Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9fe093c4e2 callback-cred: Document missing callback argument Tobias Brunner 2022-11-28 17:13:11 +01:00
• 0fbdc9e925 Doxyfile: Remove obsolete options and replace obsolete paper type value Tobias Brunner 2022-11-28 17:11:25 +01:00
• 977ab29fc1 Use Botan 2.19.3 for tests Tobias Brunner 2022-11-28 16:02:25 +01:00
• c1250c56ae testing: Use HTTPS for strongSwan tarballs Tobias Brunner 2022-11-28 15:57:57 +01:00
• 4242c81243 testing: Fix URL for kernel patches Tobias Brunner 2022-11-28 15:55:31 +01:00
• 4dd3d0e57b Merge branch 'number-formats' Tobias Brunner 2022-11-10 16:53:50 +01:00
• c1c85b0fd1 swanctl: Document the type/size of interface IDs Tobias Brunner 2022-10-14 11:04:38 +02:00
• 284fc2f796 swanctl: Document the behavior of %unique[-dir] on IKE_SAs Tobias Brunner 2022-10-14 10:57:53 +02:00
• 64b10dfb28 conf: Document accepted number and time formats Tobias Brunner 2022-10-14 10:54:04 +02:00
• 185b1376a3 conf: Explicitly add time unit to default value for options that accept them Tobias Brunner 2022-10-14 10:53:26 +02:00
• af71f14ba3 wolfssl: Updates to resolve build conflicts Tim Weller 2022-10-04 11:44:09 -05:00
• 7db77fd32b Use wolfSSL 5.5.3 for tests Tobias Brunner 2022-11-09 17:36:42 +01:00
• 652ce18120 github: Use OpenSSL 3.0.7 for tests Tobias Brunner 2022-11-09 17:39:50 +01:00
• 2bf110d9f8 backtrace: Fix build with newer MinGW versions Tobias Brunner 2022-11-10 13:44:21 +01:00
• f16a12eae5 github: Fix URL to BoringSSL repository for Android build Tobias Brunner 2022-11-05 14:58:02 +01:00
• d42f4367dd cirrus: Don't explicitly install openldap*-client on FreeBSD Tobias Brunner 2022-10-06 12:06:36 +02:00
• 68782f35c0 github: Try to avoid crashes by LeakSanitizer Tobias Brunner 2022-10-06 10:22:49 +02:00
• 7f46c76125 Make functions static that are only accessed from the same compilation unit Tobias Brunner 2022-10-05 16:37:22 +02:00
• c58ba0cb9f openssl: Remove unused openssl_hash_chunk() helper Tobias Brunner 2022-10-05 18:14:12 +02:00
• 4ea61dcbfe kernel-interface: Make first reqid configurable Thomas Egerer 2022-07-26 15:38:34 +02:00
• 27da024a5d backtrace: Only define print_sourceline() and esc() if actually used Tobias Brunner 2022-10-03 14:06:35 +02:00
• 3cc5a670b5 lookip: Explicitly include string.h for strcpy() Tobias Brunner 2022-10-03 13:54:03 +02:00
• ff21f8affe error-notify: Explicitly include string.h for strcpy() Tobias Brunner 2022-10-03 13:53:27 +02:00
• e09bc70d12 Version bump to 5.9.8 Andreas Steffen 2022-10-03 16:16:53 +02:00
• b2488db2ce NEWS: Add info about CVE-2022-40617 Tobias Brunner 2022-09-21 10:32:59 +02:00
• 1f870ae189 cert-validator: Use a separate method for online revocation checking Tobias Brunner 2022-09-21 10:22:16 +02:00
• 1968615590 revocation: Enforce a (configurable) timeout when fetching OCSP/CRL Tobias Brunner 2022-07-22 14:50:41 +02:00
• b1e926148a credential-manager: Do online revocation checks only after basic trust chain validation Tobias Brunner 2022-07-22 15:37:43 +02:00
• 6bf60221f5 pkcs7: Support rsa-pss signatures Andreas Steffen 2022-10-02 13:01:34 +02:00
• e0fd191f31 object: Make INIT() a compound statement Tobias Brunner 2022-09-29 11:36:00 +02:00
• 3da4ac8ef6 pki: Remove superfluous ; when initializing EST client Tobias Brunner 2022-09-29 11:34:50 +02:00
• ce82edfbe2 NEWS: Add news for 5.9.8 Tobias Brunner 2022-09-29 09:44:32 +02:00
• 895597817a github: Prefer third-party crypto lib's implementations over ours Tobias Brunner 2022-09-28 17:17:56 +02:00
• b05a8927d9 lgtm: Don't build with ASan and extra warnings Tobias Brunner 2022-09-28 15:35:50 +02:00
