Endpoint Compliance via PT-TLS Protocol » History » Version 5
Andreas Steffen, 16.08.2013 07:25
| 1 | 5 | Andreas Steffen | h1. Endpoint Compliance via PT-TLS Protocol |
|---|---|---|---|
| 2 | 1 | Andreas Steffen | |
| 3 | 3 | Andreas Steffen | {{>toc}} |
| 4 | 3 | Andreas Steffen | |
| 5 | 1 | Andreas Steffen | h2. Starting the strongSwan Policy Decision Point (PDP) |
| 6 | 1 | Andreas Steffen | |
| 7 | 2 | Andreas Steffen | The strongSwan PDP starts and loads its server certificate and the client credentials |
| 8 | 1 | Andreas Steffen | <pre> |
| 9 | 1 | Andreas Steffen | 00[DMN] Starting IKE charon daemon (strongSwan 5.1.0, Linux 3.10.5, x86_64) |
| 10 | 1 | Andreas Steffen | 00[LIB] openssl FIPS mode(0) - disabled |
| 11 | 1 | Andreas Steffen | 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts' |
| 12 | 1 | Andreas Steffen | 00[CFG] loaded ca certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" from '/etc/ipsec.d/cacerts/strongswanCert.pem' |
| 13 | 1 | Andreas Steffen | 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts' |
| 14 | 1 | Andreas Steffen | 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts' |
| 15 | 1 | Andreas Steffen | 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts' |
| 16 | 1 | Andreas Steffen | 00[CFG] loading crls from '/etc/ipsec.d/crls' |
| 17 | 1 | Andreas Steffen | 00[CFG] loading secrets from '/etc/ipsec.secrets' |
| 18 | 1 | Andreas Steffen | 00[CFG] loaded RSA private key from '/etc/ipsec.d/private/aaaKey.pem' |
| 19 | 1 | Andreas Steffen | 00[CFG] loaded EAP secret for carol |
| 20 | 1 | Andreas Steffen | 00[CFG] loaded EAP secret for dave |
| 21 | 1 | Andreas Steffen | </pre> |
| 22 | 1 | Andreas Steffen | |
| 23 | 1 | Andreas Steffen | Next the OS and SWID IMVs are loaded |
| 24 | 1 | Andreas Steffen | <pre> |
| 25 | 1 | Andreas Steffen | 00[TNC] TNC recommendation policy is 'default' |
| 26 | 1 | Andreas Steffen | 00[TNC] loading IMVs from '/etc/tnc_config' |
| 27 | 1 | Andreas Steffen | 00[TNC] added IETF attributes |
| 28 | 1 | Andreas Steffen | 00[TNC] added ITA-HSR attributes |
| 29 | 1 | Andreas Steffen | 00[LIB] libimcv initialized |
| 30 | 1 | Andreas Steffen | 00[IMV] IMV 1 "OS" initialized |
| 31 | 1 | Andreas Steffen | 00[TNC] IMV 1 supports 1 message type: 'IETF/Operating System' 0x000000/0x00000001 |
| 32 | 1 | Andreas Steffen | 00[TNC] IMV 1 "OS" loaded from '/usr/local/lib/ipsec/imcvs/imv-os.so' |
| 33 | 1 | Andreas Steffen | 00[IMV] IMV 2 "SWID" initialized |
| 34 | 1 | Andreas Steffen | 00[TNC] added TCG attributes |
| 35 | 1 | Andreas Steffen | 00[LIB] libpts initialized |
| 36 | 1 | Andreas Steffen | 00[TNC] IMV 2 supports 1 message type: 'TCG/SWID' 0x005597/0x00000003 |
| 37 | 1 | Andreas Steffen | 00[TNC] IMV 2 "SWID" loaded from '/usr/local/lib/ipsec/imcvs/imv-swid.so' |
| 38 | 1 | Andreas Steffen | </pre> |
| 39 | 1 | Andreas Steffen | |
| 40 | 2 | Andreas Steffen | The PDP loads all plugins needed to communicate via its EAP-RADIUS and PT-TLS interfaces and spawns 16 worker threads |
| 41 | 1 | Andreas Steffen | |
| 42 | 1 | Andreas Steffen | <pre> |
| 43 | 1 | Andreas Steffen | 00[IKE] eap method EAP_TTLS selected |
| 44 | 1 | Andreas Steffen | 00[LIB] loaded plugins: charon curl pem pkcs1 nonce x509 revocation openssl socket-default kernel-netlink stroke tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite |
| 45 | 1 | Andreas Steffen | 00[JOB] spawning 16 worker threads |
| 46 | 1 | Andreas Steffen | 05[CFG] received stroke: add connection 'aaa' |
| 47 | 1 | Andreas Steffen | 05[CFG] loaded certificate "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" from 'aaaCert.pem' |
| 48 | 1 | Andreas Steffen | 05[CFG] added configuration 'aaa' |
| 49 | 1 | Andreas Steffen | </pre> |
| 50 | 1 | Andreas Steffen | |
| 51 | 3 | Andreas Steffen | h2. PT-TLS Connection by Access Requestor "carol" |
| 52 | 1 | Andreas Steffen | |
| 53 | 1 | Andreas Steffen | <pre> |
| 54 | 1 | Andreas Steffen | 11[TNC] accepting PT-TLS stream from 192.168.0.100 |
| 55 | 1 | Andreas Steffen | </pre> |
| 56 | 1 | Andreas Steffen | |
| 57 | 3 | Andreas Steffen | h3. TLS Connection Setup |
| 58 | 1 | Andreas Steffen | |
| 59 | 1 | Andreas Steffen | <pre> |
| 60 | 1 | Andreas Steffen | 12[TNC] entering PT-TLS negotiation phase |
| 61 | 1 | Andreas Steffen | 12[TLS] processing TLS Handshake record (176 bytes) |
| 62 | 1 | Andreas Steffen | 12[TLS] received TLS ClientHello handshake (172 bytes) |
| 63 | 1 | Andreas Steffen | 12[TLS] received TLS 'signature algorithms' extension |
| 64 | 1 | Andreas Steffen | 12[TLS] received TLS 'elliptic curves' extension |
| 65 | 1 | Andreas Steffen | 12[TLS] received TLS 'ec point formats' extension |
| 66 | 1 | Andreas Steffen | 12[TLS] received TLS 'server name' extension |
| 67 | 1 | Andreas Steffen | 12[TLS] received 28 TLS cipher suites: |
| 68 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
| 69 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
| 70 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA |
| 71 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
| 72 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| 73 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
| 74 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
| 75 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
| 76 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA |
| 77 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 |
| 78 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA |
| 79 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 |
| 80 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA |
| 81 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 |
| 82 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA |
| 83 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 |
| 84 | 1 | Andreas Steffen | 12[TLS] TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA |
| 85 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_AES_128_CBC_SHA |
| 86 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_AES_128_CBC_SHA256 |
| 87 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_AES_256_CBC_SHA |
| 88 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_AES_256_CBC_SHA256 |
| 89 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA |
| 90 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 |
| 91 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA |
| 92 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 |
| 93 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA |
| 94 | 1 | Andreas Steffen | 12[TLS] TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA |
| 95 | 1 | Andreas Steffen | 12[TLS] TLS_RSA_WITH_3DES_EDE_CBC_SHA |
| 96 | 1 | Andreas Steffen | 12[TLS] negotiated TLS 1.2 using suite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| 97 | 1 | Andreas Steffen | 12[TLS] sending TLS ServerHello handshake (54 bytes) |
| 98 | 1 | Andreas Steffen | 12[TLS] sending TLS server certificate 'C=CH, O=Linux strongSwan, CN=aaa.strongswan.org' |
| 99 | 1 | Andreas Steffen | 12[TLS] sending TLS Certificate handshake (1066 bytes) |
| 100 | 1 | Andreas Steffen | 12[TLS] selected ECDH group SECP256R1 |
| 101 | 1 | Andreas Steffen | 12[TLS] created signature with MD5/RSA |
| 102 | 1 | Andreas Steffen | 12[TLS] sending TLS ServerKeyExchange handshake (329 bytes) |
| 103 | 1 | Andreas Steffen | 12[TLS] sending TLS cert request for 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' |
| 104 | 1 | Andreas Steffen | 12[TLS] sending TLS CertificateRequest handshake (102 bytes) |
| 105 | 1 | Andreas Steffen | 12[TLS] sending TLS ServerHelloDone handshake (0 bytes) |
| 106 | 1 | Andreas Steffen | 12[TLS] sending TLS Handshake record (1571 bytes) |
| 107 | 1 | Andreas Steffen | 12[TLS] processing TLS Handshake record (77 bytes) |
| 108 | 1 | Andreas Steffen | 12[TLS] received TLS Certificate handshake (3 bytes) |
| 109 | 1 | Andreas Steffen | 12[TLS] received TLS ClientKeyExchange handshake (66 bytes) |
| 110 | 1 | Andreas Steffen | 12[TLS] processing TLS ChangeCipherSpec record (1 bytes) |
| 111 | 1 | Andreas Steffen | 12[TLS] processing TLS Handshake record (64 bytes) |
| 112 | 1 | Andreas Steffen | 12[TLS] received TLS Finished handshake (12 bytes) |
| 113 | 1 | Andreas Steffen | 12[TLS] sending TLS ChangeCipherSpec record (1 bytes) |
| 114 | 1 | Andreas Steffen | 12[TLS] sending TLS Finished handshake (12 bytes) |
