Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• ef6d339c09 migrate_job() finds a matching child_cfg Andreas Steffen 2008-11-03 02:05:41 +00:00
• bd354bee5f corrected parameter description Andreas Steffen 2008-11-03 00:24:38 +00:00
• a066f7e6c2 corrected captions Andreas Steffen 2008-11-02 22:13:17 +00:00
• 5145ae48be fully implemented the parsing of XFRM and PF_KEY MIGRATE messages Andreas Steffen 2008-11-02 21:34:52 +00:00
• e301a69d6c removed 0-byte truncation, fixes random Openssl RSA signature verification failures Martin Willi 2008-10-31 17:07:04 +00:00
• a13862be61 fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit) Martin Willi 2008-10-31 17:05:40 +00:00
• b74bc4384c identify attributes of XFRM ACQUIRE and MIGRATE messages Andreas Steffen 2008-10-31 06:18:48 +00:00
• e7f4fc537f subscribing XFRM socket for MIGRATE messages Andreas Steffen 2008-10-31 02:50:01 +00:00
• 08571955fb adapted evaltest.dat to extended acquire job message Andreas Steffen 2008-10-31 01:46:37 +00:00
• e526d22818 parse xfrm and pf_key acquire messages and subscribe to migrate messages Andreas Steffen 2008-10-31 01:43:23 +00:00
• 19aff61b19 reverted changeset 4529: Camellia is 22 in IKEv1, but not-yet defined in IKEv2 in IKEv2, 22 is reserved for AES-XTS Martin Willi 2008-10-30 13:21:21 +00:00
• 5dffdea1d7 added hooks for IKE and CHILD keymat Martin Willi 2008-10-30 12:58:54 +00:00
• 5a76bb7f7a store plain skd, not the prf Martin Willi 2008-10-30 09:18:52 +00:00
• fdaed5289a added Camellia CBC to list of encryption algorithms Andreas Steffen 2008-10-30 03:31:36 +00:00
• 113a4afa55 corrected parameter description Andreas Steffen 2008-10-30 00:35:37 +00:00
• 80853d8498 moved CHILD_SA key derivation to keymat_t passing key chunks to CHILD_SA, not the PRF Martin Willi 2008-10-29 16:06:16 +00:00
• f65ba4e978 prf handles zero-length allocations graceful Martin Willi 2008-10-29 14:12:54 +00:00
• a64cc8f75f do not store DH redundant in keymat Martin Willi 2008-10-29 13:35:06 +00:00
• 6faa0c3392 replaced not-maintained ChangeLog Martin Willi 2008-10-29 09:27:51 +00:00
• 217d95c82e upgrade to linux-2.6.28 headers with support for kmaddress struct Andreas Steffen 2008-10-29 05:32:38 +00:00
• 6a4ff35cc4 moved key derivation and management into keymat object allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now Martin Willi 2008-10-28 16:07:06 +00:00
• 3c8234d408 store IKE proposal implicitly during derive_keys Martin Willi 2008-10-28 10:12:21 +00:00
• 20fb671904 fixed reauthentication time in statusall Martin Willi 2008-10-28 09:41:33 +00:00
• f5ab7f5f57 refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key Andreas Steffen 2008-10-28 01:59:01 +00:00
• 85ac2fa547 use more generic stats getter, introducing new stats Martin Willi 2008-10-27 14:51:00 +00:00
• ddc5b90db2 new release of NM debs Martin Willi 2008-10-27 12:01:23 +00:00
• 0935ba328b including a "none" tundev to make NM happy Martin Willi 2008-10-27 11:30:27 +00:00
• a1db79b31a fixed some compiler warnings Martin Willi 2008-10-27 11:13:33 +00:00
• aeaa6a9b45 remove unused local DH_EXPONENT_ENTROPY definition Andreas Steffen 2008-10-27 00:02:22 +00:00
• 21a45f2f2d use 512 bits of entropy for secret DH exponents Andreas Steffen 2008-10-26 23:53:52 +00:00
• 82d20c0588 additional getters for ipcomp and UDP encap Martin Willi 2008-10-24 09:51:48 +00:00
• 6e10aeadab more CHILD_SA refactorings Martin Willi 2008-10-24 08:02:35 +00:00
• f2a5aa4a9d initiate connections simultaneously in load tester Martin Willi 2008-10-22 09:01:36 +00:00
