HA plugin
2011-08-02 17:00:59 +02:00
Tobias Brunner
acf380bc05
Properly initialize the UCI plugin.
2011-08-01 13:06:09 +02:00
Tobias Brunner
fbedc6a45b
Remove policies in kernel interfaces based on their priority.
...
This allows to unroute a connection while the same connection is
currently established. In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
2011-07-27 13:41:35 +02:00
Andreas Steffen
d33f6f7dba
fixed esn type
2011-07-20 23:11:19 +02:00
Tobias Brunner
f3bb1bd039
Fixed common misspellings.
...
Mostly found by 'codespell'.
2011-07-20 16:14:10 +02:00
Tobias Brunner
d604e79185
Count running load-tester threads properly.
2011-07-18 18:46:50 +02:00
Tobias Brunner
ebbdc3250b
Fix load-tester.shutdown_when_complete option.
...
It didn't work when used together with delete_after_established=yes.
2011-07-18 18:46:50 +02:00
Tobias Brunner
369c2e1dee
Fix listener registration in load-tester plugin.
...
This fixes the load-tester.shutdown_when_complete option.
2011-07-18 18:46:50 +02:00
Andreas Steffen
6101ee9b06
added log and status output for ESN
2011-07-16 11:09:38 +02:00
Martin Willi
b93d77ce67
Fix parentheses in write() to CLUSTERIP control files
2011-07-14 15:56:10 +02:00
Andreas Steffen
a96d9abf3e
add relative PB-TNC message offset
2011-07-13 18:59:35 +02:00
Andreas Steffen
0ccdf898bb
return offset value
2011-07-13 18:58:58 +02:00
Tobias Brunner
47daa0e6fe
Replaced more complex iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
572abc6cbd
Replaced ike_sa_t.create_additional_address_iterator with enumerator.
2011-07-06 09:43:45 +02:00
Tobias Brunner
4bbce1ef37
Replaced ike_sa_t.create_child_sa_iterator with enumerator.
...
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
2011-07-06 09:43:45 +02:00
Tobias Brunner
328f22e1d3
Add the reqid to kernel_ipsec_t.del_policy.
2011-07-06 09:43:45 +02:00
Andreas Steffen
f87991704e
implemented PASS and DROP shunt policies
2011-06-28 19:42:54 +02:00
Andreas Steffen
9d997f31f1
oops, should have been a bitwise and
2011-06-25 14:57:49 +02:00
Martin Willi