Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Properly handle situation if no resolver plugins are loaded | Tobias Brunner | 2013-04-01 | 1 | -3/+2 | |
| | ||||||
* | fixed capability metadata | Andreas Steffen | 2013-03-31 | 1 | -1/+2 | |
| | ||||||
* | renamed tnc_ifmap2 plugin to tnc_ifmap | Andreas Steffen | 2013-03-31 | 10 | -177/+177 | |
| | ||||||
* | removed obsoleted tnc_ifmap plugin | Andreas Steffen | 2013-03-31 | 7 | -1337/+0 | |
| | ||||||
* | implemented http basic authentication | Andreas Steffen | 2013-03-31 | 3 | -46/+80 | |
| | ||||||
* | parse IF-MAP server URI | Andreas Steffen | 2013-03-31 | 3 | -41/+105 | |
| | ||||||
* | implemented publish_enforcement_report and endSession methods | Andreas Steffen | 2013-03-30 | 1 | -6/+58 | |
| | ||||||
* | implemented publish_ike_sa method | Andreas Steffen | 2013-03-30 | 1 | -6/+252 | |
| | ||||||
* | ifmap message type is known | Andreas Steffen | 2013-03-30 | 3 | -12/+7 | |
| | ||||||
* | implemented publish_device_ip method | Andreas Steffen | 2013-03-30 | 1 | -13/+132 | |
| | ||||||
* | added IF-MAP SOAP error handling | Andreas Steffen | 2013-03-30 | 1 | -9/+32 | |
| | ||||||
* | created tnc_ifmap2_soap_msg class | Andreas Steffen | 2013-03-29 | 4 | -220/+343 | |
| | ||||||
* | implement NewSession and PurgePublisher messages using the libxml2 library | Andreas Steffen | 2013-03-29 | 3 | -79/+265 | |
| | ||||||
* | set up a new IF-MAP session | Andreas Steffen | 2013-03-29 | 8 | -0/+877 | |
| | ||||||
* | Fixed Doxygen comment in eap_radius plugin | Tobias Brunner | 2013-03-27 | 1 | -2/+3 | |
| | ||||||
* | error-notify: Close file descriptors in case clients are still connected | Tobias Brunner | 2013-03-25 | 1 | -0/+6 | |
| | ||||||
* | ipseckey: NULL pointer dereference fixed in error case | Tobias Brunner | 2013-03-25 | 1 | -0/+1 | |
| | ||||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2013-03-25 | 1 | -2/+2 | |
| | ||||||
* | enforce singular of packets | Andreas Steffen | 2013-03-22 | 1 | -4/+6 | |
| | ||||||
* | asprintf(3) requires _GNU_SOURCE to be defined5.0.3rc1 | Tobias Brunner | 2013-03-22 | 1 | -0/+2 | |
| | ||||||
* | Check return value of asprintf(3) when converting AR identity | Tobias Brunner | 2013-03-22 | 1 | -2/+4 | |
| | | | | | Using chunk_t.ptr as target was also not optimal as it resulted in a compiler warning. | |||||
* | Switch encoding of AR Identity Value from binary to UTF-8 | Andreas Steffen | 2013-03-22 | 1 | -8/+7 | |
| | ||||||
* | Add a load-tester option to keep allocated external address until shutdown | Martin Willi | 2013-03-21 | 2 | -1/+50 | |
| | ||||||
* | Avoid a race condition when reloading secrets from ipsec.secrets | Tobias Brunner | 2013-03-20 | 1 | -18/+25 | |
| | | | | | | | With the previous implementation that cleared the secrets in the active credential set and then loaded the secrets, IKE SA establishment would fail (as initiator or responder) if secrets are concurrently reloaded and the required secret was not yet loaded. | |||||
* | Add an option to autobalance a HA cluster automatically | Martin Willi | 2013-03-19 | 1 | -0/+59 | |
| | ||||||
* | Check if for some reason we handle a HA segment on both nodes | Martin Willi | 2013-03-19 | 1 | -1/+15 | |
| | ||||||
* | Acquire HA segment lock while sending heartbeat | Martin Willi | 2013-03-19 | 1 | -0/+2 | |
| | ||||||
* | Removed unused variable 'id' | Tobias Brunner | 2013-03-19 | 1 | -2/+1 | |
| | ||||||
* | Fix scheduling of heartbeat sending in HA plugin | Martin Willi | 2013-03-19 | 1 | -2/+11 | |
