Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• dadcd9060e Version bump to 5.9.5dr3 Andreas Steffen 2021-12-11 16:39:34 +01:00
• 8249e6afad libtpmtss: Establish session with TPM 2.0 Andreas Steffen 2021-11-08 09:02:40 +01:00
• b158c08c4b Merge branch 'openssl-providers' Tobias Brunner 2021-12-08 11:34:46 +01:00
• 910b7d1915 openssl: Log loaded providers Tobias Brunner 2021-11-22 10:38:29 +01:00
• 3cd2e2ccc6 openssl: Make fips_mode option work with OpenSSL 3 Tobias Brunner 2021-11-22 10:34:08 +01:00
• f556fce16b openssl: Load "legacy" provider in OpenSSL 3 for algorithms like MD4, DES etc. Tobias Brunner 2021-09-30 09:41:57 +02:00
• 8baa431501 Merge branch 'libtls-tests' Tobias Brunner 2021-12-08 11:33:32 +01:00
• 46a6b06282 openssl: Only announce ECDH groups actually supported by OpenSSL Tobias Brunner 2021-11-16 14:34:03 +01:00
• 03520a0d54 openssl: Add helper to map ECDH groups to curve NIDs Tobias Brunner 2021-11-16 14:33:09 +01:00
• 88e7654c6c libtls: Shutdown server socket in test teardown function Tobias Brunner 2021-11-15 14:01:44 +01:00
• d95381ec7a tls-socket: Handle sending fatal errors better Tobias Brunner 2021-11-15 14:39:22 +01:00
• 01485770fd gcrypt: Support of AES-CFB encryption Andreas Steffen 2021-12-06 13:43:45 +01:00
• 2d1a1cc907 botan: Support of AES-CFB encryption Andreas Steffen 2021-12-06 13:28:31 +01:00
• 54d7e39d40 wolfssl: Support of AES-CFB encryption Andreas Steffen 2021-12-06 12:24:09 +01:00
• 695a04d146 openssl: Support of AES-CFB encryption Andreas Steffen 2021-12-04 16:28:52 +01:00
• dcaf9b38f3 child-rekey: Uninstall old outbound SA earlier on initiator/winner Tobias Brunner 2021-11-26 11:32:46 +01:00
• e9ba195910 github: Run charon-tkm tests Tobias Brunner 2021-11-23 17:08:11 +01:00
• 66fd0c4db7 charon-tkm: Make only tests requiring TKM optional Tobias Brunner 2021-11-22 15:06:19 +01:00
• 43927e60a7 Revert "testing: Don't run tests when building tkm" Tobias Brunner 2021-11-19 15:24:44 +01:00
• 6b9c8a674f Revert "testing: Don't run tests when building tkm-rpc" Tobias Brunner 2021-11-19 15:23:44 +01:00
• df0999ec93 android: Improved simplified Chinese translation / 完善了简体中文翻译 zhangxiaojun 2021-11-22 17:25:16 +08:00
• e43052893d vici: Fix check before applying identity to public keys Tobias Brunner 2021-11-23 16:14:42 +01:00
• deb288ddc1 testing: Increase memory of winnetou Tobias Brunner 2021-11-19 11:54:47 +01:00
• 4124b1d376 Version bump to 5.9.5dr2 Andreas Steffen 2021-11-18 18:23:21 +01:00
• 11b10bc2b0 farp: Fix incompatible function types warning Tobias Brunner 2021-11-17 18:21:30 +01:00
• cceca1a3c4 eap-radius: Fix incompatible function types warnings Tobias Brunner 2021-11-17 18:09:39 +01:00
• 9b2e9a943c processor: Fix incompatible function types warnings Tobias Brunner 2021-11-17 18:06:20 +01:00
• 0917edb468 blocking-queue: Fix incompatible function types warning Tobias Brunner 2021-11-17 17:46:27 +01:00
• fe5399d287 Merge branch 'rsa-oaep-encryption' Andreas Steffen 2021-11-11 10:03:17 +01:00
• 519db56f2f testing: Added RSA PKCS1 encryption tests Andreas Steffen 2021-11-09 17:57:20 +01:00
• 6bb5c4f2bb testing: Added RSA OAEP encryption tests Andreas Steffen 2021-11-08 09:28:53 +01:00
• 93bf894cd2 gcrypt: Support RSA OAEP SHA1 encryption/decryption Andreas Steffen 2021-11-10 21:04:00 +01:00
• b50e8a88ff gcrypt: Enable RSA PKCS1 encryption/decryption Andreas Steffen 2021-11-10 18:10:42 +01:00
• be52ad7c6d botan: RSA OAEP labels are not supported Andreas Steffen 2021-11-09 22:46:14 +01:00
