tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Some pacman fixes	Andreas Steffen	2013-06-23	2	-33/+32
\|
*	Some PTS database fixes	Andreas Steffen	2013-06-21	1	-14/+14
\|
*	Implemented pacman in a more reliable way	Andreas Steffen	2013-06-21	4	-380/+471
\|
*	Define protocol string	Andreas Steffen	2013-06-21	1	-9/+10
\|
*	Generate result string for port scan workitems	Andreas Steffen	2013-06-21	1	-2/+29
\|
*	Ignore non-matching protocols	Andreas Steffen	2013-06-21	1	-2/+2
\|
*	Introduced workitems to Scanner IMV	Andreas Steffen	2013-06-21	7	-194/+318
\|
*	Added ITA components to database	Andreas Steffen	2013-06-21	1	-0/+26
\|
*	Added soft dependency on database plugin	Andreas Steffen	2013-06-21	1	-0/+1
\|
*	fixed SQL query	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	Shortened names of default policy groups	Andreas Steffen	2013-06-21	2	-10/+10
\|
*	Store device with product ID	Andreas Steffen	2013-06-21	5	-24/+32
\|
*	Database changes needed to integrate Cygnet backend	Andreas Steffen	2013-06-21	3	-84/+107
\|
*	Implemented get\|set_action_flag() methods	Andreas Steffen	2013-06-21	3	-37/+20
\|
*	Implemented hierarchical policy groups	Andreas Steffen	2013-06-21	3	-144/+81
\|
*	Introduced workitems to Attestation IMV	Andreas Steffen	2013-06-21	20	-469/+775
\|
*	pts_meas_algo_probe() and pts_dh_group_probe() got lost	Andreas Steffen	2013-06-21	1	-1/+3
\|
*	Converted all IMVs to use generic IF-IMV API	Andreas Steffen	2013-06-21	16	-1409/+1485
\|
*	Remove the constructor from the IMV agent interface	Andreas Steffen	2013-06-21	1	-10/+0
\|
*	Defined a generic IMV agent interface	Andreas Steffen	2013-06-21	5	-99/+134
\|
*	Moved all functionality into imv_os_agent_t class turning imv_os_t into an ↵	Andreas Steffen	2013-06-21	7	-780/+946
\| \| \| \|	IF-IMV skeleton
*	Moved batch_ending into separate source file	Andreas Steffen	2013-06-21	6	-295/+373
\|
*	do not process workitems with NULL result	Andreas Steffen	2013-06-21	2	-2/+3
\|
*	fixed enumeration of workitems for a given session	Andreas Steffen	2013-06-21	1	-1/+1
\|
*	generate workitems based on group policy	Andreas Steffen	2013-06-21	4	-64/+533
\|
*	Added file and directory reference measurements to workitems	Andreas Steffen	2013-06-21	2	-4/+8
\|
*	add overall recommendation to session database entry	Andreas Steffen	2013-06-21	6	-38/+75
\|
*	don't define a default database URI	Andreas Steffen	2013-06-21	3	-6/+4
\|
*	created a simple IMV Policy Manager	Andreas Steffen	2013-06-21	5	-0/+232
\|
*	register received scanner attributes	Andreas Steffen	2013-06-21	4	-6/+103
\|
*	used tnc_policy_update functions for default policy	Andreas Steffen	2013-06-21	1	-47/+5
\|
*	refactored IMV policy management	Andreas Steffen	2013-06-21	23	-596/+885
\|
*	implemented policy rules for OS IMV	Andreas Steffen	2013-06-21	19	-101/+1328
\|
*	check for zero-length device ID	Andreas Steffen	2013-06-21	1	-0/+6
\|
*	ITA-HSR/Device ID attribute & IMV OS state machine	Andreas Steffen	2013-06-21	10	-169/+519
\|
*	execute an _imv_policy script	Andreas Steffen	2013-06-21	6	-10/+127
\|
*	implemented IMV session control	Andreas Steffen	2013-06-21	21	-429/+953
\|
*	Manage files and directories	Andreas Steffen	2013-06-21	4	-122/+208
\|
*	osx-attr: add plugin installing config attributes using SystemConfiguration	Martin Willi	2013-06-21	6	-0/+464
\| \| \| \| \|	Currently installs DNS servers only, by prepending IP addresses to the DNS configuration of the primary networking service.
*	kernel-pfroute: Simplify route lookup after fixing sockaddr parsing	Tobias Brunner	2013-06-21	1	-90/+19
\|
*	kernel-pfroute: Alignment of sockaddrs is not always the same	Tobias Brunner	2013-06-21	1	-1/+8
\|
*	kernel-pfroute: struct sockaddr arguments are 4 byte aligned	Tobias Brunner	2013-06-21	1	-4/+8
\| \| \| \| \| \| \| \| \|	This was noticed on Mac OS X where, if the default route is returned, RTA_NETMASK has sa_len set to 0, but skipping zero bytes to read the next address makes no sense, of course. Using 0 for sa_len seems a bit strange, in particular, because struct sockaddr has by definition a minimum length of 16 bytes. But it seems FreeBSD actually does the same.
*	kernel-libipsec: Ignore failures when installing routes for multicast or ↵	Tobias Brunner	2013-06-21	1	-1/+23
\| \| \| \|	broadcast policies
*	kernel-pfroute: Improve route lookup depending on information we get back	Tobias Brunner	2013-06-21	1	-12/+96
\| \| \| \|	Kernels don't provide the same information for all routes.
*	kernel-pfroute: Try to ensure we get a source address or interface name	Tobias Brunner	2013-06-21	1	-0/+6
\|
*	ike: Force NAT-T/UDP encapsulation if kernel interface requires it	Tobias Brunner	2013-06-21	2	-5/+32
\|
*	kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets	Tobias Brunner	2013-06-21	2	-0/+9
\|
*	tun-device: Packets sent over utun devices on Mac OS X have the protocol ↵	Tobias Brunner	2013-06-21	1	-0/+11
\| \| \| \|	family prepended
*	kernel-pfroute: Use DST as nexthop for host routes	Tobias Brunner	2013-06-21	1	-0/+6
\| \| \| \|	These are created as cache/clone on Mac OS X.
*	kernel-pfroute: Implement get_source_addr()	Tobias Brunner	2013-06-21	1	-12/+27
\|