Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• c60a14ba23 botan: Fix typo in algorithm string for SHA3-224 RSA verification Markus Theil 2026-04-10 21:26:27 +02:00
• e1091327b5 tun-device: Also close IPv6 socket on destruction Markus Theil 2026-04-10 21:25:19 +02:00
• febe474926 encrypted-payload: Check for non-zero payload size Markus Theil 2026-04-09 12:17:33 +02:00
• fdd06d99ec botan: Make RNG types configurable Markus Theil 2026-04-09 19:35:50 +02:00
• 0d4a8cc9ba appveyor: Reduce build time and remove build against OpenSSL 1.1.0 Tobias Brunner 2026-04-10 11:21:00 +02:00
• 032d8adcd4 github: Continue crypto tests even if OpenSSL tests fail Tobias Brunner 2026-04-09 09:25:23 +02:00
• e8e34c4b33 Use wolfSSL 5.9.1 for tests Tobias Brunner 2026-04-09 08:53:26 +02:00
• 99e9db478d unit-tests: Use longer input for ECDSA tests Tobias Brunner 2026-04-09 09:45:27 +02:00
• b9d9f8ad95 fuzz: Remove unnecessary calls to set plugin dirs Tobias Brunner 2026-02-11 11:31:24 +01:00
• 444a1dc0e3 fuzz: Create fuzzers with default and custom crypto plugins Tobias Brunner 2026-02-11 11:14:53 +01:00
• 521c6e05c5 github: Update actions so they don't use deprecated Node.js 20 Tobias Brunner 2026-04-07 18:57:40 +02:00
• b56b3d48b6 tls-server: Avoid allocating large buffer for cipher suites on stack Tobias Brunner 2026-04-01 18:27:07 +02:00
• a3c5fad1ff libipsec: Reject policies for anything but ESP tunnel mode Tobias Brunner 2026-03-27 12:35:10 +01:00
• 2a63343968 trap-manager: Ignore acquires without selectors for wildcard traps Tobias Brunner 2026-03-27 12:28:22 +01:00
• 66fffdb1bf ike-init: Remove redundant check for more key exchanges during rekeying Tobias Brunner 2026-03-27 12:07:19 +01:00
• 05807b1b1b openssl: Handle EdDSA keys from engines special again Tobias Brunner 2026-03-27 11:04:54 +01:00
• 4af485d87d certreq: Avoid OOB read when enumerating hashes in OCSP CERTREQ Tobias Brunner 2026-03-25 18:49:45 +01:00
• 20b07f2cbf vici: Prevent uninitialized memory access if VICI_LIST_ITEM is too short Tobias Brunner 2026-03-25 09:56:06 +01:00
• 513f25ce12 tnccs_11: Avoid crash if TNCCS-ReasonStrings is empty or only contains empty nodes Tobias Brunner 2026-03-25 09:51:31 +01:00
• 65fcf08cdb eap-sim: Prevent infinite loop if version list contains more than one entry Tobias Brunner 2026-03-25 09:42:15 +01:00
• 7b0190cb26 revocation: Fix memory leak if nonce in OCSP response doesn't match Tobias Brunner 2026-03-23 19:03:58 +01:00
• 1e1dd2976d message: Drop fragments with total fragment count lower than before Tobias Brunner 2026-03-23 18:58:18 +01:00
• 06e5462a4b credential-factory: Enforce an upper limit when creating nested credentials Tobias Brunner 2026-03-20 17:20:55 +01:00
• 236ef93c50 tls-peer: Ensure TLS 1.3 CertificateRequest structure is valid Tobias Brunner 2026-03-20 16:05:27 +01:00
• e454b4adb3 libsimaka: Prevent out-of-bounds read when parsing attributes with actual length field Tobias Brunner 2026-03-20 15:48:41 +01:00
• 0b053e048d nm: Ignore all .gmo files Tobias Brunner 2026-04-02 07:54:04 +02:00
• b377a41336 dhcp: Use correct getter for boolean force_server_address option Tobias Brunner 2026-04-01 14:01:02 +02:00
• 3c637c7521 openssl: Fix return value if returning EdDSA public key fails Tobias Brunner 2026-04-01 13:49:08 +02:00
• 440b7e7940 Use Botan 3.11.1 for tests Tobias Brunner 2026-04-01 09:07:26 +02:00
• 988d777ebb nm: Add Georgian translation Ekaterine Papava 2026-04-01 12:22:39 +02:00
• 1fdcd5b0d3 Ignore tarball checksums and signatures Andreas Steffen 2026-03-23 17:24:53 +01:00
• 62f5d17c12 Version bump to 6.0.5 Andreas Steffen 2026-03-23 13:41:52 +01:00
• 01908d59b0 NEWS: Add info about CVE-2026-25075 Tobias Brunner 2026-03-20 16:28:20 +01:00
