Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• c503eec92e keymat_v1: Remove useless assignment Tobias Brunner 2018-09-17 16:00:11 +02:00
• 0af96ad5e7 kernel-netlink: Check return value of both halfs when installing default route in main table Tobias Brunner 2018-09-17 15:56:48 +02:00
• d51a28bd5c botan: Fix leak if hasher initialization fails Tobias Brunner 2018-09-17 17:59:55 +02:00
• dc09570a12 botan: Share code to generate RSA EMSA PSS signature identifier strings Tobias Brunner 2018-09-17 12:57:25 +02:00
• 2788529827 botan: Remove unnecessary nested blocks and simplify keyid allocation Tobias Brunner 2018-09-17 12:33:09 +02:00
• 7855ad4c9e daemon: Remove redundant assignment to time_format Tobias Brunner 2018-09-14 16:10:46 +02:00
• 11b4a87050 Version bump to 5.7.0rc1 Andreas Steffen 2018-09-16 09:30:09 +02:00
• 9a4b47ef96 testing: Extended Botan scenarios Andreas Steffen 2018-09-12 17:21:21 +02:00
• d2a1834d01 NEWS: Added some news for 5.7.0 Tobias Brunner 2018-09-12 18:41:53 +02:00
• bbe72f97f9 travis: Silence git checkout for Botan Tobias Brunner 2018-09-12 17:18:15 +02:00
• c46a94e0cc Merge branch 'botan-plugin' Tobias Brunner 2018-09-12 16:25:07 +02:00
• 1bbb736edc travis: Use a fix revision for Botan and speed up subsequent builds via ccache Tobias Brunner 2018-09-12 15:51:08 +02:00
• 24af02b00d travis: Use amalgamation build for Botan and build outside our source tree Tobias Brunner 2018-09-12 13:12:44 +02:00
• a80069e7bf gcrypt: Make generic DH constructor static Tobias Brunner 2018-09-12 12:56:11 +02:00
• e5d5277467 travis: Build botan plugin also in the tests that build everything Tobias Brunner 2018-09-12 12:05:14 +02:00
• 9c6bcb21f0 travis: Only add the sonarcloud addon for that build Tobias Brunner 2018-09-12 12:02:41 +02:00
• 72a6831e7c testing: Added botan/rw-cert scenario Andreas Steffen 2018-09-05 08:07:06 +02:00
• a5c682e87d testing: Enable Botan and the plugin Tobias Brunner 2018-08-30 17:47:43 +02:00
• b4062c4bb7 botan: Add support for X25519 Tobias Brunner 2018-09-11 11:05:21 +02:00
• 40b3bf6ba7 botan: Simplify DH/ECDH key derivation Tobias Brunner 2018-09-11 10:58:42 +02:00
• 125222dca7 test-vectors: Add the actual test vector from RFC 8031 for x25519 Tobias Brunner 2018-09-11 10:32:50 +02:00
• e5e500c07e ike-init: Fix leak if KE payload creation fails Tobias Brunner 2018-08-30 14:48:34 +02:00
• 472efd3809 leak-detective: Add an option to ignore frees of unknown memory blocks Tobias Brunner 2018-08-08 17:06:15 +02:00
• 9ee23d5efa travis: Add Botan build Tobias Brunner 2018-08-08 11:35:46 +02:00
• c064a5288e leak-detective: Whitelist some Botan functions Tobias Brunner 2018-08-08 11:41:36 +02:00
• 304d4ca57a botan: Adhere to configured DH exponent length Tobias Brunner 2018-08-10 17:04:09 +02:00
• bd267c863f botan: Encode private keys as PKCS#8 Tobias Brunner 2018-08-10 09:02:26 +02:00
• 607f10dca4 botan: Load public/private keys generically Tobias Brunner 2018-08-09 13:00:50 +02:00
• 72491b7843 botan: Encode curve OID and public key in EC private key Tobias Brunner 2018-08-08 18:23:11 +02:00
• ba7e74291e pkcs1: Accept EC private keys without public key but make sure of an OID Tobias Brunner 2018-08-09 08:45:48 +02:00
• de2a24310c botan: Fixes, code style changes plus some refactorings Tobias Brunner 2018-08-06 17:46:54 +02:00
• 13f113f7a9 botan: Add MD5 support to Botan hasher René Korthaus 2018-07-27 09:33:39 +02:00
• 04ecaff6a9 unit-tests: Remove 768 bits RSA gen test René Korthaus 2018-07-26 11:17:07 +02:00
