c6c7c7001c
Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv
2011-02-08 11:03:10 +01:00
3683c0424f
Fixed compiler warning
2011-02-08 11:03:10 +01:00
3af88e4657
tnccs_11 does not link to libtnc anymore
2011-02-08 11:03:10 +01:00
10a6019ec6
Implement correct signature for pb_tnc_msg->process()
2011-02-08 10:57:41 +01:00
6cc11bccd1
Fixed various doxygen errors in tnc plugins
2011-02-08 10:57:40 +01:00
56f57e5814
maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes.
...
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
2011-02-04 18:02:48 +01:00
88e15afc8c
added comment to determine_tnccs_protocol() function
2011-01-31 05:31:22 +01:00
f652995b21
implemented dynamic detection of TNCCS protocol
2011-01-31 00:59:17 +01:00
60b71def1a
Use wrapped threading functions in ha plugin
2011-01-20 15:52:29 +01:00
9bac426bf3
Fixed memory cleanup if no DHCP transaction found for an OFFER
2011-01-13 10:36:16 +01:00
213281de04
terminate TNCCS 1.1 connection after sending recommendation
2011-01-11 01:17:40 +01:00
4c8e9708ca
fixed XML syntax for TNCCS-Recommendation messages
2011-01-11 01:17:40 +01:00
59d1b15aea
implemented check_and_build_recommendation()
2011-01-11 01:17:40 +01:00
21d96f44f7
correct numbering of batches
2011-01-11 01:17:40 +01:00
8d0d0f0fe9
initialize the reference count correctly
2011-01-11 01:17:40 +01:00
f33966fe8f
handle zero size Base64 conversions
2011-01-11 01:17:40 +01:00
8a284e0454
communicate DELETE state to IMCs and IMVs
2011-01-11 01:17:40 +01:00
5fee822a93
implemented parsing of TNCCS 1.1 messages
2011-01-09 10:00:54 +01:00
33749b879c
send notifyConnectionChange() to IMCs
2011-01-09 10:00:13 +01:00
8235528840
generate TNCCS-Error messages
2011-01-08 02:17:42 +01:00
1c4b4f76ad
created process() method for TNCCS messages
2011-01-08 02:17:42 +01:00
44e513a320
Added support for trustchain key strength checking to rightauth option
2011-01-07 15:51:35 +01:00
6367de28ad
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
2011-01-07 15:51:35 +01:00
3a04dfaaf6
corrected naming of tnccs_reason_strings_msg_t object
2011-01-07 07:18:42 +01:00
87fd83a91e
do not forget to advance node
2011-01-07 07:17:52 +01:00
3e348daae5
fixed cert_validator_t:validate interface
2011-01-07 05:41:01 +01:00
d9e21bf180
implemented TNCCS 1.1 without libtnc
2011-01-07 05:29:59 +01:00
2e90006f96
Show base CRL of delta CRLs in listcrls
2011-01-05 16:46:06 +01:00
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
1038d9fee5
Added a null-safe strdup variant
2011-01-05 16:46:02 +01:00
3d653727a8
removed superfluous s
2011-01-05 04:09:19 +01:00
97613b3b1a
remove private_
2011-01-05 03:44:57 +01:00
d0eb22333e
remove private_
2011-01-05 03:44:28 +01:00
ac46c8be5c
cosmetics in debug output
2011-01-05 02:44:27 +01:00
69e8407d51
detect fragmentation of PB-TNC batch
2011-01-05 02:41:36 +01:00
dcde152265
fixed typo
2011-01-02 06:52:32 +01:00
1c7a729100
set tfcv3 flag TRUE in ha_dispatcher
2010-12-26 23:10:57 +01:00
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
