Tobias Brunner
527b3f0ca5
Fixed some typos, courtesy of codespell
2017-11-15 10:21:13 +01:00
Tobias Brunner
c87b16d256
swanctl: Add check for conflicting short options
2017-11-13 10:09:41 +01:00
Tobias Brunner
f0c7cbd1d7
swanctl: Properly register --counters commmand
...
Use C instead of c, which is already used for --load-conns.
2017-11-13 09:45:14 +01:00
Andreas Steffen
859cb93d28
testing: Do not remove all swanctl subdirectories
2017-11-11 19:23:01 +01:00
Andreas Steffen
b20bf062e8
Version bump to 5.6.1rc1
2017-11-11 18:25:17 +01:00
Andreas Steffen
74f8ad7fd9
Merge branch 'swanctl-testing'
2017-11-11 16:42:38 +01:00
Andreas Steffen
7df35af7cc
libimcv: Updated imv database
2017-11-11 16:41:16 +01:00
Andreas Steffen
13a3f20f2e
testing: Converterd tnc to systemd
2017-11-11 16:41:16 +01:00
Andreas Steffen
323f0b05d7
testing: Converted sql to systemd
2017-11-11 16:41:15 +01:00
Andreas Steffen
70dc5bb8ad
testing: Converted swanctl to systemd
2017-11-11 16:41:15 +01:00
Andreas Steffen
65f74cd13d
testing: Added legacy ipv6-stroke scenarios
2017-11-11 16:41:15 +01:00
Andreas Steffen
4402013f05
testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:51 +01:00
Andreas Steffen
b3ccfcd05e
testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
da5aa6ae6a
testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
12dbca721e
testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
f0476c4a82
testing: Converted ipv6/rw-rfc3779-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
96d7d9392f
testing: Converted ipv6/rw-compress-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen
34acd584e5
testing: Converted ipv6/rw-psk-ikev2 to swanctl
2017-11-10 11:49:49 +01:00
Andreas Steffen
0770b37f8f
testing: Converted ipv6/rw-psk-ikev1 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
ffe0d82c03
testing: Converted ipv6/rw-ikev2 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
a96238a0d0
testing: Converted ipv6/rw-ikev1 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
8215681a4a
testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctl
2017-11-10 11:49:41 +01:00
Andreas Steffen
04b79bc98c
testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
fd3f6871c9
testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
f57ca13e28
testing: Converted ipv6/transport-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
4ae1f7c0e3
testing: Converted ipv6/transport-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
7812b6e6cf
testing: Converted ipv6/net2net-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
e94db2b4ad
testing: Converted ipv6/net2net-ikev1 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
47ec3326e7
testing: Converted ipv6/host2host-ikev2 to swanctl
2017-11-10 11:49:40 +01:00
Andreas Steffen
087b027f88
testing: Converted ipv6/host2host-ikev1 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
0a6f8644ef
testing: Removed libipsec/rw-suite-b
2017-11-10 11:49:39 +01:00
Andreas Steffen
9375c9c9db
testing: Converted libipsec/net2net-null to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
86d1b7a14d
testing: Converted libipsec/net2net-cert-ipv6 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
c3b8778fc9
testing: Converted libipsec/net2net-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
de42a67b79
testing: Converted libipsec/net2net-3des to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
6922d5e56a
testing: Converted libipsec/host2host-cert to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
3659fda1a5
testing: Converted gcrypt-ikev2 to swanctl
2017-11-10 11:49:39 +01:00
Andreas Steffen
b46deb8107
testing: Converted gcrypt-ikev1 to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
88a950d915
testing: Converted af-alg to systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
67a97c18ae
testing: Enable systemd
2017-11-10 11:49:38 +01:00
Andreas Steffen
804784cc1c
testing: Updated some descriptions
2017-11-10 11:49:38 +01:00
Andreas Steffen
0d63255513
libtpmtss: Added missing argument in hasher_from_signature_scheme()
2017-11-10 11:47:27 +01:00
Tobias Brunner
291b02262d
charon-tkm: Unlink PID file after deinit
...
Same change as for charon in the previous commit.
References #2460 .
2017-11-10 10:56:13 +01:00
Tobias Brunner
1b4d97dbb7
charon: Unlink PID file after daemon deinit (i.e. after unloading plugins etc.)
...
Make sure, though, that we only remove the file if we actually
created it (e.g. not for --help or --version). And do so before
deinitializing libstrongswan due to leak detective.
Fixes #2460 .
2017-11-10 10:55:43 +01:00
Thomas Egerer
9cc61baaf5
unit-tests: Rename targets for libstrongswan and kernel-netlink
...
libstrongswan and kernel-netlink are the only two components which do
not adhere to the naming scheme used for all other tests. If the tests
are run by an external application this imposes problems due to clashing
names.
Signed-off-by: Thomas Egerer <[email protected]
2017-11-09 09:11:42 +01:00
Tobias Brunner
1c4b392a5b
Merge branch 'rsassa-pss'
...
This adds support for RSASSA-PSS signatures in IKEv2 digital signature
authentication (RFC 7427), certificates and CRLs etc., and when signing
credentials via pki tool. For interoperability with older versions, the
default is to use classic PKCS#1 signatures. To use PSS padding either enable
rsa_pss via strongswan.conf or explicitly use it either via ike:rsa/pss...
auth token or the --rsa-padding option of the pki tool.
References #2427 .
2017-11-08 16:53:35 +01:00
Tobias Brunner
fde0c763b6
auth-cfg: Add RSA/PSS schemes for pubkey and rsa if enabled in strongswan.conf
...
Also document the rsa/pss prefix.
2017-11-08 16:48:10 +01:00
Tobias Brunner
27a79326c7
pki: Enable PSS padding if enabled in strongswan.conf
2017-11-08 16:48:10 +01:00
Tobias Brunner
d57af8dde0
pki: Optionally generate RSA/PSS signatures
2017-11-08 16:48:10 +01:00
Tobias Brunner
9b828ee85f
pki: Indent usage lines properly automatically
2017-11-08 16:48:10 +01:00
Tobias Brunner