a4ddc0bb26
Encode RSA public keys in RFC 3110 DNSKEY format
2013-02-19 12:25:00 +01:00
f2145c8d3a
Moved configuration from resolver manager to unbound plugin
...
Also streamlined log messages in unbound plugin.
2013-02-19 12:25:00 +01:00
95650c0836
ipseckey: Report IPSECKEYs with invalid DNSSEC security state
2013-02-19 12:25:00 +01:00
932717fbde
ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf
2013-02-19 12:25:00 +01:00
a77bbc3b8c
Added ipseckey plugin, which provides support for public keys in IPSECKEY RRs
2013-02-19 12:25:00 +01:00
d786cbda5c
Implemented the resolver test script "dnssec"
2013-02-19 11:57:21 +01:00
cfd07978d0
unbound: Implementation of query method of unbound_resolver_t
2013-02-19 11:57:21 +01:00
5a4126b490
unbound: Implemented resolver_response_t as unbound_response_t
2013-02-19 11:57:21 +01:00
62ea67e700
Implemented rr_set_t interface
2013-02-19 11:57:21 +01:00
4a335a2164
unbound: Implemented rr_t as unbound_rr_t
2013-02-19 11:57:21 +01:00
9f963a7cfc
Added unbound plugin implementing the resolver interface using libunbound
2013-02-19 11:57:21 +01:00
b1505b345b
Added manager for DNS resolvers
2013-02-19 11:57:21 +01:00
ffdeeb6609
Added interface for DNS resolvers
2013-02-19 11:57:21 +01:00
c381e46855
added missing return statement
2013-02-19 10:24:23 +01:00
69faf63528
Fix encoding of issuerAndSubject while handling SCEP pending state
2013-02-19 09:53:47 +01:00
0f7cb0caf4
reject PB-Experimental messages with NOSKIP flag set
2013-02-19 09:31:34 +01:00
9b4a8e1ced
added parameter descriptions
2013-02-19 07:44:57 +01:00
2c1219c217
removed superfluous debug output
2013-02-15 15:19:16 +01:00
b5b76df012
Add a timeout to clean up PDP RADIUS connections
2013-02-14 17:20:09 +01:00
dadd9744b6
Keep the PDP connections lock while accessing its objects
...
When we introduce connection timeouts, the state may disappear at any time.
This change prevents that, but is not very clear. We probably have to refactor
connection handling.
2013-02-14 17:19:56 +01:00
37884ab10f
Add locking to TNC-PDP connections
2013-02-14 17:19:49 +01:00
d20a2cc5f3
Add IF-M message subtype getter to IMC/IMV messages
2013-02-14 17:18:24 +01:00
bbe9261bbf
Use a generic constructor to create PA-TNC error attributes
2013-02-14 17:18:00 +01:00
4755ab505d
Add a global return_success() method implementation
2013-02-14 17:17:45 +01:00
de32b8aed6
Add a convenience method to check pen_type_t for vendor and type
2013-02-14 17:17:30 +01:00
d03b338487
Add a comparison function for pen_type_t
2013-02-14 17:17:22 +01:00
9db54bbcd4
Whitespace and comment cleanups in pen.[ch]
2013-02-14 17:17:07 +01:00
f838f457a8
resolve dependency on libtls
2013-02-14 17:15:33 +01:00
e212033ef2
Merge branch 'ike-dscp'
2013-02-14 17:11:35 +01:00
285668b6e3
Check if recommendations is set before applying language preference
2013-02-14 17:09:28 +01:00
a9df87bf89
PT-TLS dispatcher TNCCS constructor takes peer identities to pass to factory
2013-02-14 17:09:28 +01:00
8b56943222
Merge branch 'pt-tls'
2013-02-14 17:06:07 +01:00
46ae05dd17
Remove leading zeros in SCEP certificate serialNumbers
2013-02-14 16:56:32 +01:00
96a2d2077b
Fix 'stroke loglevel any'
...
Before b46a5cd4
2013-02-13 12:18:20 +01:00
5374fe3a09
added ikev1/net2net-fragmentation scenario
2013-02-12 23:01:48 +01:00
bac1052dea
treat EAP identities as user IDs
2013-02-12 21:58:03 +01:00
7d355f853d
use EAP identity in tnc/tnccs-20-pdp scenario
2013-02-12 20:41:37 +01:00
2a421163bf
make TNC client authentication type available to IMVs
2013-02-12 20:38:05 +01:00
3e56352815
determine underlying IF-T transport protocol
2013-02-12 12:25:39 +01:00
bd1ee5bdc4
make AR identities available to IMVs via IF-IMV 1.4 draft
2013-02-11 15:30:44 +01:00
ebb87f08f7
Make IKE/EAP IDs available to TNC server/client
2013-02-11 15:30:44 +01:00
98063d8187
Don't use a time_t variable with fscanf when parsing uptime
...
Because "%u" is used as format string in the fscanf call that parses the
uptime and because the length of time_t varies on different platforms
and architectures the value was not written properly if time_t was longer
than an unsigned int and depending on how the target variable was aligned
on the stack. Since there is no conversion specifier to properly parse a
time_t value we use the appropriate integer type instead.
2013-02-08 11:33:13 +01:00
af5452ba76
Allow more than one CERTREQ payload for IKEv2
...
There is no reason not to do so (RFC 5996 explicitly mentions multiple
CERTREQ payloads) and some implementations seem to use the same behavior
as had to be used with IKEv1 (i.e. each CA in its own CERTREQ payload).
2013-02-08 11:28:56 +01:00
f476ff84f3
Add a --httptimeout option to scepclient
2013-02-08 11:09:33 +01:00
763e86c093
Use CURL_TIMEOUT and not CURL_CONNECTTIMEOUT for FETCHER_TIMEOUT in curl
...
This allows us to use this timeout beyond DNS resolution. For the initial
connect, we use a hardcoded timeout of 10s for now.
2013-02-08 11:08:06 +01:00
88f4cd3988
Add ikedscp documentation to ipsec.conf.5
2013-02-06 15:42:14 +01:00
7fbe516f88
Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packets
2013-02-06 15:36:36 +01:00
5b15bd5f9d
Set configured DSCP value while generating IKE packets
2013-02-06 15:20:32 +01:00
306a269e34
Add a DSCP configuration value to IKE configs
2013-02-06 15:20:32 +01:00
ea5917afd8
Set DSCP values when sending IP packets in socket-default
2013-02-06 15:20:32 +01:00
Andreas Steffen