2010-12-26 17:11:02 +01:00
16b6606e5f
wrap list of IKEv2 algorithms after 120 characters per line
2010-12-24 17:29:51 +01:00
cb6be85cfe
Migrated stroke_list_t to INIT/METHOD macros
2010-12-24 14:29:09 +01:00
6c302616f1
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
2010-12-20 09:45:39 +01:00
37788b1d06
Added a TFC padding option to child_cfg
2010-12-20 09:45:39 +01:00
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
2010-12-20 09:45:39 +01:00
5932f41fcc
trace back crypto algorithms to the plugins that registered them
2010-12-18 16:31:12 +01:00
836d9a795b
reverted Connection ID to capital letters
2010-12-12 12:55:14 +01:00
c2e625514d
some more cosmetics
2010-12-12 10:19:54 +01:00
41216e6518
final cosmetics in PB-TNC debug output
2010-12-12 10:17:43 +01:00
54eb669dd5
implemented PB-TNC message parsing checks
2010-12-12 00:42:31 +01:00
3a4695dc5e
some code optimizations
2010-12-11 00:52:53 +01:00
781730b86a
support handshake retry requests
2010-12-10 23:41:12 +01:00
4ca368d223
the PB-TNC protocol is working
2010-12-10 23:21:13 +01:00
512d2e045f
refactored message handling
2010-12-10 17:09:21 +01:00
af1e3ff567
do not accept results and recommendation messages from clients
2010-12-10 17:04:11 +01:00
5988fc0dfd
define pb_tnc_state_machine_t object
2010-12-10 14:56:40 +01:00
755f2419a5
debug cosmetics
2010-12-10 11:55:02 +01:00
cf5866b9c0
Renamed purgex509/crl to purgecerts/crls to be consistent with list commands
2010-12-10 11:21:55 +01:00
7e7efa647e
implemented handling of received PB-TNC messages
2010-12-10 11:16:57 +01:00
6aa144ddb7
Added options to flush CRLs/X509 certs from the cert cache
2010-12-10 09:45:22 +01:00
68fada37b1
refactored PB-TNC state machine in receive direction
2010-12-09 23:38:38 +01:00
7382a639fb
refactored PB-TNC state machine in send direction
2010-12-09 23:18:55 +01:00
4333c48a1b
pb_tnc_batch_t class implements parsing and building of PB-TNC batches
2010-12-09 21:33:12 +01:00
2f942ba67d
fixed memory corruption
2010-12-08 12:15:53 +01:00
4332cd7f95
added newline
2010-12-07 09:02:55 +01:00
faccd69068
re-introduced comment
2010-12-07 09:01:28 +01:00
a42aaed64f
Migrated stroke_control_t to INIT/METHOD macros
2010-12-07 08:58:57 +01:00
d31aec9fa7
Migrated stroke_plugin_t to INIT/METHOD macros
2010-12-07 08:01:56 +01:00
93cbe45c09
stupid typo
2010-12-05 15:48:22 +01:00
fba18c5105
cosmetics
2010-12-05 15:23:18 +01:00
02f08ef910
cosmetics
2010-12-05 15:16:15 +01:00
a6bf8e9118
added parsing checks
2010-12-05 15:01:01 +01:00
2da636fd9b
support of reqid field in SQL database
2010-12-05 11:21:40 +01:00
e150442bed
fixed pb_reason_string_message_t class
2010-12-05 11:20:18 +01:00
503e1c558e
CDP enumerator added to SQL plugin.
2010-12-03 18:07:17 +01:00
37bc379951
Tables added for CAs and CDPs.
2010-12-03 18:07:17 +01:00
ece5d52e38
Migrated sql_cred_t to INIT/METHOD macros.
2010-12-03 18:07:17 +01:00
5b2d9f24f5
Refactored stroke_cred_t to use mem_cred_t.
2010-12-03 18:00:00 +01:00
413d8fe0e3
Avoid calling globfree twice on failure.
