tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Generate result string for port scan workitems	Andreas Steffen	2013-06-21	1	-2/+29
\|
*	Ignore non-matching protocols	Andreas Steffen	2013-06-21	1	-2/+2
\|
*	Introduced workitems to Scanner IMV	Andreas Steffen	2013-06-21	7	-194/+318
\|
*	Removed obsoleted strongswan.conf options	Andreas Steffen	2013-06-21	1	-15/+0
\|
*	Added ITA components to database	Andreas Steffen	2013-06-21	1	-0/+26
\|
*	Added soft dependency on database plugin	Andreas Steffen	2013-06-21	1	-0/+1
\|
*	fixed SQL query	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	Shortened names of default policy groups	Andreas Steffen	2013-06-21	2	-10/+10
\|
*	Store device with product ID	Andreas Steffen	2013-06-21	5	-24/+32
\|
*	Database changes needed to integrate Cygnet backend	Andreas Steffen	2013-06-21	3	-84/+107
\|
*	Implemented get\|set_action_flag() methods	Andreas Steffen	2013-06-21	3	-37/+20
\|
*	Implemented hierarchical policy groups	Andreas Steffen	2013-06-21	3	-144/+81
\|
*	Introduced workitems to Attestation IMV	Andreas Steffen	2013-06-21	20	-469/+775
\|
*	pts_meas_algo_probe() and pts_dh_group_probe() got lost	Andreas Steffen	2013-06-21	1	-1/+3
\|
*	Converted all IMVs to use generic IF-IMV API	Andreas Steffen	2013-06-21	16	-1409/+1485
\|
*	Remove the constructor from the IMV agent interface	Andreas Steffen	2013-06-21	1	-10/+0
\|
*	Defined a generic IMV agent interface	Andreas Steffen	2013-06-21	5	-99/+134
\|
*	Moved all functionality into imv_os_agent_t class turning imv_os_t into an ↵	Andreas Steffen	2013-06-21	7	-780/+946
\| \| \| \|	IF-IMV skeleton
*	Moved batch_ending into separate source file	Andreas Steffen	2013-06-21	6	-295/+373
\|
*	do not process workitems with NULL result	Andreas Steffen	2013-06-21	2	-2/+3
\|
*	fixed enumeration of workitems for a given session	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	generate workitems based on group policy	Andreas Steffen	2013-06-21	4	-64/+533
\|
*	Added file and directory reference measurements to workitems	Andreas Steffen	2013-06-21	2	-4/+8
\|
*	add overall recommendation to session database entry	Andreas Steffen	2013-06-21	6	-38/+75
\|
*	don't define a default database URI	Andreas Steffen	2013-06-21	3	-6/+4
\|
*	created a simple IMV Policy Manager	Andreas Steffen	2013-06-21	5	-0/+232
\|
*	register received scanner attributes	Andreas Steffen	2013-06-21	4	-6/+103
\|
*	used tnc_policy_update functions for default policy	Andreas Steffen	2013-06-21	1	-47/+5
\|
*	refactored IMV policy management	Andreas Steffen	2013-06-21	23	-596/+885
\|
*	implemented policy rules for OS IMV	Andreas Steffen	2013-06-21	20	-101/+3220
\|
*	check for zero-length device ID	Andreas Steffen	2013-06-21	1	-0/+6
\|
*	ITA-HSR/Device ID attribute & IMV OS state machine	Andreas Steffen	2013-06-21	10	-169/+519
\|
*	execute an _imv_policy script	Andreas Steffen	2013-06-21	6	-10/+127
\|
*	implemented IMV session control	Andreas Steffen	2013-06-21	21	-429/+953
\|
*	Manage files and directories	Andreas Steffen	2013-06-21	4	-122/+208
\|
*	Merge branch 'kernel-libipsec'	Tobias Brunner	2013-06-21	23	-42/+2039
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Adds a new kernel interface plugin that uses TUN devices and libipsec to provide IPsec process in userland. It works on Linux, FreeBSD and Mac OS X. In particular the latter two platforms may gain from this approach as their respective kernels don't provide support for AES-GCM. kernel-pfroute has been improved (source address lookup) and a second plugin (osx-attr) installs configuration attributes (currently DNS servers only) via SystemConfiguration on Mac OS X.
\| *	osx-attr: add plugin installing config attributes using SystemConfiguration	Martin Willi	2013-06-21	7	-0/+468
\| \| \| \| \| \| \| \| \| \|	Currently installs DNS servers only, by prepending IP addresses to the DNS configuration of the primary networking service.
\| *	kernel-pfroute: Simplify route lookup after fixing sockaddr parsing	Tobias Brunner	2013-06-21	1	-90/+19
\| \|
\| *	kernel-pfroute: Alignment of sockaddrs is not always the same	Tobias Brunner	2013-06-21	1	-1/+8
\| \|
\| *	kernel-pfroute: struct sockaddr arguments are 4 byte aligned	Tobias Brunner	2013-06-21	1	-4/+8
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This was noticed on Mac OS X where, if the default route is returned, RTA_NETMASK has sa_len set to 0, but skipping zero bytes to read the next address makes no sense, of course. Using 0 for sa_len seems a bit strange, in particular, because struct sockaddr has by definition a minimum length of 16 bytes. But it seems FreeBSD actually does the same.
\| *	kernel-libipsec: Ignore failures when installing routes for multicast or ↵	Tobias Brunner	2013-06-21	1	-1/+23
\| \| \| \| \| \| \| \|	broadcast policies
\| *	kernel-pfroute: Improve route lookup depending on information we get back	Tobias Brunner	2013-06-21	1	-12/+96
\| \| \| \| \| \| \| \|	Kernels don't provide the same information for all routes.
\| *	kernel-pfroute: Try to ensure we get a source address or interface name	Tobias Brunner	2013-06-21	1	-0/+6
\| \|
\| *	ike: Force NAT-T/UDP encapsulation if kernel interface requires it	Tobias Brunner	2013-06-21	2	-5/+32
\| \|
\| *	kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets	Tobias Brunner	2013-06-21	2	-0/+9
\| \|
\| *	tun-device: Packets sent over utun devices on Mac OS X have the protocol ↵	Tobias Brunner	2013-06-21	1	-0/+11
\| \| \| \| \| \| \| \|	family prepended
\| *	kernel-pfroute: Use DST as nexthop for host routes	Tobias Brunner	2013-06-21	1	-0/+6
\| \| \| \| \| \| \| \|	These are created as cache/clone on Mac OS X.
\| *	kernel-pfroute: Implement get_source_addr()	Tobias Brunner	2013-06-21	1	-12/+27
\| \|
\| *	kernel-pfroute: Properly install routes with interface and gateway	Tobias Brunner	2013-06-21	1	-5/+6
\| \|
\| *	kernel-libipsec: Install a gateway for routes on platforms other than Linux	Tobias Brunner	2013-06-21	1	-9/+26
\| \| \| \| \| \| \| \|	This seems required e.g. on FreeBSD but doesn't work on Linux.