 Andreas Steffen
|
3cb3f85dfc
|
TNCCS debug cosmetics
|
2010-10-09 00:58:12 +02:00 |
|
|
Andreas Steffen
|
e9ba435fe3
|
revert to standard TNCC/TNCS Initialization function
|
2010-10-09 00:35:45 +02:00 |
|
|
Andreas Steffen
|
bfba1fdc92
|
implemented TNC isolation via group memberships
|
2010-10-09 00:34:53 +02:00 |
|
|
Andreas Steffen
|
db2f66c2df
|
implemented a makeshift non-scalable send buffer
|
2010-10-08 22:24:30 +02:00 |
|
|
Andreas Steffen
|
55960a170f
|
imc/imv cosmetics
|
2010-10-08 06:40:03 +02:00 |
|
|
Andreas Steffen
|
8dcc56dcc0
|
created tnc-imc and tnc-imv plugins
|
2010-10-07 23:31:23 +02:00 |
|
|
Andreas Steffen
|
04d000210b
|
deactivate start_phase2_tnc flag after start
|
2010-10-07 15:42:00 +02:00 |
|
|
Andreas Steffen
|
888455587b
|
added server side support for EAP-TNC
|
2010-10-07 15:02:51 +02:00 |
|
|
Martin Willi
|
962300b920
|
Show result of RADIUS authentication along with EAP identity
|
2010-10-07 11:14:09 +02:00 |
|
|
Andreas Steffen
|
99dfc3c295
|
added --debug-tls to charon usage() function
|
2010-10-07 09:34:56 +02:00 |
|
|
Andreas Steffen
|
bb43f25ad3
|
configure tnc_config path and preferred_language via strongswan.conf
|
2010-10-05 22:09:07 +02:00 |
|
|
Andreas Steffen
|
6d0e9cf046
|
created hull for TNCCS 2.0 plugin
|
2010-10-05 21:15:24 +02:00 |
|
|
Andreas Steffen
|
a1edf4d33e
|
use group membership to implement access/isolate redirection in filter-based TNC scenario
|
2010-10-05 20:40:36 +02:00 |
|
|
Andreas Steffen
|
b540d19133
|
moved CHILD_SA selection out of attribute loop
|
2010-10-05 08:02:07 +02:00 |
|
|
Andreas Steffen
|
28b23fef11
|
receive name of preferred CHILD_SA via RADIUS Filter-Id attribute
|
2010-10-05 07:58:07 +02:00 |
|
|
Andreas Steffen
|
0cfdbaff2c
|
set EAP-TTLS/TNC version also in acknowledgement packets
|
2010-10-04 14:39:49 +02:00 |
|
|
Martin Willi
|
a8809bb0cb
|
Fixed status_t enum names definition
|
2010-10-04 10:48:00 +02:00 |
|
|
Andreas Steffen
|
a00a43e0f6
|
print XML as plaintext and process recieved TNCCS Batch
|
2010-09-30 23:34:00 +02:00 |
|
|
Andreas Steffen
|
f685b3aca0
|
started use of libtnc library
|
2010-09-29 23:24:59 +02:00 |
|
|
Andreas Steffen
|
3c354b6d11
|
NOTIFY error message types include 16383
|
2010-09-29 19:01:36 +02:00 |
|
|
Andreas Steffen
|
4e8e74fcfa
|
moved TNCCS layer out of eap_tnc plugin
|
2010-09-28 23:34:04 +02:00 |
|
|
Andreas Steffen
|
2b3124c76d
|
fixed release of virtual IP for XAUTH identities
|
2010-09-26 10:17:01 +02:00 |
|
|
Tobias Brunner
|
f22ba072e8
|
draft-ietf-ipsecme-eap-mutual will be released as RFC 5998.
|
2010-09-16 10:27:49 +02:00 |
|
|
Andreas Steffen
|
004de55235
|
added notify messages defined in RFC 5996
|
2010-09-15 12:48:58 +02:00 |
|
|
Andreas Steffen
|
80f86acccb
|
show validity of OCSP responses
|
2010-09-10 22:26:03 +02:00 |
|
|
Tobias Brunner
|
0a1233e642
|
Moved man pages for config files to a separate directory.
