Martin Willi
b091d80aff
Replace optionsfrom LGPLv2 header by a GPLv2
2012-11-30 18:00:39 +01:00
Martin Willi
01bc9bf428
Fix GPL license header to properly "sed" it
2012-11-30 18:00:33 +01:00
Martin Willi
c543616315
Add locking to IMC/IMV managers to add/remove IMC/IMVs on the fly
2012-11-30 15:49:23 +01:00
Martin Willi
7e45257f7d
Reuse generic constructor in IMV/IMC message
2012-11-30 15:49:12 +01:00
Martin Willi
a6722e5653
Add getters for the raw encoding in IMV/IMC messages
2012-11-30 15:49:07 +01:00
Martin Willi
2a433075e2
Clean up whitespaces in IMC/IMV messages
2012-11-30 15:49:03 +01:00
Martin Willi
fdce28c49c
Don't remove IETF standard errors while parsing IMC/IMV messages
2012-11-30 15:48:55 +01:00
Martin Willi
18bb1a1540
Remove unused get_vendor_id() method in IETF error IF-M attributes
2012-11-30 15:48:44 +01:00
Martin Willi
55b323c224
Check os_version when reading release file, os_name is not set for Debian
2012-11-30 15:48:39 +01:00
Martin Willi
dd685d55e5
Don't unload IMC/IMV managers if no IMC/IMVs loaded from tnc_config
2012-11-30 15:48:26 +01:00
Martin Willi
016d343a50
Add wrappers to IMC/IMV managers loading IMC/IMVs from function pointers
2012-11-30 15:48:20 +01:00
Martin Willi
be18ee8123
If adding an IMC/IMV fails, terminate() it only if it has been initialize()d
2012-11-30 15:48:13 +01:00
Martin Willi
fd885fd390
Add an IMV constructor taking a set of custom TNC_IMV functions
2012-11-30 15:48:02 +01:00
Martin Willi
f1f500c724
Add an IMC constructor taking a set of custom TNC_IMC functions
2012-11-30 15:47:59 +01:00
Martin Willi
cd74959465
Clean up memory management when loading IMC/IMVs from files
2012-11-30 15:47:34 +01:00
Martin Willi
db9c8b6fba
Fix passing of IKE_SA unique_id over lookip socket
2012-11-30 13:44:12 +01:00
Andreas Steffen
81ee269d1f
attest displays dates either in local time or UTC
2012-11-30 09:55:38 +01:00
Andreas Steffen
2b61f7baa3
store detected improper OS settings in database
2012-11-30 00:12:48 +01:00
Martin Willi
78b2a2b148
Add load-tester NEWS
2012-11-29 10:29:17 +01:00
Martin Willi
48828ff0db
Store load-tester address leases in a hashtable for fast removal
2012-11-29 10:22:52 +01:00
Martin Willi
7277e4719e
Consolidated %any(6) host_t parsing
2012-11-29 10:22:52 +01:00
Martin Willi
98d0fd25a8
Remove numeric conversion from resolver, it is done directly in host_t
2012-11-29 10:22:52 +01:00
Martin Willi
47f35b46a1
host_create_from_dns() tries a numeric conversion before asking resolver
2012-11-29 10:22:51 +01:00
Martin Willi
f5fe52bf9a
Add a host_t constructor from string, but with a specific family
2012-11-29 10:22:51 +01:00
Martin Willi
d88597f0dd
Don't wait while removing external IPs used for load testing
2012-11-29 10:22:51 +01:00
Martin Willi
b185cdd16d
Install virtual IPs via interface name, and use an interface lookup where required
2012-11-29 10:22:51 +01:00
Martin Willi
0a54d3e1a1
load-tester can dynamically install a dedicated external IP for each IKE_SA
...
For consistency, the local/remote parameters have been replaced by the
initiator/responder options. As initiator, the initiator option can
be overriden by an addrs section taking key/value pairs with address
pools to use on a specific interface.
2012-11-29 10:22:51 +01:00
Martin Willi
50bd755871
Add an optional kernel-interface parameter to install IPs with a custom prefix
2012-11-29 10:22:51 +01:00
Martin Willi
fdd94fc846
Add a delay option to load-tester socket
2012-11-29 10:22:51 +01:00
Martin Willi
cf85f6b296
Indicate message retransmissions while initiating load-test batches
2012-11-29 10:22:51 +01:00
Martin Willi
3c79b7b7db
Add alerts for sent/received message retransmissions and timeout
2012-11-29 10:22:51 +01:00
Martin Willi
93ceaa7e64
Initiate each load-testing connection with a fresh peer config
2012-11-29 10:22:51 +01:00
Martin Willi
b7acd90763
Initiate IKE_SAs trigger over load-tester socket in parallel
2012-11-29 10:22:51 +01:00
Martin Willi
965f7bd54f
Add a simple load-tester utility to initiate over control socket
2012-11-29 10:22:51 +01:00
Martin Willi
d65683eef4
Add a load-tester control socket to manually trigger initiation
2012-11-29 10:22:50 +01:00
Martin Willi
2685020ace
Lookip plugin additionally reports the IKE_SA unique identifier
2012-11-29 10:00:45 +01:00
Andreas Steffen
f0d4756eb0
allow update of file hashes
2012-11-28 23:18:33 +01:00
Andreas Steffen
e8a491c01a
removed unused header include
2012-11-28 14:37:15 +01:00
Andreas Steffen
b8f0bf00b7
differentiate attestation reason strings
2012-11-28 14:14:41 +01:00
Andreas Steffen
7b6cc33eb2
store collected device information in database
2012-11-28 10:51:11 +01:00
Tobias Brunner
07f826af67
Fixed encoding of TLS extensions (elliptic_curves and signature_algorithms)
2012-11-28 10:20:14 +01:00
Andreas Steffen
ac6dd7d404
store unique device_id in database
2012-11-27 23:48:40 +01:00
Ewa Steffen
710d89f07d
completed Polish language version
2012-11-23 21:45:04 +01:00
Andreas Steffen
2810d934e5
cosmetics
2012-11-23 18:31:44 +01:00
Andreas Steffen
9cbdfdb988
implemented output of item lists in remediation instructions
2012-11-23 18:30:00 +01:00
Andreas Steffen
ee6aeca892
refactored reason string and remediation instructions framework
2012-11-23 12:30:33 +01:00
Martin Willi
b5d27839ad
Do not send 0.0.0.0/0 traffic selectors as Split-Include Unity attributes
...
It seems that iOS devices don't like them.
2012-11-22 12:13:44 +01:00
Andreas Steffen
48b23d06a8
allow the optional sharing if RSA private keys
2012-11-22 00:34:42 +01:00
Tobias Brunner
2cb9a014df
New Android release after adding shortcuts and confirmation dialog
...
Also fixed some Android 4.2 specific issues.
2012-11-21 19:07:52 +01:00
Tobias Brunner
df3e34fe86
android: Don't allow any backup for now
2012-11-21 19:05:18 +01:00