Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 6405653da2 android: Avoid lint errors when determining column indices Tobias Brunner 2021-05-05 16:09:37 +02:00
• f0a20dd2b8 backtrace: The BFD API changed in newer versions Tobias Brunner 2021-05-05 11:37:21 +02:00
• 1de13f9037 openssl: Fix OpenSSL version check for EC_POINT_set_affine_coordinates Noel Kuntze 2021-04-15 16:23:18 +02:00
• e9a55abce4 forecast: Restrict strncpy() call Noel Kuntze 2021-04-17 05:02:01 +02:00
• 2b89676157 Merge branch 'doxygen-fixes' Tobias Brunner 2021-05-04 14:39:56 +02:00
• 4886a2c7d8 Doxyfile.in: Remove deprecated variables Noel Kuntze 2021-04-15 00:33:23 +02:00
• a11efc5214 doxygen: Fix documentation problems Noel Kuntze 2021-04-15 00:17:59 +02:00
• 09df86c033 Version bump to 5.9.3dr1 Andreas Steffen 2021-03-31 09:59:55 +02:00
• 66ba50b217 testing: Migrated p2pnat/medsrv-psk scenario to vici Andreas Steffen 2021-03-30 22:05:49 +02:00
• 03e1272ff2 testing: Migrated p2pnat/behind-same-nat scenario to vici Andreas Steffen 2021-03-30 18:54:47 +02:00
• 68154033bb testing: Store mars credentials in the swanctl directory Andreas Steffen 2021-03-28 15:11:28 +02:00
• 2cbf7da51a testing: Migrated redirect-active scenario to vici Andreas Steffen 2021-03-28 15:07:41 +02:00
• 511b860916 testing: Migrated ha/both-active scenario to vici Andreas Steffen 2021-03-27 22:15:13 +01:00
• 5c22e94f0f testing: Migrated ha/active-passive scenario to vici Andreas Steffen 2021-03-27 14:44:47 +01:00
• 737f7fce51 testing: Switched PTS measurements to /usr/sbin Andreas Steffen 2021-03-23 10:49:32 +01:00
• f412c97648 wolfssl: Support SHAKE_256 Andreas Steffen 2021-03-19 07:18:59 +01:00
• a91eb3eb96 wolfssl: Support SHA3 Andreas Steffen 2021-03-18 07:58:21 +01:00
• b57215ba2b wolfssl: Support AES_ECB Andreas Steffen 2021-03-18 07:28:00 +01:00
• bd323ae6c8 openssl: Migrate from deprecated EC_POINT_[set|get]_affine_coordinates_GFp() functions Andreas Steffen 2021-03-19 08:50:27 +01:00
• c5eac9c390 libcharon: Include libtpmtss in monolithic build Petr Gotthard 2021-03-17 12:14:47 +01:00
• 6aef079f59 testing: Bump guest kernel to Linux 5.11 Andreas Steffen 2021-03-07 14:39:44 +01:00
• 87ba3a424d Version bump to 5.9.2 Andreas Steffen 2021-02-26 11:30:13 +01:00
• 88c4d8cb22 Merge branch 'sha2-no-trunc' Tobias Brunner 2021-02-23 17:30:11 +01:00
• 875813c055 save-keys: Fix length of AES-GCM with 12-byte ICV Tobias Brunner 2021-02-23 15:28:36 +01:00
• b6b8880340 save-keys: Add support for full-length HMAC-SHA256 for ESP Michał Skalski 2021-02-22 16:41:23 +01:00
• c632aa7b31 kernel-netlink: Add support for full-length HMAC-SHA2 algorithms Michał Skalski 2021-02-05 06:59:13 +01:00
• aa6da3700a keymat: Add support for full-length HMAC-SHA2 algorithms Michał Skalski 2021-02-22 15:25:45 +01:00
• 7a8cd5d6d0 af-alg: Fix typo in algorithm mapping for full-size HMAC-SHA-256 Michał Skalski 2021-02-22 15:48:37 +01:00
• 356f87355b Version bump to 5.9.2rc2 Andreas Steffen 2021-02-21 10:40:34 +01:00
• 20c47af319 testing: Use TLS 1.3 in TNC PT-TLS tests Andreas Steffen 2021-02-21 09:48:34 +01:00
• 9f55246018 testing: Added mgf1 plugin to load statement Andreas Steffen 2021-02-19 17:41:44 +01:00
• 283b352cee Merge branch 'tls-fixes' Andreas Steffen 2021-02-18 20:28:33 +01:00
• d08fa4bd0a Version bump to 5.9.2rc1 Andreas Steffen 2021-02-17 13:34:06 +01:00
• 48f4f9f667 pt-tls-server: Make TLS client authentication optional as appropriate Tobias Brunner 2021-02-18 15:41:52 +01:00
• 82116dba66 tls-test: Add option to make client authentication optional Tobias Brunner 2021-02-18 15:36:59 +01:00