• 73aff21077 eap-ttls: Prevent crash if AVP length header field is invalid Tobias Brunner 2026-03-05 12:43:12 +01:00
• 0fcece9fff Use wolfSSL 5.9.0 for tests Tobias Brunner 2026-03-19 09:18:08 +01:00
• b23387a3d6 conf: Install charon-specific snippets also when charon itself is not built Tobias Brunner 2026-03-17 08:27:37 +01:00
• 0d10fa6dda conf: Generate and install config snippets also for charon-cmd and charon-nm Tobias Brunner 2026-03-10 17:43:08 +01:00
• 9d268feabd github: Use AWS-LC 1.70.0 for tests Tobias Brunner 2026-03-16 11:35:55 +01:00
• 005a3fb168 fuzz: Add dependency to fuzz RADIUS message parsing Arthur Chan 2026-03-11 22:57:49 +00:00
• e535e13079 vici: Prevent uninitialized memory access when finding VICI_END in message Tobias Brunner 2026-03-13 09:35:28 +01:00
• 358653d06a gmp: Reject public keys with public exponent e < 3 Tobias Brunner 2026-03-11 18:16:53 +01:00
• 8fd2c3a3bc Version bump to 6.0.5dr1 Andreas Steffen 2026-02-23 20:02:58 +01:00
• 6856bfe5bc github: Use AWS-LC 1.69.0 for tests Tobias Brunner 2026-03-04 16:30:48 +01:00
• d6b1574e2a string: Fix -Werror=discarded-qualifiers with GCC 15 Dustin Kirkland 2026-02-26 11:25:27 -06:00
• 77e89bdcdc NEWS: Add news for 6.0.5 Tobias Brunner 2026-03-03 14:58:16 +01:00
• ec2d1dc911 Use distinct identifier for "command" group in pki/swanctl to fix apidoc Tobias Brunner 2026-03-02 16:42:38 +01:00
• 7f9f9bd375 Fixed some typos, courtesy of codespell Tobias Brunner 2026-03-02 16:30:12 +01:00
• d5e95342b5 swanctl: Check for conflicts with existing and shared options when registering commands Tobias Brunner 2026-02-23 11:20:19 +01:00
• d25b5db9ba pki: Avoid conflict between --verify and --debug Tobias Brunner 2026-02-23 11:19:35 +01:00
• 9b4bbbbccf swanctl: Check for conflicts with shared options when registering commands Tobias Brunner 2026-02-23 11:13:55 +01:00
• 357296a4d4 swanctl: Avoid conflict between --uninstall and --uri Tobias Brunner 2026-02-23 11:03:52 +01:00
• 3141a5fc4f swanctl: Assigned -V to --version since -v is now used for global --debug Andreas Steffen 2026-02-22 10:22:19 +01:00
• 589c74009b stream: Clarify that some methods must not be called from callbacks Tobias Brunner 2026-02-16 12:05:34 +01:00
• 14cbe0bf24 whitelist: Fix deadlock when handling client disconnection seantywork 2026-02-15 09:40:49 +00:00
• 8a6f9ba70e kernel-netlink: Don't fallback to peer address as gateway/nexthop Tobias Brunner 2024-11-29 14:57:31 +01:00
• 116f36ba57 vici: Document attributes for additional KE methods in list-sa event Tobias Brunner 2026-02-20 11:53:15 +01:00
• 1afd5a7d23 github: Replace action for TKM tests with direct "docker run" call Tobias Brunner 2026-02-20 12:34:04 +01:00
• 2a8eb92767 github: Add a link to the docs in the new issue config Tobias Brunner 2026-02-17 10:18:10 +01:00
• 1db0c19dff Merge branch 'icmp-forwarding' Tobias Brunner 2026-02-12 16:21:46 +01:00
• a7c03a415e testing: Add scenarios to test ICMP forwarding Tobias Brunner 2026-01-15 11:04:05 +01:00
• 22e502b286 vici: Make ICMP forwarding configurable Tobias Brunner 2022-02-07 14:48:49 +01:00
• b6114e84fc child-sa: Enable ICMP forwarding on SA and policies if configured Tobias Brunner 2022-02-07 14:35:39 +01:00
• 110fbcbe65 child-cfg: Add flag to enable ICMP forwarding Tobias Brunner 2022-02-07 14:21:43 +01:00
• 11351f24ef kernel-netlink: Enable ICMP forwarding on inbound SA and out/fwd policies Tobias Brunner 2022-02-07 14:21:01 +01:00
• 21e5edab10 kernel-ipsec: Add flags to enable ICMP error forwarding Tobias Brunner 2022-02-07 14:20:39 +01:00
• f10b9adec9 ipsec-types: Add a proper hash function for ipsec_sa_cfg_t Tobias Brunner 2022-02-07 14:28:19 +01:00
