Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 7d6b81648b gmp: Add support for RSASSA-PSS signature verification Tobias Brunner 2017-09-23 16:25:20 +02:00
• 154ee7f66a gmp: Add support for RSASSA-PSS signature creation Tobias Brunner 2017-09-23 15:33:11 +02:00
• 00d161f2db unit-tests: Add FIPS 186-4 RSASSA-PSS test vectors Tobias Brunner 2017-09-23 13:36:32 +02:00
• 89015dff9e unit-tests: Create and verify some RSA PSS signatures Tobias Brunner 2017-09-23 10:49:09 +02:00
• 2f95d7195d openssl: Add support for verifying RSASSA-PSS signatures Tobias Brunner 2017-09-23 10:39:14 +02:00
• 51dd2fd2db openssl: Add support for creating RSASSA-PSS signatures Tobias Brunner 2017-09-23 10:01:57 +02:00
• 5ae3f5cea8 openssl: Add helper to determine EVP_MD from hash_algorithm_t Tobias Brunner 2017-09-23 10:12:36 +02:00
• a994407d50 unit-tests: Add FIPS 186-4 RSA test vectors Tobias Brunner 2017-09-22 19:37:54 +02:00
• 183a9108fb gcrypt: Determine missing RSA private key parameters Tobias Brunner 2017-09-22 19:10:39 +02:00
• bd4df68a7b gmp: Determine missing RSA private key parameters Tobias Brunner 2017-09-22 17:49:00 +02:00
• 03eda5a822 openssl: Add functions to determine missing RSA private key parameters Tobias Brunner 2017-09-22 15:47:11 +02:00
• a22316520b signature-params: Add functions to parse/build ASN.1 RSASSA-PSS params Tobias Brunner 2017-09-20 15:21:51 +02:00
• c2b878cd61 hasher: Add function to determine length of hashes Tobias Brunner 2017-09-22 09:46:14 +02:00
• ffd0eeecf0 asn1: Add function to generate an ASN.1 integer from an uint64_t Tobias Brunner 2017-09-20 15:00:42 +02:00
• bfe1cb3a94 asn1: Add OID for MGF1 Tobias Brunner 2017-09-19 18:45:49 +02:00
• d03c5b7994 signature-params: Add struct for RSASSA-PSS parameters Tobias Brunner 2017-09-19 18:21:37 +02:00
• de280c2e03 private-key: Add optional parameters argument to sign() method Tobias Brunner 2017-09-19 17:26:58 +02:00
• a413571f3b public-key: Add optional parameters argument to verify() method Tobias Brunner 2017-09-19 17:15:18 +02:00
• 677072accc public-key: Add RSASSA-PSS signature scheme identifier Tobias Brunner 2017-09-19 13:40:48 +02:00
• 69502f5afd asn1: Add OID for RSASSA-PSS Tobias Brunner 2017-09-19 12:10:36 +02:00
• 43b59d1323 ikev2: Don't use SHA-1 for RFC 7427 signature authentication Tobias Brunner 2017-09-19 11:10:09 +02:00
• 76c58498ef proposal: Remove MODP-1024 from default IKE proposal Tobias Brunner 2017-09-19 11:04:37 +02:00
• 10da451fc3 proposal: Remove MD5 from default IKE proposal Tobias Brunner 2017-09-19 11:01:04 +02:00
• 2294606aa5 proposal: Remove deprecated algorithms from default ESP and AH proposals Tobias Brunner 2017-10-23 15:33:02 +02:00
• 63ffcfaa49 configure: Fix check for libtpmtss to build it only when needed Martin Willi 2017-10-17 14:04:27 +02:00
• 0a6fbe8f7e pool: Destroy enumerator before deleting existing pool Tobias Brunner 2017-11-06 10:29:56 +01:00
• 88a8fba1c7 kernel-pfkey: Support anti-replay windows > 2k Tobias Brunner 2017-11-07 14:26:14 +01:00
• 21a500a092 kernel-pfkey: Don't include keys in SADB_UPDATE message to update IPs on FreeBSD Tobias Brunner 2017-11-03 09:37:44 +01:00
• 441d083cfb Merge branch 'vici-counters' Tobias Brunner 2017-11-08 16:28:49 +01:00
• 052bccfac4 swanctl: Add --counters command Tobias Brunner 2017-08-24 17:44:45 +02:00
• fdf33b0f1c vici: Add 'get|reset-counters' commands Tobias Brunner 2017-08-24 17:41:37 +02:00
• 6f74b8748a counters: Move IKE event counter collection from stroke to a separate plugin Tobias Brunner 2017-08-24 17:02:37 +02:00
• c81b87ac26 systime-fix: Add timeout option to stop waiting for valid system time Tobias Brunner 2017-09-26 10:32:04 +02:00
• 1fe71a50f1 android: Add log message if failed to retrieve user certificate encoding Tobias Brunner 2017-09-22 08:41:10 +02:00
• 7fdad3bb97 testing: Fix output matching of lease time in ipsec pool utility Tobias Brunner 2017-11-02 11:32:52 +01:00
• 6ebf852c3f shunt-mananger: Make outbound FWD shunt policies optional Tobias Brunner 2017-10-25 13:24:01 +02:00
