Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• befdefa5d3 starter: Fix comment for debug function Tobias Brunner 2022-09-05 19:12:23 +02:00
• 73f6047a77 conf: Remove config snippet for scepclient Tobias Brunner 2022-09-05 19:11:58 +02:00
• c9ccec9bc3 configure: Remove AC_SUBST for unused variable Tobias Brunner 2022-09-05 19:10:03 +02:00
• 7bc491a7fa android: Remove scepclient from old top-level Android.mk Tobias Brunner 2022-09-05 19:09:31 +02:00
• 73901d2cc3 github: Remove --enable-scepclient from macOS build options Tobias Brunner 2022-09-05 17:14:52 +02:00
• 879ffd7ece unit-tests: Make TLS echo server cancelable Tobias Brunner 2022-09-05 17:10:21 +02:00
• 88859b506c libtls: Fix encoding of TLS 1.3 certificate extension as server Tobias Brunner 2022-09-05 13:06:20 +02:00
• 023070b6d0 Use wolfSSL 5.5.0 for tests Tobias Brunner 2022-09-05 11:11:49 +02:00
• af3b8c49c5 Version bump to 5.9.8dr2 Andreas Steffen 2022-09-02 06:32:13 +02:00
• 3fa3d2666a pki: pki --req can use old certreq as template Andreas Steffen 2022-08-29 10:34:58 +02:00
• 359b5739f4 pki: Fixed memory leak in pki --scep Andreas Steffen 2022-08-28 11:42:13 +02:00
• 3b2b7a3bee pki: Fixed filenames in pki --estca/--scepca man pages Andreas Steffen 2022-08-26 16:43:58 +02:00
• dbe3de7bb9 connmark: Fix wrong plugin name in log message Noel Kuntze 2022-08-21 01:08:28 +02:00
• 057b3806aa Version bump to 5.9.8dr1 Andreas Steffen 2022-08-26 12:32:04 +02:00
• e4cb9a59d2 testing: Fixed typo of mfg1 to mgf1 plugin Andreas Steffen 2022-08-26 12:31:33 +02:00
• 74893da403 Merge branch 'pki-scep' Andreas Steffen 2022-08-26 12:19:17 +02:00
• 6e860fb07c leak_detective: Whitelist botan_privkey_load_rsa_pkcs1() Andreas Steffen 2022-08-25 10:48:55 +02:00
• 52a3c3662d libtls: the signature unit tests use scheme-specific credentials Andreas Steffen 2022-08-24 15:06:12 +02:00
• 63fd718915 libtls: call create_public_enumerator() with key_type Andreas Steffen 2022-08-24 12:01:51 +02:00
• a417703301 libtls: enforce correct signature scheme for ECDSA keys Andreas Steffen 2022-08-23 23:52:39 +02:00
• 77a15f55be libtls: unit tests with crypto libs need additional plugins Andreas Steffen 2022-08-22 14:33:00 +02:00
• 9664ef4ba6 libtls: Fixed encoding of TLS 1.3 certificate extension Andreas Steffen 2022-08-22 14:27:48 +02:00
• 784606a827 pki: use libtls for pki --est|--estca Andreas Steffen 2022-08-22 12:42:09 +02:00
• 976c74b772 pki: --est adds --keyid and --certid options Andreas Steffen 2022-08-21 15:21:22 +02:00
• 2b53b1055d pki: Optimize certificate download for --scep and --est Andreas Steffen 2022-08-21 11:13:53 +02:00
• b392fbd68c libtls: unit tests run with default plugins Andreas Steffen 2022-08-19 17:18:52 +02:00
• a3914d7db5 libtls: Send empty cert payload upon cert request Andreas Steffen 2022-08-19 17:09:02 +02:00
• 60a764bad9 pki: use libtls for pki --est Andreas Steffen 2022-08-19 02:04:58 +02:00
• c2dc5f69ca pki: Created pki --est man page Andreas Steffen 2022-08-16 15:24:02 +02:00
• ba1d8aba32 pki: Enroll an X.509 certificate with an EST server Andreas Steffen 2022-08-15 21:16:11 +02:00
• 7e5daec56e pki: Created pki --estca man page Andreas Steffen 2022-08-14 04:51:23 +02:00
• b16c0e928e pki: Clean up SCEP functions Andreas Steffen 2022-08-14 04:29:44 +02:00
• ba76a9f5ff pki: Get CA certs via EST (RFC 7030) Andreas Steffen 2022-08-13 12:31:44 +02:00
• 1ef8b92211 pkcs10: Support of Microsoft CertTypeExtension Andreas Steffen 2022-08-11 00:21:28 +02:00
