Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• bd6e4bbe68 fuzzing: Add fuzzer for CRL parsing Tobias Brunner 2018-02-20 17:51:55 +01:00
• 29b983309f nm: Version bump to 1.4.3 Tobias Brunner 2018-02-19 14:44:28 +01:00
• 68c00bc839 Version bump to 5.6.2 Andreas Steffen 2018-02-19 12:59:37 +01:00
• b640afdb2e NEWS: Add info about CVE-2018-6459 Tobias Brunner 2018-02-19 10:37:04 +01:00
• 40da179f28 signature-params: Properly handle MGF1 algorithm identifier without parameters Tobias Brunner 2017-12-04 10:51:47 +01:00
• 0bb4d2179d Version bump to 5.6.2rc1 Andreas Steffen 2018-02-16 13:37:00 +01:00
• 22157b8163 testing: Enable counters and save-keys plugins Andreas Steffen 2018-02-16 13:36:44 +01:00
• c65bec5137 NEWS: Added some news for 5.6.2 Tobias Brunner 2018-02-16 11:02:06 +01:00
• fb545dd34d vici: Also return close action Tobias Brunner 2018-02-16 09:55:22 +01:00
• bac71410f3 save-keys: Add warning message to log if keys are being saved Tobias Brunner 2018-02-15 10:04:47 +01:00
• 1da1ba01c4 save-keys: Add options to enable saving IKE and/or ESP keys Tobias Brunner 2018-02-15 10:03:08 +01:00
• 88e151d10d save-keys: Store derived CHILD_SA keys in Wireshark format Codrut Cristian Grosu 2016-09-07 12:00:04 +03:00
• 4be7db5f60 save-keys: Store derived IKE_SA keys in Wireshark format Codrut Cristian Grosu 2016-09-02 15:22:29 +03:00
• 345cd4684c save-keys: Add save-keys plugin Codrut Cristian Grosu 2016-09-02 15:06:30 +03:00
• 4eaf08c35b vici: list-conn reports DPD settings and swanctl displays them Andreas Steffen 2018-02-06 21:29:17 +01:00
• ac140220c4 proposal: Add modp6144 to the default proposal Tobias Brunner 2018-02-14 14:53:08 +01:00
• ce048c30ff ha: Double receive buffer size for HA messages and make it configurable Tobias Brunner 2018-02-14 14:51:24 +01:00
• 26e033cfe3 Revert "travis: Use Clang 4.0 instead of 3.9 due to va_start() warnings" Tobias Brunner 2018-02-13 16:25:46 +01:00
• 2db6d5b8b3 Fixed some typos, courtesy of codespell Tobias Brunner 2018-02-13 12:04:12 +01:00
• 60c750181f Merge branch 'readme-errata' Tobias Brunner 2018-02-12 11:16:49 +01:00
• 9587c1bfa6 README: Fix paths to private keys Liu Qun (liuqun) 2018-02-12 11:39:00 +08:00
• 92001d1e62 README: Fix typo in pki --req example 刘群 2018-02-12 10:23:16 +08:00
• d58a84e0f7 Merge branch 'mobike-nat' Tobias Brunner 2018-02-09 15:54:36 +01:00
• 044b0f048b ike-mobike: Don't trigger update for NAT mapping change detected during an address update Tobias Brunner 2018-02-09 08:48:07 +01:00
• 35ef1b032d child-sa: Install drop policies while updating IPsec SAs and policies Tobias Brunner 2018-02-06 18:07:34 +01:00
• 4664992f7d kernel-netlink: Optionally trigger roam events on routing rule changes Tobias Brunner 2018-01-29 15:26:17 +01:00
• 80ae474863 ike-sa: Remove unused counter for pending MOBIKE updates Tobias Brunner 2018-01-29 14:30:35 +01:00
• 9f0497818c ike-mobike: Only ignore MOBIKE responses if an actual update is queued Tobias Brunner 2018-01-29 12:34:33 +01:00
• 2d27c350f8 ikev2: Update currently queued MOBIKE task Tobias Brunner 2018-01-29 11:49:50 +01:00
• 43bbe07036 ike-mobike: Don't reset address update flag if set previously Tobias Brunner 2018-01-29 11:44:36 +01:00
• f90561155b ike: Add log message if host moves out of NAT Tobias Brunner 2018-01-26 14:03:33 +01:00
• ad14f2084e testing: Add ikev2/mobike-virtual-ip-nat scenario Tobias Brunner 2018-01-26 13:50:04 +01:00
• 626e8a31d0 ikev1: Properly handle fragmented Quick Mode messages Tobias Brunner 2018-01-30 11:33:15 +01:00
