Re: [sacm] sacm-nea-swid-patnc (SWIMA) prototype implementation

Adam Montville <adam.w.montville@gmail.com> Fri, 16 June 2017 10:23 UTC

Return-Path: <adam.w.montville@gmail.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6510F1317E8 for <sacm@ietfa.amsl.com>; Fri, 16 Jun 2017 03:23:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SNH4w87Bbqti for <sacm@ietfa.amsl.com>; Fri, 16 Jun 2017 03:23:50 -0700 (PDT)
Received: from mail-io0-x230.google.com (mail-io0-x230.google.com [IPv6:2607:f8b0:4001:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8B5D1317EF for <sacm@ietf.org>; Fri, 16 Jun 2017 03:23:49 -0700 (PDT)
Received: by mail-io0-x230.google.com with SMTP id k93so27822256ioi.2 for <sacm@ietf.org>; Fri, 16 Jun 2017 03:23:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=XFliO0MfP7mR/cOlS5MlaUpOnlsd7BFAeki6OSZGTpw=; b=euCDET42WA7HuxKUR2uhOcv3bktL6e7R9GCOVRSdwmmcFJ42PIcLPcuSFD9+Z5kL1V 1wWbgexol5IKJkKzxB/XKtQlktAnE9HCvR6Ahq3cdJd0GnAID1pMfYhqUmctWJepR9Hi ErJX8H9WeV7nrlQ/+6rCivIxAw6NcHQQUj5//2TG5emGAm+pNfo93Pgn7+Lj/BsWfhP6 o67o2zhVNC2qpbOAa3tsEkIoKsQjaaGHUHzFupBdkY7ppXJC33GFRUhLL8s1zFLbgJTp q3VuDDV7/GXj17Bg4wFZPEi2sRdOxnnJzd2PMOreO2qQ0fSlWV+pory87AgCms4pr+F/ 1drw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=XFliO0MfP7mR/cOlS5MlaUpOnlsd7BFAeki6OSZGTpw=; b=ODyCyW2iCBleo1cZ0UDsl/2ylY3wKRda+ab8InMUBAfIbgs47ryjpmFaAfQoAktxlI 6Sv2dZjLCto3eI8PXcVmo10KEj0dLp8Fsuz61FiqC7H00sWvMChISQ//0kG+3SDYwZ+a OJN7iuue9MQ5LUVcagbnyyL5CwuYJl0xyhWBrn2ePMgM3hA0QNvpffdOIp3N+Jlx5rHp AGPok7aeQRpSXFMsiEMSPA8twLkrcp6AxwDphXrkNB3UM/xJgx6/xOeuGS/mxiLzZQ12 Gz8hOOAr07y6wkj4uYovMMPlxPeM5DsFBW4i9pyfknqj9+4Qi9PMagm/vu1qjnNJa+o6 4jHg==
X-Gm-Message-State: AKS2vOyeZ9KLXvF7BlTMZmLlGvP2SWV0xTeQZ+LdNFoJGQDZYWDyC3TB f5CME8HX8Ny7Lqs1pkFmtumzJ/mVkSAP
X-Received: by 10.107.23.66 with SMTP id 63mr9662123iox.184.1497608629089; Fri, 16 Jun 2017 03:23:49 -0700 (PDT)
MIME-Version: 1.0
References: <2e8798e8-42b1-285b-608f-06501b8153eb@strongswan.org>
In-Reply-To: <2e8798e8-42b1-285b-608f-06501b8153eb@strongswan.org>
From: Adam Montville <adam.w.montville@gmail.com>
Date: Fri, 16 Jun 2017 10:23:37 +0000
Message-ID: <CACknUNXw57o+WQjJ6+Tt37jt4=KBVixRxFRgubrRhfCfh2YqAQ@mail.gmail.com>
To: Andreas Steffen <andreas.steffen@strongswan.org>, "sacm@ietf.org" <sacm@ietf.org>
Cc: "Schmidt, Charles M." <cmschmidt@mitre.org>
Content-Type: multipart/alternative; boundary="94eb2c05c23e598a2f0552112e0e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/mtbsrumVTcUFP6qvbvjBs0hEWz0>
Subject: Re: [sacm] sacm-nea-swid-patnc (SWIMA) prototype implementation
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Jun 2017 10:23:53 -0000

Excellent! If folks are able to take a look at this implementation that
would be great.

Kind regards,

Adam
On Fri, Jun 16, 2017 at 5:17 AM Andreas Steffen <
andreas.steffen@strongswan.org> wrote:

> Hi,
>
> I have just finished a prototype implementation of the SWIMA draft
> "draft-ietf-sacm-nea-swid-patnc". The following five PA-TNC attributes
> are currently supported (without subscription yet):
>
>  * SW Request
>  * Software Identifier Inventory
>  * Software Identifier Events
>  * Software Inventory
>  * Software Events
>
> The C source code can be found in the swima branch of the strongSwan
> project:
>
>
> https://github.com/strongswan/strongswan/tree/swima/src/libimcv/ietf/swima
>
> Various SWIMA object classes are located here
>
>   https://github.com/strongswan/strongswan/tree/swima/src/libimcv/swima
>
> Unit tests for the PA-TNC message and attributes, achieving nearly
> 100 % code coverage are found here
>
>
>
> https://github.com/strongswan/strongswan/blob/swima/src/libimcv/suites/test_imcv_swima.c
>
> The SWIMA attributes can be used with the SW Posture Collector/Validator
> pair
>
>
>
> https://github.com/strongswan/strongswan/tree/swima/src/libimcv/plugins/imc_swima
>
>
> https://github.com/strongswan/strongswan/tree/swima/src/libimcv/plugins/imv_swima
>
> The SWIMA server log of a live posture session via a PT-TLS connection
> is documented here
>
>   https://wiki.strongswan.org/projects/strongswan/wiki/Swima
>
> Best regards
>
> Andreas Steffen
>
> ======================================================================
> Andreas Steffen                         andreas.steffen@strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Networked Solutions
> HSR University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[INS-HSR]==
>
>
>
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm
>