71b23661d4
android: Added function to include source files from plugin subdirectories
2013-07-08 18:49:25 +02:00
1973743443
libimcv: Android.mk added
2013-07-08 18:49:25 +02:00
51bc6a6e74
Cosmetics
2013-07-08 17:58:14 +02:00
34f894b6cc
Scanner IMV without workitems provides immediate recommendation, too
2013-07-08 17:53:05 +02:00
43c912dc27
attr-sql: Add unity_split_exclude as alias for unity_local_lan
2013-07-08 17:20:54 +02:00
4fdf1306eb
attr-sql: Fix double free when adding subnets for unknown attribute types
2013-07-08 17:20:53 +02:00
3dfa7a9eae
Attestion IMV provides recommendation only once
2013-07-08 17:06:51 +02:00
ea6ab9fb49
skip enforcement if a recent measurement was successful
2013-07-08 16:08:05 +02:00
a9750698cf
libtncif: Android.mk updated
2013-07-05 13:57:44 +02:00
0015727ebd
android: Disable listening on IPv6
...
As we have to use UDP encapsulation and the Linux kernel currently does
not support that this avoids issues with dual-stack gateways.
2013-07-05 09:48:27 +02:00
598bec78fa
socket-default: Add options to disable address families
2013-07-05 09:48:27 +02:00
bf92887af1
ike: Resolve hosts only for address families currently supported
2013-07-05 09:48:26 +02:00
eafd7ee7e1
net: Socket implementations report the address families they support
2013-07-05 09:48:01 +02:00
ef13480699
Added config-3.10
2013-07-04 23:17:10 +02:00
090ff1fbab
Version bump to 5.1.0dr2
2013-07-04 22:56:19 +02:00
69c4e34859
Always return a result string for a processed workitem
2013-07-04 22:55:58 +02:00
7658b399b7
Make Block stronger than Isolate in default policy
2013-07-04 22:54:47 +02:00
9844f240f8
Register packages under Debian 7.0 x86_64
2013-07-04 22:53:41 +02:00
324b90cc46
openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strong
...
For our purposes with RNG_WEAK this is fine, so accept a zero return value.
2013-07-04 11:09:54 +02:00
1d728758ed
Ping from dave before shutting down tcpdump in libipsec/rw-suite-b test case
2013-07-01 13:48:21 +02:00
91c9bf1872
libipsec: Properly handle expiration if no lifetime is set
2013-07-01 13:48:02 +02:00
f588349dfe
charon-cmd: Ignore generated man page
2013-07-01 12:33:21 +02:00
2ea32e7964
Enable libipsec and charon-cmd in strongSwan recipe
2013-07-01 12:32:45 +02:00
bb802daacc
Fixed libipsec/rw-suite-b scenario
2013-07-01 12:32:45 +02:00
282e4d2c7c
eap-radius: fix add_attribute/framed_ip method signatures
2013-07-01 11:53:52 +02:00
3405156f97
Added libipsec/rw-suite-b scenario
2013-07-01 11:04:14 +02:00
9ea77350ce
Fixed index.txt for strongSwan EC CA
2013-07-01 11:01:11 +02:00
6c969fee94
Don't backup old package lists
2013-07-01 10:00:43 +02:00
c949a4d501
Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restart
2013-07-01 09:58:34 +02:00
4c74fa664b
Reuse reqid for trap policies installed for dpd|closeaction=hold
2013-07-01 09:58:25 +02:00
156e552caf
Added libipsec/net2net-cert scenario
2013-06-29 22:23:45 +02:00
1cfefd38a2
Add type=transport to tkm/host2host-* connections
...
Explicitly specify transport mode in connection configuration of the
responding host (sun).
2013-06-29 15:07:10 +02:00
b1f1e5e5f2
5.1.0 changes for test cases
2013-06-29 00:07:15 +02:00
b1b0cce396
processor: Simplified the main loop
2013-06-28 17:02:06 +02:00
6ca25ccc04
processor: Don't hold the lock while destroying jobs
...
If a lock is held when queue_job() is called and the same lock is
required during the destruction of a job, holding the internal lock
in the processor while calling destroy() could result in a deadlock.
2013-06-28 17:02:05 +02:00
50daffb784
dhcp: Use chunk_hash_static() to calculate ID-based MAC addresses
2013-06-28 17:00:29 +02:00
f95205f580
integrity-checker: Use chunk_hash_static() to calculate checksums
2013-06-28 17:00:29 +02:00
ed235dbbf2
chunk: Add predictable hash function
...
Since chunk_hash() is randomized its output is not predictable, that is,
it is only within the same process.
2013-06-28 17:00:29 +02:00
b7b5432ff8
stroke: Changed how proto/port are specified in left|rightsubnet
...
Using a colon as separator conflicts with IPv6 addresses.
2013-06-28 15:10:09 +02:00
b18a531715
plugin-loader: Removed unused path argument of load() method
...
Multiple additional search paths can be added with the add_path()
method.
2013-06-28 10:44:15 +02:00
9da142b4dc
tnc-pdp: Initialize TNC-PDP in plugin callback with proper dependencies
2013-06-27 18:02:53 +02:00
5b7536c803
Attestation IMV requests platform info if not received
2013-06-27 17:30:14 +02:00
75ff252324
integrity-checker: Fix checksum calculation after randomizing chunk_hash()
2013-06-27 15:34:08 +02:00
fcc33c0cd4
unit-tests: Print loaded plugins
2013-06-27 11:27:13 +02:00
a6357a62b4
unit-tests: RSA key generation might take longer than 4 seconds
...
Check uses a default timeout of 4 seconds for each test case, generating
keys of 6 different key sizes might take longer than that.
2013-06-27 11:06:47 +02:00
65d23c7c90
tests: Properly load plugins from build directory
...
Calling load() incrementally does not really work as dependencies
wouldn't be resolved properly if a required feature was to be provided
by a plugin that is loaded later with a separate call to load().
2013-06-27 11:06:47 +02:00
f2086e42ff
plugin-loader: Method added to provide additional search paths for plugins
2013-06-27 10:27:24 +02:00
71c7b43541
Support blacklist field in PTS database
2013-06-26 12:07:09 +02:00
de8de88fa7
Updated PTS demo database
2013-06-26 10:14:25 +02:00
f4dcbe3bf2
Device can be member of multiple groups
2013-06-25 18:43:07 +02:00
Tobias Brunner