| 115 | 1 | Andreas Steffen | 12[TLS] sending TLS Handshake record (64 bytes) |
| 116 | 1 | Andreas Steffen | </pre> |
| 117 | 1 | Andreas Steffen | |
| 118 | 3 | Andreas Steffen | h3. PT-TLS Negotiation |
| 119 | 3 | Andreas Steffen | |
| 120 | 1 | Andreas Steffen | <pre> |
| 121 | 1 | Andreas Steffen | 12[TLS] processing TLS ApplicationData record (64 bytes) |
| 122 | 1 | Andreas Steffen | 12[TNC] received PT-TLS message #0 of type 'Version Request' (20 bytes) |
| 123 | 1 | Andreas Steffen | 12[TNC] sending PT-TLS message #0 of type 'Version Response' (20 bytes) |
| 124 | 1 | Andreas Steffen | 12[TLS] sending TLS ApplicationData record (64 bytes) |
| 125 | 1 | Andreas Steffen | 12[TNC] negotiated PT-TLS version 1 |
| 126 | 1 | Andreas Steffen | </pre> |
| 127 | 1 | Andreas Steffen | |
| 128 | 3 | Andreas Steffen | h3. SASL Password-based Client Authentication |
| 129 | 3 | Andreas Steffen | |
| 130 | 1 | Andreas Steffen | <pre> |
| 131 | 1 | Andreas Steffen | 12[TNC] doing SASL client authentication |
| 132 | 1 | Andreas Steffen | 12[TNC] offering SASL PLAIN |
| 133 | 1 | Andreas Steffen | 12[TNC] sending PT-TLS message #1 of type 'SASL Mechanisms' (22 bytes) |
| 134 | 1 | Andreas Steffen | 12[TLS] sending TLS ApplicationData record (64 bytes) |
| 135 | 1 | Andreas Steffen | 12[TLS] processing TLS ApplicationData record (80 bytes) |
| 136 | 1 | Andreas Steffen | 12[TNC] received PT-TLS message #1 of type 'SASL Mechanism Selection' (37 bytes) |
| 137 | 1 | Andreas Steffen | 12[TNC] client starts SASL PLAIN authentication |
| 138 | 1 | Andreas Steffen | 12[TNC] SASL PLAIN authentication successful |
| 139 | 1 | Andreas Steffen | 12[TNC] SASL client identity is 'carol' |
| 140 | 1 | Andreas Steffen | 12[TNC] sending PT-TLS message #2 of type 'SASL Result' (17 bytes) |
| 141 | 1 | Andreas Steffen | 12[TLS] sending TLS ApplicationData record (64 bytes) |
| 142 | 1 | Andreas Steffen | 12[TNC] sending PT-TLS message #3 of type 'SASL Mechanisms' (16 bytes) |
| 143 | 1 | Andreas Steffen | 12[TLS] sending TLS ApplicationData record (64 bytes) |
| 144 | 1 | Andreas Steffen | </pre> |
| 145 | 1 | Andreas Steffen | |
| 146 | 1 | Andreas Steffen | <pre> |
| 147 | 1 | Andreas Steffen | 04[TNC] entering PT-TLS data transport phase |
| 148 | 1 | Andreas Steffen | 04[TNC] no PB-TNC batch to send |
| 149 | 1 | Andreas Steffen | 04[TLS] processing TLS ApplicationData record (320 bytes) |
| 150 | 1 | Andreas Steffen | 04[TNC] received PT-TLS message #2 of type 'PB-TNC Batch' (275 bytes) |
| 151 | 1 | Andreas Steffen | 04[TNC] assigned TNCCS Connection ID 1 |
| 152 | 1 | Andreas Steffen | 04[IMV] IMV 1 "OS" created a state for IF-TNCCS 2.0 Connection ID 1: +long +excl -soh |
| 153 | 1 | Andreas Steffen | 04[IMV] over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes |
| 154 | 1 | Andreas Steffen | 04[IMV] user AR identity 'carol' authenticated by password |
| 155 | 1 | Andreas Steffen | 04[IMV] assigned session ID 2 |
| 156 | 1 | Andreas Steffen | 04[IMV] IMV 2 "SWID" created a state for IF-TNCCS 2.0 Connection ID 1: +long +excl -soh |
| 157 | 1 | Andreas Steffen | 04[IMV] over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes |
| 158 | 1 | Andreas Steffen | 04[IMV] user AR identity 'carol' authenticated by password |
| 159 | 1 | Andreas Steffen | 04[IMV] assigned session ID 2 |
| 160 | 1 | Andreas Steffen | 04[IMV] IMV 1 "OS" changed state of Connection ID 1 to 'Handshake' |
| 161 | 1 | Andreas Steffen | 04[IMV] IMV 2 "SWID" changed state of Connection ID 1 to 'Handshake' |
| 162 | 2 | Andreas Steffen | </pre> |
| 163 | 2 | Andreas Steffen | |
| 164 | 2 | Andreas Steffen | <pre> |
| 165 | 1 | Andreas Steffen | 04[TNC] received TNCCS batch (259 bytes) for Connection ID 1 |
| 166 | 1 | Andreas Steffen | 04[TNC] => 259 bytes @ 0x6dcd80 |
| 167 | 1 | Andreas Steffen | 04[TNC] 0: 02 00 00 01 00 00 01 03 00 00 00 00 00 00 00 06 ................ |
| 168 | 1 | Andreas Steffen | 04[TNC] 16: 00 00 00 1F 41 63 63 65 70 74 2D 4C 61 6E 67 75 ....Accept-Langu |
| 169 | 1 | Andreas Steffen | 04[TNC] 32: 61 67 65 3A 20 65 6E 80 00 00 00 00 00 00 01 00 age: en......... |
| 170 | 1 | Andreas Steffen | 04[TNC] 48: 00 00 DC 00 00 00 00 00 00 00 01 00 01 FF FF 01 ................ |
| 171 | 1 | Andreas Steffen | 04[TNC] 64: 00 00 00 B6 BB C4 99 00 00 00 00 00 00 00 02 00 ................ |
| 172 | 1 | Andreas Steffen | 04[TNC] 80: 00 00 17 00 25 72 00 00 44 65 62 69 61 6E 00 00 ....%r..Debian.. |
| 173 | 1 | Andreas Steffen | 04[TNC] 96: 00 00 00 00 00 04 00 00 00 19 0A 37 2E 30 20 78 ...........7.0 x |
| 174 | 1 | Andreas Steffen | 04[TNC] 112: 38 36 5F 36 34 00 00 00 00 00 00 00 00 00 03 00 86_64........... |
| 175 | 1 | Andreas Steffen | 04[TNC] 128: 00 00 1C 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ |
| 176 | 1 | Andreas Steffen | 04[TNC] 144: 00 00 00 00 00 00 00 00 00 00 05 00 00 00 24 03 ..............$. |
| 177 | 1 | Andreas Steffen | 04[TNC] 160: 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 30 ...2013-08-15T20 |
| 178 | 1 | Andreas Steffen | 04[TNC] 176: 3A 34 35 3A 30 36 5A 00 00 00 00 00 00 00 0B 00 :45:06Z......... |
| 179 | 1 | Andreas Steffen | 04[TNC] 192: 00 00 10 00 00 00 00 00 00 00 00 00 00 00 0C 00 ................ |
| 180 | 1 | Andreas Steffen | 04[TNC] 208: 00 00 10 00 00 00 00 00 00 90 2A 00 00 00 08 00 ..........*..... |
| 181 | 1 | Andreas Steffen | 04[TNC] 224: 00 00 2C 37 37 38 31 62 33 38 39 34 66 30 31 66 ..,7781b3894f01f |
| 182 | 1 | Andreas Steffen | 04[TNC] 240: 34 30 62 38 36 35 64 33 38 36 36 35 31 37 30 32 40b865d386651702 |
| 183 | 1 | Andreas Steffen | 04[TNC] 256: 65 30 62 e0b |
| 184 | 1 | Andreas Steffen | 04[TNC] PB-TNC state transition from 'Init' to 'Server Working' |
| 185 | 1 | Andreas Steffen | 04[TNC] processing PB-TNC CDATA batch |
| 186 | 1 | Andreas Steffen | 04[TNC] processing PB-Language-Preference message (31 bytes) |
| 187 | 1 | Andreas Steffen | 04[TNC] processing PB-PA message (220 bytes) |
| 188 | 1 | Andreas Steffen | 04[TNC] setting language preference to 'en' |
| 189 | 2 | Andreas Steffen | </pre> |
| 190 | 2 | Andreas Steffen | |
| 191 | 2 | Andreas Steffen | <pre> |
| 192 | 1 | Andreas Steffen | 04[TNC] handling PB-PA message type 'IETF/Operating System' 0x000000/0x00000001 |
| 193 | 1 | Andreas Steffen | 04[IMV] IMV 1 "OS" received message for Connection ID 1 from IMC 1 |
| 194 | 1 | Andreas Steffen | 04[IMV] => 196 bytes @ 0x6ee790 |
| 195 | 1 | Andreas Steffen | 04[IMV] 0: 01 00 00 00 B6 BB C4 99 00 00 00 00 00 00 00 02 ................ |
| 196 | 1 | Andreas Steffen | 04[IMV] 16: 00 00 00 17 00 25 72 00 00 44 65 62 69 61 6E 00 .....%r..Debian. |
| 197 | 1 | Andreas Steffen | 04[IMV] 32: 00 00 00 00 00 00 04 00 00 00 19 0A 37 2E 30 20 ............7.0 |
| 198 | 1 | Andreas Steffen | 04[IMV] 48: 78 38 36 5F 36 34 00 00 00 00 00 00 00 00 00 03 x86_64.......... |
| 199 | 1 | Andreas Steffen | 04[IMV] 64: 00 00 00 1C 00 00 00 07 00 00 00 00 00 00 00 00 ................ |
| 200 | 1 | Andreas Steffen | 04[IMV] 80: 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 24 ...............$ |
| 201 | 1 | Andreas Steffen | 04[IMV] 96: 03 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 ....2013-08-15T2 |
| 202 | 1 | Andreas Steffen | 04[IMV] 112: 30 3A 34 35 3A 30 36 5A 00 00 00 00 00 00 00 0B 0:45:06Z........ |
| 203 | 1 | Andreas Steffen | 04[IMV] 128: 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 0C ................ |
| 204 | 1 | Andreas Steffen | 04[IMV] 144: 00 00 00 10 00 00 00 00 00 00 90 2A 00 00 00 08 ...........*.... |
| 205 | 1 | Andreas Steffen | 04[IMV] 160: 00 00 00 2C 37 37 38 31 62 33 38 39 34 66 30 31 ...,7781b3894f01 |
| 206 | 1 | Andreas Steffen | 04[IMV] 176: 66 34 30 62 38 36 35 64 33 38 36 36 35 31 37 30 f40b865d38665170 |
| 207 | 1 | Andreas Steffen | 04[IMV] 192: 32 65 30 62 2e0b |
| 208 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC message with ID 0xb6bbc499 |
| 209 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/Product Information' 0x000000/0x00000002 |
| 210 | 1 | Andreas Steffen | 04[TNC] => 11 bytes @ 0x6ee7a4 |
| 211 | 1 | Andreas Steffen | 04[TNC] 0: 00 25 72 00 00 44 65 62 69 61 6E .%r..Debian |
| 212 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/String Version' 0x000000/0x00000004 |
| 213 | 1 | Andreas Steffen | 04[TNC] => 13 bytes @ 0x6ee7bb |
