tteras/strongswan/src/libcharon/plugins/eap_tnc, branch master tteras' strongSwan tree https://git-old.alpinelinux.org/user/tteras/strongswan/atom?h=master 2016-03-03T16:36:11Z libhydra: Remove empty unused library 2016-03-03T16:36:11Z Tobias Brunner tobias@strongswan.org 2016-02-12T15:35:54Z urn:sha1:28649f6d91971e0fe50078aec2937010e8c61cd8 Fix of the mutual TNC measurement use case 2016-02-16T17:00:27Z Andreas Steffen andreas.steffen@strongswan.org 2016-02-16T17:00:27Z urn:sha1:4d83c5b4a6bcbf6a6426d7ba79fac4494ab36329 If the IKEv2 initiator acting as a TNC server receives invalid TNC measurements from the IKEv2 responder acting as a TNC clienti, the exchange of PB-TNC batches is continued until the IKEv2 responder acting as a TNC server has also finished its TNC measurements. In the past if these measurements in the other direction were correct the IKEv2 responder acting as EAP server declared the IKEv2 EAP authentication successful and the IPsec connection was established even though the TNC measurement verification on the EAP peer side failed. The fix adds an "allow" group membership on each endpoint if the corresponding TNC measurements of the peer are successful. By requiring a "allow" group membership in the IKEv2 connection definition the IPsec connection succeeds only if the TNC measurements on both sides are valid. Fixed AR identities in mutual TNC measurements case 2015-08-15T20:46:21Z Andreas Steffen andreas.steffen@strongswan.org 2015-08-15T20:46:21Z urn:sha1:a330f72ecfd4b798efa0d4db63a7f4917e29e8be eap-tnc: Free eap-tnc object if IKE_SA not found to get IPs 2015-03-25T12:24:37Z Tobias Brunner tobias@strongswan.org 2015-03-25T12:24:37Z urn:sha1:328db935bb16a17654a66bc4e8a1f3365153b23e Make access requestor IP address available to TNC server 2015-03-08T16:17:11Z Andreas Steffen andreas.steffen@strongswan.org 2015-02-19T10:44:11Z urn:sha1:00cd79b6780acf1d2682038cb630e6871782f819 plugins: Don't link with -rdynamic on Windows 2014-06-04T13:53:02Z Martin Willi martin@revosec.ch 2013-10-25T14:03:47Z urn:sha1:4163421f918d830585bfdccde0973d8801aad258 Implemented PT-EAP protocol (RFC 7171) 2014-05-12T04:59:21Z Andreas Steffen andreas.steffen@strongswan.org 2014-05-11T18:49:21Z urn:sha1:8d59090349cb95e624c134533283a68ae95b8476 libcharon: Use lib->ns instead of charon->name 2014-02-12T13:34:32Z Tobias Brunner tobias@strongswan.org 2014-01-22T14:18:58Z urn:sha1:d223fe807a0a7fe6f358420256d11d407f7c9f07 check it specified IF-TNCCS protocol is enabled 2013-10-21T19:03:53Z Andreas Steffen andreas.steffen@strongswan.org 2013-10-21T19:03:53Z urn:sha1:27bf5c06dcaeee6d42b15d48ef4a0127a3d23f49 Keep a copy of the tnccs instance for PT-TLS handover 2013-10-09T17:03:07Z Andreas Steffen andreas.steffen@strongswan.org 2013-10-09T17:03:07Z urn:sha1:3588299fb8a14c4b260c30fc4dd6419cb74a8159