• 9cfdc32597 wolfssl: Support OAEP labels Andreas Steffen 2021-11-08 19:29:28 +01:00
• 6adb543341 openssl: Implemented RSA OAEP encryption/decryption with optional labels Andreas Steffen 2021-11-08 09:34:57 +01:00
• 4abb29f639 credentials: Added void *params to public_key encrypt() and private_key decrypt() methods Andreas Steffen 2021-11-08 19:26:25 +01:00
• c8341fca61 botan: Fully enable RSA OAEP decryption Andreas Steffen 2021-11-08 09:20:15 +01:00
• f4bfdec21f kernel-pfroute: Set lower MTU on TUN devices Tobias Brunner 2021-11-05 08:46:48 +01:00
• eb19699a7a ike: Fix length of vendor ID Cisco VPN 3000 client Tobias Brunner 2021-11-03 10:35:30 +01:00
• 9747376c69 ike: Fix prefix length and data of vendor ID Cisco VPN Concentrator Volker Rümelin 2021-11-01 14:49:17 +01:00
• 865a387c6c ikev1: Fix prefix length of vendor ID Cisco Unity Volker Rümelin 2021-11-01 14:49:16 +01:00
• 5e1d1cd30f ikev1: Fix prefix length of vendor ID MS NT5 ISAKMPOAKLEY Volker Rümelin 2021-11-01 14:49:15 +01:00
• d1278ed926 Use wolfSSL 5.0.0 for tests Tobias Brunner 2021-11-02 09:41:25 +01:00
• e19eb070fa Use Botan 2.18.2 for tests Tobias Brunner 2021-10-26 10:33:05 +02:00
• bcbf1862d7 Version bump to 5.9.5dr1 Andreas Steffen 2021-10-26 08:04:19 +02:00
• f0935a63ed testing: Optimized plugin use in pkcs8 scenarios Andreas Steffen 2021-10-23 11:44:15 +02:00
• 9c7288d6f1 testing: Minimum required plugins for net2net-pkcs12 scenarios Andreas Steffen 2021-10-22 11:39:20 +02:00
• 8c48de739d testing: Use AES and SHA-256 to protect PKCS#12 files Tobias Brunner 2021-10-18 14:27:14 +02:00
• 66fa7c959a Version bump to 5.9.4 Andreas Steffen 2021-10-18 11:45:53 +02:00
• 8cc89b505e testing: Correctly remove pkcs8 key after test case Andreas Steffen 2021-10-18 11:45:31 +02:00
• fed5c7e0d4 NEWS: Add news for 5.9.4 Tobias Brunner 2021-10-12 18:44:48 +02:00
• d6d31fce23 pkcs8: Don't forward NULL parameters when parsing keys Tobias Brunner 2021-10-18 11:22:40 +02:00
• 02e4f994ec signature-params: Reject schemes other than RSASSA-PSS with parameters Tobias Brunner 2021-10-04 12:10:37 +02:00
• f061dedcb7 asn1: Return any parameters of algorithmIdentifier structures Tobias Brunner 2021-10-04 12:39:11 +02:00
• dceed8e099 cert-cache: Prevent crash due to integer overflow/sign change Tobias Brunner 2021-09-28 19:38:22 +02:00
• 234302a108 gmp: Reject RSASSA-PSS signatures with negative salt length Tobias Brunner 2021-09-28 18:00:01 +02:00
• 03fbceb3f5 signature-params: Reject RSASSA-PSS params that result in negative salt len Tobias Brunner 2021-09-28 17:52:08 +02:00
• 2403154f95 pki: Use correct enum value to initialize ID type in --keyid command Tobias Brunner 2021-10-13 15:17:09 +02:00
• b241e944fa cirrus: Use specific package name for OpenLDAP Tobias Brunner 2021-10-12 14:55:55 +02:00
• e7f0c6f778 cirrus: Also build on FreeBSD 13.0 Tobias Brunner 2021-10-12 14:49:03 +02:00
• 1ecb0b8133 Version bump to 5.9.4rc1 Andreas Steffen 2021-10-12 08:54:03 +02:00
• c6cde0c8b6 pki: Ensure allocated serial numbers don't start with a zero byte Tobias Brunner 2021-09-28 12:05:28 +02:00
• 740038e401 Version bump to 5.9.4dr3 Andreas Steffen 2021-10-04 11:50:30 +02:00
• 128d054407 Clear static buffer returned by getpass() Tobias Brunner 2021-10-01 13:49:46 +02:00
• de442491d9 swanctl: Clear config from memory Tobias Brunner 2021-09-30 15:16:48 +02:00
• f3a5b54ab3 settings: Add destructor that wipes contents Tobias Brunner 2021-09-30 15:13:35 +02:00