• 3df3af8eb7 bus: Prevent redundant down event on rekeyed CHILD_SA delete timeout Martin Willi 2026-02-12 08:53:01 +01:00
• dba2c9935a Remove accidentally committed libtool script Tobias Brunner 2026-02-09 16:04:23 +01:00
• 7cca0cb772 Merge branch 'swanctl-plugins' Tobias Brunner 2026-02-06 16:10:50 +01:00
• e2786cbcb8 swanctl: Add global --debug, --options and --uri arguments Tobias Brunner 2026-01-30 12:20:05 +01:00
• 0d41001e74 debug: Add helper to get the current default log level for a group Tobias Brunner 2026-01-30 12:44:53 +01:00
• be68bd50b7 pki: Add global --debug and --options arguments Tobias Brunner 2026-01-29 17:32:03 +01:00
• dd7b0283ef plugin-loader: Add option to change log message if plugin is not found Tobias Brunner 2026-01-28 15:45:23 +01:00
• 5b0d506215 testing: Remove unused revocation and constraints plugins for swanctl Tobias Brunner 2026-01-05 17:23:06 +01:00
• 5fe1d71204 swanctl: Use a custom default plugin list Tobias Brunner 2026-01-05 16:32:02 +01:00
• c649774141 configure: Load ldap plugin in pki Tobias Brunner 2026-01-05 16:27:01 +01:00
• b8d8277ae0 stream-service-unix: Remove unnecessary execute permission from sockets Tobias Brunner 2026-01-15 15:14:32 +01:00
• 2ed929d9f6 fuzz-ike: Initialize libcharon as logging will cause crashes otherwise Tobias Brunner 2026-02-06 08:12:52 +01:00
• 7973080969 testing: Add a reauthentication to ikev2/dhcp-static-client-id Tobias Brunner 2026-02-05 17:53:58 +01:00
• 79a52c488d dhcp: Don't release the address via DHCP if it's still used Tobias Brunner 2025-12-18 15:51:02 +01:00
• 44962c4e71 Merge branch 'cifuzz' Tobias Brunner 2026-02-04 12:38:37 +01:00
• 8a8d4640cf github: Also run UBSan with CIFuzz Tobias Brunner 2026-01-30 15:06:14 +01:00
• 0f4a78025c github: Add latest CIFuzz Arthur Chan 2026-01-29 08:33:30 +00:00
• e73af66f4a pubkey-authenticator: Avoid conflict with config switch based on EAP-Identity Tobias Brunner 2026-01-08 08:59:11 +01:00
• 353bb42937 github: Use AWS-LC 1.67.0 for tests Tobias Brunner 2026-01-28 11:30:30 +01:00
• c10f66d1cc github: Use OpenSSL 3.6.1 for tests Tobias Brunner 2026-01-28 11:27:53 +01:00
• 8388904cbe ike-init: Simplify adding extension notifies to IKE_SA_INIT Tobias Brunner 2025-10-20 17:45:39 +02:00
• b8deb618ef oss-fuzz: Add new fuzzer for libcharon IKE message parser Arthur Chan 2026-01-21 05:13:26 +00:00
• 7a36a8c220 appveyor: Reduce runtime by using lld instead of ld Tobias Brunner 2026-01-20 15:21:12 +01:00
• 7fa4d54b3c array: Handle recursive calls to array_sort() if qsort_r() is not supported Tobias Brunner 2026-01-20 10:58:01 +01:00
• d0c36baef9 charon-cmd: Add support for childless IKE SA initiation Tobias Brunner 2025-12-09 10:08:35 +01:00
• e248fac362 charon-cmd: Only use loose identity matching if no IDr is configured Tobias Brunner 2025-10-02 10:47:36 +02:00
• 757dce2ed3 charon-cmd: Add support for PSK authentication with IKEv2 Tobias Brunner 2025-05-22 11:30:42 +02:00
• 5aacf5c7b6 trap-manager: Use latest seq when creating an acquire entry Jean-François Hren 2026-01-05 09:50:53 +01:00
• d68044b216 identification: Add support for organizationIdentifier in DNs Tobias Brunner 2026-01-05 10:50:24 +01:00
• f79504994a agent: Fix compiler warning when building with clang Tobias Brunner 2025-12-12 15:59:38 +01:00
• 9d242a4f7d ip-packet: Fix compiler warning seen on FreeBSD 15 Tobias Brunner 2025-12-12 08:10:13 +01:00
• db6eca56d7 cirrus: Use FreeBSD 15.0 and 14.3 Tobias Brunner 2025-12-11 17:36:00 +01:00
• d20a0116b2 Use Botan 3.10.0 for tests Tobias Brunner 2025-12-11 17:25:12 +01:00
• 1ff9533348 github: Use AWS-LC 1.65.1 for tests Tobias Brunner 2025-12-02 09:10:37 +01:00