Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9803fb82f4 tls-server: Consider supported signature algorithms when selecting key/certificate Pascal Knecht 2020-10-12 18:58:53 +02:00
• 06112f3fe2 tls-crypto: Distinguish between signing and verifying signature schemes Pascal Knecht 2020-10-13 13:54:38 +02:00
• e731396280 tls-server: Check if peer sent hash and signature algorithms Pascal Knecht 2020-10-16 09:28:49 +02:00
• 91c9e4d576 tls-crypto: Add missing signature scheme constants Pascal Knecht 2020-10-10 17:10:37 +02:00
• 0dfe1590b6 tls-server: Fix invalid signature algorithm and supported groups parsing Pascal Knecht 2020-10-09 19:14:11 +02:00
• 3767a4a655 tls-server: Support multiple client key shares Pascal Knecht 2020-10-02 18:11:45 +02:00
• 64e2506f5b libtls: Add TLS version negotiation test cases Pascal Knecht 2020-09-29 14:15:19 +02:00
• c3e7132468 tls-server: Support HelloRetryRequest (HRR) Pascal Knecht 2020-09-26 13:17:43 +02:00
• e53bee9dbe tls-crypto: Add support to configure DH groups to use Pascal Knecht 2020-09-26 22:19:16 +02:00
• 9514aa2dcc diffie-hellman: Add enum names that match proposal keywords Tobias Brunner 2021-01-27 14:35:37 +01:00
• 066ac8809c tls-crypto: Generalizing DH group to TLS group mapping Pascal Knecht 2020-09-30 14:57:14 +02:00
• ab70f68cf9 tls-server: Support KeyUpdate requests and answers Pascal Knecht 2020-09-27 16:43:08 +02:00
• 5c4cb40e47 tls-server: Refactor writing of key share extensions Pascal Knecht 2020-09-21 22:19:34 +02:00
• 7fbe2e27ec tls-server: TLS 1.3 support for TLS server implementation Pascal Knecht 2020-09-08 15:58:14 +02:00
• 328d7af6d2 tls-crypto: Rename parameter to be more consistent Pascal Knecht 2020-09-16 14:10:57 +02:00
• 6549adb608 tls-crypto: Fix invalid signature algorithm list building Pascal Knecht 2020-09-16 08:54:54 +02:00
• f81c04e9e3 libtls: Add missing cipher suite and TLS extension constants Pascal Knecht 2020-09-15 16:08:08 +02:00
• d107198fcb tls-crypto: Rework cipher suite preference order Pascal Knecht 2020-09-04 19:36:40 +02:00
• 06424efa17 tls-server: Determine supported/configured suites and versions early Tobias Brunner 2020-11-19 14:40:30 +01:00
• 8a6edc08a4 tls-crypto: Check if TLS versions and cipher suites match Pascal Knecht 2020-09-04 18:29:43 +02:00
• f920125304 tls-peer: Don't initiate TLS connection if no cipher suites are supported Pascal Knecht 2020-09-03 21:53:52 +02:00
• 06aad98ff0 tls-test: Make plugin list configurable via environment variable Tobias Brunner 2020-09-03 15:56:14 +02:00
• 00a6280aab tls-peer: Return INVALID_STATE after changing TLS 1.3 keys Tobias Brunner 2020-09-01 18:59:17 +02:00
• 121ac4b9e3 tls-crypto: Generate MSK for TLS 1.3 Tobias Brunner 2020-09-01 18:51:32 +02:00
• d2fe921cf5 tls-hkdf: Add method that allows exporting key material Tobias Brunner 2020-09-01 18:50:47 +02:00
• 86cda1a3c0 tls-hkdf: Handle label expansion inside expand_label() Tobias Brunner 2020-09-01 18:48:41 +02:00
• 3e89d26e1c tls-hkdf: Pass secret to derive_secret() explicitly Tobias Brunner 2020-09-01 18:35:02 +02:00
• 4e2b8f9c71 tls-hkdf: Store OKM in local variables Tobias Brunner 2020-08-31 17:08:07 +02:00
• 1b593e1d48 tls-crypto: Add support for RSA-PSS signatures Tobias Brunner 2020-08-28 08:59:37 +02:00
• e02f19e3c6 tls-peer: Support answering KeyUpdate requests Tobias Brunner 2020-08-28 10:23:43 +02:00
• 27360d3407 tls-socket: Change how EOF of the underlying socket is handled Tobias Brunner 2020-08-28 11:56:36 +02:00
• bfcb49b393 tls-peer: Add support to handle KeyUpdate message Tobias Brunner 2020-08-27 11:51:58 +02:00
• 1466d4da25 tls-crypto: Add method to update application traffic keys Tobias Brunner 2020-08-27 11:51:00 +02:00
