Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | TNCCS plugins don't depend on EAP-TNC, but can be used by other transports, too | Martin Willi | 2013-01-15 | 3 | -9/+0 | |
| | |/ | |/| | ||||||
* | | | Fix 'stroke loglevel any' | Tobias Brunner | 2013-02-13 | 1 | -4/+11 | |
| | | | | | | | | | | | | | | | | | | | | | Before b46a5cd4 this worked if debug_t was unsigned. In that case -1, as returned by enum_from_name(), would result in a large positive number. So any unknown debug group (including 'any') had the same effect that was only intended for 'any'. | |||||
* | | | treat EAP identities as user IDs | Andreas Steffen | 2013-02-12 | 1 | -3/+3 | |
| | | | ||||||
* | | | make TNC client authentication type available to IMVs | Andreas Steffen | 2013-02-12 | 7 | -26/+146 | |
| | | | ||||||
* | | | determine underlying IF-T transport protocol | Andreas Steffen | 2013-02-12 | 10 | -62/+184 | |
| | | | ||||||
* | | | make AR identities available to IMVs via IF-IMV 1.4 draft | Andreas Steffen | 2013-02-11 | 5 | -0/+146 | |
| | | | ||||||
* | | | Make IKE/EAP IDs available to TNC server/client | Andreas Steffen | 2013-02-11 | 8 | -24/+81 | |
| |/ |/| | ||||||
* | | Use proper buffer sizes for parse_smartcard() | Tobias Brunner | 2013-01-24 | 1 | -7/+10 | |
| | | ||||||
* | | Removed unused command name when printing usage info for lookip | Tobias Brunner | 2013-01-24 | 1 | -1/+1 | |
| | | ||||||
* | | Filter TS list for Split-Includes before printing them to debug log | Martin Willi | 2013-01-21 | 1 | -10/+34 | |
|/ | ||||||
* | Don't handle right=%any6 as "loose" identity, but as %any | Martin Willi | 2013-01-14 | 1 | -2/+1 | |
| | ||||||
* | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 9 | -12/+20 | |
|\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | |||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 8 | -11/+18 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 9 | -12/+13 | |
| | | ||||||
* | | Fixed some typos in comments | Volker Rümelin | 2013-01-11 | 1 | -1/+1 | |
|/ | ||||||
* | Send empty CDATA batch if TNC client has no data to send | Andreas Steffen | 2012-12-23 | 1 | -16/+28 | |
| | ||||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 2 | -2/+2 | |
| | ||||||
* | Add missing error_notify_msg.h to distribution tarball | Martin Willi | 2012-12-19 | 1 | -1/+2 | |
| | ||||||
* | Add an error-notify sample application to listen to error notifications | Martin Willi | 2012-12-19 | 3 | -0/+66 | |
| | ||||||
* | Add an error-notify plugin to send catched alerts to listening applications | Martin Willi | 2012-12-19 | 8 | -0/+736 | |
| | ||||||
* | Raise alerts when enforcing IKE_SA unique policy | Martin Willi | 2012-12-19 | 1 | -0/+1 | |
| | ||||||
* | Fix deadlock in IMC/IMV managers | Tobias Brunner | 2012-12-18 | 2 | -8/+36 | |
| | | | | | | | | | Since reserve_id() might be called from e.g. notify_connection_change() using a write lock will not work as this can't be acquired while holding the read lock. Also, with the previous code it was possible that two IMCs/IMVs added by two threads at the same time would get the same ID assigned. | |||||
* | Properly select IMC/IMV according to given primary ID in reserve_id() | Tobias Brunner | 2012-12-18 | 2 | -2/+2 | |
| | ||||||
* | If load-tester requests a virtual IP, use a dynamic local traffic selector | Martin Willi | 2012-12-17 | 1 | -2/+8 | |
| | ||||||