• 8716f7c03c scepclient: Removal and replacement by pki subcommands Andreas Steffen 2022-08-09 10:15:36 +02:00
• 122796df27 pki: Additional pki.scep options for strongswan.conf Andreas Steffen 2022-08-09 07:38:06 +02:00
• 93f2901d1a pki: Created pki --scep man page Andreas Steffen 2022-08-06 12:23:09 +02:00
• 7c7a5a0260 pki: Enroll an X.509 certificate with a SCEP server Andreas Steffen 2022-08-01 11:57:41 +02:00
• a9d70bd485 pki: Created pki --scepca man page Andreas Steffen 2022-07-30 14:21:50 +02:00
• 6851273944 pki: Get CA certs via SCEP Andreas Steffen 2022-07-29 06:48:41 +02:00
• 5900426a71 wolfssl: Rename encrypt methods to avoid conflicts with system headers Fabrice Fontaine 2022-08-08 09:52:19 +02:00
• 71b0c031c2 android: Slightly increase NDK version Tobias Brunner 2022-08-15 17:46:04 +02:00
• 47fd5ab6b5 eap-mschapv2: Fix compile warning/error when compiled with -Warray-bounds Tobias Brunner 2022-08-15 14:34:34 +02:00
• bcedd65a31 pkcs7: Allow for missing optional content field Andreas Steffen 2022-07-28 11:18:54 +02:00
• 49ddfe91f0 Version bump to 5.9.7 Andreas Steffen 2022-07-29 06:54:09 +02:00
• 80dec436ce NEWS: Add news for 5.9.7 Tobias Brunner 2022-07-26 15:58:33 +02:00
• 19baf5a08c ike-cfg: Fix typo in method description Tobias Brunner 2022-07-26 14:35:42 +02:00
• 45e6311640 mock-dh: Fix typo in comment Tobias Brunner 2022-07-26 10:03:23 +02:00
• 1e444454e1 Version bump to 5.9.7rc1 Andreas Steffen 2022-07-23 14:38:36 +02:00
• c01d765c11 testing: Increased memory of KVM instance sun Andreas Steffen 2022-07-23 14:36:50 +02:00
• 67f7d8fe8a testing: Replace deprecated tempfile command by mktemp Andreas Steffen 2022-07-23 11:28:08 +02:00
• 77553bfee6 dhcp: Fix retransmission timeouts Tobias Brunner 2022-07-20 15:13:39 +02:00
• 44ab5533b0 connmark: Consider configured mask in installed firewall rules Tobias Brunner 2022-06-17 12:10:19 +02:00
• 42ed6b44b2 af-alg: Fix "'strncpy' specified bound equals destination size" warnings Tobias Brunner 2022-07-18 14:29:04 +02:00
• 112bb465fb openssl: Add support for AES and Camellia in CTR mode Tobias Brunner 2022-05-31 16:03:43 +02:00
• 3d966d6d0a aggressive-mode: Determine local identity before deriving keys Tobias Brunner 2022-06-16 16:36:04 +02:00
• 833333eae9 child-cfg: Skip non-matching TS instead of replacing them for transport mode Tobias Brunner 2022-07-14 13:22:55 +02:00
• 1f242e772b configure: Add option to build with extended compiler warnings and -Werror Tobias Brunner 2022-07-15 10:42:56 +02:00
• 9c86787de5 libfast: Fix incompatible function types warning Tobias Brunner 2022-07-15 14:48:02 +02:00
• 36d16e5b24 forecast: Fix incompatible function types warning Tobias Brunner 2022-07-15 13:50:43 +02:00
• b37a3e249a test-runner: Fix compiler warning Tobias Brunner 2022-07-15 13:01:29 +02:00
• 1656e3806b configure: Add noyywrap option to AC_PROG_LEX for Autoconf 2.70+ Tobias Brunner 2022-07-14 09:52:21 +02:00
• eae30af029 Use wolfSSL 5.4.0 for tests Tobias Brunner 2022-07-12 09:46:03 +02:00
• 110e8e6608 doc: Removed the standards directory Andreas Steffen 2022-07-12 10:20:30 +02:00
• 2b474073d9 pem: Support PEM-encoded PKCS#7 container Andreas Steffen 2022-07-06 20:38:00 +02:00
• e8c2ae3c54 Version bump to 5.9.7dr2 Andreas Steffen 2022-06-29 11:33:34 +02:00
• 30faf04e92 Merge branch 'multi-ke-backport' Tobias Brunner 2022-06-29 10:29:16 +02:00
• 23b0220b1c unit-tests: Allow configuring log levels for individual groups Tobias Brunner 2021-07-27 18:37:26 +02:00
