Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 093fc1ac63 ike-cfg: Generalize get_ke_method() method Tobias Brunner 2018-07-19 16:53:01 +02:00
• 3bebf5bf8d proposal: Generalize KE methods Tobias Brunner 2018-07-09 16:27:04 +02:00
• b7c167f972 Rename MODP_NONE to KE_NONE Andreas Steffen 2021-07-01 19:42:55 +02:00
• 3af7c6db87 Rename diffie_hellman_t to key_exchange_t and change the interface etc. Tobias Brunner 2019-10-24 09:49:14 +02:00
• ec95fd9b93 bliss: Remove stray URLs from headers Tobias Brunner 2022-06-29 10:27:54 +02:00
• df18934d20 Replace or remove wiki.strongswan.org URLs Tobias Brunner 2022-06-28 13:33:51 +02:00
• 19ef2aec15 Update copyright headers after acquisition by secunet Tobias Brunner 2022-06-03 17:52:43 +02:00
• c05fdf387b Remove obsolete _copyright utility Tobias Brunner 2022-06-03 18:57:27 +02:00
• 8dbcff1e8b openssl: Use dynamically allocated array to determine EC curves Tobias Brunner 2022-06-15 10:34:52 +02:00
• 4a19a5e056 ita-comp-ima: Change validation URI parsing to avoid GCC 12 compiler warning Tobias Brunner 2022-06-16 18:40:25 +02:00
• 1c198bf22b fips-prf: Add explicit bound check to avoid GCC 12 compile warning Tobias Brunner 2022-06-16 18:18:26 +02:00
• 585666aa97 hashtable: Avoid compiler warning with GCC 12 Tobias Brunner 2022-06-16 10:23:16 +02:00
• 993ea32825 object: Fix CALLBACK macros with GCC 12 Tobias Brunner 2022-05-19 11:10:07 +02:00
• cc1d78b0a8 conf: Fix documentation for leak detective's usage thresholds Tobias Brunner 2022-06-21 15:44:59 +02:00
• 735515b3a7 credential-manager: Log subject of trusted cert before building trust chain Tobias Brunner 2022-06-02 11:25:19 +02:00
• 432111720d Version bump to 5.9.7dr1 Andreas Steffen 2022-05-26 17:41:14 +02:00
• 3f19a951cf TCG TNC attribute name changes Andreas Steffen 2022-05-24 17:40:06 +02:00
• 63f35993d9 testing: Use sans-serif font for test results Tobias Brunner 2022-05-05 09:31:28 +02:00
• 846201a686 Merge branch 'nm-gtk4' Tobias Brunner 2022-05-16 14:40:42 +02:00
• 14f082177e nm: Version bump to 1.6.0 Tobias Brunner 2022-05-16 14:14:40 +02:00
• 790e0b1cd4 nm: Add support for GTK4 Tobias Brunner 2022-04-20 14:19:54 +02:00
• 49e30dbed4 nm: Change layout of file chooser dialog Tobias Brunner 2022-04-14 10:49:45 +02:00
• b404440192 nm: Split NM plugin and editor widget into separate libs Tobias Brunner 2022-04-20 09:50:03 +02:00
• 4f4778d792 nm: Replace GtkFileChooserButton Tobias Brunner 2022-04-20 09:39:04 +02:00
• 7740e8bb0f nm: Update Glade file Tobias Brunner 2022-04-20 09:37:44 +02:00
• 94e0ef33db nm: Load GtkBuilder data from resource instead of file Tobias Brunner 2022-04-20 09:34:31 +02:00
• 085daf4743 nm: Remove old libnm-glib compat stuff Tobias Brunner 2022-04-20 09:28:18 +02:00
• 64d73235c4 adopt-children-job: Avoid reordering CHILD_SAs Tobias Brunner 2022-05-09 13:33:49 +02:00
• 3b742c75ab quick-mode: Remove outbound SA/policy of rekeyed CHILD_SA Xiao Liang 2022-05-07 20:42:27 +08:00
• 5cf82de69a proposal: Demote AES-XCBC/CMAC PRFs in default proposal Tobias Brunner 2022-05-09 11:49:50 +02:00
• aef6b5e385 configure: Auto-enable kdf plugin if necessary Tobias Brunner 2022-05-06 14:24:26 +02:00
• 7022fdc72e github: Update automatic labels in issue templates Tobias Brunner 2022-05-06 13:11:53 +02:00
• f62b942d6a Use wolfSSL 5.3.0 for tests Tobias Brunner 2022-05-05 09:41:21 +02:00
• af9c78d393 plugin-loader: Print an error message if plugin constructor is not found Tobias Brunner 2022-05-05 10:21:10 +02:00
