Project

General

Profile

Software Inventory Message and Attributes for PA-TNC (SWIMA) » History » Version 6

Andreas Steffen, 13.06.2017 13:48

1 4 Andreas Steffen
h1. Software Inventory Message and Attributes for PA-TNC (SWIMA)
2 1 Andreas Steffen
3 6 Andreas Steffen
{{>toc}}
4 6 Andreas Steffen
5 6 Andreas Steffen
h2. Starting the PT-TLS Server Daemon
6 6 Andreas Steffen
7 4 Andreas Steffen
The PT-TLS server based on the strongSwan systemd daemon is usually started automatically at boot time with the command
8 1 Andreas Steffen
<pre>
9 4 Andreas Steffen
systemctl start strongswan-swanctl
10 4 Andreas Steffen
</pre>
11 4 Andreas Steffen
12 4 Andreas Steffen
First all the PA-TNC attribute definitions form the IETF, TCG, ITA-HSR and PWG namespaces are loaded. The IMVs to by dynamically loaded are read from _/etc/tnc_config_. 
13 4 Andreas Steffen
<pre>
14 1 Andreas Steffen
Jun 12 09:46:00 koala systemd[1]: Starting strongSwan IPsec IKEv1/IKEv2 daemon using swanctl...
15 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TNC recommendation policy is 'default'
16 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loading IMVs from '/etc/tnc_config'
17 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: added IETF attributes
18 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: added ITA-HSR attributes
19 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: added PWG attributes
20 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: added TCG attributes
21 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: libimcv initialized
22 1 Andreas Steffen
</pre>
23 4 Andreas Steffen
24 4 Andreas Steffen
The SWMA IMV is loaded as a dynamic library and attached to the TNC server.
25 1 Andreas Steffen
<pre>
26 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 "SWIMA" initialized
27 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 supports 1 message type: 'IETF/Software' 0x000000/0x00000009
28 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 "SWIMA" loaded from '/usr/lib/ipsec/imcvs/imv-swima.so'
29 1 Andreas Steffen
</pre>
30 4 Andreas Steffen
31 4 Andreas Steffen
The OS IMV is loaded as a dynamic library and attached to the TNC server.
32 1 Andreas Steffen
<pre>
33 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 "OS" initialized
34 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 supports 1 message type: 'IETF/Operating System' 0x000000/0x00000001
35 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 "OS" loaded from '/usr/lib/ipsec/imcvs/imv-os.so'
36 1 Andreas Steffen
</pre>
37 4 Andreas Steffen
38 4 Andreas Steffen
The strongSwan daemon loads all required plugins and goes into multi-threading mode so that multiple PT-TLS connections can be handled
39 1 Andreas Steffen
<pre>
40 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded plugins: charon-systemd charon-systemd random nonce x509 tpm openssl revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pem curve25519 chapoly sha3 mgf1 ntru bliss newhope eap-dynamic eap-radius eap-identity eap-md5 eap-ttls eap-tls eap-tnc tnc-imv tnc-pdp tnc-tnccs tnccs-20 tnc-ifmap kernel-netlink socket-default sqlite curl vici farp dhcp
41 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: spawning 16 worker threads
42 1 Andreas Steffen
</pre>
43 4 Andreas Steffen
44 4 Andreas Steffen
Multiple PT-TLS server and CA certificates are loaded into the daemon
45 1 Andreas Steffen
<pre>
46 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=mse2.strongswan.org'
47 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=koala.strongsec.com'
48 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=koala.strongsec.com'
49 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA'
50 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=MSE CA'
51 1 Andreas Steffen
</pre>
52 4 Andreas Steffen
53 4 Andreas Steffen
The actual loading is done by the *swanctl* command line tool which transfers the certificates to the daemon via a Unix socket.
54 1 Andreas Steffen
<pre>
55 4 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/MSE2_Cert.pem'
56 4 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/koala_AIK_ECC_Cert.pem'
57 4 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/koala_AIK_RSA_Cert.pem'
58 4 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509ca/strongsecCaCert.pem'
59 4 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509ca/MSE_CA_Cert.pem'
60 4 Andreas Steffen
</pre>
61 4 Andreas Steffen
62 4 Andreas Steffen
The first server certificate has a matching ECDSA private key loaded from file
63 4 Andreas Steffen
<pre>
64 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded ECDSA private key
65 1 Andreas Steffen
</pre>
66 4 Andreas Steffen
67 4 Andreas Steffen
The second server certificate has a matching ECDSA key protected by a TPM 2.0
68 1 Andreas Steffen
<pre>
69 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - algorithms: RSA SHA1 HMAC AES MGF1 KEYEDHASH XOR SHA256 RSASSA RSAES RSAPSS OAEP ECDSA ECDH SM2 ECMQV KDF1_SP800_108 ECC SYMCIPHER CTR OFB CBC CFB ECB
70 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - ECC curves: NIST_P256 BN_P256
71 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 via TSS2 available
72 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: AIK signature algorithm is ECDSA with SHA256 hash
73 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded ECDSA private key from token
74 1 Andreas Steffen
</pre>
75 4 Andreas Steffen
76 4 Andreas Steffen
The third server certificate has a matching RSA key protected by a TPM 2.0
77 1 Andreas Steffen
<pre>
78 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - algorithms: RSA SHA1 HMAC AES MGF1 KEYEDHASH XOR SHA256 RSASSA RSAES RSAPSS OAEP ECDSA ECDH SM2 ECMQV KDF1_SP800_108 ECC SYMCIPHER CTR OFB CBC CFB ECB
79 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - ECC curves: NIST_P256 BN_P256
80 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 via TSS2 available
81 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: AIK signature algorithm is RSASSA with SHA256 hash
82 1 Andreas Steffen
Jun 12 09:46:00 koala charon-systemd[3747]: loaded RSA private key from token
83 1 Andreas Steffen
</pre>
84 4 Andreas Steffen
85 5 Andreas Steffen
Again it is the *swanctl* tool which loads the private keys or determines the IDs of keys residing on smartcard or TPM devices.
