Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 93489acc0d android: UUID is now mandatory Tobias Brunner 2018-06-05 15:42:09 +02:00
• 0917caa195 android: Show an error dialog if we can't get permission for VPNs Tobias Brunner 2018-06-04 16:46:25 +02:00
• 08601c58e9 android: Suppress self-assign warnings with clang Tobias Brunner 2018-06-04 15:39:25 +02:00
• 2afdb92dd0 atomics: Use type of destination in CAS implementation Tobias Brunner 2018-06-22 10:25:25 +02:00
• 942599b623 atomics: Define HAVE_GCC_ATOMIC_OPERATIONS when building with clang Tobias Brunner 2018-06-05 15:58:08 +02:00
• 929badfefd android: Build native libraries for all non-deprecated ABIs Tobias Brunner 2018-06-04 15:36:20 +02:00
• 4bb0a589ff android: Update Gradle plugin and wrapper Tobias Brunner 2018-06-04 12:09:32 +02:00
• b68a0adace ike: Include length of reassembled IKE message in log message Tobias Brunner 2018-07-02 12:18:18 +02:00
• 707b70725a dhcp: Only use DHCP server port if explicitly configured Tobias Brunner 2018-06-26 15:48:07 +02:00
• 50c4c1bb40 kernel-pfkey: Avoid updating policies if nothing significant changed Tobias Brunner 2018-06-01 11:15:22 +02:00
• daa0a0cc1b settings: Fix compilation with newer versions of Clang Tobias Brunner 2018-06-29 11:30:31 +02:00
• fecafaaca3 Merge branch 'ike-proposal-switch' Tobias Brunner 2018-06-28 18:47:15 +02:00
• 1ecac75f37 testing: Fix IKE proposal in swanctl/net2net-gw scenario Tobias Brunner 2018-06-28 18:03:57 +02:00
• 187a01cc9f backend-manager: Change how IKE/peer config matches are logged Tobias Brunner 2018-06-27 17:59:54 +02:00
• 2ad1df9571 Replace 'inacceptable' with the more common 'unacceptable' Tobias Brunner 2018-05-29 18:27:16 +02:00
• 84cdfbc9bc child-cfg: Allow suppressing log messages when selecting traffic selectors Tobias Brunner 2018-05-29 18:12:16 +02:00
• 054ee5e7c0 ike-init: Switch to an alternative config if proposals don't match Tobias Brunner 2018-05-29 17:04:12 +02:00
• da288a07aa ike-auth: Consider negotiated IKE proposal when selecting peer configs Tobias Brunner 2018-05-29 16:57:49 +02:00
• 29e7fe63c3 ike-cfg: Add method to check if config contains matching proposal Tobias Brunner 2018-05-29 16:51:48 +02:00
• f72aa13a29 proposal: Add method to check if two proposals match Tobias Brunner 2018-05-29 16:02:21 +02:00
• 90f5fe1ca9 child-cfg: Log the selected proposal on level 1 Tobias Brunner 2018-05-29 15:39:38 +02:00
• 4d338b9acf ike-cfg: Log the selected proposal on level 1 Tobias Brunner 2018-05-29 15:39:19 +02:00
• aa4f0c44ee backend-manager: Add enumerator over all matching IKE configs Tobias Brunner 2018-05-29 12:44:12 +02:00
• 82e237c04e backend-manager: Simplify sorting peer configs Tobias Brunner 2018-05-29 12:24:02 +02:00
• 80c9ae4521 testing: Add wrapper for systemctl to collect leaks from charon-systemd Tobias Brunner 2018-06-28 16:29:22 +02:00
• 3d021f5b06 Merge branch 'settings-references' Tobias Brunner 2018-06-27 14:31:50 +02:00
• b9745618cd daemon: Allow configuration of logfile path as value Tobias Brunner 2018-05-31 11:36:15 +02:00
• 61c3870bef conf: Document reference syntax Tobias Brunner 2018-05-31 11:29:37 +02:00
• 089d5f9765 settings: Properly lock when extending sections or adding fallbacks Tobias Brunner 2018-05-22 10:51:50 +02:00
• ca3c7b7ea6 settings-test: Add option to use the frontend to display the settings Tobias Brunner 2018-05-15 17:04:23 +02:00
• 35ca6a7b2f settings: Add reference feature Tobias Brunner 2018-05-15 14:10:32 +02:00