• af26cc4d85 botan: Add Botan plugin to libstrongswan René Korthaus 2018-07-25 13:01:19 +02:00
• 66c4735f99 dumm: Remove the Dynamic UML Mesh Modeler framework Tobias Brunner 2018-09-12 11:02:32 +02:00
• 948c42ab2e android: Properly set log file path Tobias Brunner 2018-09-12 11:44:33 +02:00
• bd61236b4a conf: Document new filelog configuration Tobias Brunner 2018-09-12 11:42:38 +02:00
• f6b4ba2a65 library: Return FALSE from library_init() if loaded settings are invalid Tobias Brunner 2018-09-11 17:56:38 +02:00
• 71dca60c31 settings: Don't allow dots in section/key names anymore Tobias Brunner 2018-05-31 11:46:29 +02:00
• 85afe81e1f ike-auth: Remove unnecessary case statement Tobias Brunner 2018-09-11 11:33:05 +02:00
• a0c302f878 vici: Remove unreachable code Tobias Brunner 2018-09-07 11:17:06 +02:00
• 954e75effa vici: Lease enumerator is always defined Tobias Brunner 2018-09-07 11:12:24 +02:00
• 55fb268b51 stroke: Lease enumerator is always defined Tobias Brunner 2018-09-07 11:03:29 +02:00
• 648709b392 smp: Remove unreachable initializer Tobias Brunner 2018-09-07 10:56:07 +02:00
• 23d756e4f0 eap-sim-pcsc: Fix leak in error case Tobias Brunner 2018-09-07 10:36:41 +02:00
• e2d8833f2b travis: Add sonarcloud build Tobias Brunner 2018-09-10 18:46:20 +02:00
• f5481496d6 travis: Automatically retry install steps Tobias Brunner 2018-09-10 12:22:20 +02:00
• 80e8845d36 swanctl: Allow passing a custom config file for each --load* command Tobias Brunner 2018-05-28 17:19:22 +02:00
• 7257ba3b44 Merge branch 'ikev2-ppk' Tobias Brunner 2018-09-10 18:05:12 +02:00
• d1c5e6816d testing: Add some PPK scenarios Tobias Brunner 2018-08-30 18:14:06 +02:00
• 755985867e swanctl: Report the use of a PPK in --list-sas Tobias Brunner 2018-07-27 13:14:40 +02:00
• c4d2fdd915 vici: Return PPK state of an IKE_SA Tobias Brunner 2018-07-27 12:50:22 +02:00
• e4d85011e4 ikev2: Mark IKE_SAs that used PPK during authentication Tobias Brunner 2018-07-27 12:14:18 +02:00
• 6627706786 eap-authenticator: Add support for authentication with PPK Tobias Brunner 2018-07-27 11:24:49 +02:00
• 18f8249415 pubkey-authenticator: Add support for authentication with PPK Tobias Brunner 2018-07-27 10:49:30 +02:00
• 46bdeaf359 psk-authenticator: Add support for authentication with PPK Tobias Brunner 2018-07-26 16:25:02 +02:00
• a9e60c96dc ike-auth: Add basic PPK support Tobias Brunner 2018-07-26 17:28:13 +02:00
• 94f9f421bc ike-auth: Replace == NULL with ! Tobias Brunner 2018-07-26 17:27:13 +02:00
• 7150fa7065 authenticator: Add optional method to set PPK Tobias Brunner 2018-07-26 15:32:10 +02:00
• 600b106852 ike-init: Send USE_PPK notify as appropriate Tobias Brunner 2018-07-26 15:20:30 +02:00
• 1fb46f7119 swanctl: Report PPK configuration in --list-conns Tobias Brunner 2018-07-27 12:34:23 +02:00
• 7f94528061 vici: Make PPK related options configurable Tobias Brunner 2018-07-26 17:57:36 +02:00
• a2ff8b654d peer-cfg: Add properties for PPK ID and whether PPK is required Tobias Brunner 2018-07-26 15:16:21 +02:00
• 83dcc1f4cf ike-sa: Add flag for PPK extension Tobias Brunner 2018-07-26 11:47:46 +02:00
• 3fbc95cf54 keymat_v2: Add support for PPKs Tobias Brunner 2018-07-25 16:43:01 +02:00
• 3703dff2aa swanctl: Add support for PPKs Tobias Brunner 2018-07-26 17:44:12 +02:00
• 1ec9382880 vici: Add support for PPKs Tobias Brunner 2018-07-25 17:23:12 +02:00
• bac3ca2324 shared-key: Add a new type for Postquantum Preshared Keys Tobias Brunner 2018-07-25 15:30:05 +02:00
