Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 6086029056 libtls: Fix build with DEBUG_LEVEL < 3 Tobias Brunner 2023-04-18 16:57:16 +02:00
• bb06b7a4bb simaka-manager: Fix counter in log message when getting quintuplets Tobias Brunner 2023-04-18 16:51:21 +02:00
• 777d0ef7b0 esp-packet: Fix build with DEBUG_LEVEL < 3 Tobias Brunner 2023-04-18 16:49:26 +02:00
• 1b58e8c386 drbg: Fix build with DEBUG_LEVEL < 4 Tobias Brunner 2023-04-18 16:48:08 +02:00
• 94cbd6469a bliss: Fix build with DEBUG_LEVEL < 2 Tobias Brunner 2023-05-01 14:57:00 +02:00
• b158c210cd sqlite: Fix build with DEBUG_LEVEL < 2 Tobias Brunner 2023-04-18 16:46:02 +02:00
• a9a2c040ba pkcs7: Fix build with DEBUG_LEVEL < 2 Tobias Brunner 2023-04-18 16:44:54 +02:00
• 7ea431cf70 constraints: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 11:10:47 +02:00
• 984f8cbcde revocation: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 11:07:18 +02:00
• c0a281472f x509: Fix build with DEBUG_LEVEL < 2 for structures that ignore unknown critical extensions Tobias Brunner 2023-04-18 16:42:30 +02:00
• a551f80e4f plugin-loader: Fix build with DEBUG_LEVEL < 3 Tobias Brunner 2023-04-18 16:38:18 +02:00
• 1b59031cc3 auth-cfg: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 10:46:28 +02:00
• 5a98f8f4ab certificate: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 10:37:01 +02:00
• b39105b5b4 credential-factory: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 10:38:24 +02:00
• f73d8699b3 crypto-tester: Fix build with DEBUG_LEVEL < 1 Tobias Brunner 2023-05-01 10:35:05 +02:00
• d7750dff9b asn1: Fix build with DEBUG_LEVEL < 2 Tobias Brunner 2023-04-18 16:34:38 +02:00
• 2d4a98d0d3 debug: Add macro to mark variables that are only used in DBG statements Tobias Brunner 2023-05-01 10:44:42 +02:00
• 7b453ae409 doxygen: Enable JS search engine Tobias Brunner 2023-05-04 13:42:06 +02:00
• 8eaddbb805 doxygen: Fix syntax for some output parameters Tobias Brunner 2023-05-04 13:39:15 +02:00
• 69914a2dc5 ikev1: Migrate CHILD_SAs when IKE_SA is reset during reauthentication Tobias Brunner 2023-04-20 10:22:31 +02:00
• 5e46e101a6 vici: Improve log messages for terminate/rekey() in case of combined filters Tobias Brunner 2023-04-27 16:34:23 +02:00
• 00a75e332f vici: Create default TCP socket on Windows in Python bindings Tobias Brunner 2023-04-20 16:26:52 +02:00
• d12e6c9e55 charon-systemd: Add a log message when the daemon is starting Tobias Brunner 2023-04-19 16:10:26 +02:00
• 0bf061d737 leak-detective: Add on_exit(3) to whitelist Tobias Brunner 2023-04-18 14:17:37 +02:00
• d96d15b588 controller: Add parameter for maximum log level to initiate/terminate_*() Tobias Brunner 2023-04-19 16:21:48 +02:00
• 77b9f3abb0 controller: Ignore log messages unrelated to IKE_SA affected by a command Tobias Brunner 2023-04-19 16:17:18 +02:00
• 30803f90eb watcher: Prevent busy wait if callback is active and other FDs have events Tobias Brunner 2023-04-18 18:18:48 +02:00
• 53208b0ba4 watcher: Move debug log messages out of mutex Tobias Brunner 2023-04-18 15:59:34 +02:00
• 705a20619f watcher: Make sure to re-activate the correct entry after a callback Tobias Brunner 2023-04-18 15:55:10 +02:00
• 34e9cdbcac watcher: Log when watched FDs are added, removed or updated Tobias Brunner 2023-04-18 15:52:23 +02:00
• 0a806d9717 watcher: Only log number of managed FDs Tobias Brunner 2023-04-18 15:50:42 +02:00
• 7c657e78ff watcher: Avoid logging on level 1 while holding the mutex Tobias Brunner 2023-04-18 15:46:29 +02:00
• 2cb6d144a6 vici: Don't lock connection in write mode when enabling on_write() callback Tobias Brunner 2023-04-13 13:55:00 +02:00
