Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 22550bd262 transform: Add additional key exchange transform types Tobias Brunner 2019-10-25 14:20:59 +02:00
• a7f617ab33 kernel-pfkey: Fix list of extension type names on FreeBSD Tobias Brunner 2024-07-29 14:36:32 +02:00
• abdc7878a4 Merge branch 'sa-dir' Tobias Brunner 2024-08-07 14:59:55 +02:00
• 22eded1da4 kernel-netlink: Set replay window 0 if kernel supports SA direction attribute Tobias Brunner 2024-04-30 15:12:22 +02:00
• 661f6bd0ad kernel-netlink: Add SA direction attribute Tobias Brunner 2024-04-30 11:39:00 +02:00
• 2601fabbb4 kernel-netlink: Only disable DF-flag copying on outbound SAs Tobias Brunner 2024-04-30 15:11:12 +02:00
• dc8fa1b3e8 kernel-netlink: Add missing names for XFRM message types and attributes Tobias Brunner 2024-05-07 10:07:17 +02:00
• b05628dd2d include: Update XFRM header for SA direction attribute Tobias Brunner 2024-04-30 11:09:41 +02:00
• 84bd011752 ike-sa: Add address family specific configuration of fragment size Thomas Egerer 2024-08-02 11:47:13 +00:00
• 9b9cf2001f android: Fix import of an already existing VPN profile Tobias Brunner 2024-08-07 08:58:12 +02:00
• 740cbb2c0a Merge branch 'android-14' Tobias Brunner 2024-08-06 18:02:18 +02:00
• fe1c9dedb7 android: New release after updating target SDK and fixing some compatibility issues Tobias Brunner 2024-08-05 14:52:30 +02:00
• 6064209872 android: Increase targetSdkVersion to 34 (Android 14) Tobias Brunner 2024-08-05 14:31:32 +02:00
• 880e273985 android: Avoid using deprecated ViewCompat methods Tobias Brunner 2024-08-05 14:16:51 +02:00
• 01c81ca15f android: Replace deprecated Observer/Observable with PropertyChangeListener etc. Tobias Brunner 2024-08-05 11:51:40 +02:00
• 51f746161d android: Add workaround for a bug preventing background service starts from TileService Tobias Brunner 2024-08-05 11:02:49 +02:00
• 3286f75ffe android: Use PendingIntent-version of startActivityAndCollapse() Tobias Brunner 2024-08-05 10:47:10 +02:00
• 38160c5cb7 android: Explicitly mark receiver as not exported during registration Tobias Brunner 2024-08-05 10:35:05 +02:00
• 9c4ceced1c android: Declare foreground service type for VpnService instance Tobias Brunner 2024-07-30 15:18:22 +02:00
• 4f2e65f3d0 android: Fix label for name field in managed profiles Tobias Brunner 2024-08-05 14:39:17 +02:00
• 81041b55d2 android: Fix crash when opening list of apps for new profiles Tobias Brunner 2024-08-05 11:16:39 +02:00
• 8a14c20ec7 android: Update dependencies Tobias Brunner 2024-07-16 16:36:36 +02:00
• 7b78e35ff6 android: Update Gradle plugin Tobias Brunner 2024-07-16 10:59:06 +02:00
• bed04baf21 init: Add Wants= dependencies to systemd units Matteo Carnelos 2024-06-06 15:54:11 +02:00
• 59a4c9c416 ike-auth: Default IDi/IDr to subject DN instead of IP if a certificate is available Tobias Brunner 2024-07-17 15:31:51 +02:00
• e9a7c9822d ike-sa: Assign function pointers for mediation extension separately Tobias Brunner 2024-07-26 18:07:23 +02:00
• 72f9a21b22 Merge branch 'vici-reload-actions' Tobias Brunner 2024-07-30 10:26:21 +02:00
• 56b6eeb385 testing: Add ikev2/start-action-start scenario Tobias Brunner 2024-07-26 16:56:32 +02:00
• 7bfaa9acb6 vici: Improve handling of start action when reloading configs Tobias Brunner 2024-07-04 16:17:43 +02:00
• da00a04f60 ike-sa-manager: Avoid initiating CHILD_SAs on IKE_SAs with queued DELETE Tobias Brunner 2024-07-04 14:43:37 +02:00
• 07ce6b44c5 testing: Enable IPv6 guest-to-guest communication Tobias Brunner 2024-07-04 18:23:03 +02:00
• 0602ed1043 unit-tests: Fix compiler warning with empty message assertion Tobias Brunner 2024-07-15 16:55:29 +02:00
