Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9326e4707b github: Remove installation of unnecessary debug symbols for OpenSSL Tobias Brunner 2026-06-29 17:12:45 +02:00
• 02ade69543 vici: Update supported Python versions Tobias Brunner 2026-06-29 16:59:34 +02:00
• b727eb88b4 github: Use AWS-LC 5.1.0 for tests Tobias Brunner 2026-06-29 16:42:40 +02:00
• 7eefadca67 Use wolfSSL 5.9.2 for tests Tobias Brunner 2026-06-26 08:11:39 +02:00
• 528898a976 unit-tests: Allow Ed448 implementations to fail parsing small-order public keys Tobias Brunner 2026-06-29 17:42:28 +02:00
• 98b133c54c wolfssl: Adapt to removed ML-KEM header Tobias Brunner 2026-06-26 08:10:16 +02:00
• ae7bb3bd42 github: Use OpenSSL 3.6.3 and 4.0.1 for tests Tobias Brunner 2026-06-09 13:54:06 +02:00
• 5973ff8e41 Version bump to 6.0.7 Andreas Steffen 2026-06-07 19:54:14 +02:00
• d7e305f93f NEWS: Add news for 6.0.7 and info about CVE-2026-47895 Tobias Brunner 2026-05-27 11:35:09 +02:00
• 075323d895 identification: Fix double-free when cloning empty IDs R. Elliott Childre 2026-05-18 00:53:24 -04:00
• 5fc403702b leak-detective: Also ignore unknown memory freed in OPENSSL_cleanup() Tobias Brunner 2026-06-05 16:58:45 +02:00
• 3216646bdb leak-detective: Add workaround for unknown memory reports with glibc Tobias Brunner 2026-06-05 12:24:43 +02:00
• 4df53109a5 eap-aka: Make sure AT_RAND has the correct length in AKA-Challenge Tobias Brunner 2026-06-04 11:31:11 +02:00
• a904f9125d kernel-netlink: Enable mixed-family IPComp scenarios Tobias Brunner 2026-06-04 11:22:58 +02:00
• 531de4d858 pkcs7: Fail parsing PKCS#7 signed-data if content can't be parsed Tobias Brunner 2026-06-01 18:19:03 +02:00
• 74fd2593a7 charon-cmd: Make local host configurable Tobias Brunner 2026-06-01 09:02:35 +02:00
• 64e01e2812 charon-cmd: Use %any as local address so IPv4 is not preferred Tobias Brunner 2026-06-01 08:54:49 +02:00
• 615e7ad9ab oss-fuzz: Add new fuzzer targeting libtls Arthur ChanandTobias Brunner 2026-02-11 09:57:43 +00:00
• 5185b6f6e8 swanctl: Add option to only list a specific connection with --list-conns Tobias Brunner 2026-05-28 16:44:54 +02:00
• 5b56e56e72 Merge branch 'vici-proposals' Tobias Brunner 2026-05-28 16:27:37 +02:00
• b3ef007d28 vici: Return proposals in a more structured way Tobias Brunner 2026-05-27 08:27:15 +02:00
• c70ab88363 vici: Include proposals in connection listings Mathijs Smit 2026-05-20 13:45:55 +02:00
• eb9e44f783 ike-cfg: Add flag to suppress log message when retrieving proposals Tobias Brunner 2026-05-21 17:16:09 +02:00
• 60adb95f58 child-cfg: Add flag to suppress log message when retrieving proposals Tobias Brunner 2026-05-21 17:14:31 +02:00
• bff405c349 oid: Fix confusing identifiers for elliptic curves over prime fields Tobias Brunner 2026-05-28 13:30:07 +02:00
• 5fcf1fc0ef public-key: Fix mapping of RSA with PKCS#1 v1.5 and SHA3-512 to OID Tobias Brunner 2026-05-28 13:21:22 +02:00
• 172c2a39d2 configure: Fix check for option that indicates if plugins are packaged separately Tobias Brunner 2026-05-28 12:14:39 +02:00
• 96627b4af5 github: Fix typo when enabling curve25519 plugin for gcrypt tests Tobias Brunner 2026-05-28 12:17:45 +02:00
• 6f99862da8 github: Move permissions to the individual jobs Tobias Brunner 2026-05-27 13:31:51 +02:00
• 5a2ed87945 github: Increase the time CIFuzz is running the fuzzers Tobias Brunner 2026-05-27 12:38:27 +02:00
• 50fc4c24a6 fuzz: Add fuzzer targeting RADIUS messages Arthur Chan 2026-03-11 22:21:16 +00:00
• a5bcaa70ed fuzz: Add fuzzer targeting VICI messages Arthur Chan 2026-03-11 21:54:45 +00:00
• a76bd171f8 github: Add a note regarding vulnerability reports to issue template Tobias Brunner 2026-05-21 10:12:14 +02:00
• dc8b479eb8 ike-init: Fix key derivation if SA is reset after IKE_INTERMEDIATE retransmits Tobias Brunner 2026-05-20 13:49:44 +02:00