86 1 Andreas Steffen
<pre>
87 1 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded ecdsa key from '/etc/swanctl/ecdsa/MSE2_Key.pem'
88 1 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded key token_ak_ecc from token [keyid: 8e70ca6665cd2e6c7893e407cb9a7cd6264d714f]
89 1 Andreas Steffen
Jun 12 09:46:01 koala swanctl[3766]: loaded key token_ak_rsa from token [keyid: ce431f647d549f759267422f4097c874e2eca547]
90 1 Andreas Steffen
</pre>
91 5 Andreas Steffen
92 5 Andreas Steffen
The PT-TLS server is now up and ready to accept connections on the default TCP port 271.
93 1 Andreas Steffen
<pre>
94 1 Andreas Steffen
Jun 12 09:46:01 koala systemd[1]: Started strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
95 1 Andreas Steffen
</pre>
96 5 Andreas Steffen
97 5 Andreas Steffen
A PT-TLS client connects to the PT-TLS server and does a TLS 1.2 handshake to establish a secure socket
98 1 Andreas Steffen
<pre>
99 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: accepting PT-TLS stream from 77.56.145.176
100 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: entering PT-TLS negotiation phase
101 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: negotiated TLS 1.2 using suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
102 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS server certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=mse2.strongswan.org'
103 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS cert request for 'C=CH, O=MSE, OU=TSM_ITSec, CN=MSE CA'
104 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS cert request for 'C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA'
105 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received TLS peer certificate 'C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com'
106 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using certificate "C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com"
107 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using trusted ca certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA"
108 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: checking certificate status of "C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com"
109 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using trusted certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA"
110 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   crl correctly signed by "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA"
111 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   crl is valid: until Jun 18 10:00:01 2017
112 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using cached crl
113 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using trusted certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA"
114 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   crl correctly signed by "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA"
115 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   crl is valid: until Jun 13 10:00:01 2017
116 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   using cached crl
117 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: certificate status is good
118 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   reached self-signed root ca with a path length of 0
119 1 Andreas Steffen
</pre>
120 5 Andreas Steffen
121 5 Andreas Steffen
The PT-TLS protocol is started skipping SASL-based client authentication because the client already authenticated itself during the TLS handshake.
122 1 Andreas Steffen
<pre>
123 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #0 of type 'Version Request' (20 bytes)
124 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #0 of type 'Version Response' (20 bytes)
125 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: negotiated PT-TLS version 1
126 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: doing SASL client authentication
127 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: skipping SASL, client already authenticated by TLS certificate
128 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #1 of type 'SASL Mechanisms' (16 bytes)
129 1 Andreas Steffen
</pre>
130 5 Andreas Steffen
131 5 Andreas Steffen
The PT-TLS protocol switches to the data transport phase and a TNCCS (PB-TNC) connection is instantiated
132 1 Andreas Steffen
<pre>
133 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: entering PT-TLS data transport phase
134 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #1 of type 'PB-TNC Batch' (337 bytes)
135 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: assigned TNCCS Connection ID 2
136 1 Andreas Steffen
</pre>
137 5 Andreas Steffen
138 5 Andreas Steffen
A SWIMA IMV instance is created for this PB-TNC connection
139 1 Andreas Steffen
<pre>
140 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh
141 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes
142 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   user AR identity 'C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com' of type X.500 DN authenticated by certificate
143 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   machine AR identity '77.56.145.176' of type IPv4 address authenticated by unknown method
144 1 Andreas Steffen
</pre>
145 5 Andreas Steffen
146 5 Andreas Steffen
An OS IMV instance is created for this PB-TNC connection
147 1 Andreas Steffen
<pre>
148 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh
149 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]:   over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes
150 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" changed state of Connection ID 2 to 'Handshake'
151 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" changed state of Connection ID 2 to 'Handshake'
152 1 Andreas Steffen
</pre>
153 5 Andreas Steffen
154 5 Andreas Steffen
The first PB-TNC client batch is received
155 1 Andreas Steffen
<pre>
156 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received TNCCS batch (321 bytes)
157 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling inbound connection
158 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
159 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Init' to 'Server Working'
160 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-Language-Preference message (31 bytes)
161 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-PA message (230 bytes)
162 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-PA message (52 bytes)
163 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: setting language preference to 'en'
164 5 Andreas Steffen
</pre>
165 5 Andreas Steffen
166 5 Andreas Steffen
The OS IMC sends some standard information about the client platform
167 5 Andreas Steffen
<pre>
168 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Operating System' 0x000000/0x00000001
169 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" received message for Connection ID 2 from IMC 1
170 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: => 206 bytes @ 0x7f4dc8002e40
171 1 Andreas Steffen
                                                0: 01 00 00 00 0D 24 79 C7 00 00 00 00 00 00 00 02  .....$y.........
172 1 Andreas Steffen
                                               16: 00 00 00 17 00 71 32 00 00 55 62 75 6E 74 75 00  .....q2..Ubuntu.
173 1 Andreas Steffen
                                               32: 00 00 00 00 00 00 04 00 00 00 1B 0C 31 36 2E 30  ............16.0
174 1 Andreas Steffen
                                               48: 34 20 78 38 36 5F 36 34 00 00 00 00 00 00 00 00  4 x86_64........
175 1 Andreas Steffen
                                               64: 00 03 00 00 00 1C 00 00 00 10 00 00 00 04 00 00  ................
176 1 Andreas Steffen
                                               80: 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00  ................
177 1 Andreas Steffen
                                               96: 00 24 03 01 00 00 32 30 31 37 2D 30 36 2D 31 31  .$....2017-06-11
178 1 Andreas Steffen
                                              112: 54 30 39 3A 30 37 3A 33 34 5A 00 00 00 00 00 00  T09:07:34Z......