| 214 | 1 | Andreas Steffen | 04[TNC] 0: 0A 37 2E 30 20 78 38 36 5F 36 34 00 00 .7.0 x86_64.. |
| 215 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/Numeric Version' 0x000000/0x00000003 |
| 216 | 1 | Andreas Steffen | 04[TNC] => 16 bytes @ 0x6ee7d4 |
| 217 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 07 00 00 00 00 00 00 00 00 00 00 00 00 ................ |
| 218 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/Operational Status' 0x000000/0x00000005 |
| 219 | 1 | Andreas Steffen | 04[TNC] => 24 bytes @ 0x6ee7f0 |
| 220 | 1 | Andreas Steffen | 04[TNC] 0: 03 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 ....2013-08-15T2 |
| 221 | 1 | Andreas Steffen | 04[TNC] 16: 30 3A 34 35 3A 30 36 5A 0:45:06Z |
| 222 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/Forwarding Enabled' 0x000000/0x0000000b |
| 223 | 1 | Andreas Steffen | 04[TNC] => 4 bytes @ 0x6ee814 |
| 224 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 00 .... |
| 225 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'IETF/Factory Default Password Enabled' 0x000000/0x0000000c |
| 226 | 1 | Andreas Steffen | 04[TNC] => 4 bytes @ 0x6ee824 |
| 227 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 00 .... |
| 228 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'ITA-HSR/Device ID' 0x00902a/0x00000008 |
| 229 | 1 | Andreas Steffen | 04[TNC] => 32 bytes @ 0x6ee834 |
| 230 | 1 | Andreas Steffen | 04[TNC] 0: 37 37 38 31 62 33 38 39 34 66 30 31 66 34 30 62 7781b3894f01f40b |
| 231 | 1 | Andreas Steffen | 04[TNC] 16: 38 36 35 64 33 38 36 36 35 31 37 30 32 65 30 62 865d386651702e0b |
| 232 | 2 | Andreas Steffen | </pre> |
| 233 | 1 | Andreas Steffen | |
| 234 | 5 | Andreas Steffen | h3. Operating System Information |
| 235 | 5 | Andreas Steffen | |
| 236 | 2 | Andreas Steffen | <pre> |
| 237 | 1 | Andreas Steffen | 04[IMV] operating system name is 'Debian' from vendor Debian Project |
| 238 | 1 | Andreas Steffen | 04[IMV] operating system version is '7.0 x86_64' |
| 239 | 1 | Andreas Steffen | 04[IMV] operating system numeric version is 7.0 |
| 240 | 1 | Andreas Steffen | 04[IMV] operational status: operational, result: successful |
| 241 | 1 | Andreas Steffen | 04[IMV] last boot: Aug 15 20:45:06 UTC 2013 |
| 242 | 1 | Andreas Steffen | 04[IMV] IPv4 forwarding is disabled |
| 243 | 1 | Andreas Steffen | 04[IMV] factory default password is disabled |
| 244 | 1 | Andreas Steffen | </pre> |
| 245 | 1 | Andreas Steffen | |
| 246 | 3 | Andreas Steffen | h3. Device Identity |
| 247 | 3 | Andreas Steffen | |
| 248 | 2 | Andreas Steffen | <pre> |
| 249 | 1 | Andreas Steffen | 04[IMV] device ID is 7781b3894f01f40b865d386651702e0b |
| 250 | 2 | Andreas Steffen | </pre> |
| 251 | 2 | Andreas Steffen | |
| 252 | 4 | Andreas Steffen | h3. Policy Manager generating Workitem List |
| 253 | 4 | Andreas Steffen | |
| 254 | 2 | Andreas Steffen | <pre> |
| 255 | 1 | Andreas Steffen | 04[IMV] running policy script: 2>&1 TNC_SESSION_ID='2' ipsec imv_policy_manager start |
| 256 | 1 | Andreas Steffen | 04[IMV] policy: imv_policy_manager start successful |
| 257 | 2 | Andreas Steffen | </pre> |
| 258 | 2 | Andreas Steffen | |
| 259 | 2 | Andreas Steffen | <pre> |
| 260 | 1 | Andreas Steffen | 04[IMV] IMV 1 handled FWDEN workitem 3: allow - forwarding not enabled |
| 261 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC message with ID 0x13044192 |
| 262 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009 |
| 263 | 1 | Andreas Steffen | 04[TNC] => 4 bytes @ 0x6e35f0 |
| 264 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 00 .... |
| 265 | 1 | Andreas Steffen | 04[IMV] created PA-TNC message: => 24 bytes @ 0x6fba00 |
| 266 | 1 | Andreas Steffen | 04[IMV] 0: 01 00 00 00 13 04 41 92 00 00 00 00 00 00 00 09 ......A......... |
| 267 | 1 | Andreas Steffen | 04[IMV] 16: 00 00 00 10 00 00 00 00 ........ |
| 268 | 1 | Andreas Steffen | 04[TNC] creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001 |
| 269 | 1 | Andreas Steffen | 04[TNC] IMV 1 provides recommendation 'allow' and evaluation 'compliant' |
| 270 | 2 | Andreas Steffen | </pre> |
| 271 | 2 | Andreas Steffen | |
| 272 | 2 | Andreas Steffen | h3. Sending SWID Request |
| 273 | 2 | Andreas Steffen | |
| 274 | 2 | Andreas Steffen | <pre> |
| 275 | 1 | Andreas Steffen | 04[IMV] IMV 2 issues SWID tag request 6 |
| 276 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC message with ID 0x6bc52772 |
| 277 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC attribute type 'TCG/SWID Request' 0x005597/0x00000011 |
| 278 | 1 | Andreas Steffen | 04[TNC] => 12 bytes @ 0x7150a0 |
| 279 | 1 | Andreas Steffen | 04[TNC] 0: 01 00 00 00 00 00 00 06 00 00 00 00 ............ |
| 280 | 1 | Andreas Steffen | 04[IMV] created PA-TNC message: => 32 bytes @ 0x6ebcc0 |
| 281 | 1 | Andreas Steffen | 04[IMV] 0: 01 00 00 00 6B C5 27 72 00 00 55 97 00 00 00 11 ....k.'r..U..... |
| 282 | 1 | Andreas Steffen | 04[IMV] 16: 00 00 00 18 01 00 00 00 00 00 00 06 00 00 00 00 ................ |
| 283 | 1 | Andreas Steffen | 04[TNC] creating PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 284 | 1 | Andreas Steffen | 04[TNC] PB-TNC state transition from 'Server Working' to 'Client Working' |
| 285 | 1 | Andreas Steffen | 04[TNC] creating PB-TNC SDATA batch |
| 286 | 1 | Andreas Steffen | 04[TNC] adding PB-PA message |
| 287 | 1 | Andreas Steffen | 04[TNC] adding PB-PA message |
| 288 | 1 | Andreas Steffen | 04[TNC] sending PB-TNC SDATA batch (112 bytes) for Connection ID 1 |
| 289 | 1 | Andreas Steffen | 04[TNC] => 112 bytes @ 0x6fc950 |
| 290 | 1 | Andreas Steffen | 04[TNC] 0: 02 80 00 02 00 00 00 70 80 00 00 00 00 00 00 01 .......p........ |
| 291 | 1 | Andreas Steffen | 04[TNC] 16: 00 00 00 30 00 00 00 00 00 00 00 01 FF FF 00 01 ...0............ |
| 292 | 1 | Andreas Steffen | 04[TNC] 32: 01 00 00 00 13 04 41 92 00 00 00 00 00 00 00 09 ......A......... |
| 293 | 1 | Andreas Steffen | 04[TNC] 48: 00 00 00 10 00 00 00 00 80 00 00 00 00 00 00 01 ................ |
| 294 | 1 | Andreas Steffen | 04[TNC] 64: 00 00 00 38 00 00 55 97 00 00 00 03 FF FF 00 02 ...8..U......... |
| 295 | 1 | Andreas Steffen | 04[TNC] 80: 01 00 00 00 6B C5 27 72 00 00 55 97 00 00 00 11 ....k.'r..U..... |
| 296 | 1 | Andreas Steffen | 04[TNC] 96: 00 00 00 18 01 00 00 00 00 00 00 06 00 00 00 00 ................ |
| 297 | 1 | Andreas Steffen | 04[TNC] sending PT-TLS message #4 of type 'PB-TNC Batch' (128 bytes) |
| 298 | 1 | Andreas Steffen | 04[TLS] sending TLS ApplicationData record (176 bytes) |
| 299 | 2 | Andreas Steffen | </pre> |
| 300 | 2 | Andreas Steffen | |
| 301 | 2 | Andreas Steffen | h3. Receiving SWID Tag Identifier Inventory |
| 302 | 2 | Andreas Steffen | |
| 303 | 2 | Andreas Steffen | <pre> |
| 304 | 1 | Andreas Steffen | 04[TLS] processing TLS ApplicationData record (176 bytes) |
| 305 | 1 | Andreas Steffen | 04[TNC] received PT-TLS message #3 of type 'PB-TNC Batch' (134 bytes) |
| 306 | 1 | Andreas Steffen | 04[TNC] received TNCCS batch (118 bytes) for Connection ID 1 |
| 307 | 1 | Andreas Steffen | 04[TNC] => 118 bytes @ 0x714f30 |
| 308 | 1 | Andreas Steffen | 04[TNC] 0: 02 00 00 01 00 00 00 76 80 00 00 00 00 00 00 01 .......v........ |
| 309 | 1 | Andreas Steffen | 04[TNC] 16: 00 00 00 6E 80 00 55 97 00 00 00 03 00 02 00 02 ...n..U......... |
| 310 | 1 | Andreas Steffen | 04[TNC] 32: 01 00 00 00 0C 84 EC 82 00 00 55 97 00 00 00 12 ..........U..... |
| 311 | 1 | Andreas Steffen | 04[TNC] 48: 00 00 00 4E 00 00 00 01 00 00 00 06 12 31 7A 21 ...N.........1z! |
| 312 | 1 | Andreas Steffen | 04[TNC] 64: 00 00 00 01 00 1C 72 65 67 69 64 2E 32 30 30 34 ......regid.2004 |
| 313 | 1 | Andreas Steffen | 04[TNC] 80: 2D 30 33 2E 6F 72 67 2E 73 74 72 6F 6E 67 73 77 -03.org.strongsw |
| 314 | 1 | Andreas Steffen | 04[TNC] 96: 61 6E 00 10 73 74 72 6F 6E 67 53 77 61 6E 2D 35 an..strongSwan-5 |
| 315 | 1 | Andreas Steffen | 04[TNC] 112: 2D 31 2D 30 00 00 -1-0.. |
| 316 | 1 | Andreas Steffen | 04[TNC] PB-TNC state transition from 'Client Working' to 'Server Working' |
| 317 | 1 | Andreas Steffen | 04[TNC] processing PB-TNC CDATA batch |
| 318 | 1 | Andreas Steffen | 04[TNC] processing PB-PA message (110 bytes) |
| 319 | 2 | Andreas Steffen | </pre> |
| 320 | 2 | Andreas Steffen | |
| 321 | 2 | Andreas Steffen | <pre> |