• 18a94525a7 Revert "testing: Ignore unknown memory in leak detective" Tobias Brunner 2026-05-20 11:22:33 +02:00
• f0a489f7e2 credential-manager: Check certificate expiry also for trusted self-signed certs Thomas Jarosch 2026-05-05 14:38:30 +02:00
• 0d17838b99 credential-manager: Check expiry also for last cert in incomplete trust chain Thomas Jarosch 2026-05-05 15:41:01 +02:00
• 95f615a603 unit-tests: Replace expired self-signed TLS certificates Tobias Brunner 2026-05-19 16:49:22 +02:00
• 9ac3db8e63 swid-gen: Use process_t to avoid potential command injection Tobias Brunner 2026-05-18 14:19:35 +02:00
• ac703e48c3 ike-init: Destroy KE object after each derivation during initial exchanges Tobias Brunner 2026-05-18 16:29:41 +02:00
• 158b4c4aa4 child-rekey: Avoid potential use-after-free for deleted SPIs array Tobias Brunner 2026-05-18 15:47:46 +02:00
• ea569867d2 tun-device: Fix setting IPv6 address on Linux Tobias Brunner 2026-05-18 15:41:04 +02:00
• 7bdd4bf77b swanctl: Make sure options array passed to getopt_long() ends with a NULL entry Tobias Brunner 2026-05-18 15:20:27 +02:00
• a1ad9e39fc pki: Make sure options array passed to getopt_long() ends with a NULL entry Tobias Brunner 2026-05-18 15:18:08 +02:00
• 4950a37e56 pts: Fix error string if mandatory DH group is unavailable Tobias Brunner 2026-05-18 15:02:08 +02:00
• 3b224a70ba xof: Fix mapping for SHA3-512 to a corresponding MGF1 identifier Tobias Brunner 2026-05-18 14:54:54 +02:00
• a26dd3da33 openssl: Check that EC keys don't have explicit params for internally loaded keys Tobias Brunner 2026-05-18 14:45:38 +02:00
• ab19f691c7 botan: Fix registration of ECDSA signature/verification plugin features Tobias Brunner 2026-05-13 16:03:31 +02:00
• 15879eaddd github: Use AWS-LC 1.73.0 for tests Tobias Brunner 2026-05-12 17:44:40 +02:00
• 7e7629499f receiver: Avoid unaligned memory access in COOKIE verification Tobias Brunner 2026-05-12 16:59:16 +02:00
• 8f22345542 dhcp: Fix potential OOB read when parsing DHCP messages Tobias Brunner 2026-05-11 10:40:36 +02:00
• 7faf93b701 github: Evict old entries from ccache Tobias Brunner 2026-05-19 11:29:27 +02:00
• 3b902ea59b github: Use separate caches for custom-built dependencies Tobias Brunner 2026-05-12 10:46:29 +02:00
• 821ba89961 github: Remove most builds with leak detective Tobias Brunner 2026-05-11 18:20:04 +02:00
• afe51f19e7 github: Always build OpenSSL with SRP support Tobias Brunner 2026-05-11 14:53:10 +02:00
• a4b7d57c79 github: Only store a cache for large custom-built crypto libs Tobias Brunner 2026-05-11 11:27:44 +02:00
• 134b942494 github: Disable TRAP caching for CodeQL workflow Tobias Brunner 2026-05-08 15:48:06 +02:00
• c85901e2f2 github: Fix ref in cache cleanup workflow Tobias Brunner 2026-05-08 15:30:13 +02:00
• 9c140dd45c github: Add workflow to remove cache entries once a branch is deleted Tobias Brunner 2026-05-08 14:45:25 +02:00
• daa0b109da github: Only store (and delete) caches for branches not PRs Tobias Brunner 2026-05-08 14:42:30 +02:00
• 93cf3de1fc Use Botan 3.12.0 for tests Tobias Brunner 2026-05-08 11:59:02 +02:00
• 77cc45dc6f github: Simplify the CodeQL workflow Tobias Brunner 2026-05-07 18:01:34 +02:00
• 9854392a1f github: Don't restore just any cache for the Linux tests Tobias Brunner 2026-05-07 17:55:18 +02:00
• e4a15e5518 github: Let diff report if the active transforms are identical Tobias Brunner 2026-05-07 11:22:55 +02:00
• 3a44941d2c github: Remove commit ID from cache keys and manually evict old entries Tobias Brunner 2026-04-17 15:18:11 +02:00
• 94443ebad1 github: Disable fail-fast strategy instead of using continue-on-error Tobias Brunner 2026-05-06 16:11:00 +02:00
• 4acf09644c github: Add build against OpenSSL 4.0.0 Tobias Brunner 2026-05-04 15:12:05 +02:00
