Andreas Steffen [Wed, 10 Nov 2010 21:22:27 +0000 (22:22 +0100)]
implemented mutex locking the batch in construction
Andreas Steffen [Wed, 10 Nov 2010 21:02:20 +0000 (22:02 +0100)]
fixed received test message
Andreas Steffen [Wed, 10 Nov 2010 20:53:17 +0000 (21:53 +0100)]
implemented mutex locking the recommendations list
Andreas Steffen [Wed, 10 Nov 2010 20:30:50 +0000 (21:30 +0100)]
display ID of registered IMCs/IMVs
Andreas Steffen [Wed, 10 Nov 2010 20:23:10 +0000 (21:23 +0100)]
implemented recommendation storage
Andreas Steffen [Wed, 10 Nov 2010 20:22:27 +0000 (21:22 +0100)]
created enum names for action recommendations and evaluation results
Andreas Steffen [Wed, 10 Nov 2010 20:20:53 +0000 (21:20 +0100)]
removed debug output of tnc_imv_bind_functions
Martin Willi [Wed, 10 Nov 2010 17:34:59 +0000 (18:34 +0100)]
Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted
Martin Willi [Wed, 10 Nov 2010 17:16:17 +0000 (18:16 +0100)]
Add flags for PKCS#11 libraries with reduced feature set
Andreas Steffen [Wed, 10 Nov 2010 16:59:41 +0000 (17:59 +0100)]
enforce_recommendation inserts TNC group membership rules for IKE_SA
Andreas Steffen [Wed, 10 Nov 2010 14:44:51 +0000 (15:44 +0100)]
defined PB-TNC types
Andreas Steffen [Wed, 10 Nov 2010 14:44:09 +0000 (15:44 +0100)]
append any previously collection messages to batch
Andreas Steffen [Wed, 10 Nov 2010 09:57:01 +0000 (10:57 +0100)]
read IMC/IMV configurations from /etc/tnc_config
Andreas Steffen [Tue, 9 Nov 2010 11:45:21 +0000 (12:45 +0100)]
unload the IMCs and IMVs using dlclose()
Andreas Steffen [Tue, 9 Nov 2010 11:30:26 +0000 (12:30 +0100)]
implemented separate protocol and connection rwlocks
Andreas Steffen [Mon, 8 Nov 2010 22:56:20 +0000 (23:56 +0100)]
assign provide_recommendation callback function
Andreas Steffen [Mon, 8 Nov 2010 22:13:40 +0000 (23:13 +0100)]
implemented batch_ending() and solicit_recommendation() functions
Andreas Steffen [Mon, 8 Nov 2010 21:33:01 +0000 (22:33 +0100)]
added get_count() method to IMC/IMV managers
Andreas Steffen [Mon, 8 Nov 2010 21:21:53 +0000 (22:21 +0100)]
abort if one of the IMCs or IMVs fail to initialize
Andreas Steffen [Mon, 8 Nov 2010 18:39:16 +0000 (19:39 +0100)]
removed whitespace
Andreas Steffen [Mon, 8 Nov 2010 18:25:25 +0000 (19:25 +0100)]
implemented provide_recommendation callback function
Andreas Steffen [Mon, 8 Nov 2010 14:53:50 +0000 (15:53 +0100)]
added imc/imv_manager remove method
Andreas Steffen [Mon, 8 Nov 2010 10:41:14 +0000 (11:41 +0100)]
removed dependencies from libtnc
Andreas Steffen [Sun, 7 Nov 2010 23:29:44 +0000 (00:29 +0100)]
insert IMV/IMC before providing BindFunction
Andreas Steffen [Sun, 7 Nov 2010 11:16:52 +0000 (12:16 +0100)]
tnc_imc/tnc_imv cosmetics
Andreas Steffen [Sun, 7 Nov 2010 11:03:26 +0000 (12:03 +0100)]
tnccs header cosmetics
Andreas Steffen [Sun, 7 Nov 2010 10:56:56 +0000 (11:56 +0100)]
imv/imc header cosmetics