| 322 | 1 | Andreas Steffen | 04[TNC] handling PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 323 | 1 | Andreas Steffen | 04[IMV] IMV 2 "SWID" received message for Connection ID 1 from IMC 2 to IMV 2 |
| 324 | 1 | Andreas Steffen | 04[IMV] => 86 bytes @ 0x6fbdc0 |
| 325 | 1 | Andreas Steffen | 04[IMV] 0: 01 00 00 00 0C 84 EC 82 00 00 55 97 00 00 00 12 ..........U..... |
| 326 | 1 | Andreas Steffen | 04[IMV] 16: 00 00 00 4E 00 00 00 01 00 00 00 06 12 31 7A 21 ...N.........1z! |
| 327 | 1 | Andreas Steffen | 04[IMV] 32: 00 00 00 01 00 1C 72 65 67 69 64 2E 32 30 30 34 ......regid.2004 |
| 328 | 1 | Andreas Steffen | 04[IMV] 48: 2D 30 33 2E 6F 72 67 2E 73 74 72 6F 6E 67 73 77 -03.org.strongsw |
| 329 | 1 | Andreas Steffen | 04[IMV] 64: 61 6E 00 10 73 74 72 6F 6E 67 53 77 61 6E 2D 35 an..strongSwan-5 |
| 330 | 1 | Andreas Steffen | 04[IMV] 80: 2D 31 2D 30 00 00 -1-0.. |
| 331 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC message with ID 0x0c84ec82 |
| 332 | 1 | Andreas Steffen | 04[TNC] processing PA-TNC attribute type 'TCG/SWID Tag Identifier Inventory' 0x005597/0x00000012 |
| 333 | 1 | Andreas Steffen | 04[TNC] => 66 bytes @ 0x6fbdd4 |
| 334 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 01 00 00 00 06 12 31 7A 21 00 00 00 01 .........1z!.... |
| 335 | 1 | Andreas Steffen | 04[TNC] 16: 00 1C 72 65 67 69 64 2E 32 30 30 34 2D 30 33 2E ..regid.2004-03. |
| 336 | 1 | Andreas Steffen | 04[TNC] 32: 6F 72 67 2E 73 74 72 6F 6E 67 73 77 61 6E 00 10 org.strongswan.. |
| 337 | 1 | Andreas Steffen | 04[TNC] 48: 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 31 2D 30 strongSwan-5-1-0 |
| 338 | 2 | Andreas Steffen | 04[TNC] 64: 00 00 |
| 339 | 2 | Andreas Steffen | </pre> |
| 340 | 2 | Andreas Steffen | |
| 341 | 2 | Andreas Steffen | <pre> .. |
| 342 | 1 | Andreas Steffen | 04[IMV] received SWID tag ID inventory for request 6 |
| 343 | 1 | Andreas Steffen | 04[IMV] regid.2004-03.org.strongswan_strongSwan-5-1-0.swidtag |
| 344 | 2 | Andreas Steffen | </pre> |
| 345 | 2 | Andreas Steffen | |
| 346 | 2 | Andreas Steffen | <pre> |
| 347 | 1 | Andreas Steffen | 04[IMV] IMV 2 handled SWIDT workitem 6: allow - received SWID tag ID inventory |
| 348 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC message with ID 0x51257e2e |
| 349 | 1 | Andreas Steffen | 04[TNC] creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009 |
| 350 | 1 | Andreas Steffen | 04[TNC] => 4 bytes @ 0x6e9e50 |
| 351 | 1 | Andreas Steffen | 04[TNC] 0: 00 00 00 00 .... |
| 352 | 1 | Andreas Steffen | 04[IMV] created PA-TNC message: => 24 bytes @ 0x6ed440 |
| 353 | 1 | Andreas Steffen | 04[IMV] 0: 01 00 00 00 51 25 7E 2E 00 00 00 00 00 00 00 09 ....Q%~......... |
| 354 | 1 | Andreas Steffen | 04[IMV] 16: 00 00 00 10 00 00 00 00 ........ |
| 355 | 1 | Andreas Steffen | 04[TNC] creating PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 356 | 1 | Andreas Steffen | 04[TNC] IMV 2 provides recommendation 'allow' and evaluation 'compliant' |
| 357 | 2 | Andreas Steffen | </pre> |
| 358 | 2 | Andreas Steffen | |
| 359 | 4 | Andreas Steffen | h3. Policy Manager integrating Measurement Results |
| 360 | 4 | Andreas Steffen | |
| 361 | 2 | Andreas Steffen | <pre> |
| 362 | 1 | Andreas Steffen | 04[IMV] running policy script: 2>&1 TNC_SESSION_ID='2' ipsec imv_policy_manager stop |
| 363 | 1 | Andreas Steffen | 04[IMV] policy: imv_policy_manager stop successful |
| 364 | 2 | Andreas Steffen | </pre> |
| 365 | 2 | Andreas Steffen | |
| 366 | 2 | Andreas Steffen | <pre> |
| 367 | 1 | Andreas Steffen | 04[IMV] IMV 1 "OS" changed state of Connection ID 1 to 'Allowed' |
| 368 | 1 | Andreas Steffen | 04[IMV] IMV 2 "SWID" changed state of Connection ID 1 to 'Allowed' |
| 369 | 1 | Andreas Steffen | 04[TNC] PB-TNC state transition from 'Server Working' to 'Decided' |
| 370 | 1 | Andreas Steffen | 04[TNC] creating PB-TNC RESULT batch |
| 371 | 1 | Andreas Steffen | 04[TNC] adding PB-PA message |
| 372 | 1 | Andreas Steffen | 04[TNC] adding PB-Assessment-Result message |
| 373 | 1 | Andreas Steffen | 04[TNC] adding PB-Access-Recommendation message |
| 374 | 1 | Andreas Steffen | 04[TNC] sending PB-TNC RESULT batch (88 bytes) for Connection ID 1 |
| 375 | 1 | Andreas Steffen | 04[TNC] => 88 bytes @ 0x6ea730 |
| 376 | 1 | Andreas Steffen | 04[TNC] 0: 02 80 00 03 00 00 00 58 80 00 00 00 00 00 00 01 .......X........ |
| 377 | 1 | Andreas Steffen | 04[TNC] 16: 00 00 00 30 00 00 55 97 00 00 00 03 FF FF 00 02 ...0..U......... |
| 378 | 1 | Andreas Steffen | 04[TNC] 32: 01 00 00 00 51 25 7E 2E 00 00 00 00 00 00 00 09 ....Q%~......... |
| 379 | 1 | Andreas Steffen | 04[TNC] 48: 00 00 00 10 00 00 00 00 80 00 00 00 00 00 00 02 ................ |
| 380 | 1 | Andreas Steffen | 04[TNC] 64: 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 03 ................ |
| 381 | 1 | Andreas Steffen | 04[TNC] 80: 00 00 00 10 00 00 00 01 ........ |
| 382 | 1 | Andreas Steffen | 04[TNC] sending PT-TLS message #5 of type 'PB-TNC Batch' (104 bytes) |
| 383 | 1 | Andreas Steffen | 04[TLS] sending TLS ApplicationData record (144 bytes) |
| 384 | 2 | Andreas Steffen | </pre> |
| 385 | 2 | Andreas Steffen | |
| 386 | 4 | Andreas Steffen | h3. Closing PT-TLS Connection |
| 387 | 4 | Andreas Steffen | |
| 388 | 2 | Andreas Steffen | <pre> |
| 389 | 1 | Andreas Steffen | 04[TLS] processing TLS ApplicationData record (64 bytes) |
| 390 | 1 | Andreas Steffen | 04[TNC] received PT-TLS message #4 of type 'PB-TNC Batch' (24 bytes) |
| 391 | 1 | Andreas Steffen | 04[TNC] received TNCCS batch (8 bytes) for Connection ID 1 |
| 392 | 1 | Andreas Steffen | 04[TNC] => 8 bytes @ 0x7150a0 |
| 393 | 1 | Andreas Steffen | 04[TNC] 0: 02 00 00 06 00 00 00 08 ........ |
| 394 | 1 | Andreas Steffen | 04[TNC] PB-TNC state transition from 'Decided' to 'End' |
| 395 | 1 | Andreas Steffen | 04[TNC] processing PB-TNC CLOSE batch |
| 396 | 1 | Andreas Steffen | 04[TNC] final recommendation is 'allow' and evaluation is 'compliant' |
| 397 | 1 | Andreas Steffen | 04[TNC] PT-TLS connection terminates |
| 398 | 1 | Andreas Steffen | 04[IMV] IMV 1 "OS" deleted the state of Connection ID 1 |
| 399 | 1 | Andreas Steffen | 04[IMV] IMV 2 "SWID" deleted the state of Connection ID 1 |
| 400 | 1 | Andreas Steffen | 04[TNC] removed TNCCS Connection ID 1 |
| 401 | 1 | Andreas Steffen | 04[TLS] sending TLS close notify |
| 402 | 1 | Andreas Steffen | 04[TLS] sending TLS Alert record (48 bytes) |
| 403 | 1 | Andreas Steffen | </pre> |
| 404 | 1 | Andreas Steffen | |
| 405 | 3 | Andreas Steffen | h2. PT-TLS Connection by Access Requestor "dave" |
| 406 | 1 | Andreas Steffen | |
| 407 | 1 | Andreas Steffen | <pre> |
| 408 | 1 | Andreas Steffen | 13[TNC] accepting PT-TLS stream from 192.168.0.200 |
| 409 | 1 | Andreas Steffen | </pre> |
| 410 | 1 | Andreas Steffen | |
| 411 | 3 | Andreas Steffen | h3. TLS Connection Setup |
| 412 | 3 | Andreas Steffen | |
| 413 | 1 | Andreas Steffen | <pre> |
| 414 | 1 | Andreas Steffen | 14[TNC] entering PT-TLS negotiation phase |
| 415 | 1 | Andreas Steffen | 14[TLS] processing TLS Handshake record (176 bytes) |
| 416 | 1 | Andreas Steffen | 14[TLS] received TLS ClientHello handshake (172 bytes) |
| 417 | 1 | Andreas Steffen | 14[TLS] received TLS 'signature algorithms' extension |
| 418 | 1 | Andreas Steffen | 14[TLS] received TLS 'elliptic curves' extension |
| 419 | 1 | Andreas Steffen | 14[TLS] received TLS 'ec point formats' extension |
| 420 | 1 | Andreas Steffen | 14[TLS] received TLS 'server name' extension |
| 421 | 1 | Andreas Steffen | 14[TLS] received 28 TLS cipher suites: |
| 422 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
| 423 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
| 424 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA |
| 425 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
| 426 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| 427 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
| 428 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
| 429 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
| 430 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA |
| 431 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 |
| 432 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA |
| 433 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 |
| 434 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA |
| 435 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 |