• 8ff3238027 openssl: Prevent OpenSSL from using posix_memalign() if LD is enabled Tobias Brunner 2026-05-04 15:06:49 +02:00
• 374b17fe88 openssl: Fix 'const' issues that came up with OpenSSL 4 Tobias Brunner 2026-05-04 12:11:47 +02:00
• 528e5f07c3 openssl: Use functions for ASN.1 struct members hidden in OpenSSL 4 Tobias Brunner 2026-05-04 12:04:53 +02:00
• 82c01b7060 openssl: Use openssl_i2chunk when creating ASN.1 chunks Thomas Egerer 2025-11-05 10:18:48 +00:00
• 4821758d46 kernel-pfkey: Add some sanity checks when processing kernel events Tobias Brunner 2026-04-23 15:12:12 +02:00
• 0a64c27a1f constant-time: Fix Doxygen group assignment Tobias Brunner 2026-04-23 11:46:52 +02:00
• b4ba8a6fb5 openssl: Fix memory leak if ipAddrBlock is non-canonical Tobias Brunner 2026-04-22 09:44:38 +02:00
• 9e8292cb37 nm: Version bump to 1.6.5 Tobias Brunner 2026-04-22 14:01:52 +02:00
• 4d709df8b2 Version bump to 6.0.6 Andreas Steffen 2026-04-22 07:55:01 +02:00
• 8b68b2ea51 NEWS: Add news for 6.0.6 and info about CVEs (CVE-2026-35328..35334) Tobias Brunner 2026-04-16 18:34:24 +02:00
• e2fa67e8fc gmp: Avoid crash and timing leaks in PKCS#1 v1.5 decryption padding validation Tobias Brunner 2026-03-24 18:05:01 +01:00
• 90fd268088 utils: Add constant-time comparison primitives for uint32_t Tobias Brunner 2026-03-24 18:00:23 +01:00
• 8dae5605a7 pkcs7: Avoid NULL pointer dereference when verifying padding in enveloped content Tobias Brunner 2026-03-25 10:35:03 +01:00
• c6a2185c42 pkcs5: Fail decryption if data is empty Tobias Brunner 2026-03-25 10:32:36 +01:00
• 4da84019cc pkcs5: Avoid NULL pointer dereference when verifying padding Tobias Brunner 2026-03-25 10:28:45 +01:00
• 56c7f0d13d tls-server: Prevent infinite loop if supported versions are too short Tobias Brunner 2026-03-25 10:17:46 +01:00
• 64130ede5c constraints: Reject excluded directoryName (DN) name constraints Tobias Brunner 2026-03-23 18:02:19 +01:00
• c66143db48 constraints: Match FQDN and email addresses case-insensitively Tobias Brunner 2026-03-23 17:45:11 +01:00
• 1e0643bef1 tls-server: Only accept non-empty ECDH public keys with TLS < 1.3 Tobias Brunner 2026-03-20 17:38:07 +01:00
• e067d24293 libradius: Reject undersized attributes in enumerator Lukas Johannes Möller 2026-03-12 10:24:45 +00:00
• aa5aaebc33 libsimaka: Reject zero-length EAP-SIM/AKA attributes Lukas Johannes Möller 2026-03-11 16:07:10 +00:00
• 19d73ef156 github: Move CI for Windows from AppVeyor to GitHub Actions Tobias Brunner 2026-04-21 09:56:18 +02:00
• e0fb06c9cc Revert "github: Remove commit ID from cache keys" Tobias Brunner 2026-04-21 11:03:09 +02:00
• 60f4c86780 github: Remove commit ID from cache keys Tobias Brunner 2026-04-17 15:18:11 +02:00
• 1d36cae26a cirrus/github: Move CI for Alpine from Cirrus CI to GitHub Actions Tobias Brunner 2026-04-17 10:51:28 +02:00
• 06b14b8988 cirrus/github: Move CI for FreeBSD from Cirrus CI to GitHub Actions Tobias Brunner 2026-04-17 10:27:48 +02:00
• cb27593ce0 kernel-netlink: Update family in SA selector if addresses change Tobias Brunner 2026-03-18 13:00:18 +01:00
• e1a11e2c1c ike: Use correct format string for unique Child SA identifiers Tobias Brunner 2026-04-16 15:25:07 +02:00
• 2a8fd3e4bf ike: Use correct format string for unique IKE SA identifiers Tobias Brunner 2026-04-16 15:13:52 +02:00
• 5334d93a45 delete-ike-sa-job: Log unique ID when deleting half-open IKE SA Tobias Brunner 2026-04-16 14:59:28 +02:00
• 7f6fc50ba3 ike-init: Log the IKE SA's unique identifier when creating one as responder Tobias Brunner 2026-04-16 14:55:56 +02:00
• 1ee7e10940 testing: Fix typo regarding ML-KEM in description Tobias Brunner 2026-04-15 15:00:35 +02:00
• 7862974e10 github: Use AWS-LC 1.72.0 for tests Tobias Brunner 2026-04-14 08:33:56 +02:00