• 73cbce6013 libradius: Pad received MSK to at least 64 bytes Tobias Brunner 2018-01-26 09:51:07 +01:00
• e698bdea24 man: Fix documentation of pubkey constraints Tobias Brunner 2018-01-23 11:35:03 +01:00
• bb58dfb9b5 Merge branch 'dh-group-rekey' Tobias Brunner 2018-02-09 10:28:44 +01:00
• 5a259ade4e child-create: Promote selected DH group, demote proposals that don't contain it Tobias Brunner 2018-02-02 12:04:18 +01:00
• ff79020cd2 ike-init: Promote selected DH group and demote proposals that don't contain it Tobias Brunner 2018-02-02 11:49:18 +01:00
• d9c9b7b832 proposal: Add method to move a given DH group to the front Tobias Brunner 2018-02-02 11:32:39 +01:00
• 97ad041e6e unit-tests: Make sure we reuse the DH group during CHILD_SA rekeying Tobias Brunner 2018-02-02 11:11:38 +01:00
• 576d9b907c ike-init: Make DH group reuse optional to test INVALID_KE_PAYLOAD handling Tobias Brunner 2018-02-02 10:59:25 +01:00
• 27b0bd91d4 child-rekey: Use previously negotiated DH group when rekeying CHILD_SAs Tobias Brunner 2018-02-02 10:48:21 +01:00
• f8e53003aa child-create: Add an option to set the DH group to be used Tobias Brunner 2018-02-02 10:43:17 +01:00
• 727615ee05 ike-init: Reuse the DH group of the previous IKE_SA when rekeying Tobias Brunner 2018-02-02 10:29:35 +01:00
• 18242f62c2 ike-init: Move creation of DH instance after INVALID_KE_PAYLOAD to build_i() Tobias Brunner 2018-02-02 10:26:36 +01:00
• d058fd3c32 child-cfg: Strip DH groups from both compared proposals Tobias Brunner 2018-01-22 14:33:40 +01:00
• 007a2701bb ike: Don't handle roam events if no IKE config is available Tobias Brunner 2017-12-20 12:32:52 +01:00
• fcff3808b4 charon-tkm: Update to latest Anet version Adrian-Ken Rueegsegger 2018-02-06 18:46:27 +01:00
• c6a402d4fa android: New release after changing cert sending policy Tobias Brunner 2018-02-08 12:26:11 +01:00
• 6bafa2d346 android: Always send the client certificate Tobias Brunner 2018-02-08 12:15:36 +01:00
• c7263577b3 auth-cfg: Classify key strengths as multi value rules Tobias Brunner 2018-01-23 12:01:02 +01:00
• 268a1bfa34 charon-nm: Remove unused variable Tobias Brunner 2018-02-05 15:11:03 +01:00
• 476200ecc6 Version bump to 5.6.2dr4 Andreas Steffen 2018-02-03 11:05:21 +01:00
• 4492c9c670 testing: Ignore IP-in-IP SAs created with IPComp SAs that remain in the kernel Tobias Brunner 2018-02-01 17:10:19 +01:00
• 3c5b010f5b testing: Added Linux 4.14 and 4.15 config files Andreas Steffen 2018-01-31 21:32:45 +01:00
• 4a84fb07ca gmp: Fix compatibility with older libgmp releases Tobias Brunner 2018-01-23 09:51:52 +01:00
• 432358cf49 revocation: Skip any zero bytes when comparing serials in CRLs Tobias Brunner 2018-01-24 14:42:28 +01:00
• a8e940ade2 eap: Reset errno before calling strtoul() to parse EAP type Reinhard Pfau 2018-01-23 10:09:14 +01:00
• 3232cf68b9 libtpmtss: Return after failure Andreas Steffen 2018-01-09 16:12:40 +01:00
• d8eb1049d7 travis: Disable NM build until we run on a newer image that provides libnm Tobias Brunner 2017-12-22 10:41:12 +01:00
• 419ae9a20a ikev1: Default remote identity to %any for PSK lookup if not configured Tobias Brunner 2017-12-20 10:28:31 +01:00
• a9f3016ef3 stroke: Don't ignore %any as owner of shared secrets Tobias Brunner 2017-12-20 10:13:39 +01:00
• 3c36c95539 kernel-netlink: Fix compilation on old kernels not defining IFA_F_NODAD Tobias Brunner 2017-12-11 10:35:30 +01:00
• 0701236337 Merge branch 'testing-route-based' Tobias Brunner 2017-12-22 10:23:46 +01:00
• 351a08e1ff testing: Fix swanctl --list-sas checks in some scenarios Tobias Brunner 2017-12-06 12:57:06 +01:00