179 1 Andreas Steffen
                                              128: 00 0B 00 00 00 10 00 00 00 01 00 00 00 00 00 00  ................
180 1 Andreas Steffen
                                              144: 00 0C 00 00 00 10 00 00 00 00 00 00 90 2A 00 00  .............*..
181 1 Andreas Steffen
                                              160: 00 08 00 00 00 34 35 64 39 35 30 32 31 33 39 36  .....45d95021396
182 1 Andreas Steffen
                                              176: 64 32 34 31 35 65 35 63 35 33 63 61 32 64 65 61  d2415e5c53ca2dea
183 1 Andreas Steffen
                                              192: 36 66 62 63 31 63 32 33 38 37 63 35 36 61        6fbc1c2387c56a
184 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC message with ID 0x0d2479c7
185 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Product Information' 0x000000/0x00000002
186 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/String Version' 0x000000/0x00000004
187 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Numeric Version' 0x000000/0x00000003
188 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Operational Status' 0x000000/0x00000005
189 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Forwarding Enabled' 0x000000/0x0000000b
190 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Factory Default Password Enabled' 0x000000/0x0000000c
191 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'ITA-HSR/Device ID' 0x00902a/0x00000008
192 1 Andreas Steffen
</pre>
193 5 Andreas Steffen
194 5 Andreas Steffen
This is the plaintext information contained in the PA-TNC attributes
195 1 Andreas Steffen
<pre>
196 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: operating system name is 'Ubuntu' from vendor Canonical
197 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: operating system version is '16.04 x86_64'
198 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: operating system numeric version is 16.4
199 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: operational status: operational, result: successful
200 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: last boot: Jun 11 09:07:34 UTC 2017
201 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IPv4 forwarding is enabled
202 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: factory default password is disabled
203 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: device ID is 5d95021396d2415e5c53ca2dea6fbc1c2387c56a
204 1 Andreas Steffen
</pre>
205 5 Andreas Steffen
206 5 Andreas Steffen
The second PA-TNC message
207 1 Andreas Steffen
<pre>
208 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
209 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2
210 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: => 28 bytes @ 0x7f4dc8003780
211 1 Andreas Steffen
                                                0: 01 00 00 00 0E 4F AE 95 00 00 55 97 00 00 00 21  .....O....U....!
212 1 Andreas Steffen
                                               16: 00 00 00 14 00 98 96 80 00 01 FF B8              ............
213 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC message with ID 0x0e4fae95
214 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
215 1 Andreas Steffen
</pre>
216 1 Andreas Steffen
<pre>
217 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 received a segmentation contract request from IMC 2 for PA message type 'IETF/Software' 0x000000/0x00000009
218 1 Andreas Steffen
                                               maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
219 1 Andreas Steffen
</pre>
220 1 Andreas Steffen
<pre>
221 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0xdb795d86
222 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
223 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 28 bytes @ 0x7f4dc8002d30
224 1 Andreas Steffen
                                                0: 01 00 00 00 DB 79 5D 86 00 00 55 97 00 00 00 22  .....y]...U...."
225 1 Andreas Steffen
                                               16: 00 00 00 14 00 98 96 80 00 01 FF B8              ............
226 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
227 1 Andreas Steffen
</pre>
228 1 Andreas Steffen
<pre>
229 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 requests a segmentation contract for PA message type 'IETF/Operating System' 0x000000/0x00000001
230 1 Andreas Steffen
                                               maximum attribute size of 100000000 bytes with maximum segment size of 131000 bytes
231 1 Andreas Steffen
</pre>
232 1 Andreas Steffen
<pre>
233 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: assigned session ID 40 to Connection ID 2
234 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: running policy script: 2>&1 ipsec imv_policy_manager start 40
235 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: policy: imv_policy_manager start successful
236 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: SWIDT workitem 251
237 1 Andreas Steffen
</pre>
238 1 Andreas Steffen
<pre>
239 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 has no workitems - no evaluation requested
240 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0x1b56eee5
241 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009
242 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Remediation Instructions' 0x000000/0x0000000a
243 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 117 bytes @ 0x7f4dc80026b0
244 1 Andreas Steffen
                                                0: 01 00 00 00 1B 56 EE E5 00 00 00 00 00 00 00 09  .....V..........
245 1 Andreas Steffen
                                               16: 00 00 00 10 00 00 00 04 00 00 00 00 00 00 00 0A  ................
246 1 Andreas Steffen
                                               32: 00 00 00 5D 00 00 00 00 00 00 00 02 00 00 00 42  ...]...........B
247 1 Andreas Steffen
                                               48: 49 50 20 50 61 63 6B 65 74 20 46 6F 72 77 61 72  IP Packet Forwar
248 1 Andreas Steffen
                                               64: 64 69 6E 67 0A 20 20 50 6C 65 61 73 65 20 64 69  ding.  Please di
249 1 Andreas Steffen
                                               80: 73 61 62 6C 65 20 74 68 65 20 66 6F 72 77 61 72  sable the forwar
250 1 Andreas Steffen
                                               96: 64 69 6E 67 20 6F 66 20 49 50 20 70 61 63 6B 65  ding of IP packe
251 1 Andreas Steffen
                                              112: 74 73 02 65 6E                                   ts.en
252 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001
253 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 provides recommendation 'allow' and evaluation 'don't know'
254 1 Andreas Steffen
</pre>
255 1 Andreas Steffen
<pre>
256 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling outbound connection
257 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
258 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-TNC SDATA batch
259 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message
260 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message
261 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PB-TNC SDATA batch (201 bytes) for Connection ID 2
262 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #2 of type 'PB-TNC Batch' (217 bytes)
263 1 Andreas Steffen
</pre>
264 1 Andreas Steffen
<pre>
265 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #2 of type 'PB-TNC Batch' (24 bytes)
266 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received TNCCS batch (8 bytes)
267 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling inbound connection
268 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
269 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
270 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received empty PB-TNC CDATA batch
271 2 Andreas Steffen
</pre>
272 2 Andreas Steffen
<pre>
273 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 requests a segmentation contract for PA message type 'IETF/Software' 0x000000/0x00000009
274 1 Andreas Steffen
                                               maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
275 1 Andreas Steffen
</pre>
276 6 Andreas Steffen
277 6 Andreas Steffen
h2. Sending IETF SW Request
278 1 Andreas Steffen
<pre>
279 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 handles SWIDT workitem 251
280 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 issues sw request 251
281 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0x8311ab95
282 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
283 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/SW Request' 0x000000/0x00000011
284 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 52 bytes @ 0x7f4db0006200
285 1 Andreas Steffen
                                                0: 01 00 00 00 83 11 AB 95 00 00 55 97 00 00 00 21  ..........U....!