• 4de8b81dea keymat_v2: Fix error message if KDF can't be created Tobias Brunner 2022-05-06 11:38:08 +02:00
• cc094c30d1 testing: Fix 'unsafe repository' error when accessing Git repository Tobias Brunner 2022-05-02 10:51:25 +02:00
• d23c0ea81e enum: Fix compiler warning Tobias Brunner 2022-05-02 09:31:49 +02:00
• 4cf8cd0321 Version bump to 5.9.6 Andreas Steffen 2022-04-28 22:38:10 +02:00
• c9d471091f Use mallinfo2() if available Tobias Brunner 2022-04-25 13:30:27 +02:00
• 8ce4105fca NEWS: Add news for 5.9.6 Tobias Brunner 2022-04-22 10:55:55 +02:00
• a6a0fa980f tls-crypto: Initialize cipher suites arrays to avoid warnings Tobias Brunner 2022-04-21 15:42:24 +02:00
• 352fa96dfc gcrypt: Initialize variables when en-/decrypting with RSA to avoid warnings Tobias Brunner 2022-04-21 15:40:12 +02:00
• 2283a19b80 kdf: Fix Doxygen comments Tobias Brunner 2022-04-21 14:52:25 +02:00
• c508b904b8 openssl: Fix typo in comment Tobias Brunner 2022-04-21 11:06:30 +02:00
• f4d6539b49 ikev2: Maintain labels during make-before-break reauthentication Tobias Brunner 2022-04-20 14:45:41 +02:00
• 312437bf6a github: Use run_number instead run_id as external-id for LGTM Tobias Brunner 2022-04-19 16:56:06 +02:00
• 7df710095e Version bump to 5.9.6rc1 Andreas Steffen 2022-04-16 10:23:35 +02:00
• 9aa7e126b2 Merge branch 'openssl-3.0' Tobias Brunner 2022-04-14 19:06:12 +02:00
• a5cfa57134 github: Add a build against OpenSSL 3.0 Tobias Brunner 2022-03-04 14:04:15 +01:00
• 76ff49b761 unit-tests: Add environment variable to skip IPv6 stream tests Tobias Brunner 2022-03-16 16:45:16 +01:00
• 7d99b29b99 unit-tests: Add support for more than one warning per test case Tobias Brunner 2022-03-04 15:16:12 +01:00
• a8bab0ee15 openssl: Move ENGINE-specific code into a separate file Tobias Brunner 2022-03-04 11:26:52 +01:00
• f26639de2c openssl: Remove checks and legacy compatibility code for OpenSSL < 1.0.2 Tobias Brunner 2022-03-04 10:57:20 +01:00
• db0c53c207 openssl: Fixes for HMAC with OpenSSL 3.0 Tobias Brunner 2022-03-04 10:49:04 +01:00
• 293a912c7d openssl: Fixes for ECDSA with OpenSSL 3.0 Tobias Brunner 2022-03-03 14:19:03 +01:00
• be0ce6db93 configure: Move pkcs8 plugin after plugins that can parse PKCS#8 directly Tobias Brunner 2022-04-14 11:57:30 +02:00
• 544fb1cf92 pkcs8: Parse the decrypted PKCS#8 structure via regular builders Tobias Brunner 2022-03-04 08:21:42 +01:00
• 21b586c61c openssl: Fixes for RSA with OpenSSL 3.0 Tobias Brunner 2022-02-28 14:28:18 +01:00
• 36cf74f5d9 openssl: Fixes for DH with OpenSSL 3.0 Tobias Brunner 2022-02-25 17:05:24 +01:00
• f5710c9ccb openssl: Fixes for ECDH with OpenSSL 3.0 Tobias Brunner 2022-02-24 17:29:09 +01:00
• 13efce489e openssl: PRF_KEYED_SHA1 might not be supported Tobias Brunner 2022-02-24 14:50:25 +01:00
• 519bc22091 leak-detective: Whitelist OpenSSL 3.0 functions Tobias Brunner 2022-02-23 17:39:39 +01:00
• 1c1213f4b6 openssl: Move shared secret calculation to get_shared_secret() Tobias Brunner 2021-07-23 16:44:07 +02:00
• 94a3563c68 Merge branch 'ikev2-kdf-modularization' Tobias Brunner 2022-04-14 19:03:03 +02:00
• f619b833ac keymat_v2: Use plugin-provided KDF_PRF to derive SKEYSEED Tobias Brunner 2022-03-15 09:49:43 +01:00
• 743b486118 unit-tests: Hand out an actual shared secret and pubkey in mock KE implementation Tobias Brunner 2022-03-15 11:59:53 +01:00
• 56afc6e298 wolfssl: Implement HMAC-based IKEv2 PRFs via wolfSSL's HKDF implementation Tobias Brunner 2022-03-15 09:41:11 +01:00