• b3a793541d testing: Add route-based/net2net-gre scenario Tobias Brunner 2017-12-06 12:54:35 +01:00
• f007bc9ff4 testing: Enable GRE support in 4.13 config Tobias Brunner 2017-12-06 12:14:11 +01:00
• e71593d91c testing: Add route-based/net2net-vti scenario Robin McCorkell 2017-12-03 13:42:57 +00:00
• ff7129ee6a testing: Added route-based/rw-shared-vti-ip6-in-ip4 scenario Robin McCorkell 2017-11-29 12:39:24 +00:00
• a35416af1c testing: Added route-based/rw-shared-vti scenario Robin McCorkell 2017-11-29 11:55:49 +00:00
• 95deada184 testing: Enable VTI module in kernel config Robin McCorkell 2017-11-29 11:31:13 +00:00
• 82b91e113a testing: Override user environment PATH in chroot Robin McCorkell 2017-11-27 16:46:22 +00:00
• 381f6d982c kernel-pfkey: Fix extended replay configuration on FreeBSD 11.1 Tobias Brunner 2017-12-04 10:01:14 +01:00
• 6d98bb926e swanctl: Allow dots in authority/shared secret/pool names Tobias Brunner 2017-11-30 09:09:39 +01:00
• a7f613ca2e vici: Document NTLM secrets in README.md Tobias Brunner 2017-11-29 14:33:21 +01:00
• 859d645c44 vici: Accept XAUTH as shared key type too Tobias Brunner 2017-11-29 14:21:56 +01:00
• 9a71b7219c charon-nm: Port to libnm Lubomir Rintel 2017-11-30 13:02:02 +01:00
• fd9edf7f31 travis: Disable warning that causes a false positive in Xcode 8.3+ Tobias Brunner 2017-12-08 09:59:13 +01:00
• 344e1b6060 Version bump to 5.6.2dr3 Andreas Steffen 2017-12-13 08:54:54 +01:00
• 0fb293fc91 tpm_extendpcr: Extend digests into a TPM PCR Andreas Steffen 2017-12-12 17:42:08 +01:00
• 5d3eb57cfd Version bump to 5.6.2dr2 Andreas Steffen 2017-12-10 21:42:02 +01:00
• ee402a22a3 asn1: Added tlsfeature OID Andreas Steffen 2017-12-04 10:23:57 +01:00
• 3e7a19bfa9 pki: Extend pki --print with --keyid parameter Andreas Steffen 2017-12-10 19:31:10 +01:00
• acfd590ab6 imc-os: Derive device ID from private key bound to smartcard or TPM Andreas Steffen 2017-12-10 11:51:03 +01:00
• 2389168388 ipsec-types: Don't mask the mark value if it is one of the 'unique' values Eyal Birger 2017-11-30 10:47:01 +02:00
• ee22e8080f nm: Allow disabling libnm-glib Lubomir Rintel 2017-11-30 13:24:37 +01:00
• 4f60b72a81 Version bump to 5.6.2dr1 Andreas Steffen 2017-12-05 22:23:43 +01:00
• 71cf3d709a pt-tls-client: Load certificates via handle from smartcard or TPM Andreas Steffen 2017-12-05 20:41:43 +01:00
• e850d000b8 libtpmtss: Load X.509 certificates from TPM 2.0 NV RAM Andreas Steffen 2017-12-05 17:08:55 +01:00
• fb1cf320a2 libtpmtss: Extend TPM 2.0 capability info Andreas Steffen 2017-12-04 17:46:23 +01:00
• 0729be1bfe Merge branch 'android-proposals' Tobias Brunner 2017-11-28 16:23:41 +01:00
• 4a79434b11 android: Remove modp1024 from the ESP proposals Tobias Brunner 2017-11-28 16:19:08 +01:00
• 8517a0edb4 testing: Explicitly deliver all test results as text/plain Tobias Brunner 2017-11-28 16:16:18 +01:00
• 203a86ecb8 Version bump to 5.6.1 Andreas Steffen 2017-11-17 22:42:28 +01:00
• f60b08ba0d testing: Added swanctl/rw-cert-pss scenario Andreas Steffen 2017-11-17 22:42:07 +01:00
• 5a6f687bdf android: New release after adding configurable proposals Tobias Brunner 2017-11-17 18:07:09 +01:00
• b03713add4 android: Validate proposal strings when importing profiles Tobias Brunner 2017-11-17 17:45:52 +01:00
• 9f962f6c19 android: Validate proposal strings in the GUI Tobias Brunner 2017-11-17 17:40:52 +01:00
• 836a943804 android: Add utility JNI function to validate proposal strings Tobias Brunner 2017-11-17 17:26:51 +01:00
• 2307bffe56 proposal: Move proposal_t from libcharon to libstrongswan Tobias Brunner 2017-11-17 17:15:14 +01:00