Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | android: IMC state fragment is a button that shows remediation instructions ↵ | Tobias Brunner | 2013-07-08 | 2 | -16/+66 | |
| | | | | or log | |||||
* | android: Show remediation instructions instead of log on failure | Tobias Brunner | 2013-07-08 | 6 | -3/+26 | |
| | ||||||
* | android: Properly hide the IMC state fragment initially | Tobias Brunner | 2013-07-08 | 1 | -1/+4 | |
| | ||||||
* | android: Add activity that displays a list of remediation instructions | Tobias Brunner | 2013-07-08 | 11 | -1/+212 | |
| | | | | | On large displays a two-pane layout is used that displays the list next to the actual instructions. | |||||
* | android: Add fragment for a list of remediation instructions | Tobias Brunner | 2013-07-08 | 1 | -0/+121 | |
| | | | | This fragment can later be used in one- or two-pane layouts. | |||||
* | android: Add adapter for remediation instructions | Tobias Brunner | 2013-07-08 | 2 | -0/+118 | |
| | ||||||
* | android: Add fragment that displays a single remediation instruction | Tobias Brunner | 2013-07-08 | 2 | -0/+164 | |
| | ||||||
* | android: RemediationInstruction implements Parcelable interface | Tobias Brunner | 2013-07-08 | 1 | -1/+45 | |
| | ||||||
* | android: Background for state panels provides separator | Tobias Brunner | 2013-07-08 | 4 | -19/+27 | |
| | ||||||
* | android: Add fragment that displays the IMC state | Tobias Brunner | 2013-07-08 | 9 | -7/+210 | |
| | | | | | The fragment hides itself if the state is unknown or the assessment succeeded. | |||||
* | android: Handle and store IETF remediation instructions | Tobias Brunner | 2013-07-08 | 5 | -0/+121 | |
| | ||||||
* | android: Add a parser for XML remediation instructions | Tobias Brunner | 2013-07-08 | 1 | -0/+229 | |
| | ||||||
* | android: Show different error message depending on IMC state | Tobias Brunner | 2013-07-08 | 6 | -3/+26 | |
| | ||||||
* | android: Clear error only when the user explicitly dismisses the dialog | Tobias Brunner | 2013-07-08 | 1 | -4/+10 | |
| | | | | | | | | | The previous code worked fine on rotation changes as the fragment is destroyed and recreated causing onCreate to be called, which restores the saved error state. But if the user switches to a different application and then back this is not the case. The dialog still gets dismissed (as we have to do so to avoid nasty exceptions on rotation changes) but since that implicitly cleared the error state the UI was never fully restored. | |||||
* | android: Add state of IMC to VpnStateService and update it via JNI | Tobias Brunner | 2013-07-08 | 6 | -3/+203 | |
| | ||||||
* | android: Handle TCG file measurement related attributes using PTS | Tobias Brunner | 2013-07-08 | 1 | -5/+119 | |
| | ||||||
* | android: Android IMC state provides a Platform Trust Service (PTS) instance | Tobias Brunner | 2013-07-08 | 2 | -0/+20 | |
| | ||||||
* | android: Provide a public interface for Android IMC state | Tobias Brunner | 2013-07-08 | 2 | -25/+40 | |
| | ||||||
* | android: Define IMC functions static and with lower-case names | Tobias Brunner | 2013-07-08 | 1 | -32/+32 | |
| | ||||||
* | android: Add measurement collector for ITA Device ID | Tobias Brunner | 2013-07-08 | 4 | -1/+96 | |
| | ||||||
* | android: Add measurement collector for ITA Settings | Tobias Brunner | 2013-07-08 | 6 | -2/+150 | |
| | ||||||
* | android: Handle ITA PA-TNC attributes | Tobias Brunner | 2013-07-08 | 1 | -0/+18 | |
| | ||||||
* | android: Overload for getMeasurement() that takes a String array as argument | Tobias Brunner | 2013-07-08 | 2 | -10/+84 | |
| | ||||||
* | android: Add measurement collector for Port Filter | Tobias Brunner | 2013-07-08 | 4 | -1/+150 | |
| | | | | This collector reports all listening TCP and UDP sockets/ports. | |||||
* | android: Enum type for transport protocols added | Tobias Brunner | 2013-07-08 | 1 | -0/+60 | |
| | ||||||
* | android: Add measurement collector for Installed Packages | Tobias Brunner | 2013-07-08 | 3 | -0/+126 | |
| | ||||||
* | android: Add measurement collector for Product Information | Tobias Brunner | 2013-07-08 | 4 | -0/+82 | |
| | ||||||
* | android: Also support writing of 24-bit values | Tobias Brunner | 2013-07-08 | 1 | -0/+13 | |
| | ||||||
* | android: Add measurement collector for String Version | Tobias Brunner | 2013-07-08 | 3 | -0/+125 | |
| | ||||||
* | android: Interfaces for measurement collectors and attributes added | Tobias Brunner | 2013-07-08 | 2 | -0/+58 | |
| | ||||||
* | android: Add a Java utility class similar to bio_writer_t | Tobias Brunner | 2013-07-08 | 1 | -0/+172 | |
| | ||||||
* | android: Add enum types for PENs and attribute types | Tobias Brunner | 2013-07-08 | 2 | -0/+159 | |
