Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• ed05a1a3b7 'signal' is a keyword in MySQL 5.5 Tobias Brunner 2012-11-06 14:23:56 +01:00
• dad76a5828 fixed debug output Andreas Steffen 2012-11-05 21:56:49 +01:00
• d78c869cff eliminate deinstalled packages Andreas Steffen 2012-11-05 21:40:19 +01:00
• a08fc61ea3 check installed packages in OS database Andreas Steffen 2012-11-05 21:00:56 +01:00
• 68cf283cd3 Define and use an OS enumeration type Andreas Steffen 2012-11-05 14:48:43 +01:00
• 7b0330d285 check if assessment has already been done Andreas Steffen 2012-11-05 14:46:50 +01:00
• 5e8987689a compute the optimum Installed Packages attribute size Andreas Steffen 2012-11-05 12:13:13 +01:00
• 6ac6dbd3fb Added ITA Start/Stop Angel attributes to split bulk data into multiple attributes Andreas Steffen 2012-11-05 10:24:12 +01:00
• 3b057d66cf enumerate over installed Debian/Ubuntu packages Andreas Steffen 2012-11-04 23:54:36 +01:00
• 9d41e0f362 debug output in lower case letters Andreas Steffen 2012-11-04 23:52:34 +01:00
• 3867eaab89 added second index Andreas Steffen 2012-11-04 23:51:04 +01:00
• 9074186345 add generation time to package versions Andreas Steffen 2012-11-04 18:55:37 +01:00
• 60e26e0f63 extract generation time of packages file Andreas Steffen 2012-11-04 17:27:55 +01:00
• 113db9b9e0 added pacman to .gitignore Andreas Steffen 2012-11-04 15:57:36 +01:00
• b5c2a27098 store packages with security issues and their optional updates only Andreas Steffen 2012-11-04 15:42:31 +01:00
• d79ec8e911 created pacman - an Ubuntu/Debian package manager Andreas Steffen 2012-11-04 09:25:31 +01:00
• d598f2db75 added generation time to package versions Andreas Steffen 2012-11-04 17:47:06 +01:00
• 1bb6a086a5 added package management to ipsec attest Andreas Steffen 2012-11-02 23:16:54 +01:00
• acb300f920 android: Use proper intent-filter for our VpnService Tobias Brunner 2012-11-02 15:55:08 +01:00
• 214c081dd6 Log sent vendor IDs for IKEv1 Tobias Brunner 2012-11-02 15:40:32 +01:00
• 531f32d62a Compiler warning fixed Tobias Brunner 2012-11-02 15:39:51 +01:00
• 8128f255f4 check if setting exists Andreas Steffen 2012-11-01 19:26:29 +01:00
• efe0d5478f implemented ITA Get Settings and ITA Settings attributes Andreas Steffen 2012-11-01 18:00:40 +01:00
• b3d66a8dc5 some improvements in tcg_pts_attr_file_meas.c Andreas Steffen 2012-11-01 17:59:54 +01:00
• b1a2ebb686 use countof() Andreas Steffen 2012-11-01 09:02:58 +01:00
• ffd3556bad scanner imc/imv pair uses IETF VPN PA-TNC message subtype Andreas Steffen 2012-10-31 21:58:21 +01:00
• 9901207a09 transmit Product Vendor ID if known Andreas Steffen 2012-10-31 20:29:36 +01:00
• 3e765dad95 added some Linux OS PENs Andreas Steffen 2012-10-31 14:52:46 +01:00
• 6e8f88dba3 Exclude dynamic TS from Unity Split-Include attributes Martin Willi 2012-10-30 09:14:44 +01:00
• 3689f0f6cc FQDNs are actually not resolved when loading secrets Tobias Brunner 2012-10-29 10:06:43 +01:00
• f30962de74 Fixed log message when no shared secret is found during IKEv1 Main Mode Tobias Brunner 2012-10-29 10:01:46 +01:00
• bbd454a467 version bump to 5.0.2dr3 Andreas Steffen 2012-10-28 08:21:02 +01:00
• 12d68762f7 issue warning if sqlite finalize is missing Andreas Steffen 2012-10-26 13:22:02 +02:00
• 2380f3a830 Added documentation for NTLM secrets Tobias Brunner 2012-10-25 09:51:47 +02:00
• 828cefc313 Fix RSA encryption padding terminator in gmp plugin, broken with 5025135f Martin Willi 2012-10-24 20:15:50 +02:00
• e34573dd48 Added missing noskip_flag setter/getter to some pa_tnc_attr_t constructors Tobias Brunner 2012-10-24 17:57:19 +02:00