286 1 Andreas Steffen
                                               16: 00 00 00 14 00 98 96 80 00 01 FF B8 00 00 00 00  ................
287 1 Andreas Steffen
                                               32: 00 00 00 11 00 00 00 18 20 00 00 00 00 00 00 FB  ........ .......
288 1 Andreas Steffen
                                               48: 00 00 00 00                                      ....
289 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
290 6 Andreas Steffen
</pre>
291 6 Andreas Steffen
292 6 Andreas Steffen
<pre>
293 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling outbound connection
294 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
295 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-TNC SDATA batch
296 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message
297 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PB-TNC SDATA batch (84 bytes) for Connection ID 2
298 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #3 of type 'PB-TNC Batch' (100 bytes)
299 1 Andreas Steffen
</pre>
300 1 Andreas Steffen
<pre>
301 1 Andreas Steffen
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #3 of type 'PB-TNC Batch' (131072 bytes)
302 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (131056 bytes)
303 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
304 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
305 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
306 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (131048 bytes)
307 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
308 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
309 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: => 131024 bytes @ 0x7f4dd808cb50
310 1 Andreas Steffen
                                                  0: 01 00 00 00 76 04 15 EC 00 00 55 97 00 00 00 22  ....v.....U...."
311 1 Andreas Steffen
                                                 16: 00 00 00 14 00 98 96 80 00 01 FF B8 00 00 55 97  ..............U.
312 1 Andreas Steffen
                                                 32: 00 00 00 23 00 01 FF B4 C0 00 00 01 00 00 00 00  ...#............
313 1 Andreas Steffen
                                                 48: 00 00 00 12 00 02 7F B7 00 00 07 FF 00 00 00 FB  ................
314 1 Andreas Steffen
                                                 64: 11 22 33 44 00 00 00 01 00 00 00 00 00 00 00 01  ."3D............
315 1 Andreas Steffen
                                                 80: 01 00 00 51 73 74 72 6F 6E 67 73 77 61 6E 2E 6F  ...Qstrongswan.o
316 1 Andreas Steffen
                                                 96: 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D  rg_Ubuntu_16.04-
317 1 Andreas Steffen
                                                112: 78 38 36 5F 36 34 2D 61 31 31 79 2D 70 72 6F 66  x86_64-a11y-prof
318 1 Andreas Steffen
                                                128: 69 6C 65 2D 6D 61 6E 61 67 65 72 2D 69 6E 64 69  ile-manager-indi
319 1 Andreas Steffen
                                                144: 63 61 74 6F 72 2D 30 2E 31 2E 31 30 2D 30 75 62  cator-0.1.10-0ub
320 1 Andreas Steffen
                                                160: 75 6E 74 75 33 00 00 00 00 00 00 00 00 00 01 01  untu3...........
321 1 Andreas Steffen
                                                176: 00 00 57 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72  ..Wstrongswan.or
322 1 Andreas Steffen
                                                192: 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78  g_Ubuntu_16.04-x
323 1 Andreas Steffen
                                                208: 38 36 5F 36 34 2D 61 63 63 6F 75 6E 74 2D 70 6C  86_64-account-pl
324 1 Andreas Steffen
                                                224: 75 67 69 6E 2D 66 61 63 65 62 6F 6F 6B 2D 30 2E  ugin-facebook-0.
325 1 Andreas Steffen
                                                240: 31 32 7E 31 36 2E 30 34 2E 32 30 31 36 30 31 32  12~16.04.2016012
326 1 Andreas Steffen
                                                256: 36 2D 30 75 62 75 6E 74 75 31 00 00 00 00 00 00  6-0ubuntu1......
327 1 Andreas Steffen
                                                272: 00 00 00 01 01 00 00 55 73 74 72 6F 6E 67 73 77  .......Ustrongsw
328 1 Andreas Steffen
                                                288: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36  an.org_Ubuntu_16
329 1 Andreas Steffen
                                                304: 2E 30 34 2D 78 38 36 5F 36 34 2D 61 63 63 6F 75  .04-x86_64-accou
330 1 Andreas Steffen
                                                320: 6E 74 2D 70 6C 75 67 69 6E 2D 66 6C 69 63 6B 72  nt-plugin-flickr
331 1 Andreas Steffen
                                                336: 2D 30 2E 31 32 7E 31 36 2E 30 34 2E 32 30 31 36  -0.12~16.04.2016
332 1 Andreas Steffen
                                                352: 30 31 32 36 2D 30 75 62 75 6E 74 75 31 00 00 00  0126-0ubuntu1...
333 1 Andreas Steffen
                                                368: 00 00 00 00 00 00 01 01 00 00 55 73 74 72 6F 6E  ..........Ustron
334 1 Andreas Steffen
                                                384: 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75  gswan.org_Ubuntu
335 1 Andreas Steffen
                                                400: 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D 61 63  _16.04-x86_64-ac
336 1 Andreas Steffen
                                                416: 63 6F 75 6E 74 2D 70 6C 75 67 69 6E 2D 67 6F 6F  count-plugin-goo
337 1 Andreas Steffen
                                                432: 67 6C 65 2D 30 2E 31 32 7E 31 36 2E 30 34 2E 32  gle-0.12~16.04.2
338 1 Andreas Steffen
                                                448: 30 31 36 30 31 32 36 2D 30 75 62 75 6E 74 75 31  0160126-0ubuntu1
339 1 Andreas Steffen
                                                ...
