Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 7b660944b6 dhcp: Only send client identifier if identity_lease is enabled Tobias Brunner 2018-04-11 10:51:01 +02:00
• 0e5b94d038 dhcp: Increase maximum size of client identification option Tobias Brunner 2018-04-10 18:45:16 +02:00
• 30e886fe3b dhcp: Increase buffer size for options in DHCP messages Tobias Brunner 2018-04-10 18:19:35 +02:00
• 13edecdc20 dhcp: Reduce receive buffer size on send socket Tobias Brunner 2018-04-10 18:14:32 +02:00
• becf027cd9 dhcp: Bind server port when a specific server address is specified Tobias Brunner 2018-04-10 17:04:10 +02:00
• e8b5c7b94e dhcp: Fix destination port check in packet filter Tobias Brunner 2018-03-16 09:59:25 +01:00
• 646a492538 dhcp: Fix typos in comments Matt Selsky 2018-04-12 00:17:49 -04:00
• 3594663166 eap-aka-3gpp: Add test vectors from 3GPP TS 35.207 14.0.0 Tobias Brunner 2018-04-23 18:46:30 +02:00
• 8dfc40fa20 appveyor: Also build on Windows Server 2016 Tobias Brunner 2018-03-29 18:22:40 +02:00
• 943f3929f4 pki: --verify command optionally takes directories for CAs and CRLs Tobias Brunner 2018-02-12 11:48:16 +01:00
• 667e74d60a bliss: Fix compilation with non-GNU C libraries Tobias Brunner 2018-04-17 14:19:19 +02:00
• b9fcc61991 Allow strongSwan to be spawned as non-root user Micah Morton 2018-04-17 13:29:03 -07:00
• 0d2e18a189 nm: Update NEWS Tobias Brunner 2018-05-07 12:10:35 +02:00
• 6e5c00b7c7 nm: Don't hardcode install path for .name file Tobias Brunner 2018-04-25 09:45:07 +02:00
• 9c4e4b5e8e nm: Don't rely on NetworkManager.pc for paths when building without libnm-glib Tobias Brunner 2018-04-25 09:33:27 +02:00
• 43a1839cbc libimcv: Added inactive field to device database table Andreas Steffen 2018-04-13 12:25:50 +02:00
• 234ec9225d sw-collector: Added --check option Andreas Steffen 2018-04-26 16:24:59 +02:00
• 8929c700ef ikev1: Ignore roam events for IKEv1 Tobias Brunner 2018-04-25 15:14:21 +02:00
• 4af1fd59dd thread: Properly clean up meta data of thread if pthread_create() fails Tobias Brunner 2018-04-17 11:37:35 +02:00
• 69ee158e2a Version bump to 5.6.3dr1 Andreas Steffen 2018-04-19 16:34:06 +02:00
• 51d5b35f51 testing: Fixed ikev2/alg-chacha20poly1305 scenario Andreas Steffen 2018-04-19 16:33:04 +02:00
• a747ad738c ike: Ignore rekeyed and deleted CHILD_SAs when reestablishing IKE_SAs Tobias Brunner 2018-04-10 11:48:26 +02:00
• a1620c16ec ike: Remove special handling for routed CHILD_SAs during reauth/reestablish Tobias Brunner 2018-04-10 11:43:40 +02:00
• 485952ff83 controller: Remove special handling for routed CHILD_SAs when terminating Tobias Brunner 2018-04-12 16:28:39 +02:00
• 5a7b0be294 proposal: Don't specify key length for ChaCha20/Poly1305 Tobias Brunner 2018-04-04 18:08:11 +02:00
• b2163409cc ikev2: Reuse marks and reqid of CHILD_SAs during MBB reauthentication Tobias Brunner 2018-04-04 09:28:28 +02:00
• 21553276a3 revocation: Make sure issuer of fetched CRL matches that of the certificate Tobias Brunner 2018-04-04 16:16:38 +02:00
• 85bfab621d ike: Float to port 4500 if either port is 500 Tobias Brunner 2018-03-29 11:23:15 +02:00
• ce0a770c74 Merge branch 'ikev1-down-reauth' Tobias Brunner 2018-04-12 15:19:49 +02:00
• 40ec7f998a _updown: Remove printf calls for identities Tobias Brunner 2018-03-12 10:20:42 +01:00
• eb82210620 ikev1: Trigger down events for CHILD_SAs if reauthentication failed due to retransmits Tobias Brunner 2018-03-01 18:02:08 +01:00
• ebc6defa05 ikev1: Reestablish SAs if reauthentication failed due to retransmits Tobias Brunner 2018-03-01 17:53:59 +01:00
• a36d8097ed traffic-selector: Always print protocol if either protocol or port is set Tobias Brunner 2018-04-11 12:15:55 +02:00