• b51c1d468e tls-hkdf: Support updating client/server traffic secrets Tobias Brunner 2020-08-27 11:50:00 +02:00
• 09fbaad6bd tls-socket: Don't fail reading if sending data failed Tobias Brunner 2020-08-26 17:42:21 +02:00
• d532d6c7bc tls-peer: Correctly handle classic ECDH key-share format Tobias Brunner 2020-08-26 16:08:26 +02:00
• 8e35b1f1a5 tls-test: Add options to configure TLS versions Tobias Brunner 2020-08-26 15:00:30 +02:00
• a7f2818832 tls-socket: Allow configuring both minimum and maximum TLS versions Tobias Brunner 2020-08-26 14:40:51 +02:00
• c4576a1f57 tls: Allow setting both minimum and maximum TLS versions Tobias Brunner 2020-08-26 14:37:59 +02:00
• 2b6565c236 tls-peer: Handle HelloRetryRequest Tobias Brunner 2020-08-25 17:23:45 +02:00
• 2271d67f07 tls-crypto: Add method to hash handshake data and use result as initial transcript Tobias Brunner 2020-08-25 17:17:55 +02:00
• 64e63c68c8 tls-crypto: Destroy HKDF instance if keys are derived multiple times Tobias Brunner 2020-08-25 17:13:17 +02:00
• 851b605e21 tls-peer: Refactor writing of extensions and use less hard-coded DH group Tobias Brunner 2020-08-25 16:18:27 +02:00
• de31646a09 tls-peer: Refactor sending/processing finished message Tobias Brunner 2020-08-25 16:25:37 +02:00
• 44cda40d58 tls-peer: Simply ignore certificate request context Tobias Brunner 2020-08-25 17:21:02 +02:00
• bfa3178836 tls-peer: Use existing code to verify certificate and signature Tobias Brunner 2020-08-25 16:17:27 +02:00
• c78b2bee5d tls-peer: Refactor parsing of TLS extensions Tobias Brunner 2020-08-25 16:14:54 +02:00
• f0ed5f9125 tls-peer: Fix parsing of encrypted extensions Tobias Brunner 2020-08-28 08:54:49 +02:00
• 4c40a3d3f0 tls-peer: Fix parsing of intermediate CA certificates Tobias Brunner 2020-08-25 16:11:59 +02:00
• 2e1c0a2776 tls-crypto: Rename methods to calculate finished message Tobias Brunner 2020-08-25 16:52:20 +02:00
• f116a4823f tls-crypto: Use internal PRF of tls-hkdf to generate finished message Tobias Brunner 2020-08-25 16:49:52 +02:00
• a9f661f52a tls-hkdf: Add helper method to allocate data from the internal PRF Tobias Brunner 2020-08-25 16:44:17 +02:00
• 6a0ee0c23c tls-hkdf: Cleanups and refactorings Tobias Brunner 2020-08-25 16:01:27 +02:00
• de983a3cb9 tls-crypto: Simplify signature creation/verification Tobias Brunner 2020-08-25 15:58:46 +02:00
• 2921f43705 tls-crypto: Simplify handshake/application key derivation and rename methods Tobias Brunner 2020-08-25 13:22:04 +02:00
• fff1974012 tls-hkdf: Make labels enum a proper type Tobias Brunner 2020-08-25 13:35:54 +02:00
• 8495138d4a tls-peer: Support x25519/448 for TLS 1.2 Tobias Brunner 2020-08-26 15:23:53 +02:00
• 3101120c75 tls-crypto: Enumerate x25519/448 and rename constant for consistency Tobias Brunner 2020-08-25 13:16:52 +02:00
• 53ba0801ac tls-crypto: Simplify hash algorithm handling Tobias Brunner 2020-08-25 13:14:05 +02:00
• 43c8f950a7 tls-crypto: Delay instantiation of cipher suites Tobias Brunner 2020-08-25 15:46:29 +02:00
• 281766c5e6 tls-crypto: Filter TLS cipher suites by min/max version Tobias Brunner 2020-08-25 13:54:08 +02:00
• 436571b2f0 tls-crypto: Correctly filter cipher suites based on PRF algorithms Tobias Brunner 2020-08-25 13:47:00 +02:00
• b7ea969b32 tls-crypto: Use correct key length for ChaCha20/Poly1305 Tobias Brunner 2020-08-26 12:18:06 +02:00
• ba3c90ded1 libtls: Some code style fixes Tobias Brunner 2020-08-25 16:32:40 +02:00
• 4099035a0c tls-test: Make address family configurable and simplify DNS/socket handling Tobias Brunner 2020-08-25 13:09:55 +02:00