Andreas Steffen [Sun, 7 Nov 2010 00:17:21 +0000 (01:17 +0100)]
implemented receive_message() function
Andreas Steffen [Sat, 6 Nov 2010 22:01:59 +0000 (23:01 +0100)]
support of reportMessageTypes() function
Andreas Steffen [Sat, 6 Nov 2010 19:38:59 +0000 (20:38 +0100)]
moved TNCCS callback functions into bind_function.c
Andreas Steffen [Sat, 6 Nov 2010 19:13:41 +0000 (20:13 +0100)]
implemented send_message() callback function
Andreas Steffen [Fri, 5 Nov 2010 23:54:10 +0000 (00:54 +0100)]
implement IMC and IMV manager classes
Andreas Steffen [Thu, 4 Nov 2010 22:59:31 +0000 (23:59 +0100)]
check if optional terminate() function exists
Andreas Steffen [Thu, 4 Nov 2010 22:56:16 +0000 (23:56 +0100)]
added connection management to TNCCS manager
Andreas Steffen [Thu, 4 Nov 2010 21:08:47 +0000 (22:08 +0100)]
select TNCCS protocol via charon.plugins.eap-tnc.protocol
Andreas Steffen [Thu, 4 Nov 2010 18:42:08 +0000 (19:42 +0100)]
changed ACL properties of header files
Andreas Steffen [Thu, 4 Nov 2010 15:19:39 +0000 (16:19 +0100)]
cleaned up whitespace
Andreas Steffen [Thu, 4 Nov 2010 13:56:34 +0000 (14:56 +0100)]
implemented IMC/IMV handler
Andreas Steffen [Tue, 9 Nov 2010 19:35:53 +0000 (20:35 +0100)]
fixed memory leak in EAP-TTLS piggy-back mode
Martin Willi [Wed, 3 Nov 2010 14:12:05 +0000 (15:12 +0100)]
Added a stroke rekey command to trigger IKE/CHILD_SA rekeying manually
Andreas Steffen [Tue, 2 Nov 2010 09:46:30 +0000 (10:46 +0100)]
two fixes in tnccs_11
Tobias Brunner [Tue, 2 Nov 2010 08:30:09 +0000 (09:30 +0100)]
Removed signing artifact.
Andreas Steffen [Mon, 1 Nov 2010 19:40:38 +0000 (20:40 +0100)]
removed strongswan-4.5.0.tar.bz2.bak
Andreas Steffen [Mon, 1 Nov 2010 17:54:43 +0000 (18:54 +0100)]
moved tnccs-20 plugin in front of tnc-imv and intc-imc
Andreas Steffen [Fri, 29 Oct 2010 07:30:57 +0000 (09:30 +0200)]
version bump to 4.5.1
Andreas Steffen [Thu, 28 Oct 2010 18:23:59 +0000 (20:23 +0200)]
version bump to 4.5.0
Andreas Steffen [Thu, 28 Oct 2010 18:23:22 +0000 (20:23 +0200)]
completed NEWS for the 4.5.0 release
Martin Willi [Thu, 28 Oct 2010 12:40:54 +0000 (14:40 +0200)]
Store proposal number in proposal_t to reuse it in the selected proposal
According to RFC 5996 3.3.1, we MUST reuse the proposal number of
the selected proposal in the SA payload reply.
Martin Willi [Thu, 28 Oct 2010 12:33:03 +0000 (14:33 +0200)]
Migrated proposal_t to INIT/METHOD macros
Martin Willi [Thu, 28 Oct 2010 12:21:44 +0000 (14:21 +0200)]
Migrated proposal_substructure to INIT/METHOD macros, removed unused methods
Martin Willi [Thu, 28 Oct 2010 12:21:02 +0000 (14:21 +0200)]
Migrated sa_payload to INIT/METHOD macros, removed unused methods
Martin Willi [Thu, 21 Oct 2010 14:35:01 +0000 (16:35 +0200)]
Renamed mem_cred_t clear function internally to clear_, fixes potential name conflict
Tobias Brunner [Fri, 22 Oct 2010 09:34:11 +0000 (11:34 +0200)]
pluto: Fixed a regression introduced in
f565d0c575.