2010-12-03 17:38:36 +01:00
375dacca8e
removed superfluous whitespace
2010-12-03 11:26:13 +01:00
e1ee0e20f7
PB-TNC messages implemented
2010-12-03 10:23:04 +01:00
a072c34a63
check for malformed IKE and ESP proposals
2010-12-01 09:50:30 +01:00
e79567d07e
Migrated sql_plugin_t to INIT/METHOD macros
2010-11-30 23:31:24 +01:00
e7f586131e
Migrated sql_config_t to INIT/METHOD macros
2010-11-30 23:27:51 +01:00
cbdcca7fd7
renamed algorithm to proposal
2010-11-30 17:38:49 +01:00
f4e5acef3a
store IKE and ESP proposals in SQL database
2010-11-30 17:03:21 +01:00
c616d84c3f
start and route connections defined in an SQL database via start_action field and ipsec up %startall command
2010-11-28 11:57:49 +01:00
a9ac8c51ea
Migrated stroke_config_t to INIT/METHOD macros
2010-11-27 01:12:58 +01:00
a5ffb559d2
Migrated stroke_cat_t to INIT/METHOD macros
2010-11-27 00:49:15 +01:00
6b7897728a
support PEM-encoded certificates stored in SQL databases
2010-11-26 13:47:37 +01:00
3fe656fdc9
fixed a couple of bugs in the prototype
2010-11-23 16:33:23 +01:00
8d6366e87a
set PB_MSG_PA message type
2010-11-23 16:32:09 +01:00
7a39b9ebf8
prototype implementation using the pb_tnc_message_t class
2010-11-23 14:44:16 +01:00
7828bd1bd6
defined a pb_tnc_message_t interface
2010-11-23 14:27:57 +01:00
6ee5c912e7
implemented create_reason_enumerator() function
2010-11-19 17:23:06 +01:00
8a5c7db860
implemented request_handshake_retry() function
2010-11-19 08:52:18 +01:00
a423a96140
added IMC and IMV IDs as arguments to send_message()
2010-11-17 00:04:10 +01:00
04b132e088
initialize chunks and add debug output
2010-11-16 22:28:10 +01:00
c957aaa411
load IMCs and IMVs with RTLD_LAZY
2010-11-16 22:14:20 +01:00
ad7e3b1d1e
fixed memory leak
2010-11-16 21:37:38 +01:00
343f4793a8
implement set_attribute() callback function
2010-11-16 21:07:02 +01:00
92477a0625
implement GetAttribute() callback function
2010-11-16 20:14:48 +01:00
2fe06d33c3
reformulated recommendation policies
2010-11-16 11:00:40 +01:00
54b1896b31
mutex.h is not needed any more
2010-11-16 09:15:17 +01:00
3b0e64d56e
imv_list consists of linked imv_t instances
2010-11-16 09:09:39 +01:00
7c2201aded
implemented have_recommendation() based on a choice of 3 policies
2010-11-15 18:25:58 +01:00
c06c7ce792
log configured recommendation policy
2010-11-14 11:29:27 +01:00
de1cb3283a
configure recommendation policy via strongswan.conf
2010-11-14 11:23:47 +01:00
77b6f245e4
re-establish null pointer if IMC/IMV manager plugin could not be installed
2010-11-14 09:50:01 +01:00
10647add81
moved recommendation handling to the tnc_imv plugin
2010-11-13 10:02:02 +01:00
46ddebbf13
removed debug output in IMC bind functions
2010-11-11 07:51:56 +01:00
e2a0bea5d6
added get_preferred_language() to tnc_imc
2010-11-11 07:30:13 +01:00
c2835ef29f
created dummy have_recommendation() function
2010-11-10 22:42:36 +01:00
3db904641e
implemented mutex locking the batch in construction
2010-11-10 22:22:27 +01:00
c0cb1f8a09
fixed received test message
2010-11-10 22:02:20 +01:00
b777d2a46b
implemented mutex locking the recommendations list
2010-11-10 21:53:17 +01:00
e7fe3fe2c3
display ID of registered IMCs/IMVs
2010-11-10 21:30:50 +01:00
cc5f7aa3d8
implemented recommendation storage
2010-11-10 21:23:37 +01:00
7785452fc4
removed debug output of tnc_imv_bind_functions
2010-11-10 21:23:37 +01:00
41ec04c34d
enforce_recommendation inserts TNC group membership rules for IKE_SA
2010-11-10 17:59:41 +01:00
498a583f4a
defined PB-TNC types
2010-11-10 15:44:51 +01:00
b55310b3a8
append any previously collection messages to batch
2010-11-10 15:44:09 +01:00
7ead19a700
read IMC/IMV configurations from /etc/tnc_config
2010-11-10 10:57:01 +01:00
fa1a82f47a
unload the IMCs and IMVs using dlclose()
2010-11-09 20:43:51 +01:00
