tteras/strongswan/src/libtnccs/plugins, branch mastertteras' strongSwan tree
https://git-old.alpinelinux.org/user/tteras/strongswan/atom?h=master2017-09-18T10:07:26Zlibtnccs: Correctly read dlopen_use_rtld_now option2017-09-18T10:07:26ZTobias Brunnertobias@strongswan.org2017-09-14T16:07:08Zurn:sha1:f871b341d7b45c2ad9adc336a90b2b3821e8a3bb
Fixes: 50e4aeb22f49 ("libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()")
libtnccs: Fixed memory leak of global variables in libxml22017-05-29T08:57:34ZAndreas Steffenandreas.steffen@strongswan.org2017-05-28T11:51:28Zurn:sha1:fca4e70bd3a2b2dbfb3aff22d49979a430a93aa4Change interface for enumerator_create_filter() callback2017-05-26T11:56:44ZTobias Brunnertobias@strongswan.org2017-05-12T10:10:27Zurn:sha1:525cc46cabe3dbf17d9f63e76ea9aa974d3665fa
This avoids the unportable 5 pointer hack, but requires enumerating in
the callback.
Use standard unsigned integer types2016-03-24T17:52:48ZAndreas Steffenandreas.steffen@strongswan.org2016-03-22T12:22:01Zurn:sha1:b12c53ce77beb8e04b044d0c0dc9249ddba72200Fix of the mutual TNC measurement use case2016-02-16T17:00:27ZAndreas Steffenandreas.steffen@strongswan.org2016-02-16T17:00:27Zurn:sha1:4d83c5b4a6bcbf6a6426d7ba79fac4494ab36329
If the IKEv2 initiator acting as a TNC server receives invalid TNC measurements
from the IKEv2 responder acting as a TNC clienti, the exchange of PB-TNC batches
is continued until the IKEv2 responder acting as a TNC server has also finished
its TNC measurements.
In the past if these measurements in the other direction were correct
the IKEv2 responder acting as EAP server declared the IKEv2 EAP authentication
successful and the IPsec connection was established even though the TNC
measurement verification on the EAP peer side failed.
The fix adds an "allow" group membership on each endpoint if the corresponding
TNC measurements of the peer are successful. By requiring a "allow" group
membership in the IKEv2 connection definition the IPsec connection succeeds
only if the TNC measurements on both sides are valid.
libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()2015-11-09T13:37:08ZTobias Brunnertobias@strongswan.org2015-09-25T10:00:58Zurn:sha1:50e4aeb22f499d1a2f955bd7d88a78606eb4e48fFixed AR identities in mutual TNC measurements case2015-08-15T20:46:21ZAndreas Steffenandreas.steffen@strongswan.org2015-08-15T20:46:21Zurn:sha1:a330f72ecfd4b798efa0d4db63a7f4917e29e8beFixed PB-TNC directionality debug message2015-04-24T09:16:16ZAndreas Steffenandreas.steffen@strongswan.org2015-04-24T09:16:16Zurn:sha1:c1c6506391a0065ff89d34d251c4006d3a26acbbFix years in some copyright statements2015-04-16T07:21:00ZTobias Brunnertobias@strongswan.org2015-04-16T07:21:00Zurn:sha1:d1e7b31e80741b41912ab4fdcaa0bed952db1a32Added tnc/tnccs-20-fail-init and tnc/tnccs-20-fail-resp scenarios2015-03-27T19:56:44ZAndreas Steffenandreas.steffen@strongswan.org2015-03-27T19:56:34Zurn:sha1:883c11caa03ea37e449ed839893f24cccf79badb