• 0ca0fa71c0 charon-systemd: Register journal logger as custom logger Tobias Brunner 2018-06-05 11:52:32 +02:00
• 2c02b02589 linked-list: Order of insert_before/remove_at calls doesn't matter anymore Tobias Brunner 2018-05-28 19:09:02 +02:00
• 91640baf6d vici: Maintain connection order when replacing one Tobias Brunner 2018-05-28 17:36:03 +02:00
• 57447015db eap-radius: Document station_id_with_port option Tobias Brunner 2018-06-25 10:42:17 +02:00
• 5b91e8c03c Version bump to 5.7.0dr4 Andreas Steffen 2018-06-22 11:21:02 +02:00
• ef4a63524f vici: list cert_policy parameter Andreas Steffen 2018-06-22 10:39:36 +02:00
• 424de401b4 testing: Added swanctl/rw-ed25519-certpol scenario Andreas Steffen 2018-06-22 09:59:04 +02:00
• 3a05566d0e ike-mobike: Always use this task for DPDs even if not behind a NAT Tobias Brunner 2018-05-22 18:04:00 +02:00
• 35e49ffd2f unit-tests: Add mock implementation of kernel_net_t Tobias Brunner 2018-05-23 10:13:56 +02:00
• daf8ed210a vici: Fixed crash when parsing cert_policy parameter Andreas Steffen 2018-06-22 08:52:09 +02:00
• 782344e5e5 libimcv: Prevent integer overflow in time conversion Andreas Steffen 2018-06-18 11:04:53 +02:00
• 711e0bdbe4 Version bumpt to 5.7.0dr3 Andreas Steffen 2018-06-14 17:07:59 +02:00
• 97688e8567 libtpmtss: Query maximum TPM data transmission size Andreas Steffen 2018-06-14 15:46:35 +02:00
• 5cfd7311d0 testing: Print command output if test fails Tobias Brunner 2018-06-01 15:26:45 +02:00
• 60719e39bf testing: Fixed evaltest of tnc/tnccs-20-pdp-pt-tls scenario Andreas Steffen 2018-06-13 17:57:10 +02:00
• 78584d7efc Version bump to 5.7.0dr2 Andreas Steffen 2018-06-13 17:07:58 +02:00
• 295493f46f testing: Renewed ECDSA certificates Andreas Steffen 2018-06-13 17:07:25 +02:00
• 96b1f0b79d Merge branch 'swima-reserved' Andreas Steffen 2018-06-12 21:49:54 +02:00
• 2a26566ed3 libimcv: Implementation of RFC 8412 SWIMA Andreas Steffen 2018-06-12 18:09:12 +02:00
• 27ec213d0b libimcv: Added reserved field in SWIMA Inventory encoding Andreas Steffen 2018-05-21 10:55:08 +02:00
• 75181f4836 fuzz: Added PB-TNC fuzzer Andreas Steffen 2018-03-09 14:40:00 +01:00
• cd6e45817e libimcv: Fixed processing of PTS Request File Metadata Andreas Steffen 2018-03-03 21:06:42 +01:00
• 0a3c89a053 libimcv: Removed whitespace Andreas Steffen 2018-03-03 20:56:47 +01:00
• 66b9287cd5 libimcv: Fixed processing of PTS Simple Component Evidence Andreas Steffen 2018-03-03 19:30:55 +01:00
• e1833a90ba bio_reader: Fix read_uint24 Andreas Steffen 2018-03-02 14:45:28 +01:00
• 508b308768 fuzz: Added PA-TNC fuzzer Andreas Steffen 2018-03-02 13:35:30 +01:00
• ce4b8f65d6 testing: Removed TCG SWID IMC/IMV scenarios Andreas Steffen 2018-03-05 11:31:27 +01:00
• a31f9b7691 libimcv: Removed TCG SWID IMC/IMV support Andreas Steffen 2018-03-01 17:33:49 +01:00
• eccd2b6e09 libimcv: SWIMA SW locator must be file URI Andreas Steffen 2018-03-05 20:56:25 +01:00
• 0b445a5c54 libimcv: Updated IANA numbers assigned to SWIMA Andreas Steffen 2018-02-28 19:23:59 +01:00
• 4f1d2f2b09 Allow charon to change group on files before dropping caps Micah Morton 2018-06-08 11:55:30 -07:00
• 1331010aa4 starter: Reset action before handling it Markus Sattler 2018-06-05 08:20:52 +02:00
• 3a8a9c7029 Version bump to 5.7.0dr1 Andreas Steffen 2018-05-30 23:02:27 +02:00
• 6d087b33de libstrongswan: xmppaddr prefix designates an xmppAddr otherName ID type Andreas Steffen 2018-05-30 15:41:01 +02:00
• b2ab0995c1 Version bump to 5.6.3 Andreas Steffen 2018-05-28 15:38:58 +02:00
• 64f7fd92c0 NEWS: Add info about CVE-2018-10811 Tobias Brunner 2018-05-24 15:52:06 +02:00