| | ||||||
* | android: Add a generic handler for PA-TNC attribute requests | Tobias Brunner | 2013-07-08 | 2 | -62/+103 | |
| | | | | | The idea is that the Android IMC will return attributes in their binary encoding. This keeps the JNI interface to the IMC pretty simple. | |||||
* | android: Added a Java part to the Android IMC | Tobias Brunner | 2013-07-08 | 3 | -12/+98 | |
| | ||||||
* | android: Don't attempt loading IMCs from /etc/tnc_config | Tobias Brunner | 2013-07-08 | 1 | -0/+2 | |
| | ||||||
* | android: Build libpts and init/deinit libpts in BYOD IMC | Tobias Brunner | 2013-07-08 | 4 | -2/+10 | |
| | ||||||
* | android: Added a sample IMC that sends some dummy OS data | Tobias Brunner | 2013-07-08 | 7 | -3/+657 | |
| | ||||||
* | android: Build option added to load BYOD related plugins and libraries in ↵ | Tobias Brunner | 2013-07-08 | 3 | -8/+39 | |
| | | | | the Android app | |||||
* | android: Disable listening on IPv6 | Tobias Brunner | 2013-07-05 | 1 | -0/+4 | |
| | | | | | As we have to use UDP encapsulation and the Linux kernel currently does not support that this avoids issues with dual-stack gateways. | |||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 1 | -0/+1 | |
| | ||||||
* | android: Forward initiator flag to libipsec when adding IPsec SA | Tobias Brunner | 2013-06-13 | 1 | -2/+2 | |
| | ||||||
* | kernel-interface: add an exchange initiator parameter to add_sa() | Martin Willi | 2013-06-11 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This new flag gives the kernel-interface a hint how it should priorize the use of newly installed SAs during rekeying. Consider the following rekey procedure in IKEv2: Initiator --- Responder I1 -------CREATE-------> R1 I2 <------CREATE-------- -------DELETE-------> R2 I3 <------DELETE-------- SAs are always handled as pairs, the following happens at the SA level: * Initiator starts the exchange at I1 * Responder installs new SA pair at R1 * Initiator installs new SA pair at I2 * Responder removes old SA pair at R2 * Initiator removes old SA pair at I3 This makes sure SAs get installed/removed overlapping during rekeying. However, to avoid any packet loss, it is crucial that the new outbound SA gets activated at the correct position: * as exchange initiator, in I2 * as exchange responder, in R2 This should guarantee that we don't use the new outbound SA before the peer could install its corresponding inbound SA. The new parameter allows the kernel backend to install the new SA with appropriate priorities, i.e. it should: * as exchange inititator, have the new outbound SA installed with higher priority than the old SA * as exchange responder, have the new outbound SA installed with lower priority than the old SA While we could split up the SA installation at the responder, this approach has another advantage: it allows the kernel backend to switch SAs based on other criteria, for example when receiving traffic on the new inbound SA. | |||||
* | kernel-interface: query SAD for last use time if SPD query didn't yield one | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | ||||||
* | New Android release after adding AES-GCM, IPv6-in-IPv4 and using kernel-netlink | Tobias Brunner | 2013-05-03 | 1 | -2/+2 | |
| | | | | | | | | libipsec now supports AES-GCM, IPv6 tunnels over IPv4 are supported, native x86 libraries are built (requires a new Vstr build script). Also, the existing kernel-netlink plugin now provides the kernel-net implementation, which should be more stable in case multiple interfaces are up and have IP addresses installed on them. | |||||
* | android: Use stronger ESP proposal including AES-GCM | Tobias Brunner | 2013-05-03 | 1 | -0/+6 | |
| | ||||||
* | android: Remove unused methods on NetworkManager/network_manager_t | Tobias Brunner | 2013-05-03 | 3 | -177/+1 | |
| | ||||||
* | android: Ignore interface 'lo' | Tobias Brunner | 2013-05-03 | 1 | -2/+4 | |
| | | | | | Android adds a default route via 'lo' if no connectivity is available causing charon to send packets via lo and triggering DPD. | |||||
* | android: Repurpose android-net to simply handle connectivity events | Tobias Brunner | 2013-05-03 | 3 | -59/+34 | |
| | | | | | | Using the events by NetworkManager/ConnectivityManager to trigger roam events instead of the events generated by the kernel-netlink plugin the noise level is much lower. | |||||
* | android: Replace android-net plugin with kernel-netlink | Tobias Brunner | 2013-05-03 | 2 | -3/+8 | |
| | | | | | Virtual IPs are not handled by the kernel-netlink plugin and tun devices are ignored. | |||||
* | android: Set strongswan.conf options before initializing other libraries | Tobias Brunner | 2013-05-03 | 1 | -36/+44 | |
| |