• 0615b86b49 sonarcloud: Ignore "User-defined types should not be passed as variadic arguments" Tobias Brunner 2023-04-25 12:19:49 +02:00
• b420857123 Version bump to 5.9.11dr3 Andreas Steffen 2023-04-21 16:36:23 +02:00
• 47e8b21c76 cert_cache: Replace cached stale OCSP responses in-place Andreas Steffen 2023-04-21 16:04:26 +02:00
• ef94a5b4ab Version bump to 5.9.11dr2 Andreas Steffen 2023-04-19 04:24:18 +02:00
• 5284cecddc pki: Filter whitespace in base64 encoded EST responses Harald Gutmann 2023-03-31 13:38:48 +02:00
• f6dc47f591 pki: Add support for EST server label Harald Gutmann 2023-03-18 23:31:39 +01:00
• 7a47adb4f0 Merge branch 'pkcs7-signatures' Tobias Brunner 2023-03-31 09:29:12 +02:00
• b4e1863fa6 pki: Allow specifying signature scheme for PKCS#7 signatures Tobias Brunner 2023-03-30 11:19:28 +02:00
• e2a2674476 pki: Unify parsing of RSA padding scheme and fix disabling PSS Tobias Brunner 2023-03-30 14:23:38 +02:00
• 47d9590556 openssl: Add support for CMS-style signatures in PKCS#7 (RSA-PSS, ECDSA) Tobias Brunner 2023-03-24 17:17:37 +01:00
• 5e76bc1634 pkcs7: Add support for CMS-style signatures (RSA-PSS, ECDSA) Tobias Brunner 2023-03-24 17:04:42 +01:00
• 1326f805a8 asn1: Allow suppressing log messages when parsing algorithm identifiers Tobias Brunner 2023-03-24 17:00:10 +01:00
• 4e73e9d3e9 botan: Pass n and e separately for RSA public keys Tobias Brunner 2023-03-27 16:40:31 +02:00
• 7be55adf05 ipseckey: Add support for ECDSA and EdDSA public keys Tobias Brunner 2023-03-23 13:51:33 +01:00
• e288c507b6 Use wolfSSL 5.6.0 for tests Tobias Brunner 2023-03-27 11:51:48 +02:00
• 67e9cb161d Version bump to 5.9.11dr1 Andreas Steffen 2023-03-28 16:27:04 +02:00
• 9e17a0ed88 revocation: Suppress some log messages for cached OCSP responses Tobias Brunner 2023-03-27 17:32:57 +02:00
• 6abad65cd7 testing: Fix installation of swid-generator with newer versions of setuptools Tobias Brunner 2023-03-28 11:55:17 +02:00
• 7dc82dea34 Merge branch 'crl-sign' Tobias Brunner 2023-03-24 17:34:05 +01:00
• 01ec54afc9 openssl: Only allow certificates with cRLSign keyUsage to sign CRLs Tobias Brunner 2023-02-22 17:21:15 +01:00
• 7d1f221211 x509: Only allow certificates with cRLSign keyUsage to sign CRLs Tobias Brunner 2023-02-22 17:20:07 +01:00
• d12a4f5d23 openssl: Set X509_CRL_SIGN for CA certificates without keyUsage extension Tobias Brunner 2023-02-22 17:18:36 +01:00
• 7414c06669 x509: Set X509_CRL_SIGN for CA certificates without keyUsage extension Tobias Brunner 2023-02-22 17:18:14 +01:00
• 8bb772a9fa appveyor: Build eap-radius plugin on Windows Tobias Brunner 2023-03-08 15:33:43 +01:00
• c9c76278c3 libradius: Link to winsock32 on Windows Tobias Brunner 2023-03-08 15:55:38 +01:00
• 9b391f86fe eap-radius: Don't include socket.h explicitly Tobias Brunner 2023-03-08 15:31:42 +01:00
• 993dd54c8d windows: Fix compat define for sendto(2) Tobias Brunner 2023-03-08 15:05:42 +01:00
• 8c0a67f700 kernel-wfp: Install bypass policies also on FWPM_SUBLAYER_IPSEC_TUNNEL sublayer Tobias Brunner 2023-03-01 17:08:37 +01:00
• 8f5c0c9ca9 windows: Fix invalid pointer dereference when terminating service thread Tobias Brunner 2023-03-07 16:57:27 +01:00
• e6a354a996 controller: Immediately return after re-initiating an existing IKE_SA childless Tobias Brunner 2023-03-01 17:31:07 +01:00
• dd79253e2d vici: Fix fallback to remote ID if no mediation peer ID is configured Tobias Brunner 2023-03-02 10:21:43 +01:00
• 3c8887326a dhcp: Don't use get_source_addr() to determine source address Tobias Brunner 2023-03-10 10:43:24 +01:00
• 8bf683c469 pki: Fix enum for SCEP CA capabilities Tobias Brunner 2023-03-17 17:24:41 +01:00
