Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• e9fcf1c6cc Fix IKE_SA timeout debug output on 64bit platforms Martin Willi 2012-02-21 14:05:11 +01:00
• 0808d60ebf maemo: New upstream release. Tobias Brunner 2012-02-27 18:15:51 +01:00
• 686cfd4e34 Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. Tobias Brunner 2012-02-27 14:31:19 +01:00
• 3a2660f189 Encode IPv6 virtual IPs in a Framed-IPv6-Prefix attribute Martin Willi 2012-02-24 11:15:11 +01:00
• d15ae70c8c Refactored construction of RADIUS accounting messages Martin Willi 2012-02-24 11:12:18 +01:00
• d93f204ca5 Include port numbers in Calling-Station-Id, too Martin Willi 2012-02-24 10:48:54 +01:00
• 802ed08dff Use large enough buffers for IPv6 addresses in Calling-Station-Id Martin Willi 2012-02-24 10:13:08 +01:00
• 434cdbac09 Send client external address as Calling-Station-Id in RADIUS accounting Martin Willi 2012-02-24 10:04:31 +01:00
• f3d6b9c88c added missing x character Andreas Steffen 2012-02-21 16:29:35 +01:00
• e4f554404e handle case where subject = NULL but keyid is set Andreas Steffen 2012-02-20 12:12:31 +01:00
• 81ce0cf67e libtnccs is required by the eap_tnc plugin Andreas Steffen 2012-02-20 09:04:02 +01:00
• f8b1b32768 charon does not depend on libtncif any more but tnc_tnccs does Andreas Steffen 2012-02-20 08:00:48 +01:00
• 05f421b7d3 build libstrongswan if libimcv is built Andreas Steffen 2012-02-16 23:28:38 +01:00
• a54cf814e6 version bump to 4.6.2 Andreas Steffen 2012-02-16 00:10:36 +01:00
• 1b9c613b77 fixed attest sql query in list_measurements() Andreas Steffen 2012-02-15 23:13:05 +01:00
• a190ec0ac5 Compiler warnings fixed. Tobias Brunner 2012-02-14 16:09:44 +01:00
• 0f7d381cfe pluto: Print expiry time more properly. Tobias Brunner 2012-02-14 09:34:48 +01:00
• 7efde9011e pluto: Drop support for legacy PSK format. Tobias Brunner 2012-02-08 13:36:32 +01:00
• e01751035e completed imc/imv-attestation settings Andreas Steffen 2012-02-07 22:11:51 +01:00
• 2af22e1135 adapted debug output check in openssl-ikev2/rw-eap-tls-only scenario Andreas Steffen 2012-02-07 20:31:09 +01:00
• ae10ee6d0b Double check if a cached suite is available, overwrite any old suite state Martin Willi 2012-02-07 11:41:56 +01:00
• b96eb46d5c Some Doxygen fixes. Tobias Brunner 2012-02-07 11:20:46 +01:00
• 06c150365d Fix TLS EAP-MSK derivation, uses different order of randoms than key expansion Martin Willi 2012-02-07 10:50:02 +01:00
• 1dabf5bfc7 Filter TLS suite MAC by HMAC algorithm, as the hash is not necessarily the same Martin Willi 2012-02-07 09:37:51 +01:00
• 269e487567 open RADIUS accounting port in firewall Andreas Steffen 2012-02-06 20:45:21 +01:00
• 9755910d7f added ikev2/rw-radius-accounting scenario Andreas Steffen 2012-02-06 12:52:48 +01:00
• 32dc2b0243 Update usage for all children in RADIUS accounting just before sending Stop Martin Willi 2012-02-06 10:26:24 +01:00
• e5747e7a83 Check if ClusterIP directory could be opened before enumerating it Martin Willi 2012-02-03 12:55:55 +01:00
• b3cbc53893 version bump to 4.6.2rc1 Andreas Steffen 2012-02-05 22:24:56 +01:00
• a74fab640a ipsec attest adds and deletes key/component pairs Andreas Steffen 2012-02-05 22:23:45 +01:00
• 32aee74c73 check if TNC client has a valid and registered AIK Andreas Steffen 2012-02-05 19:37:58 +01:00
• de4a0c8376 reformulated some NEWS entries Andreas Steffen 2012-02-03 16:13:34 +01:00
• 48bf8ce9bd added openssl-ikev2/ecdsa-pkcs8 scenario Andreas Steffen 2012-02-03 11:44:04 +01:00
• 6b4e0dd504 added ikev2/rw-pkcs8 scenario Andreas Steffen 2012-02-03 11:10:13 +01:00
