aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* treat IF-M and IF-TNCCS remediation instructions/parameters in an equal wayAndreas Steffen2013-02-194-107/+204
|
* Streamlined log messages in ipseckey pluginAndreas Steffen2013-02-192-58/+30
|
* Encode RSA public keys in RFC 3110 DNSKEY formatAndreas Steffen2013-02-198-3/+155
|
* Moved configuration from resolver manager to unbound pluginAndreas Steffen2013-02-196-52/+41
| | | | Also streamlined log messages in unbound plugin.
* ipseckey: Report IPSECKEYs with invalid DNSSEC security stateReto Guadagnini2013-02-191-2/+12
|
* ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-191-3/+16
|
* Added ipseckey plugin, which provides support for public keys in IPSECKEY RRsReto Guadagnini2013-02-198-0/+859
|
* unbound: Implementation of query method of unbound_resolver_tReto Guadagnini2013-02-192-7/+64
|
* unbound: Implemented resolver_response_t as unbound_response_tReto Guadagnini2013-02-193-1/+316
|
* Implemented rr_set_t interfaceReto Guadagnini2013-02-193-1/+113
|
* unbound: Implemented rr_t as unbound_rr_tReto Guadagnini2013-02-193-1/+215
|
* Added unbound plugin implementing the resolver interface using libunboundReto Guadagnini2013-02-196-0/+234
|
* Added manager for DNS resolversReto Guadagnini2013-02-195-1/+181
|
* Added interface for DNS resolversReto Guadagnini2013-02-196-0/+548
|
* added missing return statementAndreas Steffen2013-02-191-0/+1
|
* Fix encoding of issuerAndSubject while handling SCEP pending stateMartin Willi2013-02-191-1/+1
|
* reject PB-Experimental messages with NOSKIP flag setAndreas Steffen2013-02-191-0/+7
|
* added parameter descriptionsAndreas Steffen2013-02-191-1/+8
|
* removed superfluous debug outputAndreas Steffen2013-02-152-4/+0
|
* Add a timeout to clean up PDP RADIUS connectionsMartin Willi2013-02-141-0/+51
|
* Keep the PDP connections lock while accessing its objectsMartin Willi2013-02-143-7/+34
| | | | | | When we introduce connection timeouts, the state may disappear at any time. This change prevents that, but is not very clear. We probably have to refactor connection handling.
* Add locking to TNC-PDP connectionsMartin Willi2013-02-141-7/+23
|
* Add IF-M message subtype getter to IMC/IMV messagesMartin Willi2013-02-144-1/+28
|
* Use a generic constructor to create PA-TNC error attributesMartin Willi2013-02-141-62/+32
|
* Add a global return_success() method implementationMartin Willi2013-02-143-8/+15
|
* Add a convenience method to check pen_type_t for vendor and typeMartin Willi2013-02-141-0/+14
|
* Add a comparison function for pen_type_tMartin Willi2013-02-141-0/+12
|
* Whitespace and comment cleanups in pen.[ch]Martin Willi2013-02-142-20/+28
|
* resolve dependency on libtlsAndreas Steffen2013-02-141-0/+1
|
* Merge branch 'ike-dscp'Martin Willi2013-02-1426-68/+237
|\
| * Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-067-4/+23
| |
| * Set configured DSCP value while generating IKE packetsMartin Willi2013-02-061-1/+26
| |
| * Add a DSCP configuration value to IKE configsMartin Willi2013-02-0614-25/+41
| |
| * Set DSCP values when sending IP packets in socket-defaultMartin Willi2013-02-061-1/+65
| |
| * Don't send a packet in default socket if family is not IPv4 nor IPv6Martin Willi2013-02-061-12/+18
| |
| * Add a DSCP value with getter/setter on packet_tMartin Willi2013-02-063-0/+47
| |
| * Avoid extensive casting of sockaddr types in socket-default by using a unionMartin Willi2013-02-061-24/+16
| | | | | | | | Additionally fixes a strict-aliasing rule compiler warning with older gcc.
| * Set sockaddr family on ifreq instead of casted familiy specific sockaddrMartin Willi2013-02-061-2/+2
| | | | | | | | Fixes a strict-aliasing rule compiler warning with older gcc.
* | Check if recommendations is set before applying language preferenceMartin Willi2013-02-141-3/+6
| |
* | PT-TLS dispatcher TNCCS constructor takes peer identities to pass to factoryMartin Willi2013-02-142-4/+23
| |
* | Merge branch 'pt-tls'Martin Willi2013-02-1419-94/+1411
|\ \
| * | Pass a constructor callback to create TNCCS server instances while dispatchingMartin Willi2013-01-174-15/+31
| | |
| * | Create pt_tls_client with separate server address and identityMartin Willi2013-01-162-28/+19
| | |
| * | Create pt_tls_dispatcher with separate server address and identityMartin Willi2013-01-162-17/+13
| | |
| * | Add a libpttls providing NEA PT-TLS / TNC IF-T for TLS transport layerMartin Willi2013-01-1610-0/+1169
| | |
| * | Send TLS close notify during tls_socket_t destructionMartin Willi2013-01-151-2/+25
| | |
| * | Send TLS close notify if application returns SUCCESSMartin Willi2013-01-151-2/+6
| | |
| * | Block TLS read when sending data, but have to wait for the handshake data firstMartin Willi2013-01-151-4/+11
| | |
| * | TNCCS plugins don't depend on EAP-TNC, but can be used by other transports, tooMartin Willi2013-01-153-9/+0
| | |
| * | Add a bio_reader_t constructor variant freeing passed data during destructionMartin Willi2013-01-152-1/+32
| | |