Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 1f5aa8017f Revert "kernel-netlink: Never use XFRMA_REPLAY_ESN_VAL to configure zero replay windows" Tobias Brunner 2024-02-23 17:55:41 +01:00
• f566a85fcf Version bump to 5.9.14dr1 Andreas Steffen 2024-02-22 15:51:24 +01:00
• b7fdc10a3c Use Botan 3.3.0 for tests Tobias Brunner 2024-02-21 16:16:24 +01:00
• 4be75c5ab1 Merge branch 'android-managed-configurations' Tobias Brunner 2024-02-22 13:37:01 +01:00
• 7db629e4bc android: New release after adding support for managed configurations Tobias Brunner 2024-02-21 08:29:54 +01:00
• 51a5d96b36 android: Add translations for managed configuration strings Tobias Brunner 2024-01-30 18:57:43 +01:00
• 8c6b3019a7 android: Update managed certificates if config changes Markus Pfeiffer 2023-11-21 15:37:24 +01:00
• b0ba845e27 android: Add manager for managed user certificates Markus Pfeiffer 2023-11-21 15:37:24 +01:00
• aa06d75491 android: Add manager for managed trusted certificates Markus Pfeiffer 2023-11-21 15:37:24 +01:00
• 9cb23f650a android: Add utility class to determine differences in two lists of objects Markus Pfeiffer 2023-11-21 15:37:24 +01:00
• 97cb35afe5 android: Add repository for managed user certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 99dfa8cb0e android: Add repository for managed trusted certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• a04798a796 android: Add base repository for installed managed certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• cd67c30fd1 android: Add installer for managed user certificates/keys Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• fb302d967c android: Add installer for managed trusted certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• e2f505350e android: Add database migration for managed certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 6882f17741 android: Add trusted and user certificates to ManagedVpnProfile Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 9cbc03e84f android: Add entities for CA/server and user certificates Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 22bce57e4c android: Add utility that parses a PKCS#12 container and extracts a KeyPair Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 4ac9fc327e android: Add utility that converts a Base64 string to a X509Certificate Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• afcb56400e android: Add utility class that pairs a certificate with a private key Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 8a50651212 android: Add password for client certificate to managed config Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 9a917252e2 android: Provide global database helper instance Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 861ac0109a android: Extend database helper with table definition Markus Pfeiffer 2023-11-21 15:37:23 +01:00
• 802047cae8 android: Move database helper into separate class Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 42626c1dd8 android: Hide unmanaged profiles by default Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 0af501ef26 android: Disable access to settings depending on managed configuration Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• fe13782e3c android: Hide menu items depending on managed configuration Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 4bfeb3b000 android: Add data source for managed VPN profiles Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 8f04d15dfd android: Expose static instance for Application object Tobias Brunner 2024-01-19 18:29:20 +01:00
• 36f62585bb android: Expose managed configuration globally and notify listeners on changes Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 8796e9bb31 android: Add ManagedConfigurationService and related classes Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• c2007d5b09 android: Add managed_configuration.xml Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 01ea7b92bd android: Make VpnType#fromIdentifier null-safe Markus Pfeiffer 2023-11-21 15:37:24 +01:00
• a5167a69e0 android: Add data source to VpnProfile Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 5f9f279a33 android: Show warning message for read-only profiles in detail view Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• c9c65a94c9 android: Add label to read-only profiles in list Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• d3f5c3a760 android: Disable copy/delete for read-only profiles Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 150dc5ab64 android: Make selected apps read-only Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 3391f7a465 android: Prevent editing of read-only profiles Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 9618c83c03 android: Add read-only flag to VpnProfile Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 8e3b921abe android: Always use UUID to access profiles Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• d629e1d358 android: Fix version number on port column Markus Pfeiffer 2023-11-21 15:37:22 +01:00
• 7c8773dea5 android: Add interface for VPN data source Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• b687f0c22f android: Use try-with-resources for IO Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 73af77709a android: Remove unnecessary @TargetApi Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• a3e895b4d8 android: Remove unnecessary API checks Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• 5d192246e8 android: Remove AndroidX legacy support Markus Pfeiffer 2023-11-21 15:37:21 +01:00
• ff6b6b5b49 Add ._.DS_Store to .gitignore Markus Pfeiffer 2023-11-21 15:37:20 +01:00