d599902a3a
implemented batch_ending() and solicit_recommendation() functions
2010-11-09 20:43:51 +01:00
08235c7ded
added get_count() method to IMC/IMV managers
2010-11-09 20:43:51 +01:00
c228ad607c
abort if one of the IMCs or IMVs fail to initialize
2010-11-09 20:43:51 +01:00
8126344264
removed whitespace
2010-11-09 20:43:51 +01:00
213245cca9
implemented provide_recommendation callback function
2010-11-09 20:43:51 +01:00
1dc7b22c53
added imc/imv_manager remove method
2010-11-09 20:43:51 +01:00
bcd386a95f
removed dependencies from libtnc
2010-11-09 20:43:50 +01:00
8286b93af2
insert IMV/IMC before providing BindFunction
2010-11-09 20:43:50 +01:00
eefcf33c4c
tnc_imc/tnc_imv cosmetics
2010-11-09 20:43:50 +01:00
e6b6fc881f
implemented receive_message() function
2010-11-09 20:43:50 +01:00
296636252b
support of reportMessageTypes() function
2010-11-09 20:43:50 +01:00
544b094277
moved TNCCS callback functions into bind_function.c
2010-11-09 20:43:50 +01:00
2a647d5d50
implemented send_message() callback function
2010-11-09 20:43:50 +01:00
b25633314e
implement IMC and IMV manager classes
2010-11-09 20:43:50 +01:00
c78be5691c
check if optional terminate() function exists
2010-11-09 20:43:50 +01:00
fe5ce8f3a2
select TNCCS protocol via charon.plugins.eap-tnc.protocol
2010-11-09 20:43:50 +01:00
a816f1f588
cleaned up whitespace
2010-11-09 20:43:50 +01:00
1888dd6bd5
implemented IMC/IMV handler
2010-11-09 20:43:50 +01:00
4da597631f
fixed memory leak in EAP-TTLS piggy-back mode
2010-11-09 20:35:53 +01:00
851d60484e
Added a stroke rekey command to trigger IKE/CHILD_SA rekeying manually
2010-11-03 15:12:05 +01:00
49a9028201
two fixes in tnccs_11
2010-11-02 10:46:30 +01:00
bb16217581
Store proposal number in proposal_t to reuse it in the selected proposal
...
According to RFC 5996 3.3.1, we MUST reuse the proposal number of
the selected proposal in the SA payload reply.
2010-10-28 15:08:14 +02:00
9b9352c83b
fixed 64 bit printf() issue
2010-10-24 20:30:19 +02:00
185c2669d5
Set ownership of all HA ClusterIP control files
2010-10-20 14:55:26 +02:00
384b69d964
Set ownership/permissions of HA control socket
2010-10-20 14:54:51 +02:00
e3bde0ef82
Prefer the 'server identifier' attribute address to send DHCP requests to
2010-10-18 12:32:16 +02:00
6c6492d7e8
Some Doxygen fixes.
2010-10-15 18:14:48 +02:00
5ce1a63054
Missed one unneeded destructor.
2010-10-15 17:33:57 +02:00
fa20849431
Deferred instantiation of socket implmentations until registration.
...
Instantiating the implementations on plugin load was problematic
in case multiple socket plugins were loaded. Now, the first one
registered is instantiated.
2010-10-15 17:30:21 +02:00
d3622166dd
Added some generated files to .gitignore.
2010-10-15 10:25:08 +02:00
260d056170
suport certificate-based client authentication with EAP-TTLS
2010-10-14 21:00:41 +02:00
cf1bf2656e
Moved sources of the NetworkManager plugin to src/frontends.
2010-10-14 17:47:02 +02:00
3a6c5493af
Maemo: Load CA certificates from system directories.
2010-10-14 17:36:20 +02:00
ef247379ea
Maemo: Track the status of the current SA and send changes to the frontend.
2010-10-14 17:36:19 +02:00
6f59971371
Maemo: Properly unregister the RPC callbacks.
2010-10-14 17:36:19 +02:00
9f01ba4044
Maemo: Plugin implements the listener_t interface.
2010-10-14 17:36:19 +02:00
39e5b21310
Maemo: Extracted most plugin code to a separate class, so we can use that as listener.
2010-10-14 17:36:19 +02:00
4fef86d1ed
Maemo: Initiate consumes a child_sa reference, so get an additional one.
2010-10-14 17:36:19 +02:00
28c51809a7
Maemo: Basic functionality added to notify the applet about status updates.
2010-10-14 17:36:19 +02:00
c213353393
Maemo: Clear the credentials before each connection attempt.