• 2d1000d14e include updown plugin in sql scenarios Andreas Steffen 2008-10-21 22:28:29 +00:00
• 0fd6e95562 a load testing plugin, to: find multi-threading issues do performance profiling Martin Willi 2008-10-21 13:00:38 +00:00
• 6df2837a8c fixed enumeration of CHILD_SA traffic selectors Martin Willi 2008-10-21 10:57:40 +00:00
• 8ceb5fd566 use old algorithm nameagain in pfkey/alg-aes-xcbc scenario Andreas Steffen 2008-10-21 03:42:32 +00:00
• f2e1ff59ab reset threads IKE_SA after checking other IKE_SAs invoke updown script only if we have valid IKE_SA Martin Willi 2008-10-20 11:38:16 +00:00
• 7790ab0f37 re-established all previous AUD level messages Andreas Steffen 2008-10-17 03:44:06 +00:00
• 104c28d603 fixed perl oid generation Martin Willi 2008-10-16 15:38:48 +00:00
• 6f3ea4a516 loading updown plugin if required Martin Willi 2008-10-16 12:48:27 +00:00
• ad3af574a4 moved updown script invocation to an optional plugin Martin Willi 2008-10-16 11:48:18 +00:00
• e17353fc31 bus uses finally recusive locking other small fixes Martin Willi 2008-10-16 11:32:43 +00:00
• f868dc0ca2 condvar->wait() can handle recursive mutex Martin Willi 2008-10-16 11:29:42 +00:00
• 229ee197a3 added missing EAP-AKA RFC Martin Willi 2008-10-16 07:21:30 +00:00
• 61508be2f5 added a guest.mconsole() method to script mconsole (e.g. add additional conX=) Martin Willi 2008-10-15 14:47:52 +00:00
• 1df106bf39 cache keys for in and outbound ESP SAs removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator() Martin Willi 2008-10-15 12:24:44 +00:00
• 35379b2130 typedef fixed Tobias Brunner 2008-10-15 11:34:29 +00:00
• 0b9728986a reverted changeset [4440], [4443] uses old algorithm name again Martin Willi 2008-10-15 08:50:14 +00:00
• 9f4e5f8c47 store ESP keys in CHILD_SA Martin Willi 2008-10-15 08:37:56 +00:00
• ff93a76cf1 activate compilation of the kernel_pfkey plugin Andreas Steffen 2008-10-15 00:22:51 +00:00
• deb079204e added PFKEYv2 UML scenarios Andreas Steffen 2008-10-15 00:11:00 +00:00
• c126cdc270 name of ESP algorithm changed to AES_XCBC_96-128 Andreas Steffen 2008-10-14 23:55:19 +00:00
• e517b4b174 passing chunks, not prf+, to kernel interface gives us better control of keymat in CHILD_SA Martin Willi 2008-10-14 15:17:44 +00:00
• c25c8dce60 typos Tobias Brunner 2008-10-14 12:18:53 +00:00
• 35ae2d7fe7 directory 'build' renamed as 'packages' Tobias Brunner 2008-10-14 11:53:23 +00:00
• a985db3ff3 reintegrated bus-refactoring branch Martin Willi 2008-10-14 08:52:13 +00:00
• 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch Tobias Brunner 2008-10-14 08:46:31 +00:00
• 9257c3a287 version bump to 4.2.9 Andreas Steffen 2008-10-14 01:53:37 +00:00
• f2780731b0 corrected typo Andreas Steffen 2008-10-13 22:54:09 +00:00
• 5dadb16ef8 added bug fix for addr_in_subnet() to NEWS Andreas Steffen 2008-10-13 00:15:16 +00:00
• 35c365c2e3 add support of --enable-eap-sim-file and --enable-kernel-pfkey configuration options Andreas Steffen 2008-10-13 00:09:44 +00:00
• 405e8ecfe3 set guest-specific kernel parameters removed memory setting, use mem= instead Martin Willi 2008-10-10 11:20:04 +00:00
• 79a878466c reintegrated two-sim branch providing SIM card plugin API Martin Willi 2008-10-10 08:36:01 +00:00
• c5ebb635a1 trimming additial / in some cases Martin Willi 2008-10-10 07:33:37 +00:00
• 88f65cd589 use busybox compatible kill Martin Willi 2008-10-10 06:59:03 +00:00
• b165cfa945 remove intermediate CA certs after UML test Andreas Steffen 2008-10-09 22:20:56 +00:00