• 2a77a27213 version bump to 4.6.2dr4 Andreas Steffen 2012-02-02 18:26:12 +01:00
• 85dd6a8deb Trigger DPD not before IKE_SA state gets updated Martin Willi 2012-02-02 10:33:40 +01:00
• 916cdca851 Don't retransmit, rekey, reauth or DPD check SAs when in PASSIVE state Martin Willi 2012-01-10 13:32:06 +01:00
• dcefa26787 Moved and clarified NEWS about PKCS#8 plugin. Tobias Brunner 2012-02-01 18:32:28 +01:00
• e81260d426 Moved log message for unexpected ASN.1 objects to level 2. Tobias Brunner 2012-02-01 18:15:38 +01:00
• fd1ff46f61 Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files. Tobias Brunner 2012-01-31 18:54:00 +01:00
• 1f2e036b3e NEWS about pkcs8 plugin added. Tobias Brunner 2012-01-30 18:52:47 +01:00
• cab127cba6 Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes). Tobias Brunner 2012-01-30 18:42:22 +01:00
• db3334dc32 Added support to parse PKCS#8 encoded ECDSA private keys. Tobias Brunner 2012-01-18 22:33:36 +01:00
• 27f8a61df3 OpenSSL plugin parses ECDSA private keys with explicitly specified EC parameters. Tobias Brunner 2012-01-18 22:29:09 +01:00
• b20c54ff3f Add builder part for parameters from algorithmIdentifier. Tobias Brunner 2012-01-18 22:25:47 +01:00
• 25c6d26c1d Return parsed parameters from algorithmIdentifier if they are an OID (aka EC named curve). Tobias Brunner 2012-01-18 21:28:38 +01:00
• 9255aa87ec Parse RSA private keys from PKCS#8 encoded blobs. Tobias Brunner 2012-01-18 19:14:56 +01:00
• 5ec525c1d1 Added PKCS#8 stub plugin. Tobias Brunner 2012-01-18 19:12:21 +01:00
• 9ec66bc1a5 Added an option to load CA certificates without CA basic constraint. Tobias Brunner 2012-02-01 14:34:52 +01:00
• a895801270 Added TLS session resumption NEWS Martin Willi 2012-02-01 12:13:00 +01:00
• a345aa2639 Added RADIUS accounting NEWS Martin Willi 2012-02-01 12:07:32 +01:00
• 503dee4d2f Added RADIUS accounting option to strongswan.conf manual Martin Willi 2012-02-01 11:35:13 +01:00
• 0399edef71 Support RADIUS accounting messages containing Framed-IP and Inbound/Outbound-Octets Martin Willi 2012-01-30 19:16:49 +01:00
• 8e5b4aa023 Open RADIUS accounting sockets to exchange accounting messages Martin Willi 2012-01-30 19:15:20 +01:00
• a69aff5f17 Support signing of RADIUS accounting messages Martin Willi 2012-01-30 19:13:20 +01:00
• 370de553f8 RADIUS message constructor accepts a message code parameter Martin Willi 2012-01-30 19:11:08 +01:00
• 7171d8765e Disable crypto benchmarking if CLOCK_THREAD_CPUTIME_ID is not available. Tobias Brunner 2012-01-30 11:04:55 +01:00
• 023800ba62 Build libstrongswan if libfast gets built Martin Willi 2012-01-24 18:23:44 +01:00
• f1ba06c1c6 Cache list of plugin names to further simplify its usage. Tobias Brunner 2012-01-19 12:27:56 +01:00
• fdf1f239ef Log list of loaded plugins in main PKI help output. Tobias Brunner 2012-01-19 11:56:43 +01:00
• 576298a3ef Simplified logging of list of loaded plugins. Tobias Brunner 2012-01-19 11:53:06 +01:00
• ad1aaf4be3 Function added to plugin_loader to get a list of the names of loaded plugins. Tobias Brunner 2012-01-19 11:51:51 +01:00
• 498d172c33 Use correct time_t variables to store ARG_TIME options Martin Willi 2012-01-18 10:31:45 +01:00
• d68b8dfec4 Destroy active task list before queued tasks Thomas Egerer 2012-01-16 17:41:47 +01:00
• 5ed3e3a7e6 Various style, typo and whitespace corrections Adrian-Ken Rueegsegger 2012-01-06 17:37:59 +01:00
• 9d17c1a679 Starter depends on whack/stroke on Android. Tobias Brunner 2012-01-12 19:16:18 +01:00
• 2e0b478a01 Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. Tobias Brunner 2012-01-12 19:14:11 +01:00