* | Migrate RADIUS accounting state while IKE_SA unique id changes during rekey | Martin Willi | 2012-12-11 | 1 | -0/+23 | |
| | ||||||
* | Migrate cache and fire lookip events for unique_id change during IKE_SA rekey | Martin Willi | 2012-12-10 | 1 | -0/+13 | |
| | ||||||
* | optionally skip dlclose() of IMCs/IMVs in order to track memory leaks | Andreas Steffen | 2012-12-09 | 2 | -2/+6 | |
| | ||||||
* | Add locking to IMC/IMV managers to add/remove IMC/IMVs on the fly | Martin Willi | 2012-11-30 | 2 | -7/+67 | |
| | ||||||
* | Add wrappers to IMC/IMV managers loading IMC/IMVs from function pointers | Martin Willi | 2012-11-30 | 2 | -1/+64 | |
| | ||||||
* | If adding an IMC/IMV fails, terminate() it only if it has been initialize()d | Martin Willi | 2012-11-30 | 2 | -25/+17 | |
| | ||||||
* | Add an IMV constructor taking a set of custom TNC_IMV functions | Martin Willi | 2012-11-30 | 3 | -5/+78 | |
| | ||||||
* | Add an IMC constructor taking a set of custom TNC_IMC functions | Martin Willi | 2012-11-30 | 2 | -3/+60 | |
| | ||||||
* | Clean up memory management when loading IMC/IMVs from files | Martin Willi | 2012-11-30 | 4 | -52/+34 | |
| | ||||||
* | Fix passing of IKE_SA unique_id over lookip socket | Martin Willi | 2012-11-30 | 1 | -0/+1 | |
| | ||||||
* | Store load-tester address leases in a hashtable for fast removal | Martin Willi | 2012-11-29 | 1 | -24/+81 | |
| | ||||||
* | Don't wait while removing external IPs used for load testing | Martin Willi | 2012-11-29 | 1 | -1/+1 | |
| | ||||||
* | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 1 | -29/+13 | |
| | | | | required | |||||
* | load-tester can dynamically install a dedicated external IP for each IKE_SA | Martin Willi | 2012-11-29 | 5 | -15/+220 | |
| | | | | | | | For consistency, the local/remote parameters have been replaced by the initiator/responder options. As initiator, the initiator option can be overriden by an addrs section taking key/value pairs with address pools to use on a specific interface. | |||||
* | Add a delay option to load-tester socket | Martin Willi | 2012-11-29 | 2 | -7/+11 | |
| | ||||||
* | Indicate message retransmissions while initiating load-test batches | Martin Willi | 2012-11-29 | 1 | -0/+26 | |
| | ||||||
* | Initiate each load-testing connection with a fresh peer config | Martin Willi | 2012-11-29 | 1 | -19/+23 | |
| | ||||||
* | Initiate IKE_SAs trigger over load-tester socket in parallel | Martin Willi | 2012-11-29 | 1 | -9/+145 | |
| | ||||||
* | Add a simple load-tester utility to initiate over control socket | Martin Willi | 2012-11-29 | 3 | -0/+108 | |
| | ||||||
* | Add a load-tester control socket to manually trigger initiation | Martin Willi | 2012-11-29 | 4 | -1/+271 | |
| | ||||||
* | Lookip plugin additionally reports the IKE_SA unique identifier | Martin Willi | 2012-11-29 | 5 | -10/+21 | |
| | ||||||
* | Do not send 0.0.0.0/0 traffic selectors as Split-Include Unity attributes | Martin Willi | 2012-11-22 | 1 | -2/+6 | |
| | | | | It seems that iOS devices don't like them. | |||||
* | Pass PLUTO_XAUTH_ID to updown script | Martin Willi | 2012-11-16 | 1 | -1/+21 | |
| | ||||||
* | centralized processing of assessment information | Andreas Steffen | 2012-11-12 | 1 | -4/+3 | |
| | ||||||
* | 'signal' is a keyword in MySQL 5.5 | Tobias Brunner | 2012-11-07 | 1 | -1/+2 | |
| | | | | Fixes #251. | |||||
* | Compiler warning fixed | Tobias Brunner | 2012-11-02 | 1 | -1/+1 | |
| |