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
Tobias Brunner [Fri, 22 Oct 2010 09:05:10 +0000 (11:05 +0200)]
pluto: Locking fixed in cert_add.
Andreas Steffen [Mon, 25 Oct 2010 17:31:07 +0000 (19:31 +0200)]
payloads are not aligned to 4 byte boundaries
Andreas Steffen [Mon, 25 Oct 2010 16:20:30 +0000 (18:20 +0200)]
version bump to 4.5.0rc3
Andreas Steffen [Sun, 24 Oct 2010 18:30:19 +0000 (20:30 +0200)]
fixed 64 bit printf() issue
Tobias Brunner [Thu, 21 Oct 2010 13:02:32 +0000 (15:02 +0200)]
Updated Android.mk to latest Makefile.am.
Tobias Brunner [Thu, 21 Oct 2010 12:16:09 +0000 (14:16 +0200)]
Added missing include for RAND_seed and RAND_status.
Martin Willi [Wed, 20 Oct 2010 10:30:22 +0000 (12:30 +0200)]
Set ownership of all HA ClusterIP control files
Martin Willi [Wed, 20 Oct 2010 10:29:45 +0000 (12:29 +0200)]
Set ownership/permissions of HA control socket
Tobias Brunner [Tue, 19 Oct 2010 15:17:15 +0000 (17:17 +0200)]
Changed some minor stuff in ipsec.conf(5) man page.
Also added some "links" to strongswan.conf(5).
Tobias Brunner [Tue, 19 Oct 2010 15:16:07 +0000 (17:16 +0200)]
Added accepted values to all options in ipsec.conf(5) man page.
Tobias Brunner [Tue, 19 Oct 2010 15:06:57 +0000 (17:06 +0200)]
Removed unsupported options from ipsec.conf(5) man page.
Tobias Brunner [Tue, 19 Oct 2010 08:52:01 +0000 (10:52 +0200)]
Fixed SEE ALSO references in main man pages.
Tobias Brunner [Tue, 19 Oct 2010 08:44:43 +0000 (10:44 +0200)]
Added notes about expiry and rekey to ipsec.conf(5) man page.
Martin Willi [Mon, 18 Oct 2010 10:31:48 +0000 (12:31 +0200)]
Prefer the 'server identifier' attribute address to send DHCP requests to
Andreas Steffen [Sat, 16 Oct 2010 18:47:38 +0000 (20:47 +0200)]
version bump to 4.5.0rc2
Andreas Steffen [Sat, 16 Oct 2010 14:15:10 +0000 (16:15 +0200)]
define state_story for STATE_UNDEFINED
Tobias Brunner [Fri, 15 Oct 2010 16:17:09 +0000 (18:17 +0200)]
Added some NEWS about Maemo, MOBIKE and the kernel interfaces.
Tobias Brunner [Fri, 15 Oct 2010 16:14:48 +0000 (18:14 +0200)]
Some Doxygen fixes.
Tobias Brunner [Fri, 15 Oct 2010 15:33:57 +0000 (17:33 +0200)]
Missed one unneeded destructor.
Tobias Brunner [Fri, 15 Oct 2010 15:24:23 +0000 (17:24 +0200)]
Deferred instantiation of socket implmentations until registration.
Instantiating the implementations on plugin load was problematic
in case multiple socket plugins were loaded. Now, the first one
registered is instantiated.
Egbert Koening [Fri, 15 Oct 2010 09:09:24 +0000 (11:09 +0200)]
fix segfault when reading certificate from smartcard
Tobias Brunner [Fri, 15 Oct 2010 08:23:32 +0000 (10:23 +0200)]
Added some generated files to .gitignore.