• 57faf886db stroke: Clear ipsec.secrets file from memory Tobias Brunner 2021-09-30 15:38:38 +02:00
• b667eb37b9 swanctl: Clear possibly unencrypted key/container files from memory Tobias Brunner 2021-09-30 15:37:46 +02:00
• 3a739424e1 pem: Clear possibly unencrypted key file from memory Tobias Brunner 2021-09-30 15:33:40 +02:00
• e2e21f2486 chunk: Optionally clear mmap'd chunk before unmapping Tobias Brunner 2021-09-30 12:39:08 +02:00
• b9aafa7ebf vici: Clear all request messages in case they contain secrets Tobias Brunner 2021-09-30 12:22:59 +02:00
• 4bea9e8b60 vici: Clear cached strings in case the message contained shared secrets Tobias Brunner 2021-09-30 12:10:44 +02:00
• 66e80f3d1b pem: Clear chunks after decrypting files Tobias Brunner 2021-09-30 12:03:42 +02:00
• 16d91ab761 shared-key: Clear shared secret when destroyed Tobias Brunner 2021-09-30 12:00:25 +02:00
• 5c24b05f0c Merge branch 'testing-bullseye' Tobias Brunner 2021-10-01 17:13:18 +02:00
• 3edf3856d4 testing: Use Debian bullseye as base image Tobias Brunner 2021-09-21 19:30:00 +02:00
• bc51815839 testing: Determine Debian version in TNC scenarios automatically again Tobias Brunner 2021-09-22 14:10:54 +02:00
• f2420cee49 libimcv: Add Debian 11 (bullseye) to IMV database Tobias Brunner 2021-09-22 14:04:39 +02:00
• 1ec01f10a2 testing: Replace arp with ip neigh Tobias Brunner 2021-09-22 13:46:19 +02:00
• ccac9c3047 testing: Allow DNS via TCP in net2net-dnscert scenario Tobias Brunner 2021-09-22 13:28:53 +02:00
• 5b9c46b988 testing: Remove support for Debian jessie and FreeRADIUS 2 Tobias Brunner 2021-09-21 11:18:16 +02:00
• dff5a0cab8 testing: Support build with Debian bullseye base image Tobias Brunner 2021-09-21 11:15:43 +02:00
• f92ad8454b openssl: Use correct key types when adopting Ed25519/448 keys Tobias Brunner 2021-09-20 17:20:30 +02:00
• c463a14483 openssl: Remove workaround for Brainpool ECDH curves for older OpenSSL versions Tobias Brunner 2021-09-20 16:31:33 +02:00
• 3e148e5b76 github: Fix build on macOS due to moved OpenSSL location Tobias Brunner 2021-09-30 16:21:45 +02:00
• 72e5b3b702 crl: Fix compilation with OpenSSL 3.0 Tobias Brunner 2021-09-30 09:40:47 +02:00
• 2fbbd05ec5 github: Use OpenSSL 1.1 on macOS Tobias Brunner 2021-09-23 16:56:19 +02:00
• b94236487c kernel-pfkey: Wipe request/response messages when managing SAs Tobias Brunner 2021-09-23 15:24:52 +02:00
• 1b21a00fa7 Version bump to 5.9.4dr2 Andreas Steffen 2021-09-21 14:18:16 +02:00
• e166e6913c Change shebang for Python scripts to use python3 Tobias Brunner 2021-09-21 11:13:50 +02:00
• 6467f0416f testing: Fix updown script in route-based/net2net-xfrmi-ike scenario Tobias Brunner 2021-09-21 12:40:52 +02:00
• 3e2841572b testing: Switch to Python 3 Andreas Steffen 2021-09-21 09:28:49 +02:00
• a5662e8f6e keymat_v2: Properly wipe DH secret during IKE_SA rekeying Tobias Brunner 2021-09-20 16:08:00 +02:00
• 91896264b2 sec-updater: Use latest versions Andreas Steffen 2021-09-07 18:55:02 +02:00
• d23ca7f345 os_info: Parse /etc/os-release first Andreas Steffen 2021-09-07 14:59:36 +02:00
• bf91b71f1a github: Remove build on Ubuntu Xenial (16.04) Tobias Brunner 2021-09-08 12:00:12 +02:00
• a415761a8e vici: Update supported Python versions Tobias Brunner 2021-09-08 11:55:41 +02:00
• fbd4930323 vici: Add DBG4 messages that print loaded shared keys and PINs Noel Kuntze 2021-08-27 19:05:03 +02:00
• 3c0d7ec531 ike: Initiate new IKE_SA not until all children are queued Tobias Brunner 2021-07-12 14:47:57 +02:00