• 73382f516e Merge branch 'child-deleted' Tobias Brunner 2018-04-09 17:15:24 +02:00
• 3a3136ef33 bus: Don't trigger child_updown for deleted CHILD_SAs Tobias Brunner 2018-03-20 12:44:35 +01:00
• 16898026a5 child-sa: Add new state to track deleted but not yet destroyed CHILD_SAs Tobias Brunner 2018-03-20 12:43:13 +01:00
• e873544080 ikev1: Unify child_updown calls when having duplicate QMs Afschin Hormozdiary 2018-03-27 16:55:59 +02:00
• 55cce124bf libtpmtss: Properly initialize tabrmd tcti_context Andreas Steffen 2018-04-09 11:07:16 +02:00
• c8f45e4573 testing: Fix typo in sysctl.conf file Matt Selsky 2018-03-30 01:35:53 -04:00
• 826b4232d3 pkcs11: Use unused return value of C_GetMechanismList robinleander 2018-03-27 22:50:28 +02:00
• e811659323 kernel-pfkey: Add option to install routes via internal interface Tobias Brunner 2018-03-08 18:34:50 +01:00
• a4727a01a3 Merge branch 'hw-offload-auto' Tobias Brunner 2018-03-21 10:32:48 +01:00
• 8ced1570ab child-cfg: Make HW offload auto mode configurable Adi Nissim 2018-03-12 16:34:21 +02:00
• ee26f7156f kernel-netlink: Cleanup and fix some HW offload code issues Tobias Brunner 2018-03-16 19:34:43 +01:00
• 338cc5812e kernel-netlink: Add new automatic hw_offload mode Adi Nissim 2018-03-12 16:34:20 +02:00
• aad9bd3613 ipsec-types: Create new enum hw_offload_t Adi Nissim 2018-03-12 16:34:19 +02:00
• 3b29590b70 starter: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:26:06 +01:00
• 83187f3883 charon-tkm: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:25:49 +01:00
• 9655a3ffbc charon: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:16:52 +01:00
• a7005e435b diffie-hellman: Remove unused exponent length initialization in get_params() Tobias Brunner 2018-03-13 12:18:56 +01:00
• 8b6f615741 diffie-hellman: Don't set exponent length for DH groups with prime order subgroups Tobias Brunner 2018-03-13 12:13:47 +01:00
• ee019ab321 proposal: Make sure non-AEAD IKE proposals contain integrity algorithms Tobias Brunner 2018-03-08 18:26:19 +01:00
• 42a6b187f7 proposal: Compress arrays after removing transforms Tobias Brunner 2018-03-08 18:22:55 +01:00
• a48f3d8939 ikev2: Use correct type to check for selected signature scheme Tobias Brunner 2018-03-06 17:28:33 +01:00
• 70d99d67d6 vici: Make sure to read all requested data from socket in Perl binding Tobias Brunner 2018-03-07 10:31:11 +01:00
• d3b9db688a libimcv: Add Debian 8.10 to IMV database Tobias Brunner 2018-03-20 09:19:07 +01:00
• 0acd1ab4d0 stroke: Ensure a minimum message length Tobias Brunner 2018-03-13 18:54:08 +01:00
• 04ede658c8 libipsec: Fix ip_packet_create_from_data() version field in IPv6 header Matus Fabian 2018-03-19 02:19:45 -07:00
• dc2dfedda9 testing: Use HA patch compatible with 4.15.6+ Tobias Brunner 2018-03-08 10:07:33 +01:00
• 39e860ea34 testing: Use a HA patch that's actually compatible with 4.15 kernels Tobias Brunner 2018-03-07 17:16:54 +01:00
• 0f785f6be8 testing: Revert typo fix in FreeRADIUS patch Tobias Brunner 2018-03-07 16:38:18 +01:00
• 53827a5fde load-tester: Start numbering IDs from 1 again Tobias Brunner 2018-02-27 10:31:49 +01:00
• f71cccec6f Merge branch 'pbkdf2-sha2' Tobias Brunner 2018-03-07 15:24:56 +01:00
• 954f73ea6e charon-nm: Parse any type of private key not only RSA Tobias Brunner 2018-03-05 09:47:15 +01:00
• 5808467ed1 pkcs5: Parse PRF algorithms if given in PBKDF2-params as defined in RFC 8018 Tobias Brunner 2018-03-05 09:45:34 +01:00
• e5c5792ff8 prf: Add helper function to convert OIDs to algorithm identifiers Tobias Brunner 2018-03-05 09:43:07 +01:00
• ba16a95454 asn1: Add OIDs for HMAC-based PRFs as defined in RFC 8018 Tobias Brunner 2018-03-05 09:42:41 +01:00