| | | | | | | e0efd7c1 switches to automated job rescheduling for HA heartbeat. However, send_status() is initially called directly, which will not reschedule the job as required. | |||||
* | Fix compiler warning in HA plugin | Martin Willi | 2013-03-19 | 1 | -1/+1 | |
| | ||||||
* | Don't try to mmap() empty ipsec.secret files | Martin Willi | 2013-03-19 | 1 | -1/+5 | |
| | ||||||
* | Added xauth-noauth plugin | Tobias Brunner | 2013-03-19 | 5 | -0/+261 | |
| | | | | | | | | This XAuth backend does not do any authentication of client credentials but simply sends a successful XAuth status to the client, thereby concluding the XAuth exchange. This can be useful to fallback to basic RSA authentication with clients that can not be configured without XAuth authentication. | |||||
* | In stroke counters, check if we have an IKE_SA before getting the name from it | Martin Willi | 2013-03-19 | 1 | -3/+6 | |
| | | | | | Fixes a segfault when receiving an invalid IKE SPI, where we don't have an IKE_SA for the raised alert. | |||||
* | Add an "esp" load-tester option to configure custom CHILD_SA ESP proposal | Martin Willi | 2013-03-18 | 1 | -3/+16 | |
| | ||||||
* | Algorithms are not really specific to an IKE version | Tobias Brunner | 2013-03-18 | 1 | -1/+1 | |
| | | | | | | But not all of them can be used with IKEv1. Fixes #314. | |||||
* | Merge branch 'radius-ext' | Martin Willi | 2013-03-18 | 10 | -78/+1150 | |
|\ | | | | | | | | | | | Bring some extensions to eap-radius, namely a virtual IP address provider based on received Framed-IPs, forwarding of Cisco Unity banners, Interim Accounting updates and the reporting of sent/received packets. | |||||
| * | Don't create interim update entries if RADIUS accounting is disabled | Martin Willi | 2013-03-14 | 2 | -7/+7 | |
| | | ||||||
| * | Add support for RADIUS Interim accounting updates | Martin Willi | 2013-03-14 | 3 | -39/+269 | |
| | | ||||||
| * | Add an option to delete any established IKE_SA if RADIUS server is not ↵ | Martin Willi | 2013-03-14 | 4 | -7/+67 | |
| | | | | | | | | responding | |||||
| * | Send Acct-Terminate-Cause based on some alerts catched on the bus | Martin Willi | 2013-03-14 | 1 | -0/+62 | |
| | | | | | | | | | | Currently supported are user disconnects, session timeouts and if the peer does not respond on IKE packets or DPDs. | |||||
| * | Send NAS-Port, NAS-IP and Calling/Called-Station-ID in Accounting-Requests | Martin Willi | 2013-03-14 | 1 | -4/+33 | |
| | | ||||||
| * | Support RADIUS accounting of sent/received packets | Martin Willi | 2013-03-14 | 1 | -13/+23 | |
| | | ||||||
| * | Report the number of processed packets in "ipsec statusall" | Martin Willi | 2013-03-14 | 1 | -5/+9 | |
| | | ||||||
| * | child_sa_t.get_usestats() can additionally return the number of processed ↵ | Martin Willi | 2013-03-14 | 2 | -5/+4 | |
| | | | | | | | | packets | |||||
| * | kernel_ipsec_t.query_sa() additionally returns the number of processed packets | Martin Willi | 2013-03-14 | 1 | -2/+2 | |
| | | ||||||
| * | Send NAS-Port, NAS-IP and Calling/Called-Station-ID in Access-Request | Martin Willi | 2013-03-13 | 1 | -7/+56 | |
| | | ||||||
| * | Forward Cisco Banner received from RADIUS to Unity capable clients | Martin Willi | 2013-03-12 | 3 | -5/+176 | |
| | | ||||||
| * | In eap-radius, hand out received Framed-IP-Address attributes as virtual IP | Martin Willi | 2013-03-12 | 5 | -2/+460 | |
| | | ||||||
* | | Merge branch 'stroke-counters' | Martin Willi | 2013-03-18 | 3 | -11/+185 | |
|\ \ | | | | | | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters. | |||||
| * | | Add a "resetcounters" command to ipsec, clearing global or connection counters | Martin Willi | 2013-03-15 | 3 | -1/+38 | |
| | | |