• 0f423dda28 ikev2: Add notify types for Postquantum Preshared Keys Tobias Brunner 2018-07-25 15:29:58 +02:00
• 5dff6de8eb unit-tests: Add tests for peer_cfg_t::replace_child_cfgs() Tobias Brunner 2018-09-06 15:17:37 +02:00
• 40ed812442 peer-cfg: Replace equal child configs with newly added ones Tobias Brunner 2018-09-06 15:13:37 +02:00
• 375dfb9076 crypto: References to RFCs 8410 and 8420 Andreas Steffen 2018-09-04 07:24:20 +02:00
• 53f8ac3d6a Normalize whitespace in boilerplate files Tobias Brunner 2018-07-06 14:07:39 +02:00
• aad9021fd3 README: Fix indentation Tobias Brunner 2018-07-06 12:09:32 +02:00
• 39bc437771 init: Reload configurations/credentials as well during systemctl reload Martin Willi 2017-03-07 17:29:45 +01:00
• 8505c28289 swanctl: Add --reauth option to --rekey command Tobias Brunner 2018-08-23 16:20:06 +02:00
• a20527438a vici: Add option to reauthenticae instead of rekey an IKEv2 SA Tobias Brunner 2018-08-23 16:16:47 +02:00
• 720a8bedaa Merge branch 'xfrm-set-mark' Tobias Brunner 2018-08-31 12:27:40 +02:00
• 902dc29f7a child-sa: Use SA matching mark as SA set mark if the latter is %same Martin Willi 2018-05-09 13:40:36 +02:00
• ebd2d3877e ipsec-types: Restrict the use of %unique and other keywords when parsing marks Martin Willi 2018-05-14 13:42:53 +02:00
• b9aacf9adc vici: Document kernel requirements for set_mark_in/set_mark_out options Martin Willi 2018-05-14 12:55:27 +02:00
• 60f7896923 vici: Make in-/outbound marks the SA should set configurable Tobias Brunner 2018-04-20 14:12:48 +02:00
• f59450fde6 child-sa: Configure in-/outbound mark the SA should set Tobias Brunner 2018-04-20 14:08:35 +02:00
• fa4d4012ae child-cfg: Add properties for in-/outbound mark the SA should set Tobias Brunner 2018-04-20 14:02:57 +02:00
• 9cee688f78 kernel-netlink: Add support for setting mark/mask an SA should apply to processed traffic Tobias Brunner 2018-04-20 14:01:12 +02:00
• c5b94b2483 kernel-netlink: Use larger buffer for event messages Tobias Brunner 2018-08-10 14:41:16 +02:00
• 9de3140dbf ikev1: Increase DPD sequence number only after receiving a response Tobias Brunner 2018-08-06 17:01:20 +02:00
• 5c38a5ea83 Remove ITA references Tobias Brunner 2018-08-31 11:11:12 +02:00
• 85a6fe2306 ikev1: Signal IKE_SA connection failure via bus Tobias Brunner 2018-08-23 17:54:29 +02:00
• 4899a4c025 aggressive-mode: Trigger alerts for authentication failures Tobias Brunner 2018-08-23 17:25:08 +02:00
• f32402f58e main-mode: Local identity is always defined Tobias Brunner 2018-08-23 17:31:50 +02:00
• 78b3c9e2df main-mode: Also trigger a PEER_AUTH_FAILED alert if authorize() fails Tobias Brunner 2018-08-23 17:24:26 +02:00
• 095db2ed91 main-mode: Signal local/peer auth failure via bus Thomas Egerer 2018-08-14 13:56:58 +02:00
• 32c190634c custom-logger: Add optional reload method Thomas Egerer 2018-08-29 13:14:59 +02:00
• c163a53a3a ike-sa-manager: Log message when scheduling delete for reauthenticated IKE_SA Tobias Brunner 2018-08-28 17:11:13 +02:00
• d98df236a9 Merge branch 'ip-header-fields' Tobias Brunner 2018-08-29 11:46:13 +02:00
• c993eaf9d1 kernel: Add option to control DS field behavior Tobias Brunner 2018-06-11 12:07:48 +02:00
• dc8b015d78 kernel: Add options to control DF and ECN header bits/fields via XFRM Tobias Brunner 2018-06-11 10:49:16 +02:00
• de4c3d2e76 vici: Add error handling to message parsing in Perl bindings Tobias Brunner 2018-06-05 17:49:42 +02:00
• d6aa6537e7 vici: Improve message parsing performance in Perl bindings Afschin Hormozdiary 2018-06-05 15:10:43 +02:00