• 7498769aba botan: Implement HMAC-based IKEv2 PRFs via Botan's HKDF implementation Tobias Brunner 2022-03-15 09:34:10 +01:00
• e0fc786ecd openssl: Implement HMAC-based IKEv2 PRFs via OpenSSL's HKDF implementation Tobias Brunner 2022-03-14 18:17:11 +01:00
• 0339ce34f6 kdf: Implement wrapper for IKEv2 PRFs Tobias Brunner 2022-03-14 17:16:17 +01:00
• ad0e94b6ed test-vectors: Add vectors for HMAC-based IKEv2 PRFs Tobias Brunner 2022-03-14 17:08:39 +01:00
• 37dbc87960 crypto: Add new KDF type for IKEv2 PRFs Tobias Brunner 2022-03-14 16:56:32 +01:00
• 7bde56a9bc crypto: Adapt kdf_t interface to support KDFs with fixed output length Tobias Brunner 2022-03-14 16:54:13 +01:00
• 96c7692661 wolfssl: Implement prf+ via wolfSSL's HKDF implementation Tobias Brunner 2022-02-16 16:42:55 +01:00
• cb8f924051 botan: Implement prf+ via Botan's HKDF implementation Tobias Brunner 2022-02-16 16:23:38 +01:00
• f535f1ed53 crypto: Remove unused prf_plus_t Tobias Brunner 2022-02-15 14:20:07 +01:00
• f0957d1250 kdf: Implement prf+ directly without relying on prf_plus_t Tobias Brunner 2022-02-15 14:18:14 +01:00
• 9cb3c10418 keymat_v1: Derive CHILD_SA keys without using prf_plus_t Tobias Brunner 2022-02-15 10:13:53 +01:00
• be07b9dc01 unit-tests: Use plugin-provided prf+ in unit test Tobias Brunner 2022-02-15 13:43:58 +01:00
• df16d7902a tls-hkdf: Use plugin-provided prf+ Tobias Brunner 2022-02-14 17:09:15 +01:00
• 7161c87617 keymat_v2: Use plugin-provided prf+ to derive keys Tobias Brunner 2022-02-14 16:19:42 +01:00
• 08e31138bd appveyor: Enable kdf plugin on old images with OpenSSL 1.0.2/1.1.0 Tobias Brunner 2022-02-17 10:15:22 +01:00
• 5cc47c11f2 android: Build and load kdf plugin for prf+ Tobias Brunner 2022-02-15 14:29:36 +01:00
• 3a52fc83f8 testing: Load kdf plugin in all scenarios that require it Tobias Brunner 2022-02-14 16:25:32 +01:00
• 742134c112 keymat_v2: Refactor CHILD_SA key derivation so it only needs one prf+ call Tobias Brunner 2022-02-14 15:48:17 +01:00
• 00cfc05467 keymat_v2: Refactor IKE key derivation so it only needs one prf+ call Tobias Brunner 2022-02-14 15:19:20 +01:00
• 2b9b579af9 openssl: Add a prf+ implementation based on OpenSSL's HKDF implementation Tobias Brunner 2022-02-11 16:38:34 +01:00
• 9e228de60a kdf: Add plugin that provides a default prf+ implementation Tobias Brunner 2022-02-11 14:49:49 +01:00
• ce431366e6 test-vectors: Add test vectors for prf+ Tobias Brunner 2022-02-11 13:58:12 +01:00
• 71ba969884 plugin-feature: Add plugin feature for KDFs Tobias Brunner 2022-02-11 11:57:34 +01:00
• 961cb781b9 plugin-feature: Remove 'default' case in plugin_feature_un|load() Tobias Brunner 2022-02-11 11:55:36 +01:00
• 86d526876d test-vectors: Add support for KDF test vectors Tobias Brunner 2022-02-11 12:03:38 +01:00
• 02f7d63e52 crypto-factory: Use actual plugin name when testing during construction Tobias Brunner 2022-02-16 17:24:17 +01:00
• 0c6baa8997 crypto-tester: Add facility to test KDFs Tobias Brunner 2022-02-10 18:30:50 +01:00
• ec17fa2fef vici: Report registered KDFs Tobias Brunner 2022-02-09 16:20:00 +01:00
• 07bf428ad1 stroke: List registered KDFs Tobias Brunner 2022-02-09 16:18:30 +01:00
• fbb0bdebe7 crypto-factory: Add constructor and methods to create KDFs Tobias Brunner 2022-02-09 16:16:20 +01:00
• 35ad267fce pkcs5: Rename kdf_t to avoid conflict Tobias Brunner 2022-02-09 16:08:30 +01:00
• e93882c6a0 transform: Add private transform for KDFs Tobias Brunner 2022-02-09 15:54:47 +01:00
• 40a09613d2 crypto: Add interface for key derivation functions Tobias Brunner 2022-02-09 11:54:28 +01:00