| 436 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA |
| 437 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 |
| 438 | 1 | Andreas Steffen | 14[TLS] TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA |
| 439 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_AES_128_CBC_SHA |
| 440 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_AES_128_CBC_SHA256 |
| 441 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_AES_256_CBC_SHA |
| 442 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_AES_256_CBC_SHA256 |
| 443 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA |
| 444 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 |
| 445 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA |
| 446 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 |
| 447 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA |
| 448 | 1 | Andreas Steffen | 14[TLS] TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA |
| 449 | 1 | Andreas Steffen | 14[TLS] TLS_RSA_WITH_3DES_EDE_CBC_SHA |
| 450 | 1 | Andreas Steffen | 14[TLS] negotiated TLS 1.2 using suite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| 451 | 1 | Andreas Steffen | 14[TLS] sending TLS ServerHello handshake (54 bytes) |
| 452 | 1 | Andreas Steffen | 14[TLS] sending TLS server certificate 'C=CH, O=Linux strongSwan, CN=aaa.strongswan.org' |
| 453 | 1 | Andreas Steffen | 14[TLS] sending TLS Certificate handshake (1066 bytes) |
| 454 | 1 | Andreas Steffen | 14[TLS] selected ECDH group SECP256R1 |
| 455 | 1 | Andreas Steffen | 14[TLS] created signature with MD5/RSA |
| 456 | 1 | Andreas Steffen | 14[TLS] sending TLS ServerKeyExchange handshake (329 bytes) |
| 457 | 1 | Andreas Steffen | 14[TLS] sending TLS cert request for 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' |
| 458 | 1 | Andreas Steffen | 14[TLS] sending TLS CertificateRequest handshake (102 bytes) |
| 459 | 1 | Andreas Steffen | 14[TLS] sending TLS ServerHelloDone handshake (0 bytes) |
| 460 | 1 | Andreas Steffen | 14[TLS] sending TLS Handshake record (1571 bytes) |
| 461 | 1 | Andreas Steffen | 14[TLS] processing TLS Handshake record (1406 bytes) |
| 462 | 1 | Andreas Steffen | 14[TLS] received TLS Certificate handshake (1068 bytes) |
| 463 | 1 | Andreas Steffen | 14[TLS] received TLS peer certificate 'C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org' |
| 464 | 1 | Andreas Steffen | 14[TLS] received TLS ClientKeyExchange handshake (66 bytes) |
| 465 | 1 | Andreas Steffen | 14[TLS] received TLS CertificateVerify handshake (260 bytes) |
| 466 | 1 | Andreas Steffen | 14[CFG] using certificate "C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org" |
| 467 | 1 | Andreas Steffen | 14[CFG] using trusted ca certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" |
| 468 | 1 | Andreas Steffen | 14[CFG] checking certificate status of "C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org" |
| 469 | 1 | Andreas Steffen | 14[CFG] fetching crl from 'http://crl.strongswan.org/strongswan.crl' ... |
| 470 | 1 | Andreas Steffen | 14[CFG] using trusted certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" |
| 471 | 1 | Andreas Steffen | 14[CFG] crl correctly signed by "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" |
| 472 | 1 | Andreas Steffen | 14[CFG] crl is valid: until Sep 14 20:44:55 2013 |
| 473 | 1 | Andreas Steffen | 14[CFG] certificate status is good |
| 474 | 1 | Andreas Steffen | 14[CFG] reached self-signed root ca with a path length of 0 |
| 475 | 1 | Andreas Steffen | 14[TLS] verified signature with SHA1/RSA |
| 476 | 1 | Andreas Steffen | 14[TLS] processing TLS ChangeCipherSpec record (1 bytes) |
| 477 | 1 | Andreas Steffen | 14[TLS] processing TLS Handshake record (64 bytes) |
| 478 | 1 | Andreas Steffen | 14[TLS] received TLS Finished handshake (12 bytes) |
| 479 | 1 | Andreas Steffen | 14[TLS] sending TLS ChangeCipherSpec record (1 bytes) |
| 480 | 1 | Andreas Steffen | 14[TLS] sending TLS Finished handshake (12 bytes) |
| 481 | 1 | Andreas Steffen | 14[TLS] sending TLS Handshake record (64 bytes) |
| 482 | 1 | Andreas Steffen | </pre> |
| 483 | 1 | Andreas Steffen | |
| 484 | 3 | Andreas Steffen | h3. PT-TLS Negotiation |
| 485 | 3 | Andreas Steffen | |
| 486 | 1 | Andreas Steffen | <pre> |
| 487 | 1 | Andreas Steffen | 14[TLS] processing TLS ApplicationData record (64 bytes) |
| 488 | 1 | Andreas Steffen | 14[TNC] received PT-TLS message #0 of type 'Version Request' (20 bytes) |
| 489 | 1 | Andreas Steffen | 14[TNC] sending PT-TLS message #0 of type 'Version Response' (20 bytes) |
| 490 | 1 | Andreas Steffen | 14[TLS] sending TLS ApplicationData record (64 bytes) |
| 491 | 1 | Andreas Steffen | 14[TNC] negotiated PT-TLS version 1 |
| 492 | 1 | Andreas Steffen | </pre> |
| 493 | 1 | Andreas Steffen | |
| 494 | 3 | Andreas Steffen | h3. TLS Certificate-based Client Authentication |
| 495 | 3 | Andreas Steffen | |
| 496 | 1 | Andreas Steffen | <pre> |
| 497 | 1 | Andreas Steffen | 14[TNC] doing SASL client authentication |
| 498 | 1 | Andreas Steffen | 14[TNC] skipping SASL, client already authenticated by TLS certificate |
| 499 | 1 | Andreas Steffen | 14[TNC] sending PT-TLS message #1 of type 'SASL Mechanisms' (16 bytes) |
| 500 | 1 | Andreas Steffen | 14[TLS] sending TLS ApplicationData record (64 bytes) |
| 501 | 1 | Andreas Steffen | </pre> |
| 502 | 1 | Andreas Steffen | |
| 503 | 1 | Andreas Steffen | <pre> |
| 504 | 1 | Andreas Steffen | 15[TNC] entering PT-TLS data transport phase |
| 505 | 1 | Andreas Steffen | 15[TNC] no PB-TNC batch to send |
| 506 | 1 | Andreas Steffen | 15[TLS] processing TLS ApplicationData record (96 bytes) |
| 507 | 1 | Andreas Steffen | 15[TNC] received PT-TLS message #1 of type 'PB-TNC Batch' (55 bytes) |
| 508 | 1 | Andreas Steffen | 15[TNC] assigned TNCCS Connection ID 2 |
| 509 | 1 | Andreas Steffen | 15[IMV] IMV 1 "OS" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh |
| 510 | 1 | Andreas Steffen | 15[IMV] over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes |
| 511 | 1 | Andreas Steffen | 15[IMV] user AR identity 'C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org' authenticated by certificate |
| 512 | 1 | Andreas Steffen | 15[IMV] assigned session ID 3 |
| 513 | 1 | Andreas Steffen | 15[IMV] IMV 2 "SWID" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh |
| 514 | 1 | Andreas Steffen | 15[IMV] over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes |
| 515 | 1 | Andreas Steffen | 15[IMV] user AR identity 'C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org' authenticated by certificate |
| 516 | 1 | Andreas Steffen | 15[IMV] assigned session ID 3 |
| 517 | 1 | Andreas Steffen | 15[IMV] IMV 1 "OS" changed state of Connection ID 2 to 'Handshake' |
| 518 | 1 | Andreas Steffen | 15[IMV] IMV 2 "SWID" changed state of Connection ID 2 to 'Handshake' |
| 519 | 2 | Andreas Steffen | </pre> |
| 520 | 2 | Andreas Steffen | |
| 521 | 2 | Andreas Steffen | <pre> |
| 522 | 1 | Andreas Steffen | 15[TNC] received TNCCS batch (39 bytes) for Connection ID 2 |
| 523 | 1 | Andreas Steffen | 15[TNC] => 39 bytes @ 0x6e87f0 |
| 524 | 1 | Andreas Steffen | 15[TNC] 0: 02 00 00 01 00 00 00 27 00 00 00 00 00 00 00 06 .......'........ |
| 525 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 1F 41 63 63 65 70 74 2D 4C 61 6E 67 75 ....Accept-Langu |
| 526 | 1 | Andreas Steffen | 15[TNC] 32: 61 67 65 3A 20 65 6E age: en |
| 527 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Init' to 'Server Working' |
| 528 | 1 | Andreas Steffen | 15[TNC] processing PB-TNC CDATA batch |
| 529 | 1 | Andreas Steffen | 15[TNC] processing PB-Language-Preference message (31 bytes) |
| 530 | 1 | Andreas Steffen | 15[TNC] setting language preference to 'en' |
| 531 | 2 | Andreas Steffen | </pre> |
| 532 | 2 | Andreas Steffen | |
| 533 | 2 | Andreas Steffen | <pre> |
| 534 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC message with ID 0xdf43848c |
| 535 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001 |
| 536 | 1 | Andreas Steffen | 15[TNC] => 56 bytes @ 0x6ec8d0 |
| 537 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 04 ................ |
| 538 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 05 ................ |
| 539 | 1 | Andreas Steffen | 15[TNC] 32: 00 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 0C ................ |