340 1 Andreas Steffen
                                             130656: 00 00 00 01 01 00 00 40 73 74 72 6F 6E 67 73 77  .......@strongsw
341 1 Andreas Steffen
                                             130672: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36  an.org_Ubuntu_16
342 1 Andreas Steffen
                                             130688: 2E 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F  .04-x86_64-pytho
343 1 Andreas Steffen
                                             130704: 6E 2D 70 6B 67 2D 72 65 73 6F 75 72 63 65 73 2D  n-pkg-resources-
344 1 Andreas Steffen
                                             130720: 32 30 2E 37 2E 30 2D 31 00 00 00 00 00 00 00 00  20.7.0-1........
345 1 Andreas Steffen
                                             130736: 00 01 01 00 00 3D 73 74 72 6F 6E 67 73 77 61 6E  .....=strongswan
346 1 Andreas Steffen
                                             130752: 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30  .org_Ubuntu_16.0
347 1 Andreas Steffen
                                             130768: 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 2D  4-x86_64-python-
348 1 Andreas Steffen
                                             130784: 73 65 74 75 70 74 6F 6F 6C 73 2D 32 30 2E 37 2E  setuptools-20.7.
349 1 Andreas Steffen
                                             130800: 30 2D 31 00 00 00 00 00 00 00 00 00 01 01 00 00  0-1.............
350 1 Andreas Steffen
                                             130816: 38 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F  8strongswan.org_
351 1 Andreas Steffen
                                             130832: 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 38 36  Ubuntu_16.04-x86
352 1 Andreas Steffen
                                             130848: 5F 36 34 2D 70 79 74 68 6F 6E 2D 74 61 6C 6C 6F  _64-python-tallo
353 1 Andreas Steffen
                                             130864: 63 2D 32 2E 31 2E 35 2D 32 00 00 00 00 00 00 00  c-2.1.5-2.......
354 1 Andreas Steffen
                                             130880: 00 00 01 01 00 00 38 73 74 72 6F 6E 67 73 77 61  ......8strongswa
355 1 Andreas Steffen
                                             130896: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E  n.org_Ubuntu_16.
356 1 Andreas Steffen
                                             130912: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E  04-x86_64-python
357 1 Andreas Steffen
                                             130928: 2D 77 68 65 65 6C 2D 30 2E 32 39 2E 30 2D 31 00  -wheel-0.29.0-1.
358 1 Andreas Steffen
                                             130944: 00 00 00 00 00 00 00 00 01 01 00 00 44 73 74 72  ............Dstr
359 1 Andreas Steffen
                                             130960: 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E  ongswan.org_Ubun
360 1 Andreas Steffen
                                             130976: 74 75 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D  tu_16.04-x86_64-
361 1 Andreas Steffen
                                             130992: 70 79 74 68 6F 6E 32 2E 37 2D 32 2E 37 2E 31 32  python2.7-2.7.12
362 1 Andreas Steffen
                                             131008: 2D 31 75 62 75 6E 74 75 30 7E 31 36 2E 30 34 2E  -1ubuntu0~16.04.
363 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0x760415ec
364 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
365 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Attribute Segment Envelope' 0x005597/0x00000023
366 1 Andreas Steffen
367 1 Andreas Steffen
</pre>
368 1 Andreas Steffen
<pre>Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 received a segmentation contract response from IMC 2 for PA message type 'IETF/Software' 0x000000/0x00000009
369 1 Andreas Steffen
                                               maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
370 1 Andreas Steffen
</pre>
371 1 Andreas Steffen
<pre>
372 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received first segment for base attribute ID 1 (130980 bytes)
373 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/SW Identifier Inventory' 0x000000/0x00000012
374 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: 67 bytes insufficient to parse 68 bytes of data
375 1 Andreas Steffen
</pre>
376 1 Andreas Steffen
<pre>
377 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received software identity inventory with 1646 items for request 251 at eid 1 of epoch 0x11223344, 401 items to follow
378 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-a11y-profile-manager-indicator-0.1.10-0ubuntu3
379 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-account-plugin-facebook-0.12~16.04.20160126-0ubuntu1
380 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-account-plugin-flickr-0.12~16.04.20160126-0ubuntu1
381 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-account-plugin-google-0.12~16.04.20160126-0ubuntu1
382 1 Andreas Steffen
                                               ...
383 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python-pkg-resources-20.7.0-1
384 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python-setuptools-20.7.0-1
385 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python-talloc-2.1.5-2
386 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python-wheel-0.29.0-1
387 1 Andreas Steffen
</pre>
388 1 Andreas Steffen
<pre>
389 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC message with ID 0x63400a67
390 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Next Segment Request' 0x005597/0x00000024
391 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: created PA-TNC message: => 24 bytes @ 0x7f4dd8157610
392 1 Andreas Steffen
                                                0: 01 00 00 00 63 40 0A 67 00 00 55 97 00 00 00 24  ....c@.g..U....$
393 1 Andreas Steffen
                                               16: 00 00 00 10 00 00 00 01                          ........
394 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
395 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling outbound connection
396 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
397 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-TNC SDATA batch
398 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: adding IETF/PB-PA message
399 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: sending PB-TNC SDATA batch (56 bytes) for Connection ID 2
400 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: sending PT-TLS message #4 of type 'PB-TNC Batch' (72 bytes)
401 1 Andreas Steffen
</pre>
402 1 Andreas Steffen
<pre>
403 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received PT-TLS message #4 of type 'PB-TNC Batch' (32859 bytes)
404 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (32843 bytes)
405 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
406 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
407 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
408 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (32835 bytes)
409 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
410 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
411 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: => 32811 bytes @ 0x7f4dd00250b0
412 1 Andreas Steffen
                                                 0: 01 00 00 00 63 31 E2 36 00 00 55 97 00 00 00 23  ....c1.6..U....#
413 1 Andreas Steffen
                                                16: 00 00 80 23 00 00 00 01 31 00 00 00 00 00 00 00  ...#....1.......