2010-10-14 17:36:19 +02:00
c0d9c1817b
Maemo: Listen for a special "Start" D-BUS call.
...
This call is made on the system D-BUS so that charon is started as root.
2010-10-14 17:36:18 +02:00
174b31bce6
Maemo: Added support for connection initiation and shutdown.
2010-10-14 17:36:18 +02:00
8464e25a0f
Maemo: Register with libosso and init Glib main loop.
2010-10-14 17:36:18 +02:00
2bce814190
Maemo: Register charon as D-BUS system service.
...
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
2010-10-14 17:36:18 +02:00
f79161e866
Stub plugin for Maemo specific extensions added.
2010-10-14 17:36:17 +02:00
ed08f7ce83
use DBG_TNC for TNC debugging output
2010-10-09 16:01:19 +02:00
3cb3f85dfc
TNCCS debug cosmetics
2010-10-09 00:58:12 +02:00
e9ba435fe3
revert to standard TNCC/TNCS Initialization function
2010-10-09 00:35:45 +02:00
bfba1fdc92
implemented TNC isolation via group memberships
2010-10-09 00:34:53 +02:00
db2f66c2df
implemented a makeshift non-scalable send buffer
2010-10-08 22:24:30 +02:00
55960a170f
imc/imv cosmetics
2010-10-08 06:40:03 +02:00
8dcc56dcc0
created tnc-imc and tnc-imv plugins
2010-10-07 23:31:23 +02:00
04d000210b
deactivate start_phase2_tnc flag after start
2010-10-07 15:42:00 +02:00
888455587b
added server side support for EAP-TNC
2010-10-07 15:02:51 +02:00
962300b920
Show result of RADIUS authentication along with EAP identity
2010-10-07 11:14:09 +02:00
bb43f25ad3
configure tnc_config path and preferred_language via strongswan.conf
2010-10-05 22:09:07 +02:00
6d0e9cf046
created hull for TNCCS 2.0 plugin
2010-10-05 21:15:24 +02:00
a1edf4d33e
use group membership to implement access/isolate redirection in filter-based TNC scenario
2010-10-05 20:40:36 +02:00
b540d19133
moved CHILD_SA selection out of attribute loop
2010-10-05 08:02:07 +02:00
28b23fef11
receive name of preferred CHILD_SA via RADIUS Filter-Id attribute
2010-10-05 07:58:07 +02:00
a00a43e0f6
print XML as plaintext and process recieved TNCCS Batch
2010-09-30 23:34:00 +02:00
f685b3aca0
started use of libtnc library
2010-09-29 23:24:59 +02:00
4e8e74fcfa
moved TNCCS layer out of eap_tnc plugin
2010-09-28 23:34:04 +02:00
80f86acccb
show validity of OCSP responses
2010-09-10 22:26:03 +02:00
3f58022679
debug output of inbound and outbound TNCCS batches
2010-09-09 11:15:08 +02:00
20ad62026e
support non EAP-TTLS conformant RADIUS-type attribute segmentation
2010-09-09 11:15:08 +02:00
b1baa90846
Fixed copy/paste error.
2010-09-09 10:10:43 +02:00
3b7eb3a9f4
added explanatory comments
2010-09-09 08:57:13 +02:00
48b8cbb206
send well-formed TNCCS-Batch
2010-09-08 13:44:34 +02:00
de29e3a683
max max_message_count configurable and move it into tls_eap_t
2010-09-08 12:58:45 +02:00
30cd31fb69
Added a simple led plugin to control Linux LEDs based on IKE activity
2010-09-08 12:00:57 +02:00
51b385d44d
moved tls_t existance test into tls_eap_create() again
2010-09-08 11:09:11 +02:00
d2b1d4378e
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
2010-09-08 11:01:53 +02:00
f6697eadb9
Scheduler and processor have been moved to libstrongswan.
...
Also reverts 0c21dc000d
2010-09-02 19:04:23 +02:00
34cf6def83
Fixing installation of trap policies (SPI=0) in kernel interface.
2010-09-02 19:04:21 +02:00
b4872c1e09
Replaced the protocol argument in add_policy with an optional SPI for an AH SA.
2010-09-02 19:04:19 +02:00
bb381e26c6
Refer to scheduler and processor via lib and not hydra.
2010-09-02 19:04:18 +02:00
Martin Willi