• ad08ced8b2 pki: Added key and cert handles to --ocsp command Andreas Steffen 2024-02-07 07:55:10 +01:00
• 49769fff53 pkcs11: Support RSA-PSS signatures Andreas Steffen 2024-01-26 19:58:23 +01:00
• f739657aac pkcs11: Updated pkcs11.h header file based on OpenSC Andreas Steffen 2024-01-25 18:51:51 +01:00
• e56b597af1 openssl: Condition out unsupported curves for AWS-LC Gerardo Ravago 2024-02-20 11:54:01 -05:00
• 7f1ba3cc68 openssl: Add conditional macros around SHA_CTX for AWS-LC Gerardo Ravago 2024-02-15 10:42:36 -05:00
• a7493ab57d pf-handler: Always free the object even if no socket has been opened yet Tobias Brunner 2024-02-19 09:49:08 +01:00
• 187c72d1af dhcp: Port the plugin to FreeBSD/macOS Dan JamesandTobias Brunner 2023-11-24 10:54:04 -05:00
• 10a876d54c github: Use new property to pass token for sonarcloud Tobias Brunner 2024-02-16 14:48:44 +01:00
• b940ce25e9 Merge branch 'ref-overflows' Tobias Brunner 2024-02-16 14:04:45 +01:00
• 1a740bf3f3 child-sa: Handle refcount overflow for unique mark/if_id allocation gracefully Martin Willi 2024-02-16 10:59:11 +01:00
• dde40bcb9e child-sa: Move unique mark allocation to a separate helper function Martin Willi 2024-02-16 10:42:43 +01:00
• 4aac88fadd child-sa: Handle CHILD_SA unique identifier refcount overflow gracefully Martin Willi 2024-01-10 17:31:49 +01:00
• f634a3300c ike-sa: Handle IKE_SA unique identifier refcount overflow gracefully Martin Willi 2024-01-10 17:27:00 +01:00
• cdf865e0b8 kernel-netlink: Handle Netlink sequence number counter overflows gracefully Martin Willi 2024-01-10 16:54:17 +01:00
• 0cd46df377 atomics: Add a ref_get() variant returning non-zero on overflows Martin Willi 2024-01-10 16:38:54 +01:00
• 31f55ba6e9 openssl: Add missing error checking when encoding ED private key Gerardo Ravago 2024-02-13 10:24:33 -05:00
• e6176bf19c auth-cfg: Improve log message for identity constraint mismatch error Florian Bezannier 2024-02-01 16:43:35 +01:00
• 0d61efdf02 github: Use NDK version in build.gradle to build OpenSSL Tobias Brunner 2023-12-12 18:08:05 +01:00
• 980491ebcd android: Replace PowerMock with mechanism provided by newer Mockito versions Tobias Brunner 2023-12-12 19:41:47 +01:00
• 1cab544c75 android: Update Gradle plugin and build scripts and dependencies Tobias Brunner 2023-12-12 17:19:18 +01:00
• be832378db github: Also run tests on macOS 13 Tobias Brunner 2024-01-15 15:56:58 +01:00
• 2b74b63691 github: Increase timeout for process_t tests Tobias Brunner 2024-01-15 15:31:21 +01:00
• 798e25f313 github: Use newer gperf version on macOS Tobias Brunner 2024-01-15 15:14:46 +01:00
• fea02fb297 simaka-crypto: Fix constructor declaration Tobias Brunner 2024-01-15 13:51:19 +01:00
• cb139ce4b3 cirrus: Use FreeBSD 14.0 Tobias Brunner 2024-01-10 11:06:09 +01:00
• 52d6189892 unit-tests: Use function pointers to test generic return_* helper functions Tobias Brunner 2024-01-15 13:39:32 +01:00
• bf017a9d17 curl: Fix issue with printf checks in newer curl versions Tobias Brunner 2024-01-10 11:17:58 +01:00
• 67f0990530 Suppress compiler warnings with specific bison and compiler combinations Tobias Brunner 2024-01-10 18:04:32 +01:00
• 22fc539edd leak-detective: Add implementation of malloc_usable_size() Tobias Brunner 2024-01-08 16:05:20 +01:00
• f3578d3de8 Merge branch 'linux-strongswan' Tobias Brunner 2023-12-14 11:28:41 +01:00
• fff2996a22 ipsec: Remove mention of NETKEY stack Tobias Brunner 2023-12-14 11:27:25 +01:00
• 7550463d51 Replace some other mentions of "Linux strongSwan" Tobias Brunner 2023-12-14 11:23:22 +01:00
• 454069e094 ipsec: strongSwan is not exclusive to Linux kernels Jose Luis Duran 2023-12-09 18:42:27 +00:00
• c8ef91c786 Version bump to 5.9.13 Andreas Steffen 2023-12-01 07:26:22 +01:00
• 04794e703d Version bump to 5.9.13rc1 Andreas Steffen 2023-11-25 17:16:59 +01:00
• b4a9058b61 Merge branch 'ocsp-fixes' Tobias Brunner 2023-11-24 17:41:51 +01:00
• 9c4846cdbe x509: Make sure the status in OCSP responses has the correct length Tobias Brunner 2023-11-24 14:49:24 +01:00
• ebf5afcefa fuzz: Add fuzzing targets for OCSP requests/responses Tobias Brunner 2023-11-23 18:40:44 +01:00
• f3af1704d9 x509: Make length of nonces in OCSP requests configurable Tobias Brunner 2023-11-23 18:10:08 +01:00
• 945be4ece5 pki: Generate internal error OCSP response if no signer certificate is found Tobias Brunner 2023-11-23 17:54:40 +01:00
• 05a1f5b9c5 certificate-printer: Add some output for empty OCSP responses Tobias Brunner 2023-11-23 17:53:41 +01:00
• 6d345b3dde revocation: Reject OCSP error responses Tobias Brunner 2023-11-23 17:51:57 +01:00
• b3e66aca5c x509: Add getter for status of OCSP responses Tobias Brunner 2023-11-23 17:50:02 +01:00
• e7a58f46f9 x509: Correctly parse responderId as ASN.1 CHOICE in OCSP response Tobias Brunner 2023-11-23 16:52:55 +01:00
• 585c40095a x509: Correctly handle missing responder ID when parsing OCSP response errors Tobias Brunner 2023-11-23 11:32:15 +01:00
• da45cf9f38 cert-enroll: Set the environment variables needed by cert-install-ssl Andreas Steffen 2023-11-23 19:05:22 +01:00
• 11dbc8e7f2 Version bumpt to 5.9.12 Andreas Steffen 2023-11-20 12:10:34 +01:00
• 46aa264430 NEWS: Add info about CVE-2023-41913 Tobias Brunner 2023-11-15 14:23:56 +01:00
• 96d7937189 charon-tkm: Validate DH public key to fix potential buffer overflow Tobias Brunner 2023-07-11 12:12:25 +02:00
• 74ae71d2b8 x509: Ensure extensions are encoded even if others are missing Tobias Brunner 2023-11-15 17:08:46 +01:00
• ba08e01b86 x509: Also encode extendedKeyUsage in cert requests if there are no SANs or certificate type Tobias Brunner 2023-11-15 17:01:02 +01:00