414 1 Andreas Steffen
                                                32: 00 00 01 01 00 00 48 73 74 72 6F 6E 67 73 77 61  ......Hstrongswa
415 1 Andreas Steffen
                                                48: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E  n.org_Ubuntu_16.
416 1 Andreas Steffen
                                                64: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E  04-x86_64-python
417 1 Andreas Steffen
                                                80: 32 2E 37 2D 64 65 76 2D 32 2E 37 2E 31 32 2D 31  2.7-dev-2.7.12-1
418 1 Andreas Steffen
                                                96: 75 62 75 6E 74 75 30 7E 31 36 2E 30 34 2E 31 00  ubuntu0~16.04.1.
419 1 Andreas Steffen
                                               112: 00 00 00 00 00 00 00 00 01 01 00 00 4C 73 74 72  ............Lstr
420 1 Andreas Steffen
                                               128: 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E  ongswan.org_Ubun
421 1 Andreas Steffen
                                               144: 74 75 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D  tu_16.04-x86_64-
422 1 Andreas Steffen
                                               160: 70 79 74 68 6F 6E 32 2E 37 2D 6D 69 6E 69 6D 61  python2.7-minima
423 1 Andreas Steffen
                                               176: 6C 2D 32 2E 37 2E 31 32 2D 31 75 62 75 6E 74 75  l-2.7.12-1ubuntu
424 1 Andreas Steffen
                                               192: 30 7E 31 36 2E 30 34 2E 31 00 00 00 00 00 00 00  0~16.04.1.......
425 1 Andreas Steffen
                                               208: 00 00 01 01 00 00 32 73 74 72 6F 6E 67 73 77 61  ......2strongswa
426 1 Andreas Steffen
                                               224: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E  n.org_Ubuntu_16.
427 1 Andreas Steffen
                                               240: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E  04-x86_64-python
428 1 Andreas Steffen
                                               256: 33 2D 33 2E 35 2E 31 2D 33 00 00 00 00 00 00 00  3-3.5.1-3.......
429 1 Andreas Steffen
                                               272: 00 00 01 01 00 00 43 73 74 72 6F 6E 67 73 77 61  ......Cstrongswa
430 1 Andreas Steffen
                                               288: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E  n.org_Ubuntu_16.
431 1 Andreas Steffen
                                               304: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E  04-x86_64-python
432 1 Andreas Steffen
                                               320: 33 2D 61 70 70 6F 72 74 2D 32 2E 32 30 2E 31 2D  3-apport-2.20.1-
433 1 Andreas Steffen
                                               336: 30 75 62 75 6E 74 75 32 2E 36 00 00 00 00 00 00  0ubuntu2.6......
434 1 Andreas Steffen
                                               ...
435 1 Andreas Steffen
                                             32448: 00 00 00 01 01 00 00 42 73 74 72 6F 6E 67 73 77  .......Bstrongsw
436 1 Andreas Steffen
                                             32464: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36  an.org_Ubuntu_16
437 1 Andreas Steffen
                                             32480: 2E 30 34 2D 78 38 36 5F 36 34 2D 7A 65 6E 69 74  .04-x86_64-zenit
438 1 Andreas Steffen
                                             32496: 79 2D 63 6F 6D 6D 6F 6E 2D 33 2E 31 38 2E 31 2E  y-common-3.18.1.
439 1 Andreas Steffen
                                             32512: 31 2D 31 75 62 75 6E 74 75 32 00 00 00 00 00 00  1-1ubuntu2......
440 1 Andreas Steffen
                                             32528: 00 00 00 01 01 00 00 2D 73 74 72 6F 6E 67 73 77  .......-strongsw
441 1 Andreas Steffen
                                             32544: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36  an.org_Ubuntu_16
442 1 Andreas Steffen
                                             32560: 2E 30 34 2D 78 38 36 5F 36 34 2D 7A 69 70 2D 33  .04-x86_64-zip-3
443 1 Andreas Steffen
                                             32576: 2E 30 2D 31 31 00 00 00 00 00 00 00 00 00 01 01  .0-11...........
444 1 Andreas Steffen
                                             32592: 00 00 41 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72  ..Astrongswan.or
445 1 Andreas Steffen
                                             32608: 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78  g_Ubuntu_16.04-x
446 1 Andreas Steffen
                                             32624: 38 36 5F 36 34 2D 7A 6C 69 62 31 67 2D 31 7E 31  86_64-zlib1g-1~1
447 1 Andreas Steffen
                                             32640: 2E 32 2E 38 2E 64 66 73 67 2D 32 75 62 75 6E 74  .2.8.dfsg-2ubunt
448 1 Andreas Steffen
                                             32656: 75 34 2E 31 00 00 00 00 00 00 00 00 00 01 01 00  u4.1............
449 1 Andreas Steffen
                                             32672: 00 45 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67  .Estrongswan.org
450 1 Andreas Steffen
                                             32688: 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 38  _Ubuntu_16.04-x8
451 1 Andreas Steffen
                                             32704: 36 5F 36 34 2D 7A 6C 69 62 31 67 2D 64 65 76 2D  6_64-zlib1g-dev-
452 1 Andreas Steffen
                                             32720: 31 7E 31 2E 32 2E 38 2E 64 66 73 67 2D 32 75 62  1~1.2.8.dfsg-2ub
453 1 Andreas Steffen
                                             32736: 75 6E 74 75 34 2E 31 00 00 00 00 00 00 00 00 00  untu4.1.........