• 2fc0232a39 Add a scepclient option to specify a CA identifier to fetch certs for Martin Willi 2012-10-24 16:28:17 +02:00
• f48e727232 Remove all ESP proposals with non-matching DH group during Quick Mode Tobias Brunner 2012-10-18 18:09:16 +02:00
• 4eba7269b8 proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove all Tobias Brunner 2012-10-18 17:15:32 +02:00
• e74f184cb4 Remove MODP groups from default ESP proposal Tobias Brunner 2012-10-18 16:38:22 +02:00
• bca34c3717 Moved utils.[ch] to utils folder Tobias Brunner 2012-10-16 16:17:57 +02:00
• f9625952ad Moved settings_t to utils folder Tobias Brunner 2012-10-16 16:08:43 +02:00
• f05b427265 Moved debug.[ch] to utils folder Tobias Brunner 2012-10-16 16:03:21 +02:00
• d5c143e5be Moved enum_name_t to utils folder Tobias Brunner 2012-10-16 15:58:19 +02:00
• 125b37af6d Moved chunk_t to utils folder Tobias Brunner 2012-10-16 15:53:49 +02:00
• 05e448c5cc Moved printf hooks to utils folder Tobias Brunner 2012-10-16 15:44:58 +02:00
• 08944b68ac Moved integrity_checker_t to utils folder Tobias Brunner 2012-10-16 15:39:26 +02:00
• 12642a6831 Moved data structures to new collections subfolder Tobias Brunner 2012-10-16 14:54:16 +02:00
• fdee6b5f5a Moved packet_t and tun_device_t to networking folder Tobias Brunner 2012-10-16 14:33:28 +02:00
• 2e7cc07ecd Moved host_t and host_resolver_t to a new networking subfolder Tobias Brunner 2012-10-16 14:29:18 +02:00
• c4894cc172 Send certificate requests in load-tester Martin Willi 2012-10-19 15:51:55 +02:00
• 0f3c5f8502 Add load-tester traffic selector configuration options Martin Willi 2012-10-18 11:32:52 +02:00
• 1efd6c6f2a Make use of new CIDR string ts constructor where appropriate Martin Willi 2012-10-18 11:23:30 +02:00
• fd6c0c8fb4 Add a traffic selector constructor creating a TS directly from a CIDR string Martin Willi 2012-10-18 10:52:42 +02:00
• 8fc7bbc6ba Add NEWS about explicitly loaded pkcs11 certificates from ipsec.conf Martin Willi 2012-10-24 13:16:39 +02:00
• 712e81306f PKCS#11 library search using keyid uses a fallback to look for certificates Martin Willi 2012-10-24 11:13:07 +02:00
• aa51d5dd25 Increase the limit of acceptable IKEv1 CERTREQ payloads to 20 Martin Willi 2012-10-24 11:01:26 +02:00
• 4ce55ffb0b Use explicit, larger buffer sizes for smartcard keyids and modules Martin Willi 2012-10-24 10:54:04 +02:00
• cd844e1c97 Remove obsolete pluto smartcard syntax in ipsec.secrets.5 Martin Willi 2012-10-17 15:53:44 +02:00
• f6d8fb3687 Updated ipsec.conf.5 regarding (CA) certificates loaded from smartcards Martin Willi 2012-10-17 15:50:01 +02:00
• 434902b302 Add a strongswan.conf option to disable loading of all certificates from a pkcs11 module Martin Willi 2012-10-17 15:55:42 +02:00
• 794d713dca Support loading cacert certificates in ipsec.conf ca sections from smartcard Martin Willi 2012-10-17 15:55:36 +02:00
• 2abe404927 Refactored stroke smartcard token parsing, support module and slot in leftcert option Martin Willi 2012-10-17 15:36:45 +02:00
• 36e47a409b Explicit pkcs11 certificate loading can enforce a module and a slot Martin Willi 2012-10-17 14:21:06 +02:00
• 5d4c27d077 Be less verbose if loading PKCS#11 certificate fails Martin Willi 2012-10-15 18:26:26 +02:00
• 05e266ea9d Add leftcert ipsec.conf.5 documentation about smartcard certificates Martin Willi 2012-10-15 18:14:03 +02:00
• 9687cb5100 Load ipsec.conf %smartcard leftcerts with pkcs11 builder Martin Willi 2012-10-15 17:54:00 +02:00