| 540 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 90 2A 00 00 00 08 ...*.... |
| 541 | 1 | Andreas Steffen | 15[IMV] created PA-TNC message: => 76 bytes @ 0x739a80 |
| 542 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 DF 43 84 8C 00 00 00 00 00 00 00 01 .....C.......... |
| 543 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 44 00 00 00 00 00 00 00 02 00 00 00 00 ...D............ |
| 544 | 1 | Andreas Steffen | 15[IMV] 32: 00 00 00 04 00 00 00 00 00 00 00 03 00 00 00 00 ................ |
| 545 | 1 | Andreas Steffen | 15[IMV] 48: 00 00 00 05 00 00 00 00 00 00 00 0B 00 00 00 00 ................ |
| 546 | 1 | Andreas Steffen | 15[IMV] 64: 00 00 00 0C 00 00 90 2A 00 00 00 08 .......*.... |
| 547 | 1 | Andreas Steffen | 15[TNC] creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001 |
| 548 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Server Working' to 'Client Working' |
| 549 | 1 | Andreas Steffen | 15[TNC] creating PB-TNC SDATA batch |
| 550 | 1 | Andreas Steffen | 15[TNC] adding PB-PA message |
| 551 | 1 | Andreas Steffen | 15[TNC] sending PB-TNC SDATA batch (108 bytes) for Connection ID 2 |
| 552 | 1 | Andreas Steffen | 15[TNC] => 108 bytes @ 0x6e7820 |
| 553 | 1 | Andreas Steffen | 15[TNC] 0: 02 80 00 02 00 00 00 6C 80 00 00 00 00 00 00 01 .......l........ |
| 554 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 64 00 00 00 00 00 00 00 01 FF FF 00 01 ...d............ |
| 555 | 1 | Andreas Steffen | 15[TNC] 32: 01 00 00 00 DF 43 84 8C 00 00 00 00 00 00 00 01 .....C.......... |
| 556 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 00 44 00 00 00 00 00 00 00 02 00 00 00 00 ...D............ |
| 557 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 00 04 00 00 00 00 00 00 00 03 00 00 00 00 ................ |
| 558 | 1 | Andreas Steffen | 15[TNC] 80: 00 00 00 05 00 00 00 00 00 00 00 0B 00 00 00 00 ................ |
| 559 | 1 | Andreas Steffen | 15[TNC] 96: 00 00 00 0C 00 00 90 2A 00 00 00 08 .......*.... |
| 560 | 1 | Andreas Steffen | 15[TNC] sending PT-TLS message #2 of type 'PB-TNC Batch' (124 bytes) |
| 561 | 1 | Andreas Steffen | 15[TLS] sending TLS ApplicationData record (176 bytes) |
| 562 | 2 | Andreas Steffen | </pre> |
| 563 | 2 | Andreas Steffen | |
| 564 | 2 | Andreas Steffen | <pre> |
| 565 | 1 | Andreas Steffen | 15[TLS] processing TLS ApplicationData record (288 bytes) |
| 566 | 1 | Andreas Steffen | 15[TNC] received PT-TLS message #2 of type 'PB-TNC Batch' (244 bytes) |
| 567 | 1 | Andreas Steffen | 15[TNC] received TNCCS batch (228 bytes) for Connection ID 2 |
| 568 | 1 | Andreas Steffen | 15[TNC] => 228 bytes @ 0x714a00 |
| 569 | 1 | Andreas Steffen | 15[TNC] 0: 02 00 00 01 00 00 00 E4 80 00 00 00 00 00 00 01 ................ |
| 570 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 DC 80 00 00 00 00 00 00 01 00 01 00 01 ................ |
| 571 | 1 | Andreas Steffen | 15[TNC] 32: 01 00 00 00 D5 CA 70 3D 00 00 00 00 00 00 00 02 ......p=........ |
| 572 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 00 17 00 25 72 00 00 44 65 62 69 61 6E 00 .....%r..Debian. |
| 573 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 00 00 00 00 04 00 00 00 19 0A 37 2E 30 20 ............7.0 |
| 574 | 1 | Andreas Steffen | 15[TNC] 80: 78 38 36 5F 36 34 00 00 00 00 00 00 00 00 00 03 x86_64.......... |
| 575 | 1 | Andreas Steffen | 15[TNC] 96: 00 00 00 1C 00 00 00 07 00 00 00 00 00 00 00 00 ................ |
| 576 | 1 | Andreas Steffen | 15[TNC] 112: 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 24 ...............$ |
| 577 | 1 | Andreas Steffen | 15[TNC] 128: 03 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 ....2013-08-15T2 |
| 578 | 1 | Andreas Steffen | 15[TNC] 144: 30 3A 34 35 3A 30 37 5A 00 00 00 00 00 00 00 0B 0:45:07Z........ |
| 579 | 1 | Andreas Steffen | 15[TNC] 160: 00 00 00 10 00 00 00 01 00 00 00 00 00 00 00 0C ................ |
| 580 | 1 | Andreas Steffen | 15[TNC] 176: 00 00 00 10 00 00 00 00 00 00 90 2A 00 00 00 08 ...........*.... |
| 581 | 1 | Andreas Steffen | 15[TNC] 192: 00 00 00 2C 61 61 62 62 63 63 64 64 65 65 66 66 ...,aabbccddeeff |
| 582 | 1 | Andreas Steffen | 15[TNC] 208: 31 31 32 32 33 33 34 34 35 35 36 36 37 37 38 38 1122334455667788 |
| 583 | 1 | Andreas Steffen | 15[TNC] 224: 39 39 30 30 9900 |
| 584 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Client Working' to 'Server Working' |
| 585 | 1 | Andreas Steffen | 15[TNC] processing PB-TNC CDATA batch |
| 586 | 1 | Andreas Steffen | 15[TNC] processing PB-PA message (220 bytes) |
| 587 | 1 | Andreas Steffen | 15[TNC] handling PB-PA message type 'IETF/Operating System' 0x000000/0x00000001 |
| 588 | 1 | Andreas Steffen | 15[IMV] IMV 1 "OS" received message for Connection ID 2 from IMC 1 to IMV 1 |
| 589 | 1 | Andreas Steffen | 15[IMV] => 196 bytes @ 0x738ac0 |
| 590 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 D5 CA 70 3D 00 00 00 00 00 00 00 02 ......p=........ |
| 591 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 17 00 25 72 00 00 44 65 62 69 61 6E 00 .....%r..Debian. |
| 592 | 1 | Andreas Steffen | 15[IMV] 32: 00 00 00 00 00 00 04 00 00 00 19 0A 37 2E 30 20 ............7.0 |
| 593 | 1 | Andreas Steffen | 15[IMV] 48: 78 38 36 5F 36 34 00 00 00 00 00 00 00 00 00 03 x86_64.......... |
| 594 | 1 | Andreas Steffen | 15[IMV] 64: 00 00 00 1C 00 00 00 07 00 00 00 00 00 00 00 00 ................ |
| 595 | 1 | Andreas Steffen | 15[IMV] 80: 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 24 ...............$ |
| 596 | 1 | Andreas Steffen | 15[IMV] 96: 03 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 ....2013-08-15T2 |
| 597 | 1 | Andreas Steffen | 15[IMV] 112: 30 3A 34 35 3A 30 37 5A 00 00 00 00 00 00 00 0B 0:45:07Z........ |
| 598 | 1 | Andreas Steffen | 15[IMV] 128: 00 00 00 10 00 00 00 01 00 00 00 00 00 00 00 0C ................ |
| 599 | 1 | Andreas Steffen | 15[IMV] 144: 00 00 00 10 00 00 00 00 00 00 90 2A 00 00 00 08 ...........*.... |
| 600 | 1 | Andreas Steffen | 15[IMV] 160: 00 00 00 2C 61 61 62 62 63 63 64 64 65 65 66 66 ...,aabbccddeeff |
| 601 | 1 | Andreas Steffen | 15[IMV] 176: 31 31 32 32 33 33 34 34 35 35 36 36 37 37 38 38 1122334455667788 |
| 602 | 1 | Andreas Steffen | 15[IMV] 192: 39 39 30 30 9900 |
| 603 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC message with ID 0xd5ca703d |
| 604 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/Product Information' 0x000000/0x00000002 |
| 605 | 1 | Andreas Steffen | 15[TNC] => 11 bytes @ 0x738ad4 |
| 606 | 1 | Andreas Steffen | 15[TNC] 0: 00 25 72 00 00 44 65 62 69 61 6E .%r..Debian |
| 607 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/String Version' 0x000000/0x00000004 |
| 608 | 1 | Andreas Steffen | 15[TNC] => 13 bytes @ 0x738aeb |
| 609 | 1 | Andreas Steffen | 15[TNC] 0: 0A 37 2E 30 20 78 38 36 5F 36 34 00 00 .7.0 x86_64.. |
| 610 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/Numeric Version' 0x000000/0x00000003 |
| 611 | 1 | Andreas Steffen | 15[TNC] => 16 bytes @ 0x738b04 |
| 612 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 07 00 00 00 00 00 00 00 00 00 00 00 00 ................ |
| 613 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/Operational Status' 0x000000/0x00000005 |
| 614 | 1 | Andreas Steffen | 15[TNC] => 24 bytes @ 0x738b20 |
| 615 | 1 | Andreas Steffen | 15[TNC] 0: 03 01 00 00 32 30 31 33 2D 30 38 2D 31 35 54 32 ....2013-08-15T2 |
| 616 | 1 | Andreas Steffen | 15[TNC] 16: 30 3A 34 35 3A 30 37 5A 0:45:07Z |
| 617 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/Forwarding Enabled' 0x000000/0x0000000b |
| 618 | 1 | Andreas Steffen | 15[TNC] => 4 bytes @ 0x738b44 |
| 619 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 01 .... |
| 620 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'IETF/Factory Default Password Enabled' 0x000000/0x0000000c |
| 621 | 1 | Andreas Steffen | 15[TNC] => 4 bytes @ 0x738b54 |
| 622 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 00 .... |
| 623 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'ITA-HSR/Device ID' 0x00902a/0x00000008 |
| 624 | 1 | Andreas Steffen | 15[TNC] => 32 bytes @ 0x738b64 |
| 625 | 1 | Andreas Steffen | 15[TNC] 0: 61 61 62 62 63 63 64 64 65 65 66 66 31 31 32 32 aabbccddeeff1122 |
| 626 | 1 | Andreas Steffen | 15[TNC] 16: 33 33 34 34 35 35 36 36 37 37 38 38 39 39 30 30 3344556677889900 |
| 627 | 1 | Andreas Steffen | </pre> |
| 628 | 5 | Andreas Steffen | |