• 760f3b730f tls-server: Add flag that makes client authentication optional Tobias Brunner 2021-02-18 15:10:42 +01:00
• 11a4687930 libtls: Add control flags and replace GENERIC_NULLOK purpose with one Tobias Brunner 2021-02-18 15:03:29 +01:00
• 602947d48a pt-tls-server: Explicitly request client authentication if necessary Tobias Brunner 2021-02-18 12:34:29 +01:00
• 4b7cfb252e tls-server: Use subject DN as peer identity if it was ID_ANY Tobias Brunner 2021-02-18 12:31:17 +01:00
• d5606ec350 testing: Adapt some checks as SHA-384 is now preferred for TLS signatures Tobias Brunner 2021-02-18 12:01:02 +01:00
• 024120f8ea tls-eap: Only servers conclude EAP method after processing packets Tobias Brunner 2021-02-18 10:46:56 +01:00
• f7613cb581 ike-sa: Properly set timing info for delete after rekeying Stefan Berghofer 2021-02-18 09:43:10 +01:00
• d65d4eab73 NEWS: Add news for 5.9.2 Tobias Brunner 2021-02-17 15:24:36 +01:00
• ff672c785b dhcp: Properly initialize struct when binding to interface Tobias Brunner 2021-02-16 15:22:18 +01:00
• fbb70c968b pts: Don't rely on BIOS event buffer to be null terminated Tobias Brunner 2021-02-16 15:15:38 +01:00
• 8384527ff5 tls-crypto: Fix potential memory leak Tobias Brunner 2021-02-16 14:50:50 +01:00
• f4258c56f5 ike-sa-manager: Ensure we were able to create a new IKE_SA Tobias Brunner 2021-02-16 14:43:52 +01:00
• cb85967655 github: Bump wolfSSL to 4.7.0 Tobias Brunner 2021-02-16 09:08:12 +01:00
• af9d2a8f1e cirrus: Use FreeBSD 12.2 Fedor Korotkov 2021-02-15 13:58:55 -05:00
• 7bd9c0c85e github: Fix emojis in templates Tobias Brunner 2021-02-15 15:30:03 +01:00
• 27544f7bd9 github: Add security policy Tobias Brunner 2021-01-21 17:10:22 +01:00
• ebf13f4caf github: Add issue templates Tobias Brunner 2021-01-21 16:19:25 +01:00
• 4261fcedec botan: Use strongSwan's RNG interface in Botan plugin René Fischer 2021-01-22 13:38:01 +01:00
• 5ffc1ec423 botan: Extract helper function to map RNG quality to Botan RNG names Tobias Brunner 2021-01-29 16:48:03 +01:00
• eb399fb438 botan: Look for Botan 3 in configure script Tobias Brunner 2021-01-29 16:45:02 +01:00
• 97857eaa12 ike-sa: Avoid possible integer underflow when scheduling reauth after rekeying Tobias Brunner 2021-01-15 16:19:49 +01:00
• 20dfbcad08 ha: Register new IKE_SAs before calling inherit_post() Tobias Brunner 2021-01-15 16:28:24 +01:00
• 1c5cef1b89 ike-rekey: Register new IKE_SA before calling inherit_post() Tobias Brunner 2021-01-15 16:25:54 +01:00
• 5d97af5894 ike-sa-manager: Add a method to register/check out new IKE_SAs Tobias Brunner 2021-01-15 16:09:59 +01:00
• bde5bd47bd ike-sa-manager: Rename checkout_new() to create_new() Tobias Brunner 2021-01-15 16:08:20 +01:00
• 7f6386afd9 Remove redundant calls to set peer config after checking out IKE_SAs by config Tobias Brunner 2021-01-15 17:14:07 +01:00
• c46c40ef24 ike-sa-manager: Make checkout_by_config() atomic Tobias Brunner 2020-03-17 09:39:17 +01:00
• c7a0f2698d Merge branch 'tls13' Tobias Brunner 2021-02-12 15:14:37 +01:00
• 74b9ba7cdb tls-crypto: Simplify and extend cipher config filter Tobias Brunner 2021-02-11 18:10:56 +01:00
• 8b2b5a647b proposal: Add aliases for AES-GCM/CCM without explicit ICV length Tobias Brunner 2021-02-11 18:06:49 +01:00
• 966a26eaa2 tls-server: Support x25519/448 for TLS 1.2 Tobias Brunner 2021-02-11 17:47:55 +01:00
• f77ecf0728 tls-crypto: Fallback to any supported ECDH group Tobias Brunner 2021-02-11 17:46:17 +01:00
• 311405c34d tls-crypto: Don't filter suites with specific ECDH group if any is available Tobias Brunner 2021-02-11 17:09:04 +01:00