• 6eec5cc07d daemon: Use correct argument order for calloc() to fix compiler warning Tobias Brunner 2024-07-12 14:00:15 +02:00
• 574bfad1c0 backtrace: Fix compiler warning on Windows Tobias Brunner 2024-07-12 10:24:35 +02:00
• d759bd9efa Use wolfSSL 5.7.2 for tests Tobias Brunner 2024-07-11 15:57:12 +02:00
• c4bce2b79b testing: Enable mgf1 plugin for scenarios where FreeRADIUS uses PSS signatures Tobias Brunner 2024-06-26 14:49:34 +02:00
• a9ced3ccb4 testing: Fix IP pool scenarios after changing base address Tobias Brunner 2024-06-26 10:12:16 +02:00
• dd256e730d testing: Enable error code checks for load-testconfig Maxim Uvarov 2024-06-24 17:05:20 +03:00
• d8c6fa3b9a testing: Enable sftp subsystem in default sshd_config Maxim Uvarov 2024-06-24 16:51:51 +03:00
• 710973f0b0 cirrus: Use FreeBSD 13.3 and 14.1 Tobias Brunner 2024-06-18 16:25:08 +02:00
• d02aea9c2c quick-mode: Get a reference when adopting the reqid of a rekeyed CHILD_SA Tobias Brunner 2024-06-13 15:51:46 +02:00
• 2b11764b70 mem-pool: Adjust the base address if it's the network ID Tobias Brunner 2024-05-28 09:41:29 +02:00
• 1cbcf198ab testing: Make RADIUS server enforce client identity in certificate's CN Tobias Brunner 2024-05-16 16:34:02 +02:00
• dc1085734f testing: Remove unnecessary FreeRADIUS dh_file option as recommended in the log Tobias Brunner 2024-05-02 16:00:53 +02:00
• 49cb7b016f charon-nm: Use a different routing table than the regular IKE daemon Tobias Brunner 2024-05-03 15:31:27 +02:00
• 59587783ff cirrus: Explicitly install tpm2-tss-sys package on Alpine Tobias Brunner 2024-05-27 14:08:08 +02:00
• fc6556fd18 github: Use AWS-LC 1.28.0 for tests Tobias Brunner 2024-05-27 10:42:18 +02:00
• 8e88d56206 x509: Encode challenge passwords as PrintableString if possible Tobias Brunner 2024-04-30 16:46:34 +02:00
• f8c6ff1fc1 streams: Add ability to listen on any VSOCK CID Tobias Brunner 2024-05-01 14:50:16 +02:00
• 3d7d527ad9 streams: Add support for AF_VSOCK sockets on Linux Thomas Egerer 2024-04-30 14:20:57 +02:00
• 9228a5109b ike-cfg: Consider port information in IKE config match Thomas Egerer 2024-04-12 15:07:21 +00:00
• 287ef047a9 github: Use tpm2-tss 3.2.3 for tests Tobias Brunner 2024-04-29 16:10:39 +02:00
• 059249bae7 configure: Enable counters plugin also if vici is enabled but stroke is disabled Tobias Brunner 2024-04-18 08:59:18 +02:00
• f8e6fd30de gitignore: Don't ignore proposal_keywords.c Tobias Brunner 2024-04-15 18:29:42 +02:00
• 5f99a28381 mem-pool: Reject the creation of unintentionally empty pools Tobias Brunner 2024-04-12 14:14:11 +02:00
• afeac365fd swanctl: Document possibility of non-zero base addresses for in-memory pools Tobias Brunner 2024-04-12 14:01:23 +02:00
• 907079bd13 Use AWS-LC 1.24.0 for tests Tobias Brunner 2024-04-12 14:59:32 +02:00
• 3a20170324 github: Don't search for coverage results Tobias Brunner 2024-04-04 14:14:29 +02:00
• 75c5c5667d github: Update coverage data upload to Codecov Tobias Brunner 2024-02-27 11:07:06 +01:00
• 9c208c4e46 Merge branch 'openwrt-fixes' Tobias Brunner 2024-04-03 11:28:24 +02:00
• e5bc3a50f6 wolfssl: Avoid conflict with RNG when built without EdDSA or FIPS enabled Philip Prindeville 2024-03-27 17:41:18 -06:00
• 1b19053919 uci: Upstream patch to adapt to option datatype abstraction Noel Kuntze 2024-03-25 11:22:30 -06:00
• b73a476c1f cirrus: Add build on Alpine Linux with musl C library Tobias Brunner 2024-03-27 10:48:48 +01:00
• 56f4b2096a sha3: Fix Keccak when compiled with GCC 13.x Tobias Brunner 2024-03-28 11:51:15 +01:00
• ac713746c9 unit-tests: Adhere to TESTS_NO_IPV6 in HTTP fetcher test suite Tobias Brunner 2024-03-28 07:46:17 +01:00
• 9ac6c469a5 bliss: Fix build with built-in printf-specifiers Tobias Brunner 2024-03-27 16:26:48 +01:00