• b53eb857bf Merge branch 'unknown-transform-types' Tobias Brunner 2018-03-07 14:25:48 +01:00
• 6b8749ab18 proposal: Compare algorithms of all transform types for equality Tobias Brunner 2018-02-23 09:59:38 +01:00
• 76c7c951e1 proposal: Make sure to consider all transform types when selecting proposals Tobias Brunner 2018-02-23 09:02:49 +01:00
• 5eb094df11 proposal: Print all algorithms even those with currently unknown transform types Tobias Brunner 2018-02-23 08:43:07 +01:00
• cc55461c8d proposal: Keep track of contained transform types Tobias Brunner 2018-02-23 08:36:33 +01:00
• ec1ebb2377 transform: Move internal identifiers out of private range Tobias Brunner 2018-02-23 08:12:48 +01:00
• 0d06cbd66e unit-tests: Ignore binaries of renamed test runners Tobias Brunner 2018-03-02 17:10:33 +01:00
• cdfa0ba4d1 libimcv: Fix typo in PTS hash algorithm mapping for 512-bit SHA-3 Tobias Brunner 2018-03-02 08:29:34 +01:00
• 2f5d6be5a0 kernel-netlink: Ignore local routes in any table Tobias Brunner 2018-02-26 15:07:15 +01:00
• 9189aec666 kernel-netlink: Ignore routes with next hop during local subnet enumeration Tobias Brunner 2018-02-22 09:50:52 +01:00
• d9400f44d8 kernel-netlink: Simplify rt_entry_t initialization Tobias Brunner 2018-02-22 09:49:57 +01:00
• 958a0545e5 nm: Version bump to 1.4.4 Tobias Brunner 2018-02-23 15:31:01 +01:00
• 07f6cfe910 nm: Update German translation Tobias Brunner 2018-02-23 15:26:00 +01:00
• 5bb197d880 nm: Fix tooltips for proposal text fields Tobias Brunner 2018-02-23 15:25:23 +01:00
• 479af1ed76 Merge branch 'incorrect-inval-ke' Tobias Brunner 2018-02-23 09:28:08 +01:00
• 574f74d232 child-rekey: Don't destroy IKE_SA if initiating CHILD_SA rekeying failed Tobias Brunner 2018-02-19 15:09:34 +01:00
• 4f1bf89ed9 child-create: Fail if we already retried with a requested DH group Tobias Brunner 2018-02-09 15:27:50 +01:00
• 7754c714c1 child-create: Make sure we actually propose the requested DH group Tobias Brunner 2018-02-09 15:16:24 +01:00
• ecbcfbdaa1 child-create: Make sure the returned KE payload uses the proposed DH group Tobias Brunner 2018-02-09 15:13:54 +01:00
• 529ffc2fe3 child-sa: Don't update outbound policies if they are not installed Tobias Brunner 2018-02-21 11:04:45 +01:00
• ca79bd54ff child-sa: Don't try to update outbound SA if it is not installed anymore Tobias Brunner 2018-02-21 10:58:39 +01:00
• 6df2938fd2 Merge branch 'trap-manager-uninstall' Tobias Brunner 2018-02-22 11:31:14 +01:00
• a541cf05c1 trap-manager: Remove unused find_reqid() method Tobias Brunner 2017-11-03 11:51:36 +01:00
• c9998e5fea child-sa: No need to find reqid of existing trap policy Tobias Brunner 2017-11-03 11:49:45 +01:00
• 24fa1bb02a trap-manager: Remove reqid parameter from install() and change return type Tobias Brunner 2017-11-03 11:32:04 +01:00
• f42dd430d8 trap-manager: Compare peer config name during installation Tobias Brunner 2017-11-03 11:26:23 +01:00
• ca213e1907 trap-manager: Uninstall trap policies by name and not reqid Tobias Brunner 2017-11-03 11:10:16 +01:00
• 6f569263a0 vici: Remove external enumeration to uninstall shunt policies Tobias Brunner 2017-11-03 10:55:05 +01:00
• 9d69d8a399 stroke: Remove external enumeration to unroute shunt policies Tobias Brunner 2017-11-03 10:53:04 +01:00
• 57ea3f73bb shunt-manager: Remove first match if no namespace given during uninstall Tobias Brunner 2017-11-03 10:47:48 +01:00
• c1c63a400e appveyor: Allow events to trigger early in threading unit tests Tobias Brunner 2018-02-16 11:55:54 +01:00
• ee8c25516a charon-nm: Fix building list of DNS/MDNS servers with libnm Tobias Brunner 2018-02-21 11:53:55 +01:00
• 9ba01ce380 x509: Fix leak if a CRL contains multiple authorityKeyIdentifiers Tobias Brunner 2018-02-21 11:13:42 +01:00