• f0974eb2c2 fixed MOBIKE roaming if clients address changes Martin Willi 2008-10-09 08:25:11 +00:00
• 03d5f41137 faster implementation of addr_in_subnet() Andreas Steffen 2008-10-09 05:44:00 +00:00
• bb2059c60a added proposal parsing of uncommon DH groups 3072/6144 Martin Willi 2008-10-08 12:57:11 +00:00
• 4f0241e6cf some mobike improvement NEWS Martin Willi 2008-10-08 12:24:08 +00:00
• 85be7e5b75 ignore routing events for our own routes Martin Willi 2008-10-08 08:29:49 +00:00
• ce5b17082d mobike: try to keep existing source address before switching to another Martin Willi 2008-10-08 08:23:46 +00:00
• e39b271b17 raw public key support for charon Andreas Steffen 2008-10-08 07:03:39 +00:00
• d1cbe55127 implemented ipsec listalgs as a stroke command Andreas Steffen 2008-10-08 07:00:13 +00:00
• 51358f9f72 correct fix that replaces Changeset 4378 Andreas Steffen 2008-10-08 06:57:52 +00:00
• c85862931f removing fix applied by Changeset 4378 Andreas Steffen 2008-10-08 06:15:41 +00:00
• ec6a88f617 added the sql/rw-rsa and sql/rw-rsa-keyid scenarios using raw RSA public keys Andreas Steffen 2008-10-08 03:37:40 +00:00
• af09048e35 get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy Andreas Steffen 2008-10-08 03:35:52 +00:00
• 95fd1dedb3 Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype Andreas Steffen 2008-10-08 01:19:26 +00:00
• 7a07cd1c75 fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau Andreas Steffen 2008-10-07 21:41:45 +00:00
• c8ba5125d6 guest bootup waits for init, not for network stack (fixes 2.6.27 guest kernels) Martin Willi 2008-10-07 16:31:41 +00:00
• 693a244d0f ported mconsole-exec patch to 2.6.27-rc7 Martin Willi 2008-10-07 09:09:34 +00:00
• aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation Martin Willi 2008-10-07 07:55:28 +00:00
• 41b1cd6b87 wait 5 seconds before deactivating eth1 interface on alice Andreas Steffen 2008-10-07 04:56:50 +00:00
• e8c58d8e64 explicitly load kernel-netlink plugin in UML scenarios Andreas Steffen 2008-10-07 04:51:20 +00:00
• 9d9a772ee1 use MOBIKE enabled DPD if we are NATed update SAs if we detect changes in NAT mappings Martin Willi 2008-10-06 13:37:04 +00:00
• 0592212f23 fixed builder_cancel macro to return NULL on failed build Martin Willi 2008-10-06 13:08:49 +00:00
• aa1b90a5b2 do not run CHILD_SA delete action if rekeying Martin Willi 2008-10-03 16:01:14 +00:00
• 09d7ef2614 added --disable-kernel-netlink configure option Andreas Steffen 2008-10-03 03:27:42 +00:00
• 9c0aa46b64 use dpd_action also for remotely closed tunnels Martin Willi 2008-10-02 13:47:19 +00:00
• 7827997346 also respect the mobike=no setting as responder Martin Willi 2008-09-30 12:36:58 +00:00
• ceff3064fe using signed return value for read() Martin Willi 2008-09-30 06:27:50 +00:00
• a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk Tobias Brunner 2008-09-25 13:56:23 +00:00
• 507f26f685 merging modularized kernel interface back to trunk Tobias Brunner 2008-09-25 07:56:58 +00:00
• 80fc5bd95c missing '_' added Tobias Brunner 2008-09-19 13:20:09 +00:00
• 414caff027 version bump to 4.2.8 Andreas Steffen 2008-09-18 00:42:22 +00:00
• b37cda8211 completed NEWS for 4.2.7 release Andreas Steffen 2008-09-18 00:34:31 +00:00
• cdaf57ec34 fixed DH value range testing Martin Willi 2008-09-17 09:02:30 +00:00
• 73f6886a50 checking mpz_export return value properly fixes a potential DoS attack if a DH value of zero gets processed Martin Willi 2008-09-17 08:10:48 +00:00