| 629 | 5 | Andreas Steffen | h3. Operating System Information |
| 630 | 2 | Andreas Steffen | |
| 631 | 2 | Andreas Steffen | <pre> |
| 632 | 1 | Andreas Steffen | 15[IMV] operating system name is 'Debian' from vendor Debian Project |
| 633 | 1 | Andreas Steffen | 15[IMV] operating system version is '7.0 x86_64' |
| 634 | 1 | Andreas Steffen | 15[IMV] operating system numeric version is 7.0 |
| 635 | 1 | Andreas Steffen | 15[IMV] operational status: operational, result: successful |
| 636 | 1 | Andreas Steffen | 15[IMV] last boot: Aug 15 20:45:07 UTC 2013 |
| 637 | 1 | Andreas Steffen | 15[IMV] IPv4 forwarding is enabled |
| 638 | 1 | Andreas Steffen | 15[IMV] factory default password is disabled |
| 639 | 1 | Andreas Steffen | </pre> |
| 640 | 1 | Andreas Steffen | |
| 641 | 3 | Andreas Steffen | h3. Device Identity |
| 642 | 3 | Andreas Steffen | |
| 643 | 2 | Andreas Steffen | <pre> |
| 644 | 1 | Andreas Steffen | 15[IMV] device ID is aabbccddeeff11223344556677889900 |
| 645 | 2 | Andreas Steffen | </pre> |
| 646 | 2 | Andreas Steffen | |
| 647 | 4 | Andreas Steffen | h3. Policy Manager generating Workitem List |
| 648 | 4 | Andreas Steffen | |
| 649 | 4 | Andreas Steffen | <pre> |
| 650 | 1 | Andreas Steffen | 15[IMV] running policy script: 2>&1 TNC_SESSION_ID='3' ipsec imv_policy_manager start |
| 651 | 1 | Andreas Steffen | 15[IMV] policy: imv_policy_manager start successful |
| 652 | 2 | Andreas Steffen | </pre> |
| 653 | 2 | Andreas Steffen | |
| 654 | 2 | Andreas Steffen | <pre> |
| 655 | 1 | Andreas Steffen | 15[IMV] IMV 1 handled FWDEN workitem 11: isolate - forwarding enabled |
| 656 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC message with ID 0x43672a51 |
| 657 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009 |
| 658 | 1 | Andreas Steffen | 15[TNC] => 4 bytes @ 0x6edbd0 |
| 659 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 02 .... |
| 660 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC attribute type 'IETF/Remediation Instructions' 0x000000/0x0000000a |
| 661 | 1 | Andreas Steffen | 15[TNC] => 81 bytes @ 0x731850 |
| 662 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 00 00 00 00 02 00 00 00 42 49 50 20 50 ...........BIP P |
| 663 | 1 | Andreas Steffen | 15[TNC] 16: 61 63 6B 65 74 20 46 6F 72 77 61 72 64 69 6E 67 acket Forwarding |
| 664 | 1 | Andreas Steffen | 15[TNC] 32: 0A 20 20 50 6C 65 61 73 65 20 64 69 73 61 62 6C . Please disabl |
| 665 | 1 | Andreas Steffen | 15[TNC] 48: 65 20 74 68 65 20 66 6F 72 77 61 72 64 69 6E 67 e the forwarding |
| 666 | 1 | Andreas Steffen | 15[TNC] 64: 20 6F 66 20 49 50 20 70 61 63 6B 65 74 73 02 65 of IP packets.e |
| 667 | 1 | Andreas Steffen | 15[TNC] 80: 6E n |
| 668 | 1 | Andreas Steffen | 15[IMV] created PA-TNC message: => 117 bytes @ 0x738620 |
| 669 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 43 67 2A 51 00 00 00 00 00 00 00 09 ....Cg*Q........ |
| 670 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 10 00 00 00 02 00 00 00 00 00 00 00 0A ................ |
| 671 | 1 | Andreas Steffen | 15[IMV] 32: 00 00 00 5D 00 00 00 00 00 00 00 02 00 00 00 42 ...]...........B |
| 672 | 1 | Andreas Steffen | 15[IMV] 48: 49 50 20 50 61 63 6B 65 74 20 46 6F 72 77 61 72 IP Packet Forwar |
| 673 | 1 | Andreas Steffen | 15[IMV] 64: 64 69 6E 67 0A 20 20 50 6C 65 61 73 65 20 64 69 ding. Please di |
| 674 | 1 | Andreas Steffen | 15[IMV] 80: 73 61 62 6C 65 20 74 68 65 20 66 6F 72 77 61 72 sable the forwar |
| 675 | 1 | Andreas Steffen | 15[IMV] 96: 64 69 6E 67 20 6F 66 20 49 50 20 70 61 63 6B 65 ding of IP packe |
| 676 | 1 | Andreas Steffen | 15[IMV] 112: 74 73 02 65 6E ts.en |
| 677 | 1 | Andreas Steffen | 15[TNC] creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001 |
| 678 | 1 | Andreas Steffen | 15[TNC] IMV 1 is setting reason string to 'Improper OS settings were detected' |
| 679 | 1 | Andreas Steffen | 15[TNC] IMV 1 is setting reason language to 'en' |
| 680 | 1 | Andreas Steffen | 15[TNC] IMV 1 provides recommendation 'isolate' and evaluation 'non-compliant major' |
| 681 | 1 | Andreas Steffen | </pre> |
| 682 | 1 | Andreas Steffen | |
| 683 | 3 | Andreas Steffen | h3. Sending SWID Request |
| 684 | 3 | Andreas Steffen | |
| 685 | 2 | Andreas Steffen | <pre> |
| 686 | 1 | Andreas Steffen | 15[IMV] IMV 2 issues SWID tag request 14 |
| 687 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC message with ID 0xc9837a03 |
| 688 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC attribute type 'TCG/SWID Request' 0x005597/0x00000011 |
| 689 | 1 | Andreas Steffen | 15[TNC] => 12 bytes @ 0x6f1400 |
| 690 | 1 | Andreas Steffen | 15[TNC] 0: 01 00 00 00 00 00 00 0E 00 00 00 00 ............ |
| 691 | 1 | Andreas Steffen | 15[IMV] created PA-TNC message: => 32 bytes @ 0x731cd0 |
| 692 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 C9 83 7A 03 00 00 55 97 00 00 00 11 ......z...U..... |
| 693 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 18 01 00 00 00 00 00 00 0E 00 00 00 00 ................ |
| 694 | 1 | Andreas Steffen | 15[TNC] creating PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 695 | 2 | Andreas Steffen | </pre> |
| 696 | 2 | Andreas Steffen | |
| 697 | 2 | Andreas Steffen | <pre> |
| 698 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Server Working' to 'Client Working' |
| 699 | 1 | Andreas Steffen | 15[TNC] creating PB-TNC SDATA batch |
| 700 | 1 | Andreas Steffen | 15[TNC] adding PB-PA message |
| 701 | 1 | Andreas Steffen | 15[TNC] adding PB-PA message |
| 702 | 1 | Andreas Steffen | 15[TNC] sending PB-TNC SDATA batch (205 bytes) for Connection ID 2 |
| 703 | 1 | Andreas Steffen | 15[TNC] => 205 bytes @ 0x738620 |
| 704 | 1 | Andreas Steffen | 15[TNC] 0: 02 80 00 02 00 00 00 CD 80 00 00 00 00 00 00 01 ................ |
| 705 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 8D 00 00 00 00 00 00 00 01 FF FF 00 01 ................ |
| 706 | 1 | Andreas Steffen | 15[TNC] 32: 01 00 00 00 43 67 2A 51 00 00 00 00 00 00 00 09 ....Cg*Q........ |
| 707 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 00 10 00 00 00 02 00 00 00 00 00 00 00 0A ................ |
| 708 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 00 5D 00 00 00 00 00 00 00 02 00 00 00 42 ...]...........B |
| 709 | 1 | Andreas Steffen | 15[TNC] 80: 49 50 20 50 61 63 6B 65 74 20 46 6F 72 77 61 72 IP Packet Forwar |
| 710 | 1 | Andreas Steffen | 15[TNC] 96: 64 69 6E 67 0A 20 20 50 6C 65 61 73 65 20 64 69 ding. Please di |
| 711 | 1 | Andreas Steffen | 15[TNC] 112: 73 61 62 6C 65 20 74 68 65 20 66 6F 72 77 61 72 sable the forwar |
| 712 | 1 | Andreas Steffen | 15[TNC] 128: 64 69 6E 67 20 6F 66 20 49 50 20 70 61 63 6B 65 ding of IP packe |
| 713 | 1 | Andreas Steffen | 15[TNC] 144: 74 73 02 65 6E 80 00 00 00 00 00 00 01 00 00 00 ts.en........... |
| 714 | 1 | Andreas Steffen | 15[TNC] 160: 38 00 00 55 97 00 00 00 03 FF FF 00 02 01 00 00 8..U............ |
| 715 | 1 | Andreas Steffen | 15[TNC] 176: 00 C9 83 7A 03 00 00 55 97 00 00 00 11 00 00 00 ...z...U........ |
| 716 | 1 | Andreas Steffen | 15[TNC] 192: 18 01 00 00 00 00 00 00 0E 00 00 00 00 ............. |
| 717 | 1 | Andreas Steffen | 15[TNC] sending PT-TLS message #3 of type 'PB-TNC Batch' (221 bytes) |
| 718 | 1 | Andreas Steffen | 15[TLS] sending TLS ApplicationData record (272 bytes) |
| 719 | 2 | Andreas Steffen | </pre> |
| 720 | 2 | Andreas Steffen | |
| 721 | 2 | Andreas Steffen | <pre> |
| 722 | 1 | Andreas Steffen | 15[TLS] processing TLS ApplicationData record (176 bytes) |
| 723 | 1 | Andreas Steffen | 15[TNC] received PT-TLS message #3 of type 'PB-TNC Batch' (134 bytes) |
| 724 | 1 | Andreas Steffen | 15[TNC] received TNCCS batch (118 bytes) for Connection ID 2 |
| 725 | 1 | Andreas Steffen | 15[TNC] => 118 bytes @ 0x724380 |
| 726 | 1 | Andreas Steffen | 15[TNC] 0: 02 00 00 01 00 00 00 76 80 00 00 00 00 00 00 01 .......v........ |
| 727 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 6E 80 00 55 97 00 00 00 03 00 02 00 02 ...n..U......... |
| 728 | 1 | Andreas Steffen | 15[TNC] 32: 01 00 00 00 0E 1E BE 66 00 00 55 97 00 00 00 12 .......f..U..... |
| 729 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 00 4E 00 00 00 01 00 00 00 0E D5 98 C7 9E ...N............ |
| 730 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 00 01 00 1C 72 65 67 69 64 2E 32 30 30 34 ......regid.2004 |