• 3d0d3f5d02 eap-tls: Fix server implementation with TLS 1.2 and earlier Tobias Brunner 2023-03-13 13:39:17 +01:00
• db87087fae tls: Only return EAP MSK if TLS handshake is complete Tobias Brunner 2023-03-13 13:26:25 +01:00
• 67c7303181 github: Add LSan workaround for tests on Ubuntu 20.04 again Tobias Brunner 2023-03-16 14:11:12 +01:00
• c0fc048775 github: Use OpenSSL 3.1.0 for tests Tobias Brunner 2023-03-14 17:03:05 +01:00
• bb6174a4d1 vici: Generalize timeout support in Python bindings Jean-Tiare Le BigotandTobias Brunner 2023-03-02 23:20:13 +01:00
• 89936186a8 github: Don't build on Ubuntu 18.04 anymore Tobias Brunner 2023-03-07 14:51:10 +01:00
• d250620970 appveyor: Fix LDFLAGS for Windows build Tobias Brunner 2023-03-03 13:02:44 +01:00
• 38871d62ad appveyor: Install gperf manually on newer versions of msys2 Tobias Brunner 2023-03-02 11:44:59 +01:00
• c0ae81fc83 Version bump to 5.9.10 Andreas Steffen 2023-03-02 09:58:24 +01:00
• ed839b3067 NEWS: Add info about CVE-2023-26463 Tobias Brunner 2023-02-24 16:07:38 +01:00
• 8aa13a1797 eap-peap: Initiate Phase 2 immediately for TLS 1.3 Tobias Brunner 2023-03-01 15:51:38 +01:00
• edd3c797b0 testing: Negotiate TLS 1.3 for part of the EAP-TLS scenarios Andreas Steffen 2023-03-01 10:42:06 +01:00
• d605584a7a NEWS: Add news for 5.9.10 Tobias Brunner 2023-02-24 16:03:07 +01:00
• 8e9b2bd27f pki: Add possibility to add/remove flags in requests when issuing certificates Tobias Brunner 2023-02-23 17:03:05 +01:00
• 8325eeff06 pki: Allow overriding EKU flags from certificate request via command line Tobias Brunner 2023-02-23 16:54:51 +01:00
• 350101abad Version bump to 5.9.10rc1 Andreas Steffen 2023-02-22 20:00:18 +01:00
• bc1a5111bb testing: Add a failing client to the ikev2/rw-eap-tls-only scenario Tobias Brunner 2023-02-22 17:10:03 +01:00
• 501483b313 libvici: Fix Doxygen comment for vici_on_close() Tobias Brunner 2023-02-22 14:08:24 +01:00
• a5ba701783 swanctl: Fix Windows build of --monitor-sas command Tobias Brunner 2023-02-22 14:01:59 +01:00
• 18d73a9a5c utils: Add counterpart to wait_sigint() to explicitly stop waiting Tobias Brunner 2023-02-22 14:29:39 +01:00
• 292eb7893f Merge branch 'nm-xfrmi' Tobias Brunner 2023-02-22 13:44:10 +01:00
• 58f278f932 charon-nm: Use an XFRM interface if available Tobias Brunner 2023-01-09 15:19:43 +01:00
• 04486507b2 kernel-netlink: Add an option to install routes for SAs with XFRM interfaces Tobias Brunner 2023-01-09 15:10:55 +01:00
• 0cc780d317 kernel-netlink: Automatically bring up XFRM interfaces after creation Tobias Brunner 2023-01-09 14:54:28 +01:00
• e1ff1eefcf kernel-netlink: Add manager for XFRM interfaces Tobias Brunner 2022-07-11 13:12:46 +02:00
• 85d56b1c6a charon-nm: Tie lifetime of dummy TUN device to connection Tobias Brunner 2023-01-05 16:24:42 +01:00
• 5401a74d36 eap-tls: Add support for TLS 1.3 Tobias Brunner 2023-01-17 15:06:40 +01:00
• 06abdf1d31 tls-crypto: Fix MSK calculation for TLS 1.3 Tobias Brunner 2021-02-12 13:25:05 +01:00
• 5a512ff56b Merge branch 'kernel-netlink-sa-lastused' Tobias Brunner 2023-02-22 13:21:31 +01:00
• 346a050c36 kernel-netlink: Increase log level for dumped Netlink messages Tobias Brunner 2023-01-11 17:05:37 +01:00
• 1138b629fb android: Announce support for TFC padding Tobias Brunner 2022-06-23 16:38:02 +02:00
• e21290ec30 kernel-netlink: Read last use time from SA if possible Tobias Brunner 2022-06-23 16:15:45 +02:00
• 6301b880df child-sa: Query policies only if querying SAs doesn't update the use time Tobias Brunner 2022-06-23 16:13:02 +02:00
• b9131c34d3 kernel-interface: Add feature to indicate if query_sa() returns last use time Tobias Brunner 2022-06-23 15:59:56 +02:00