Martin Willi [Fri, 15 Oct 2010 08:13:35 +0000 (10:13 +0200)]
Added NEWS about multiple RADIUS servers, LED plugin
Martin Willi [Fri, 15 Oct 2010 08:00:55 +0000 (10:00 +0200)]
Fixed IKEv2 RFC number in NEWS
Andreas Steffen [Thu, 14 Oct 2010 19:28:05 +0000 (21:28 +0200)]
IKEv2 is now the default key exchange protocol
Andreas Steffen [Thu, 14 Oct 2010 19:20:27 +0000 (21:20 +0200)]
added TNC support to NEWS
Andreas Steffen [Thu, 14 Oct 2010 19:10:03 +0000 (21:10 +0200)]
do not send certificate requests in EAP-ONLY scenarios
Andreas Steffen [Thu, 14 Oct 2010 19:00:26 +0000 (21:00 +0200)]
suport certificate-based client authentication with EAP-TTLS
Andreas Steffen [Thu, 14 Oct 2010 18:55:21 +0000 (20:55 +0200)]
added ikev2/rw-eap-tnc-ls scenario
Tobias Brunner [Thu, 14 Oct 2010 15:45:19 +0000 (17:45 +0200)]
Moved sources of the NetworkManager plugin to src/frontends.
Tobias Brunner [Thu, 14 Oct 2010 15:33:42 +0000 (17:33 +0200)]
Maemo: Added a basic debian package for charon.
Tobias Brunner [Thu, 14 Oct 2010 15:10:13 +0000 (17:10 +0200)]
Avoid recursive loop if no socket implementations are loaded.
Tobias Brunner [Thu, 14 Oct 2010 15:01:08 +0000 (17:01 +0200)]
Maemo: Added a widget to "unselect" a certificate.
Tobias Brunner [Thu, 14 Oct 2010 13:25:57 +0000 (15:25 +0200)]
Avoid duplicate certificates in mem_cred_t.
Tobias Brunner [Thu, 14 Oct 2010 13:00:19 +0000 (15:00 +0200)]
Maemo: Load CA certificates from system directories.
Tobias Brunner [Thu, 30 Sep 2010 13:22:59 +0000 (15:22 +0200)]
Maemo: OK is default response in password dialog.
Tobias Brunner [Thu, 30 Sep 2010 11:50:28 +0000 (13:50 +0200)]
Maemo: Handle status changes from charon.
Use synchronous invocation for "Connect" again.
Tobias Brunner [Thu, 30 Sep 2010 11:46:50 +0000 (13:46 +0200)]
Maemo: Track the status of the current SA and send changes to the frontend.
Tobias Brunner [Thu, 30 Sep 2010 11:43:58 +0000 (13:43 +0200)]
Maemo: Properly unregister the RPC callbacks.
Tobias Brunner [Fri, 24 Sep 2010 14:45:33 +0000 (16:45 +0200)]
Maemo: Plugin implements the listener_t interface.
Tobias Brunner [Fri, 24 Sep 2010 14:37:18 +0000 (16:37 +0200)]
Maemo: Extracted most plugin code to a separate class, so we can use that as listener.
Tobias Brunner [Fri, 24 Sep 2010 14:27:02 +0000 (16:27 +0200)]
Maemo: Initiate consumes a child_sa reference, so get an additional one.
Tobias Brunner [Fri, 24 Sep 2010 14:15:04 +0000 (16:15 +0200)]
Maemo: Basic functionality added to notify the applet about status updates.
Tobias Brunner [Fri, 24 Sep 2010 12:37:11 +0000 (14:37 +0200)]
Maemo: Clear the credentials before each connection attempt.
Tobias Brunner [Fri, 24 Sep 2010 12:33:39 +0000 (14:33 +0200)]
Added function to clear all credentials from mem_cred_t.
Tobias Brunner [Fri, 24 Sep 2010 11:27:44 +0000 (13:27 +0200)]
Maemo: Do not store the password in the config file, ask the user for it on demand.
Tobias Brunner [Tue, 21 Sep 2010 15:16:10 +0000 (17:16 +0200)]
Maemo: Debianized the status applet.