• 0cbd1ad892 pki: Fix formatting and use else if to make Coverity happy Tobias Brunner 2022-09-28 15:07:37 +02:00
• 00fd78305c Use wolfSSL 5.5.1 for tests Tobias Brunner 2022-09-28 14:55:39 +02:00
• 7c9ccceec8 Fixed some typos, courtesy of codespell Tobias Brunner 2022-09-27 17:14:58 +02:00
• ef93c7e2ea Version bump to 5.9.8rc1 Andreas Steffen 2022-09-26 10:34:04 +02:00
• 5ce1c91b58 ikev2: Trigger ike_updown() event after all IKE-specific tasks ran Tobias Brunner 2022-09-22 16:14:44 +02:00
• 14243dcdb5 ikev2: Make sure the child-create task runs after all IKE_SA specific tasks Tobias Brunner 2022-09-22 16:04:52 +02:00
• f3da04c05e ikev2: The ike-me task does not have to run before the ike-auth task Tobias Brunner 2022-09-22 15:47:34 +02:00
• 03ea02175e socket-dynamic: Use IPv6-only mode for IPv6 sockets Tobias Brunner 2022-09-22 17:36:38 +02:00
• ebaaacc459 socket-default: Use IPv6-only mode for IPv6 sockets Tobias Brunner 2022-09-22 17:33:52 +02:00
• 7433f1672a android: Prevent FD leak from HttpURLConnection Tobias Brunner 2022-07-22 11:43:56 +02:00
• ef68a7056b android: Update dependencies Tobias Brunner 2022-07-22 10:26:07 +02:00
• 232623dd44 android: Set compile-/targetSdkVersion to 32 Tobias Brunner 2022-07-22 11:13:36 +02:00
• 9db90f8c26 android: Fix "Format string ... is not valid format string..." error Tobias Brunner 2022-07-22 14:10:45 +02:00
• 563407e42a android: Mark PendingIntents as immutable via FLAG_IMMUTABLE Tobias Brunner 2022-07-22 11:12:52 +02:00
• 86b69f26e4 android: Explicitly mark Activities/Services with intent-filter as exported Tobias Brunner 2022-07-22 11:11:14 +02:00
• 6ab9297b5d android: Move package namespace declaration from Manifest to build file Tobias Brunner 2022-07-22 10:22:05 +02:00
• a09727465c android: Remove unused jni directory spec from sourceSets Tobias Brunner 2022-07-22 10:20:16 +02:00
• cd698bf46b android: Update Gradle plugin Tobias Brunner 2022-07-22 10:20:04 +02:00
• 357d680649 socket-win: Don't set SO_REUSEADDR on IKE sockets anymore Tobias Brunner 2022-09-06 16:21:46 +02:00
• 5f9ad62a81 socket-dynamic: Don't set SO_REUSEADDR on IKE sockets anymore Tobias Brunner 2022-09-06 16:21:03 +02:00
• 83da133712 socket-default: Don't set SO_REUSEADDR on IKE sockets anymore Tobias Brunner 2022-09-06 16:11:49 +02:00
• 0da8cae671 Merge branch 'eap-vendor-id' Tobias Brunner 2022-09-21 13:37:18 +02:00
• cdeb724839 eap: Make sure eap_type_t is large enough to hold vendor-specific types Tobias Brunner 2022-07-21 13:37:01 +02:00
• 9efd7d7e90 eap: Print vendor (PEN) names for vendor-specific EAP methods Tobias Brunner 2022-07-21 13:19:56 +02:00
• f6e6fcd2f6 eap: Use pen_t instead of uint32_t for vendor ID Tobias Brunner 2022-07-21 13:06:56 +02:00
• 8f5ff23d6c Version bump to 5.9.8dr4 Andreas Steffen 2022-09-20 16:37:44 +02:00
• 063ef084e4 pki: Base64 encoding of username:password in HTTP basic authentication Andreas Steffen 2022-09-20 08:49:40 +02:00
• a708e96906 pki: Always and implicitly use base64 encoding for EST requests/response Martin Willi 2022-09-20 07:47:25 +02:00
• 75d820de8b scepclient: Remove documentation about removal of scepclient Tobias Brunner 2022-09-14 17:54:23 +02:00
• 231df029b0 pki: Add SCEP utility functions and enums to Doxygen doc Tobias Brunner 2022-09-14 17:53:36 +02:00
• f21ef43b0c vici: Ignore NULL message in raise_event() Tobias Brunner 2022-09-06 16:32:47 +02:00
• 33f5e23c4e Merge branch 'ike-sa-flush' Tobias Brunner 2022-09-20 10:09:59 +02:00
• 2740c50bb8 ike-sa-manager: Make sure flush() removes entries that might get added concurrently Tobias Brunner 2022-08-26 16:14:30 +02:00