• 35edbc4048 debug: Support configuring different log levels for groups in default logger Tobias Brunner 2021-07-26 18:16:00 +02:00
• 4e5a2037e7 wolfssl: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 17:29:41 +02:00
• 26ca0c9f70 pkcs11: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 17:25:19 +02:00
• d95082ce0d gcrypt: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 16:29:44 +02:00
• ed3494ef7b curve25519: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 15:38:27 +02:00
• 31f467d70b botan: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 14:53:15 +02:00
• 0e82d5cc2c gmp: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-19 17:27:53 +02:00
• 0351b5af3b key-exchange: Warn about costly operations in set_public_key() Tobias Brunner 2021-07-19 17:46:58 +02:00
• e334bd46b1 ike-auth: Move packet collection to post_build() method Tobias Brunner 2021-07-19 16:36:16 +02:00
• 44629bbadb ikev2: Delay IKE key derivation until next message Tobias Brunner 2021-07-16 17:39:12 +02:00
• 2a9323a18a ikev2: Use hashes to detect retransmits Tobias Brunner 2018-07-23 17:49:15 +02:00
• 639af09b2e child-sa: Cache and forward actual initiator flag for outbound SA Tobias Brunner 2020-08-18 09:40:17 +02:00
• 8d6ed71a55 ikev2: Send deletes also for rekeyed SAs Tobias Brunner 2020-06-17 16:04:10 +02:00
• b6652ababe ikev2: Let ike/child-rekey tasks indicate if the passive task was adopted Tobias Brunner 2020-06-12 11:24:18 +02:00
• 7ffeed01c0 ike-rekey: Remove collision task type checks Tobias Brunner 2020-06-11 15:06:24 +02:00
• 87a86e9c98 ike-rekey: Don't actively rekey already rekeyed SAs Tobias Brunner 2020-06-11 14:33:22 +02:00
• 39c66693a0 ike-init: Ignore COOKIE payloads during rekeying Tobias Brunner 2020-04-09 18:42:22 +02:00
• e5bf9b23b2 ike-sa-manager: Log SPIs when checking in an IKE_SA Tobias Brunner 2018-07-16 15:48:30 +02:00
• c1987aefbe message: Fix payload type in last unprotected payload of a fragmented message Tobias Brunner 2019-07-05 11:01:42 +02:00
• ba348b4799 ike-rekey: Reset IKE_SA after processing CREATE_CHILD_SA request Tobias Brunner 2018-07-10 14:36:28 +02:00
• 36312808d1 ikev2: Allow tasks to do work after processing requests/responses Tobias Brunner 2019-08-22 14:23:44 +02:00
• 210e2177aa task: Add optional post_process() method Tobias Brunner 2019-08-22 14:22:48 +02:00
• 1719e0f0aa ikev2: Allow tasks to do work after generating requests/responses Tobias Brunner 2018-06-28 10:44:40 +02:00
• 87caf36bb9 task: Add optional post_build() method Tobias Brunner 2018-06-28 10:44:03 +02:00
• 28b33d7cac ike-auth: Support exchange between IKE_SA_INIT and IKE_AUTH Tobias Brunner 2018-06-25 14:27:16 +02:00
• 09a4aed3a2 child-create: Support exchange between IKE_SA_INIT and IKE_AUTH Tobias Brunner 2018-06-25 14:14:59 +02:00
• 3a8ea08686 ike-mobike: Support exchange between IKE_SA_INIT and IKE_AUTH Tobias Brunner 2018-06-25 14:03:56 +02:00
• 366fce8f03 ike-config: Support exchange between IKE_SA_INIT and IKE_AUTH Tobias Brunner 2018-06-25 12:32:27 +02:00
• 09d4497536 ike-cert-post: Make absolutely sure certificates are only added to IKE_AUTH Tobias Brunner 2018-06-25 12:23:50 +02:00
• f2e79bf334 ike-cert-pre: Support exchange between IKE_SA_INIT and IKE_AUTH Tobias Brunner 2018-06-25 12:07:50 +02:00
• f00e80d759 status: Add return_need_more() utility function Tobias Brunner 2018-07-13 14:52:05 +02:00
• ec350ebb78 child-cfg: Generalize get_ke_method() method Tobias Brunner 2018-07-20 11:11:00 +02:00