• 85bde019d3 diffie-hellman: Classify x25519 and x448 as ECDH methods Tobias Brunner 2021-02-11 17:00:05 +01:00
• e3757300eb tls-crypto: Add signature scheme config file filter Pascal Knecht 2021-02-01 21:41:56 +01:00
• e5b6565730 tls-crypto: Rename DH group/key exchange method config option Pascal Knecht 2021-01-18 18:11:55 +01:00
• a60e248b0d libtls: Increase default min version to 1.2 Tobias Brunner 2021-01-27 14:40:22 +01:00
• 3abcbf82b5 tls-peer: Verify server selects the same cipher suite after HelloRetryRequest Tobias Brunner 2021-01-22 10:19:57 +01:00
• ab226b3927 tls-server: Select cipher suite also when handling HelloRetryRequest Tobias Brunner 2021-01-22 10:06:05 +01:00
• 111e907168 tls-server: Remove unused variable Tobias Brunner 2021-01-22 09:41:22 +01:00
• dc9f6c68df libtls: Add downgrade protection for TLS 1.3 and TLS 1.2 Pascal Knecht 2021-01-17 16:33:02 +01:00
• a4a128bd2f tls-server: Optionally omit CAs in CertificateRequest messages Shmulik Ladkani 2021-01-15 14:45:34 +01:00
• 083f38259c tls-eap: Conclude EAP method also after processing packets Tobias Brunner 2021-01-14 18:02:00 +01:00
• a00ace0fe2 libtls: Only run socket tests with EdDSA keys if they are supported Tobias Brunner 2021-01-14 15:45:34 +01:00
• 7b64880a8c tls-peer: Don't log anything if we are not sending supported groups Tobias Brunner 2021-01-14 16:14:47 +01:00
• 8cf3998f1a tls-crypto: Only log modified TLS versions if successfully set Tobias Brunner 2021-01-14 15:11:13 +01:00
• 92aef122c3 libtls: Reduce default max version to 1.2 Tobias Brunner 2021-01-13 15:26:33 +01:00
• 663969ddf7 libtls: Make min/max TLS version configurable Tobias Brunner 2021-01-13 14:40:40 +01:00
• 9389fef78a test-hkdf: Add two test cases and restructure all tests Pascal Knecht 2020-11-22 21:37:37 +01:00
• 7797c058d9 tls-hkdf: Implement binder PSK generation Pascal Knecht 2020-12-04 19:01:00 +01:00
• 3e535c31b4 tls-hkdf: Implement resumption key generation Pascal Knecht 2020-11-22 21:30:45 +01:00
• 9ef46cfaf9 tls-peer: Mutual authentication support for TLS 1.3 Pascal Knecht 2020-11-10 14:50:59 +01:00
• 2d933f318b tls-peer: Derive application traffic keys after server finished message Pascal Knecht 2020-11-10 14:44:51 +01:00
• d41d8b0039 tls-peer: Use private key enumeration also in TLS versions < 1.2 Pascal Knecht 2020-11-17 17:54:55 +01:00
• d8e42a3d4e tls-crypto: Share private key search between client and server Pascal KnechtandTobias Brunner 2020-11-10 10:22:12 +01:00
• 299cc80094 tls-test: Add support to require/verify client certificates Pascal Knecht 2020-11-01 16:39:00 +01:00
• d2fc9b0961 tls-server: Mutual authentication support for TLS 1.3 Pascal Knecht 2020-10-30 15:15:30 +01:00
• dc49d457a2 tls-server: Terminate connection if peer certificate is required but not sent Pascal Knecht 2020-11-04 13:07:49 +01:00
• 4bba89fff3 tls-server: Make CertificateRequest conditional in old TLS versions Pascal Knecht 2020-11-04 12:22:58 +01:00
• 4635f348fa tls-server: Share trusted public key search between client and server Pascal Knecht 2020-11-01 17:01:14 +01:00
• 6b23543abd tls-crypto: Move AEAD ownership to the protection layer Pascal Knecht 2020-10-28 21:54:09 +01:00
• 534a781646 tls-hkdf: Always use correct base key to derive finished message Pascal Knecht 2020-11-08 15:34:39 +01:00
• 0aaf1242d9 libtls: Add unit tests for Ed25519 and Ed448 keys Pascal Knecht 2020-10-23 22:56:03 +02:00
• 5e579ebe8f tls-test: Load keys of any type Pascal Knecht 2020-10-23 16:01:03 +02:00
• 34f66ce6cb tls-crypto: Support EdDSA keys with ECDSA cipher suites Pascal Knecht 2020-10-23 16:17:16 +02:00