454 1 Andreas Steffen
                                             32752: 01 02 00 00 1F 73 74 72 6F 6E 67 73 77 61 6E 2E  .....strongswan.
455 1 Andreas Steffen
                                             32768: 6F 72 67 5F 73 74 72 6F 6E 67 53 77 61 6E 2D 35  org_strongSwan-5
456 1 Andreas Steffen
                                             32784: 2D 35 2D 33 00 15 2F 75 73 72 2F 73 68 61 72 65  -5-3../usr/share
457 1 Andreas Steffen
                                             32800: 2F 73 74 72 6F 6E 67 73 77 61 6E                 /strongswan
458 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0x6331e236
459 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Attribute Segment Envelope' 0x005597/0x00000023
460 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received last segment for base attribute ID 1 (32787 bytes)
461 1 Andreas Steffen
</pre>
462 1 Andreas Steffen
<pre>
463 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received software identity inventory with 401 items for request 251 at eid 1 of epoch 0x11223344, 0 items to follow
464 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python2.7-2.7.12-1ubuntu0~16.04.1
465 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python2.7-dev-2.7.12-1ubuntu0~16.04.1
466 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python2.7-minimal-2.7.12-1ubuntu0~16.04.1
467 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python3-3.5.1-3
468 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-python3-apport-2.20.1-0ubuntu2.6
469 1 Andreas Steffen
                                               ...
470 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-zenity-common-3.18.1.1-1ubuntu2
471 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-zip-3.0-11
472 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-zlib1g-1~1.2.8.dfsg-2ubuntu4.1
473 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_Ubuntu_16.04-x86_64-zlib1g-dev-1~1.2.8.dfsg-2ubuntu4.1
474 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_strongSwan-5-5-3
475 1 Andreas Steffen
</pre>
476 1 Andreas Steffen
<pre>
477 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: 1 SWID tag target
478 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]:   strongswan.org_strongSwan-5-5-3
479 3 Andreas Steffen
</pre>
480 3 Andreas Steffen
<pre>
481 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC message with ID 0xf3c2af1e
482 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/SW Request' 0x000000/0x00000011
483 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: created PA-TNC message: => 65 bytes @ 0x7f4dd0003c40
484 1 Andreas Steffen
                                                0: 01 00 00 00 F3 C2 AF 1E 00 00 00 00 00 00 00 11  ................
485 1 Andreas Steffen
                                               16: 00 00 00 39 00 00 00 01 00 00 00 FB 00 00 00 00  ...9............
486 1 Andreas Steffen
                                               32: 00 1F 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67  ..strongswan.org
487 1 Andreas Steffen
                                               48: 5F 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D  _strongSwan-5-5-
488 1 Andreas Steffen
                                               64: 33                                               3
489 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
490 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling outbound connection
491 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
492 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-TNC SDATA batch
493 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: adding IETF/PB-PA message
494 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: sending PB-TNC SDATA batch (97 bytes) for Connection ID 2
495 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: sending PT-TLS message #5 of type 'PB-TNC Batch' (113 bytes)
496 1 Andreas Steffen
</pre>
497 1 Andreas Steffen
<pre>
498 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received PT-TLS message #5 of type 'PB-TNC Batch' (507 bytes)
499 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (491 bytes)
500 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
501 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
502 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
503 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (483 bytes)
504 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
505 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
506 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: => 459 bytes @ 0x7f4dd4005a80
507 1 Andreas Steffen
                                                0: 01 00 00 00 EF 28 38 E0 00 00 00 00 00 00 00 14  .....(8.........
508 1 Andreas Steffen
                                               16: 00 00 01 C3 00 00 00 01 00 00 00 FB 11 22 33 44  ............."3D
509 1 Andreas Steffen
                                               32: 00 00 00 01 00 00 00 00 00 00 00 01 02 00 00 1F  ................
510 1 Andreas Steffen
                                               48: 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 73  strongswan.org_s
511 1 Andreas Steffen
                                               64: 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D 33 00  trongSwan-5-5-3.
512 1 Andreas Steffen
                                               80: 15 2F 75 73 72 2F 73 68 61 72 65 2F 73 74 72 6F  ./usr/share/stro
513 1 Andreas Steffen
                                               96: 6E 67 73 77 61 6E 00 00 01 61 3C 3F 78 6D 6C 20  ngswan...a<?xml 
514 1 Andreas Steffen
                                              112: 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 20 65 6E  version="1.0" en
515 1 Andreas Steffen
                                              128: 63 6F 64 69 6E 67 3D 22 75 74 66 2D 38 22 3F 3E  coding="utf-8"?>
516 1 Andreas Steffen
                                              144: 0A 0A 3C 53 6F 66 74 77 61 72 65 49 64 65 6E 74  ..<SoftwareIdent
517 1 Andreas Steffen
                                              160: 69 74 79 0A 20 20 6E 61 6D 65 3D 22 73 74 72 6F  ity.  name="stro
518 1 Andreas Steffen
                                              176: 6E 67 53 77 61 6E 22 0A 20 20 74 61 67 49 64 3D  ngSwan".  tagId=
519 1 Andreas Steffen
                                              192: 22 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D  "strongSwan-5-5-
520 1 Andreas Steffen
                                              208: 33 22 0A 20 20 76 65 72 73 69 6F 6E 3D 22 35 2E  3".  version="5.
521 1 Andreas Steffen
                                              224: 35 2E 33 22 20 76 65 72 73 69 6F 6E 53 63 68 65  5.3" versionSche
522 1 Andreas Steffen
                                              240: 6D 65 3D 22 61 6C 70 68 61 6E 75 6D 65 72 69 63  me="alphanumeric
523 1 Andreas Steffen
                                              256: 22 0A 20 20 78 6D 6C 6E 73 3D 22 68 74 74 70 3A  ".  xmlns="http:
524 1 Andreas Steffen
                                              272: 2F 2F 73 74 61 6E 64 61 72 64 73 2E 69 73 6F 2E  //standards.iso.
