aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Encode RSA public keys in RFC 3110 DNSKEY formatAndreas Steffen2013-02-198-3/+155
| | |
* | | Moved configuration from resolver manager to unbound pluginAndreas Steffen2013-02-196-52/+41
| | | | | | | | | | | | Also streamlined log messages in unbound plugin.
* | | ipseckey: Report IPSECKEYs with invalid DNSSEC security stateReto Guadagnini2013-02-191-2/+12
| | |
* | | ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-191-3/+16
| | |
* | | Added ipseckey plugin, which provides support for public keys in IPSECKEY RRsReto Guadagnini2013-02-198-0/+859
| | |
* | | unbound: Implementation of query method of unbound_resolver_tReto Guadagnini2013-02-192-7/+64
| | |
* | | unbound: Implemented resolver_response_t as unbound_response_tReto Guadagnini2013-02-193-1/+316
| | |
* | | Implemented rr_set_t interfaceReto Guadagnini2013-02-193-1/+113
| | |
* | | unbound: Implemented rr_t as unbound_rr_tReto Guadagnini2013-02-193-1/+215
| | |
* | | Added unbound plugin implementing the resolver interface using libunboundReto Guadagnini2013-02-196-0/+234
| | |
* | | Added manager for DNS resolversReto Guadagnini2013-02-195-1/+181
| | |
* | | Added interface for DNS resolversReto Guadagnini2013-02-196-0/+548
| | |
* | | added missing return statementAndreas Steffen2013-02-191-0/+1
| | |
* | | Fix encoding of issuerAndSubject while handling SCEP pending stateMartin Willi2013-02-191-1/+1
| | |
* | | reject PB-Experimental messages with NOSKIP flag setAndreas Steffen2013-02-191-0/+7
| | |
* | | added parameter descriptionsAndreas Steffen2013-02-191-1/+8
| | |
* | | removed superfluous debug outputAndreas Steffen2013-02-152-4/+0
| | |
* | | Add a timeout to clean up PDP RADIUS connectionsMartin Willi2013-02-141-0/+51
| | |
* | | Keep the PDP connections lock while accessing its objectsMartin Willi2013-02-143-7/+34
| | | | | | | | | | | | | | | | | | When we introduce connection timeouts, the state may disappear at any time. This change prevents that, but is not very clear. We probably have to refactor connection handling.
* | | Add locking to TNC-PDP connectionsMartin Willi2013-02-141-7/+23
| | |
* | | Add IF-M message subtype getter to IMC/IMV messagesMartin Willi2013-02-144-1/+28
| | |
* | | Use a generic constructor to create PA-TNC error attributesMartin Willi2013-02-141-62/+32
| | |
* | | Add a global return_success() method implementationMartin Willi2013-02-143-8/+15
| | |
* | | Add a convenience method to check pen_type_t for vendor and typeMartin Willi2013-02-141-0/+14
| | |
* | | Add a comparison function for pen_type_tMartin Willi2013-02-141-0/+12
| | |
* | | Whitespace and comment cleanups in pen.[ch]Martin Willi2013-02-142-20/+28
| | |
* | | resolve dependency on libtlsAndreas Steffen2013-02-141-0/+1
| | |
* | | Merge branch 'ike-dscp'Martin Willi2013-02-1426-68/+237
|\ \ \
| * | | Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-067-4/+23
| | | |
| * | | Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
| | | |
| * | | Add a DSCP configuration value to IKE configsMartin Willi2013-02-0614-25/+41
| | | |
| * | | Set DSCP values when sending IP packets in socket-defaultMartin Willi2013-02-061-1/+65
| | | |
| * | | Don't send a packet in default socket if family is not IPv4 nor IPv6Martin Willi2013-02-061-12/+18
| | | |
| * | | Add a DSCP value with getter/setter on packet_tMartin Willi2013-02-063-0/+47
| | | |
| * | | Avoid extensive casting of sockaddr types in socket-default by using a unionMartin Willi2013-02-061-24/+16
| | | | | | | | | | | | | | | | Additionally fixes a strict-aliasing rule compiler warning with older gcc.
| * | | Set sockaddr family on ifreq instead of casted familiy specific sockaddrMartin Willi2013-02-061-2/+2
| |/ / | | | | | | | | | Fixes a strict-aliasing rule compiler warning with older gcc.
* | | Check if recommendations is set before applying language preferenceMartin Willi2013-02-141-3/+6
| | |
* | | PT-TLS dispatcher TNCCS constructor takes peer identities to pass to factoryMartin Willi2013-02-142-4/+23
| | |
* | | Merge branch 'pt-tls'Martin Willi2013-02-1419-94/+1411
|\ \ \
| * | | Pass a constructor callback to create TNCCS server instances while dispatchingMartin Willi2013-01-174-15/+31
| | | |
| * | | Create pt_tls_client with separate server address and identityMartin Willi2013-01-162-28/+19
| | | |
| * | | Create pt_tls_dispatcher with separate server address and identityMartin Willi2013-01-162-17/+13
| | | |
| * | | Add a libpttls providing NEA PT-TLS / TNC IF-T for TLS transport layerMartin Willi2013-01-1610-0/+1169
| | | |
| * | | Send TLS close notify during tls_socket_t destructionMartin Willi2013-01-151-2/+25
| | | |
| * | | Send TLS close notify if application returns SUCCESSMartin Willi2013-01-151-2/+6
| | | |
| * | | Block TLS read when sending data, but have to wait for the handshake data firstMartin Willi2013-01-151-4/+11
| | | |
| * | | TNCCS plugins don't depend on EAP-TNC, but can be used by other transports, tooMartin Willi2013-01-153-9/+0
| | | |
| * | | Add a bio_reader_t constructor variant freeing passed data during destructionMartin Willi2013-01-152-1/+32
| | | |
| * | | Use a more POSIXy tls_socket interface with more flexibility.Martin Willi2013-01-152-81/+165
| | | | | | | | | | | | | | | | | | | | If an unsufficient read buffer is provided, application data gets cached for subsequent read() calls.
| * | | Add a chunk_from_str() initializer that does not include 0-terminatorMartin Willi2013-01-151-0/+5
| | |/ | |/|