| 731 | 1 | Andreas Steffen | 15[TNC] 80: 2D 30 33 2E 6F 72 67 2E 73 74 72 6F 6E 67 73 77 -03.org.strongsw |
| 732 | 1 | Andreas Steffen | 15[TNC] 96: 61 6E 00 10 73 74 72 6F 6E 67 53 77 61 6E 2D 35 an..strongSwan-5 |
| 733 | 1 | Andreas Steffen | 15[TNC] 112: 2D 31 2D 30 00 00 -1-0.. |
| 734 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Client Working' to 'Server Working' |
| 735 | 1 | Andreas Steffen | 15[TNC] processing PB-TNC CDATA batch |
| 736 | 1 | Andreas Steffen | 15[TNC] processing PB-PA message (110 bytes) |
| 737 | 2 | Andreas Steffen | </pre> |
| 738 | 2 | Andreas Steffen | |
| 739 | 2 | Andreas Steffen | h3. Receiving SWID Tag Identifier Inventory |
| 740 | 2 | Andreas Steffen | |
| 741 | 2 | Andreas Steffen | <pre> |
| 742 | 1 | Andreas Steffen | 15[TNC] handling PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 743 | 1 | Andreas Steffen | 15[IMV] IMV 2 "SWID" received message for Connection ID 2 from IMC 2 to IMV 2 |
| 744 | 1 | Andreas Steffen | 15[IMV] => 86 bytes @ 0x738880 |
| 745 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 0E 1E BE 66 00 00 55 97 00 00 00 12 .......f..U..... |
| 746 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 4E 00 00 00 01 00 00 00 0E D5 98 C7 9E ...N............ |
| 747 | 1 | Andreas Steffen | 15[IMV] 32: 00 00 00 01 00 1C 72 65 67 69 64 2E 32 30 30 34 ......regid.2004 |
| 748 | 1 | Andreas Steffen | 15[IMV] 48: 2D 30 33 2E 6F 72 67 2E 73 74 72 6F 6E 67 73 77 -03.org.strongsw |
| 749 | 1 | Andreas Steffen | 15[IMV] 64: 61 6E 00 10 73 74 72 6F 6E 67 53 77 61 6E 2D 35 an..strongSwan-5 |
| 750 | 1 | Andreas Steffen | 15[IMV] 80: 2D 31 2D 30 00 00 -1-0.. |
| 751 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC message with ID 0x0e1ebe66 |
| 752 | 1 | Andreas Steffen | 15[TNC] processing PA-TNC attribute type 'TCG/SWID Tag Identifier Inventory' 0x005597/0x00000012 |
| 753 | 1 | Andreas Steffen | 15[TNC] => 66 bytes @ 0x738894 |
| 754 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 01 00 00 00 0E D5 98 C7 9E 00 00 00 01 ................ |
| 755 | 1 | Andreas Steffen | 15[TNC] 16: 00 1C 72 65 67 69 64 2E 32 30 30 34 2D 30 33 2E ..regid.2004-03. |
| 756 | 1 | Andreas Steffen | 15[TNC] 32: 6F 72 67 2E 73 74 72 6F 6E 67 73 77 61 6E 00 10 org.strongswan.. |
| 757 | 1 | Andreas Steffen | 15[TNC] 48: 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 31 2D 30 strongSwan-5-1-0 |
| 758 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 .. |
| 759 | 2 | Andreas Steffen | </pre> |
| 760 | 2 | Andreas Steffen | |
| 761 | 2 | Andreas Steffen | <pre> |
| 762 | 1 | Andreas Steffen | 15[IMV] received SWID tag ID inventory for request 14 |
| 763 | 1 | Andreas Steffen | 15[IMV] regid.2004-03.org.strongswan_strongSwan-5-1-0.swidtag |
| 764 | 2 | Andreas Steffen | </pre> |
| 765 | 2 | Andreas Steffen | |
| 766 | 2 | Andreas Steffen | <pre> |
| 767 | 1 | Andreas Steffen | 15[IMV] IMV 2 handled SWIDT workitem 14: allow - received SWID tag ID inventory |
| 768 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC message with ID 0xfd87492d |
| 769 | 1 | Andreas Steffen | 15[TNC] creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009 |
| 770 | 1 | Andreas Steffen | 15[TNC] => 4 bytes @ 0x6f9fe0 |
| 771 | 1 | Andreas Steffen | 15[TNC] 0: 00 00 00 00 .... |
| 772 | 1 | Andreas Steffen | 15[IMV] created PA-TNC message: => 24 bytes @ 0x7391d0 |
| 773 | 1 | Andreas Steffen | 15[IMV] 0: 01 00 00 00 FD 87 49 2D 00 00 00 00 00 00 00 09 ......I-........ |
| 774 | 1 | Andreas Steffen | 15[IMV] 16: 00 00 00 10 00 00 00 00 ........ |
| 775 | 1 | Andreas Steffen | 15[TNC] creating PB-PA message type 'TCG/SWID' 0x005597/0x00000003 |
| 776 | 1 | Andreas Steffen | 15[TNC] IMV 2 provides recommendation 'allow' and evaluation 'compliant' |
| 777 | 2 | Andreas Steffen | </pre> |
| 778 | 2 | Andreas Steffen | |
| 779 | 4 | Andreas Steffen | h3. Policy Manager integrating Measurement Results |
| 780 | 4 | Andreas Steffen | |
| 781 | 2 | Andreas Steffen | <pre> |
| 782 | 1 | Andreas Steffen | 15[IMV] running policy script: 2>&1 TNC_SESSION_ID='3' ipsec imv_policy_manager stop |
| 783 | 1 | Andreas Steffen | 15[IMV] policy: imv_policy_manager stop successful |
| 784 | 2 | Andreas Steffen | </pre> |
| 785 | 2 | Andreas Steffen | |
| 786 | 2 | Andreas Steffen | <pre> |
| 787 | 1 | Andreas Steffen | 15[IMV] IMV 1 "OS" changed state of Connection ID 2 to 'Isolated' |
| 788 | 1 | Andreas Steffen | 15[IMV] IMV 2 "SWID" changed state of Connection ID 2 to 'Isolated' |
| 789 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Server Working' to 'Decided' |
| 790 | 1 | Andreas Steffen | 15[TNC] creating PB-TNC RESULT batch |
| 791 | 1 | Andreas Steffen | 15[TNC] adding PB-PA message |
| 792 | 1 | Andreas Steffen | 15[TNC] adding PB-Assessment-Result message |
| 793 | 1 | Andreas Steffen | 15[TNC] adding PB-Access-Recommendation message |
| 794 | 1 | Andreas Steffen | 15[TNC] adding PB-Reason-String message |
| 795 | 1 | Andreas Steffen | 15[TNC] sending PB-TNC RESULT batch (141 bytes) for Connection ID 2 |
| 796 | 1 | Andreas Steffen | 15[TNC] => 141 bytes @ 0x714aa0 |
| 797 | 1 | Andreas Steffen | 15[TNC] 0: 02 80 00 03 00 00 00 8D 80 00 00 00 00 00 00 01 ................ |
| 798 | 1 | Andreas Steffen | 15[TNC] 16: 00 00 00 30 00 00 55 97 00 00 00 03 FF FF 00 02 ...0..U......... |
| 799 | 1 | Andreas Steffen | 15[TNC] 32: 01 00 00 00 FD 87 49 2D 00 00 00 00 00 00 00 09 ......I-........ |
| 800 | 1 | Andreas Steffen | 15[TNC] 48: 00 00 00 10 00 00 00 00 80 00 00 00 00 00 00 02 ................ |
| 801 | 1 | Andreas Steffen | 15[TNC] 64: 00 00 00 10 00 00 00 02 00 00 00 00 00 00 00 03 ................ |
| 802 | 1 | Andreas Steffen | 15[TNC] 80: 00 00 00 10 00 00 00 03 00 00 00 00 00 00 00 07 ................ |
| 803 | 1 | Andreas Steffen | 15[TNC] 96: 00 00 00 35 00 00 00 22 49 6D 70 72 6F 70 65 72 ...5..."Improper |
| 804 | 1 | Andreas Steffen | 15[TNC] 112: 20 4F 53 20 73 65 74 74 69 6E 67 73 20 77 65 72 OS settings wer |
| 805 | 1 | Andreas Steffen | 15[TNC] 128: 65 20 64 65 74 65 63 74 65 64 02 65 6E e detected.en |
| 806 | 1 | Andreas Steffen | 15[TNC] sending PT-TLS message #4 of type 'PB-TNC Batch' (157 bytes) |
| 807 | 1 | Andreas Steffen | 15[TLS] sending TLS ApplicationData record (208 bytes) |
| 808 | 2 | Andreas Steffen | </pre> |
| 809 | 4 | Andreas Steffen | |
| 810 | 4 | Andreas Steffen | h3. Closing PT-TLS Connection |
| 811 | 2 | Andreas Steffen | |
| 812 | 2 | Andreas Steffen | <pre> |
| 813 | 1 | Andreas Steffen | 15[TLS] processing TLS ApplicationData record (64 bytes) |
| 814 | 1 | Andreas Steffen | 15[TNC] received PT-TLS message #4 of type 'PB-TNC Batch' (24 bytes) |
| 815 | 1 | Andreas Steffen | 15[TNC] received TNCCS batch (8 bytes) for Connection ID 2 |
| 816 | 1 | Andreas Steffen | 15[TNC] => 8 bytes @ 0x6f1400 |
| 817 | 1 | Andreas Steffen | 15[TNC] 0: 02 00 00 06 00 00 00 08 ........ |
| 818 | 1 | Andreas Steffen | 15[TNC] PB-TNC state transition from 'Decided' to 'End' |
| 819 | 1 | Andreas Steffen | 15[TNC] processing PB-TNC CLOSE batch |
| 820 | 1 | Andreas Steffen | 15[TNC] final recommendation is 'isolate' and evaluation is 'non-compliant major' |
| 821 | 1 | Andreas Steffen | 15[TNC] PT-TLS connection terminates |
| 822 | 1 | Andreas Steffen | 15[IMV] IMV 1 "OS" deleted the state of Connection ID 2 |
| 823 | 1 | Andreas Steffen | 15[IMV] IMV 2 "SWID" deleted the state of Connection ID 2 |
| 824 | 1 | Andreas Steffen | 15[TNC] removed TNCCS Connection ID 2 |
| 825 | 1 | Andreas Steffen | 15[TLS] sending TLS close notify |
| 826 | 1 | Andreas Steffen | 15[TLS] sending TLS Alert record (48 bytes) |
| 827 | 1 | Andreas Steffen | </pre> |
| 828 | 3 | Andreas Steffen | |
| 829 | 3 | Andreas Steffen | h2. Terminating the strongSwan Policy Decision Point |
| 830 | 1 | Andreas Steffen | |
| 831 | 1 | Andreas Steffen | <pre> |
| 832 | 1 | Andreas Steffen | 00[DMN] signal of type SIGINT received. Shutting down |
| 833 | 1 | Andreas Steffen | 00[IMV] IMV 2 "SWID" terminated |
| 834 | 1 | Andreas Steffen | 00[TNC] removed TCG attributes |
| 835 | 1 | Andreas Steffen | 00[LIB] libpts terminated |
| 836 | 1 | Andreas Steffen | 00[IMV] IMV 1 "OS" terminated |
| 837 | 1 | Andreas Steffen | 00[TNC] removed IETF attributes |
| 838 | 1 | Andreas Steffen | 00[TNC] removed ITA-HSR attributes |
| 839 | 1 | Andreas Steffen | 00[LIB] libimcv terminated |
| 840 | 1 | Andreas Steffen | </pre> |