525 1 Andreas Steffen
                                              288: 6F 72 67 2F 69 73 6F 2F 31 39 37 37 30 2F 2D 32  org/iso/19770/-2
526 1 Andreas Steffen
                                              304: 2F 32 30 31 35 2F 73 63 68 65 6D 61 2E 78 73 64  /2015/schema.xsd
527 1 Andreas Steffen
                                              320: 22 3E 0A 20 20 3C 45 6E 74 69 74 79 0A 20 20 20  ">.  <Entity.   
528 1 Andreas Steffen
                                              336: 20 6E 61 6D 65 3D 22 73 74 72 6F 6E 67 53 77 61   name="strongSwa
529 1 Andreas Steffen
                                              352: 6E 20 50 72 6F 6A 65 63 74 22 0A 20 20 20 20 72  n Project".    r
530 1 Andreas Steffen
                                              368: 65 67 69 64 3D 22 73 74 72 6F 6E 67 73 77 61 6E  egid="strongswan
531 1 Andreas Steffen
                                              384: 2E 6F 72 67 22 0A 20 20 20 20 72 6F 6C 65 3D 22  .org".    role="
532 1 Andreas Steffen
                                              400: 73 6F 66 74 77 61 72 65 43 72 65 61 74 6F 72 20  softwareCreator 
533 1 Andreas Steffen
                                              416: 6C 69 63 65 6E 73 6F 72 20 74 61 67 43 72 65 61  licensor tagCrea
534 1 Andreas Steffen
                                              432: 74 6F 72 22 2F 3E 0A 3C 2F 53 6F 66 74 77 61 72  tor"/>.</Softwar
535 1 Andreas Steffen
                                              448: 65 49 64 65 6E 74 69 74 79 3E 0A                 eIdentity>.
536 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0xef2838e0
537 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/SW Inventory' 0x000000/0x00000014
538 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: received software inventory with 1 item for request 251 at eid 1 of epoch 0x11223344, 0 items to follow
539 1 Andreas Steffen
</pre>
540 1 Andreas Steffen
<pre>
541 1 Andreas Steffen
Jun 12 10:37:04 koala charon-systemd[17732]: <?xml version="1.0" encoding="utf-8"?>
542 1 Andreas Steffen
                                             <SoftwareIdentity
543 1 Andreas Steffen
                                               name="strongSwan"
544 1 Andreas Steffen
                                               tagId="strongSwan-5-5-3"
545 1 Andreas Steffen
                                               version="5.5.3" versionScheme="alphanumeric"
546 1 Andreas Steffen
                                               xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd">
547 1 Andreas Steffen
                                               <Entity
548 1 Andreas Steffen
                                                 name="strongSwan Project"
549 1 Andreas Steffen
                                                 regid="strongswan.org"
550 1 Andreas Steffen
                                                 role="softwareCreator licensor tagCreator"/>
551 1 Andreas Steffen
                                             </SoftwareIdentity>
552 1 Andreas Steffen
</pre>
553 1 Andreas Steffen
<pre>
554 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 handled SWIDT workitem 251: allow - received inventory of 2047 SWID tag IDs and 1 SWID tag
555 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: creating PA-TNC message with ID 0x19d0d973
556 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009
557 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: created PA-TNC message: => 24 bytes @ 0x7f4dd4019d70
558 1 Andreas Steffen
                                                0: 01 00 00 00 19 D0 D9 73 00 00 00 00 00 00 00 09  .......s........
559 1 Andreas Steffen
                                               16: 00 00 00 10 00 00 00 00                          ........
560 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
561 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 provides recommendation 'allow' and evaluation 'compliant'
562 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: TNC server is handling outbound connection
563 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 "SWIMA" changed state of Connection ID 2 to 'Allowed'
564 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: running policy script: 2>&1 ipsec imv_policy_manager stop 40
565 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: policy: recommendation for access requestor 77.56.145.176 is allow
566 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: policy: imv_policy_manager stop successful
567 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 2 "OS" changed state of Connection ID 2 to 'Allowed'
568 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Decided'
569 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: creating PB-TNC RESULT batch
570 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-PA message
571 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-Assessment-Result message
572 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-Access-Recommendation message
573 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: sending PB-TNC RESULT batch (88 bytes) for Connection ID 2
574 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: sending PT-TLS message #6 of type 'PB-TNC Batch' (104 bytes)
575 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: received PT-TLS message #6 of type 'PB-TNC Batch' (24 bytes)
576 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: received TNCCS batch (8 bytes)
577 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: TNC server is handling inbound connection
578 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: processing PB-TNC CLOSE batch for Connection ID 2
579 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: PB-TNC state transition from 'Decided' to 'End'
580 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: final recommendation is 'allow' and evaluation is 'compliant'
581 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: PT-TLS connection terminates
582 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 "SWIMA" deleted the state of Connection ID 2
583 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 2 "OS" deleted the state of Connection ID 2
584 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: removed TNCCS Connection ID 2
585 1 Andreas Steffen
Jun 12 10:37:05 koala charon-systemd[17732]: sending TLS close notify
586 1 Andreas Steffen
</pre>
587 1 Andreas Steffen
<pre>
588 1 Andreas Steffen
Jun 12 13:14:31 koala systemd[1]: Stopping strongSwan IPsec IKEv1/IKEv2 daemon using swanctl...
589 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: SIGTERM received, shutting down
590 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: IMV 2 "OS" terminated
591 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: IMV 1 "SWIMA" terminated
592 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: removed IETF attributes
593 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: removed ITA-HSR attributes
594 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: removed PWG attributes
595 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: removed TCG attributes
596 1 Andreas Steffen
Jun 12 13:14:31 koala charon-systemd[17732]: libimcv terminated
597 1 Andreas Steffen
Jun 12 13:14:31 koala systemd[1]: Stopped strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
598 1 Andreas Steffen
</pre>