• fbd3863571 Add a builder to load specific pkcs11 certificates by keyid Martin Willi 2012-10-15 17:53:21 +02:00
• ffe42fa405 If no pkcs11 public key for a private key found, search for a certificate Martin Willi 2012-10-15 14:05:14 +02:00
• 44fdc62f82 Move pkcs11 public key lookup function declaration to header file Martin Willi 2012-10-15 14:04:42 +02:00
• 6910e5c753 Add NEWS about proposals with PRFs different from integrity protection algorithms Martin Willi 2012-10-24 11:52:59 +02:00
• 5b2e669ba2 Add ipsec.conf.5 documentation for explicit PRFs in IKE proposals Martin Willi 2012-10-10 14:17:43 +02:00
• 7ee16e4b85 Only add an implicit PRF based on the MAC alg if no PRF given in proposal Martin Willi 2012-10-10 13:36:16 +02:00
• 60e59b7e7f Add proposal keywords to explicitly specify PRF algorithms Martin Willi 2012-10-10 13:35:37 +02:00
• 343e998927 Added NEWS about lookip plugin Martin Willi 2012-10-24 11:47:18 +02:00
• a7f5eb1035 Add an interactive mode in lookip tool, demonstrate lasting connections Martin Willi 2012-10-09 11:36:17 +02:00
• 9d422bb1b0 Send a lookip NOT_FOUND reply if a lookup yields no results Martin Willi 2012-10-09 11:16:07 +02:00
• f6fb2b98e9 lookup function of lookip listener returns the number of matches Martin Willi 2012-10-09 11:05:19 +02:00
• 31576ceddf Handle multiple lookip connections using a single FDSET Martin Willi 2012-10-09 10:03:15 +02:00
• 28683ef137 Renamed list to store listening lookip clients Martin Willi 2012-10-09 09:33:15 +02:00
• bae50c7393 Handle client subscriptions in lookip plugin Martin Willi 2012-10-04 16:14:10 +02:00
• 7650dd9a4f Add a lookip server side UNIX socket processing LOOKUP and DUMP requests Martin Willi 2012-10-04 15:39:26 +02:00
• d59e6db614 Add a simple command line utility to query the lookip plugin Martin Willi 2012-10-04 14:49:10 +02:00
• 7877c463ea Defined on-the-wire format used on lookip socket Martin Willi 2012-10-03 18:08:38 +02:00
• 1edaa79c06 Add a lookip function to register virtual IP notification listeners Martin Willi 2012-10-03 17:42:19 +02:00
• 9c54b445e2 Add a lookup method to lookip plugin, using a callback to invoke Martin Willi 2012-10-03 17:13:37 +02:00
• 2caa27d42e Add a lookip listener that collects the information we are interested in Martin Willi 2012-10-03 16:58:37 +02:00
• e0d7c1eda7 Add a lookip plugin stub to lookup connections by virtual IP Martin Willi 2012-10-03 16:25:36 +02:00
• a19d591388 Add NEWS about stroke counters Martin Willi 2012-10-24 11:38:24 +02:00
• 3202f4a381 Add "listcounters" command to ipsec.8 manpage Martin Willi 2012-10-08 15:38:02 +02:00
• 0c4b9f7cda Add a "ipsec listcounters" command to stroke Martin Willi 2012-10-08 12:36:08 +02:00
• f9332e0a8b Add a print method for stroke counters Martin Willi 2012-10-08 11:59:20 +02:00
• 2232d88569 Support field with specifiers in %N printf hook Martin Willi 2012-10-08 12:35:44 +02:00
• fc4d1568d1 Add stroke message type counters Martin Willi 2012-10-08 11:49:12 +02:00
• 5715af7508 Add stroke counters for invalid IKE messages Martin Willi 2012-10-08 11:36:07 +02:00
• 81e0e10344 Add stroke CHILD_SA rekeying counter Martin Willi 2012-10-08 11:32:44 +02:00
• a32a8d4a67 Add stroke IKE rekey counters Martin Willi 2012-10-08 11:31:18 +02:00
• 418f4bc7a5 Raise a bus alert when IKE message body parsing fails Martin Willi 2012-10-08 11:19:54 +02:00
• 2b95ab7620 Raise a bus alert when IKE message header parsing fails Martin Willi 2012-10-08 11:15:09 +02:00
• f6f16131d0 Raise a bus alert when a received message contains unknown SPIs Martin Willi 2012-10-08 11:09:31 +02:00