• 7a2b02667c libtls: Implement TLS 1.3 handshake on client-side bytinbitandryru 2020-05-21 09:37:38 +02:00
• 02d7405512 libtls: Implement HKDF for TLS 1.3 Pascal Kandbytinbit 2020-05-21 07:57:14 +02:00
• 3d83d348f4 libtls: Add support to run unit tests with a custom plugin list Tobias Brunner 2020-04-22 16:27:00 +02:00
• 818dc86568 libtls: Add TLS 1.3 implementation of tls_aead_t Tobias Brunner 2020-04-22 16:03:01 +02:00
• ba2bcdd882 libtls: Allow tls_aead_t to change the content type Tobias Brunner 2020-04-22 15:44:31 +02:00
• 0d43b39931 testing: extended sleep time tkm/xfrmproxy tests Andreas Steffen 2021-02-12 09:44:00 +01:00
• ab58f95b12 Version bump to 5.9.2dr2 Andreas Steffen 2021-02-10 10:04:34 +01:00
• cc25d2195a testing: Copy /etc/resolv.conf from host in chroot script Tobias Brunner 2020-12-18 14:18:47 +01:00
• f3acc0a87b appveyor: Set timezone on the build system Tobias Brunner 2021-02-11 10:20:43 +01:00
• 8ff8b85ce6 appveyor: Create dummy strongswan.conf file to avoid log messages Tobias Brunner 2021-02-10 18:04:41 +01:00
• 671164865b appveyor: Print OpenSSL version Tobias Brunner 2021-02-10 18:04:27 +01:00
• 781ad0b93b openssl: Allocate our own buffer for i2d_* wrapper macro Tobias Brunner 2021-02-10 17:55:06 +01:00
• 6a440f83ab openssl: Reset HMAC key if chunk_empty is passed Tobias Brunner 2020-12-18 14:17:37 +01:00
• cd10ae2ff0 android: Explicitly apply DNS servers to the TUN device Tobias Brunner 2020-11-24 16:50:55 +01:00
• 4dc9edfa55 swanctl: Don't print status message if nothing was loaded to stderr Tobias Brunner 2021-01-27 14:51:56 +01:00
• 2566eb2194 plugin-loader: Add optional filter for plugin features Thomas Egerer 2021-01-28 17:49:08 +00:00
• e6a6fc33b6 path: Also accept / as directory separator on Windows Tobias BrunnerandMichał Skalski 2021-02-01 14:35:09 +01:00
• 3de65f8d67 enumerator: Implement globbing enumerator on Windows Tobias Brunner 2021-01-28 15:10:52 +01:00
• 4525233b1e vici: Fix refcount for CA certificates when reloading authority sections Tobias Brunner 2021-01-20 15:52:33 +01:00
• 6c26267b07 openssl: Fix potential crash with ECDH on Windows Tobias Brunner 2021-01-26 19:33:24 +01:00
• 55df5e9797 openssl: Avoid conflicts with wincrypt.h on Windows Tobias Brunner 2021-01-26 11:17:20 +01:00
• a5f4b996bf appveyor: Also build against newer OpenSSL versions Tobias Brunner 2021-01-26 10:25:03 +01:00
• 14a0c08235 Enable Windows CI build of pkcs11 plugin Michał Skalski 2021-01-24 21:30:41 +01:00
• f30187d422 pkcs11: Fix build on Windows Michał Skalski 2021-01-24 21:14:57 +01:00
• 8d8739ace6 github: Enable farp plugin on macOS Tobias Brunner 2021-01-19 17:04:58 +01:00
• 1af4ae8732 cirrus: Build farp plugin on FreeBSD Tobias Brunner 2021-01-19 17:03:56 +01:00
• 95a0d800c9 farp: Add support for macOS and FreeBSD Dan James 2020-12-19 19:04:16 -05:00
• 8e367df6db Merge branch 'openssl-ecp' Tobias Brunner 2021-01-20 17:54:42 +01:00
• 74e02ff5e6 openssl: Mainly use EVP interface for ECDH Tobias Brunner 2020-12-01 11:45:05 +01:00
• 5fdc979770 openssl: Extract helper function to derive a shared DH secret Tobias Brunner 2020-12-01 11:43:40 +01:00
• 86fb24c2c5 Remove the ecp_x_coordinate_only option Tobias Brunner 2020-12-01 10:13:30 +01:00
• 7733ff7d4e openssl: Use ECDH_compute_key() for 'x-coordinate only' setting Mahantesh Salimath 2020-11-30 22:03:03 +00:00
• aa3d5bf791 Revert "nm: Remove dummy TUN device" Tobias Brunner 2020-11-30 11:48:07 +01:00
• bd9b50dcd3 load-tester: Correctly encode serial of generated client certificates Tobias Brunner 2021-01-08 10:06:06 +01:00
• d8e4a2a777 identification: Change abbreviation for surname/serialNumber RDNs Коренберг МаркandTobias Brunner 2020-07-15 13:25:56 +05:00