• 84166508f8 Use wolfSSL 5.7.0 for tests Tobias Brunner 2024-03-22 11:43:39 +01:00
• 540881627f farp: Fix build with musl C library Tobias Brunner 2024-03-22 10:42:34 +01:00
• f5b1ca4ef6 pf-handler: Fix build with musl C library Tobias Brunner 2024-03-22 09:57:07 +01:00
• f3c8e02c69 ike-sa-manager: Unlock mutex if allocating SPI fails to avoid lock contention Thomas Egerer 2024-03-20 10:11:17 +00:00
• dea8493f3a Version bump to 5.9.14 Andreas Steffen 2024-03-19 11:56:44 +01:00
• 470ead96ea github: Use AWS-LC 1.23.0 for tests Tobias Brunner 2024-03-18 08:01:18 +01:00
• c3f8642e72 save-keys: Fix Wireshark algorithm identifier for 3DES Wataru Ashihara 2023-11-25 19:32:20 +09:00
• 9acd90575a ike-cfg: Change how OCSP certificate requests are enabled Tobias Brunner 2024-03-15 14:40:30 +01:00
• cfc7be004d peer-cfg: Renumber ocsp_policy_t values so the same default applies for all backends Tobias Brunner 2024-03-15 14:37:53 +01:00
• a2ace8a6bb kernel-pfroute: Log ignored interfaces when listing known interfaces Tobias Brunner 2024-03-15 13:47:23 +01:00
• e9df6f5c3d kernel-netlink: Log ignored interfaces when listing known interfaces Tobias Brunner 2024-03-15 13:45:08 +01:00
• dad4624756 NEWS: Add news for 5.9.14 Tobias Brunner 2024-03-14 17:06:08 +01:00
• b2f957f5f1 pkcs11: Fix cleanup when verifying signature fails because scheme isn't supported Tobias Brunner 2024-03-14 13:56:21 +01:00
• c035e4ca93 smp: Make code that encodes identities more readable Tobias Brunner 2024-03-14 13:51:06 +01:00
• 91f209b878 Version bump to 5.9.14rc1 Andreas Steffen 2024-03-13 20:24:54 +01:00
• 500207e35c systime-fix: Fix declaration of validator constructor Tobias Brunner 2024-03-13 16:17:44 +01:00
• 6628c523c2 unit-tests: Point out if ECDSA public key was rejected after private keys was not Tobias Brunner 2024-03-13 15:34:48 +01:00
• 6f8275abab testing: Added RFC4806 tests Andreas Steffen 2024-03-08 17:15:35 +01:00
• 15612b3a42 Add support for IKEv2 OCSP extensions (RFC 4806) Jean-François HrenandTobias Brunner 2023-11-29 16:51:48 +01:00
• ddd926b698 Merge branch 'name-constraints' Tobias Brunner 2024-03-13 15:05:14 +01:00
• b29be6029e constraints: Properly validate name constraints according to RFC 5280 Tobias Brunner 2024-02-23 17:44:44 +01:00
• ea6a6344d3 identification: Add support to match subnets/ranges against each other Tobias Brunner 2024-02-23 16:19:19 +01:00
• bb67838c53 configure: Load constraints plugin in pki Tobias Brunner 2024-02-23 11:18:11 +01:00
• 1301c762d4 github: Add AWS-LC CI job Gerardo Ravago 2024-02-22 13:47:58 -05:00
• fac42f7168 starter: Use correct type for uniqueids field Etay Bogner 2024-03-07 00:40:51 +02:00
• 8237968c2c leak-detective: Add whitelist entries for AWS-LC Gerardo Ravago 2024-03-06 10:45:00 -05:00
• 44e241fccc openssl: Handle BoringSSL-style ASN1_INTEGERs in cert serials Gerardo Ravago 2024-03-04 10:25:12 -05:00
• 06afb5f109 cert-enroll: add init.d support to cert-install-sssd Andreas Steffen 2024-03-03 17:12:48 +01:00
• f994e0a428 utils: Define ignore_result() so it requires a semicolon Tobias Brunner 2024-02-29 16:02:28 +01:00
• 6dee8587f0 Remove obvious empty statements (i.e. stray semicolons) Tobias Brunner 2024-02-29 15:10:59 +01:00
• 9d1f325a77 github: Update GitHub-provided actions for Node.js update Tobias Brunner 2024-02-28 15:21:29 +01:00
• a380dc4989 utils: Define DESTROY_*_IF() macros without terminating semicolon Tobias Brunner 2024-02-28 14:40:56 +01:00
• b21178b43c android: New release after adding fix for existing shortcuts/Intents Tobias Brunner 2024-02-26 11:14:14 +01:00
• 45371da846 android: Add fallback for the old name of the profile ID extra Tobias Brunner 2024-02-26 11:01:55 +01:00