• 35a1986142 Fixed additional typos in comments and log messages. Tobias Brunner 2012-01-12 11:41:34 +01:00
• d887b8e134 Fix whitespaces Adrian-Ken Rueegsegger 2012-01-05 18:52:36 +01:00
• 2a375e62f3 Some documentation corrections Adrian-Ken Rueegsegger 2012-01-04 11:11:47 +01:00
• 17e3a92661 Fix gettid() on Android, which is defined in unistd.h there. Tobias Brunner 2012-01-12 11:08:22 +01:00
• 66f16d9629 Use native gettid() if available (which is the case on Android). Tobias Brunner 2012-01-10 18:31:33 +01:00
• 190cd8a475 pluto: Use srand() to initialize the C library PRNG. Tobias Brunner 2012-01-04 13:19:29 +01:00
• f8b2906929 Use the TLS socket splicing in tls_test script Martin Willi 2011-12-31 12:49:18 +01:00
• 3a87c89b1b Added a tls_socket_t.splice method to wrap a file descriptor into TLS Martin Willi 2011-12-31 12:37:08 +01:00
• 6a5c86b7ad Implemented TLS session resumption both as client and as server Martin Willi 2011-12-31 01:41:56 +01:00
• ca5767621b Implemented a TLS session cache Martin Willi 2011-12-31 01:39:17 +01:00
• 703c0db894 Check for cipherspec changes after each handshake message Martin Willi 2011-12-30 18:29:55 +01:00
• 4caa380625 Separated cipherspec checking and switching, allowing us to defer the second Martin Willi 2011-12-30 18:29:11 +01:00
• 7c0c2349a9 Make number of concurrently handled stroke messages configurable. Tobias Brunner 2011-12-29 18:41:39 +01:00
• 8ff513a863 Limit the number of concurrently handled stroke messages. Tobias Brunner 2011-12-29 18:39:34 +01:00
• cb4da3f610 register aik certificate via ipsec attest Andreas Steffen 2011-12-25 14:30:52 +01:00
• 84da59f609 Be less verbose about TLS extensions Martin Willi 2011-12-24 13:26:24 +01:00
• ed57dfca3f In TLS 1.2, PRF and HASH function use at least SHA-256, not the MAC hash function Martin Willi 2011-12-24 12:35:28 +01:00
• 6b01216422 Added a getter for the tls_socket file descriptor Martin Willi 2011-12-24 11:02:57 +01:00
• e86b685da5 Allow callers to force ASN.1 date encoding as GENERALIZEDTIME. Tobias Brunner 2011-12-23 18:01:31 +01:00
• f4095fdc8a Avoid integer overflow when parsing ASN.1 dates. Tobias Brunner 2011-12-23 16:36:59 +01:00
• 20d752b4ff pki: Avoid integer overflow when calculating certificate lifetimes. Tobias Brunner 2011-12-23 16:33:24 +01:00
• 1267127c11 Properly ASN.1 encode dates in certificates depending on the year. Tobias Brunner 2011-12-23 16:29:41 +01:00
• 70a4737690 pluto: Fixed expiration date test. Tobias Brunner 2011-12-23 15:32:06 +01:00
• fc726f1359 Fix deadlock in trap_manager_t during acquire. Tobias Brunner 2011-12-23 11:07:14 +01:00
• 5317dd6887 Added atomic compare and swap operations. Tobias Brunner 2011-12-23 11:04:55 +01:00
• d6656f11e4 Fixed flush() method of trap_manager_t. Tobias Brunner 2011-12-23 10:38:10 +01:00
• a24f2241bc made ikev2/reauth-late scenario more robust Andreas Steffen 2011-12-21 06:00:13 +01:00
• 12b6ba8771 additional state waiting for the EvidenceFinal attribute response Andreas Steffen 2011-12-20 07:04:21 +01:00
• d670adb34a moved send_message() in front of recommendation evaluation Andreas Steffen 2011-12-18 21:05:52 +01:00
• f994caf665 added case IMV_ATTESTATION_STATE_END Andreas Steffen 2011-12-18 19:39:25 +01:00
• 6d3b46668f TrouSerS expects a bitmask field length of at least 3 bytes Sansar Choinyambuu 2011-12-18 18:36:36 +01:00
• 005d981cc2 check for TrouSerS Andreas Steffen 2011-12-18 18:26:38 +01:00
• 034b792b90 added Attestation IMC/IMV to UML build Andreas Steffen 2011-12-18 18:07:47 +01:00