• 6d8a57342b ikev2: Initialize variable in case set_key() or allocate_bytes() fails Tobias Brunner 2018-03-19 17:03:05 +01:00
• 0d0c8f7d3e NEWS: Some minor updates Tobias Brunner 2018-05-24 12:03:45 +02:00
• 2c7a4b0704 swanctl: Document new HW offload options/behavior Tobias Brunner 2018-05-24 10:49:19 +02:00
• 88205674e5 Version bump to 5.6.3rc1 Andreas Steffen 2018-05-23 22:36:39 +02:00
• 7f14fefff4 NEWS: Added some news for 5.6.3 Tobias Brunner 2018-05-23 20:25:18 +02:00
• 887885f33b sw-collector: Proper cleanup if DB query fails in check operation Tobias Brunner 2018-05-23 19:08:45 +02:00
• d837d0b339 kernel-netlink: Use strncpy to copy interface name when configuring HW offload Tobias Brunner 2018-05-23 19:06:02 +02:00
• 89bd016ef4 Fixed some typos, courtesy of codespell Tobias Brunner 2018-05-23 16:06:45 +02:00
• 1b67166921 Unify format of HSR copyright statements Tobias Brunner 2018-05-23 16:04:50 +02:00
• 740133b12d settings: Parse assigned values in a different context Tobias Brunner 2018-05-07 18:24:48 +02:00
• f8c20fb1c2 settings: Support CRLF in settings parser Tobias Brunner 2015-07-13 11:58:21 +02:00
• 26b45beda9 Version bump to 5.6.3dr2 Andreas Steffen 2018-05-22 21:58:32 +02:00
• e6d17d5613 man: Remove keylife/rekeymargin from ipsec.conf man page Tobias Brunner 2018-05-22 14:18:17 +02:00
• b5461c63d9 Merge branch 'ikesa-force-destroy' Tobias Brunner 2018-05-22 10:13:59 +02:00
• c057cd26fa swanctl: Add option to force IKE_SA termination Tobias Brunner 2018-04-27 18:11:42 +02:00
• 0bcfed1aa2 vici: Optionally terminate IKE_SA immediately Tobias Brunner 2018-04-27 18:09:25 +02:00
• 7b72909774 controller: Add option to force destruction of an IKE_SA Tobias Brunner 2018-04-27 18:01:54 +02:00
• a79d510354 ike-sa: Add option to force the destruction of an IKE_SA after initiating a delete Tobias Brunner 2018-04-27 17:27:53 +02:00
• c58434aeff proposal: Add a compat alg for ChaCha20Poly1305 with explicit key length Martin Willi 2018-05-08 15:06:33 +02:00
• 10b8acb554 kernel-netlink: Change how routes are un-/installed Tobias Brunner 2018-04-19 18:15:24 +02:00
• 3f003e5e21 Merge branch 'cert-chain-fixes' Tobias Brunner 2018-05-22 09:52:08 +02:00
• 9746c308ff testing: Add ikev2/multi-level-ca-skipped scenario Tobias Brunner 2018-05-03 11:26:34 +02:00
• 0cf3549675 revocation: Fix memory leak if fetching CRL/OCSP fails Tobias Brunner 2018-05-03 11:38:07 +02:00
• cae43b890a revocation: Set defaults if CRL/OCSP checking is disabled in config Tobias Brunner 2018-05-03 11:19:18 +02:00
• b00d3adbd1 revocation: Also store validation results for intermediate CA certificates Tobias Brunner 2018-05-03 11:07:59 +02:00
• 13f76a241c revocation: Ignore CRLs that are not yet valid Tobias Brunner 2018-04-25 11:38:38 +02:00
• 9c6b102ee0 openssl: Fail CRL validity check if thisUpdate is in the future Tobias Brunner 2018-04-25 11:38:22 +02:00
• a0902d1ae0 x509: Fail CRL validity check if thisUpdate is in the future Tobias Brunner 2018-04-25 11:37:43 +02:00
• 6143f926ef ike: Reject certificates that are not compliant with RFC 4945 Tobias Brunner 2018-04-25 11:10:48 +02:00
• 504e12326d openssl: Set IKE compliance flag depending on keyUsage Tobias Brunner 2018-04-25 10:51:51 +02:00
• 920366e688 x509: Set IKE compliance flag depending on keyUsage Tobias Brunner 2018-04-25 10:50:03 +02:00
• 9fcf4fdda1 x509: Add flag that marks compliance with RFC 4945 Tobias Brunner 2018-04-25 10:48:21 +02:00
• 598096e7a2 Merge branch 'dhcp-fixes' Tobias Brunner 2018-05-22 09:44:51 +02:00