|
2010-09-10 12:01:19 +02:00 |
|
|
Andreas Steffen
|
f3051ebf53
|
fixed memory leak
|
2010-09-09 21:38:41 +02:00 |
|
|
Martin Willi
|
663e735553
|
Compare subject against all key identifiers in has_subject()
|
2010-09-09 17:46:20 +02:00 |
|
|
Andreas Steffen
|
f85f0c2795
|
has_subject() now resolves ID_KEY_IDs
|
2010-09-09 17:15:46 +02:00 |
|
|
Martin Willi
|
89821331e0
|
Do not change cipherspec while we have buffered handshake fragments pending
|
2010-09-09 14:27:41 +02:00 |
|
|
Andreas Steffen
|
3f58022679
|
debug output of inbound and outbound TNCCS batches
|
2010-09-09 11:15:08 +02:00 |
|
|
Andreas Steffen
|
20ad62026e
|
support non EAP-TTLS conformant RADIUS-type attribute segmentation
|
2010-09-09 11:15:08 +02:00 |
|
|
Tobias Brunner
|
b1baa90846
|
Fixed copy/paste error.
|
2010-09-09 10:10:43 +02:00 |
|
|
Andreas Steffen
|
3b7eb3a9f4
|
added explanatory comments
|
2010-09-09 08:57:13 +02:00 |
|
|
Andreas Steffen
|
48b8cbb206
|
send well-formed TNCCS-Batch
|
2010-09-08 13:44:34 +02:00 |
|
|
Andreas Steffen
|
de29e3a683
|
max max_message_count configurable and move it into tls_eap_t
|
2010-09-08 12:58:45 +02:00 |
|
|
Andreas Steffen
|
99b0f633c2
|
handle TLS_PURPOSE_EAP_TNC
|
2010-09-08 12:58:45 +02:00 |
|
|
Martin Willi
|
30cd31fb69
|
Added a simple led plugin to control Linux LEDs based on IKE activity
|
2010-09-08 12:00:57 +02:00 |
|
|
Andreas Steffen
|
51b385d44d
|
moved tls_t existance test into tls_eap_create() again
|
2010-09-08 11:09:11 +02:00 |
|
|
Andreas Steffen
|
d2b1d4378e
|
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
|
2010-09-08 11:01:53 +02:00 |
|
|
Martin Willi
|
7b3c01845f
|
Read the compression type byte for EC groups, only
|
2010-09-08 10:35:29 +02:00 |
|
|
Andreas Steffen
|
91a0825c39
|
added non-standard SERPENT and TWOFISH support to kernel_netlink plugin
|
2010-09-08 07:22:31 +02:00 |
|
|
Andreas Steffen
|
52d4dc7fe2
|
added qcStatements OID
|
2010-09-07 11:17:51 +02:00 |
|
|
Martin Willi
|
31c65eb362
|
Include ec_point_format extension in ClientHello
|
2010-09-06 18:51:38 +02:00 |
|
|
Martin Willi
|
02281c87a4
|
Added TLS specific EC point formats
|
2010-09-06 18:42:43 +02:00 |
|
|
Martin Willi
|
ec7d4e70d3
|
Renamed ecp_format to ansi_format, as point formats in TLS use different identifiers
|
2010-09-06 18:37:24 +02:00 |
|
|
Martin Willi
|
fe559b5156
|
Accept TLS records with zero-length plaintext
|
2010-09-06 17:04:59 +02:00 |
|
|
Martin Willi
|
adb913adeb
|
Added strongswan.conf option to filter for specific TLS suites
|
2010-09-06 16:51:11 +02:00 |
|
|
Martin Willi
|
24a5b935e7
|
Added strongswan.conf options to filter cipher suites by specific algorithms
|
2010-09-06 16:51:04 +02:00 |
|
|
Martin Willi
|
a92a348092
|
Register missing AUTH_HMAC_SHA384 algorithm without truncation
|
2010-09-06 16:50:58 +02:00 |
|