• 6f456afe39 ike-sa-manager: Prevent new IKE_SA from getting created when flush() is called Tobias Brunner 2022-08-26 15:33:22 +02:00
• 69995ed2c4 ike-sa: Always set ike_cfg_t when setting peer_cfg_t Tobias Brunner 2022-08-26 17:29:00 +02:00
• 48e9267d7a cred-encoding: Avoid potential use after free when caching encodings Tobias Brunner 2022-08-18 12:04:39 +02:00
• 724b1a8ae8 kernel-pfkey: Increase debug level of the "querying ..." log messages Tobias Brunner 2022-09-16 16:33:42 +02:00
• cf16556248 kernel-netlink: Increase debug level of the "querying [...]" log messages Noel Kuntze 2022-09-03 01:37:33 +02:00
• 88c80df6f4 Merge branch 'asan' Tobias Brunner 2022-09-16 15:28:16 +02:00
• d29af802bb github: Enable AddressSanitizer if leak-detective is disabled Tobias Brunner 2022-09-13 17:23:55 +02:00
• 8a57c2ab52 configure: Add an option to build with AddressSanitizer Tobias Brunner 2022-09-15 12:05:14 +02:00
• c4563abc2e github: Use OpenSSL 3.0.5 for tests Tobias Brunner 2022-09-13 18:05:01 +02:00
• a7e8cb8f61 tun-device: Fix compiler warning Tobias Brunner 2022-09-15 10:49:42 +02:00
• eab9cd8661 kernel-netlink: Fix compiler warnings with strncpy() Tobias Brunner 2022-09-15 10:08:10 +02:00
• ae9d110dd9 configure: Log if -Werror is enabled Tobias Brunner 2022-09-13 17:25:12 +02:00
• c9c8911478 unit-tests: Don't link files from libimcv into the test executable Tobias Brunner 2022-09-14 16:03:57 +02:00
• 996f557c40 unit-tests: Use allocated listener instead of stack object in exchange tests Thomas EgererandTobias Brunner 2022-09-02 11:54:05 +00:00
• bdc7f84a23 unit-tests: Don't use test data on stack for TLS socket tests Tobias Brunner 2022-09-13 16:10:55 +02:00
• 80b2c6cdc5 gcrypt: Return correct IV length (0) for ECB mode Tobias Brunner 2022-09-13 15:26:47 +02:00
• 7217ff5fc5 aesni: Fix out-of-bound read when loading 192-bit AES keys Tobias Brunner 2022-09-13 15:16:47 +02:00
• f2456376ae ike-rekey: Correctly destroy colliding rekey task Tobias Brunner 2022-09-13 15:03:24 +02:00
• 5eeeb894d1 test-runner: Clean up collected run times Tobias Brunner 2022-09-13 14:55:30 +02:00
• b18fbde41e test-runner: Properly clean up allocated test suites Martin Willi 2015-04-08 10:20:23 +02:00
• 432a846e66 unit-tests: Disable AddressSanitizer for threading cleanup function Martin Willi 2015-04-08 10:18:31 +02:00
• 7dce58135e unit-tests: Exclude memory checks after-free from AddressSanitizer Martin Willi 2015-04-08 10:16:13 +02:00
• d840df185a utils: Define ADDRESS_SANITIZER_EXCLUDE to exclude a function from sanitizer Martin Willi 2015-04-15 14:21:38 +02:00
• 1866d33538 utils: Support __has_feature() macro on non-LLVM compilers by returning 0 Martin Willi 2015-04-15 14:20:52 +02:00
• ffada7cb5a pki: Correctly use int as precision specifier when printing PEM certificate Tobias Brunner 2022-09-14 17:36:43 +02:00
• 644f74ad8f unit-tests: Add environment variable to only run specific iterations Tobias Brunner 2022-08-22 11:48:29 +02:00
• a345e635c4 Version bumpt to 5.9.8dr3 Andreas Steffen 2022-09-07 06:38:42 +02:00
• 747e840912 libstrongswan: Encode RSA-PSS algorithmIdentifier variant Andreas Steffen 2022-09-06 21:10:36 +02:00
• bf3f678551 testing: Fixed two issues Andreas Steffen 2022-09-05 07:07:00 +02:00
• f4931ce7e6 testing: Add missing kernel config for 5.19 Tobias Brunner 2022-09-06 16:56:31 +02:00
• 55f7268eb1 unit-tests: Let the TLS server thread close its own socket Tobias Brunner 2022-09-06 15:31:41 +02:00
• c6b6ad8d89 testing: Add missing css dir to distribution tarballs Boi Sletterink 2022-09-01 11:48:43 +02:00
• 0f6b0380a8 ipsec: Remove scepclient from usage output Tobias Brunner 2022-09-05 19:12:57 +02:00