• 2dad293647 ike: Do not send initial contact only for UNIQUE_NEVER Thomas Egerer 2017-10-25 10:45:02 +02:00
• 6ce7ae24a4 pkcs11: Call C_Finalize() to cancel jobs waiting in C_WaitForSlotEvent() Tobias Brunner 2017-10-06 14:51:37 +02:00
• bf23ca09cb pool: Make pool timeout configurable in other units than hours Tobias Brunner 2017-08-17 15:21:19 +02:00
• b93ebb4ea9 utils: Add helper function to parse time spans from strings Tobias Brunner 2017-08-17 15:04:14 +02:00
• c782d367c6 asn1: Add additional OIDs seen in certificate DNs Tobias Brunner 2017-10-18 16:44:04 +02:00
• 08e2401653 scripts: Add -d option to oid2der to decode DER encoded OIDs Tobias Brunner 2017-10-18 16:28:04 +02:00
• 2269444b56 man: Fix documentation of inbound mark behavior in ipsec.conf(5) Tobias Brunner 2017-08-23 11:41:50 +02:00
• 2d244f178f vici: Make setting mark on inbound SA configurable Tobias Brunner 2017-08-23 11:25:52 +02:00
• ea43f8ffe5 child-cfg: Optionally set mark on inbound SA Tobias Brunner 2017-08-23 11:22:50 +02:00
• 655924074b eap-radius: Optionally send Class attributes in RADIUS accounting messages Tobias Brunner 2017-10-23 12:08:17 +02:00
• 26bda4e904 ikev2: Abort make-before-break reauth if we don't find children to recreate Tobias Brunner 2017-09-26 11:31:15 +02:00
• b2266280ef openssl: Also load EC keys from an ENGINE Tobias Brunner 2017-09-06 10:41:37 +02:00
• 7f86b0f639 libcharon: Added Cisco FlexVPN Supported VID Andreas Steffen 2017-10-27 20:14:43 +02:00
• 7a708b5ccd unit-tests: Fix "using integer constants in boolean context" warning Tobias Brunner 2017-10-23 14:38:00 +02:00
• d889f20ca1 streams: Remove registered systemd stream service Tobias Brunner 2017-10-18 09:25:15 +02:00
• 23e76d250f streams: Named systemd sockets are only supported since systemd v227 Tobias Brunner 2017-10-12 18:40:15 +02:00
• a97de61e78 starter: Add the correct keywords header file to EXTRA_DIST Tobias Brunner 2017-10-11 18:10:46 +02:00
• 0d08959a04 watcher: Don't notify watcher if removed FD was not found Tobias Brunner 2017-09-07 09:51:49 +02:00
• 59db98fb94 stream: Add basic stream service for systemd sockets aszlig 2017-08-30 02:36:34 +02:00
• ea613d5d27 starter: Don't define any hard-coded proposal strings Tobias Brunner 2017-08-30 15:15:31 +02:00
• 4f575d62ed configure: Also check for libcrypto on Windows Tobias Brunner 2017-08-30 12:30:02 +02:00
• 78acaba6a1 openssl: Fix call of X509_CRL_get0_signature() with OpenSSL 1.1.0 Tobias Brunner 2017-10-06 15:26:19 +02:00
• e1803a208a kernel-netlink: Add strings for newer XFRM attribute types Tobias Brunner 2017-10-06 16:41:09 +02:00
• 0ae19f0ced configure: Fix gperf length parameter determination Tobias Brunner 2017-09-26 12:23:36 +02:00
• 7dd29ab4ed libimcv: Renamed SW Request to SWIMA Request Andreas Steffen 2017-09-27 10:01:56 +02:00
• a9fb529b84 Version bump to 5.6.1dr3 Andreas Steffen 2017-09-26 22:43:38 +02:00
• be7020dace SWIMA attribute name changes Andreas Steffen 2017-09-23 15:22:52 +02:00
• 039b85dd43 kernel-pfroute: Delay call to if_indextoname(3) when handling RTM_IFINFO Tobias Brunner 2017-08-28 19:12:16 +02:00
• ab7d5e32d3 controller: Consider any IKE_SA destruction as success when terminating Tobias Brunner 2017-08-14 11:14:38 +02:00
• e0e4322973 configure: Detect type of length parameter for gperf generated function Tobias Brunner 2017-09-18 17:57:05 +02:00
• d4593353c9 utils: Include stdint.h Tobias Brunner 2017-09-14 11:59:30 +02:00
• c21fff303a sec-updater: Make sure success is initialized Tobias Brunner 2017-09-14 19:25:42 +02:00
• e433d512f4 dhcp: Fix warning regarding unaligned pointer value due to packed struct Tobias Brunner 2017-09-14 19:33:07 +02:00
• 787cc3a4e5 dhcp: Don't use signed char for DHCP options Tobias Brunner 2017-09-14 19:11:10 +02:00
• d04deff4df imv-agent: Fix get_attribute() call for preferred language Tobias Brunner 2017-09-14 18:27:13 +02:00
• 7e7800e0a3 bliss: Fix compile error of unit tests due to uninitialized variable Tobias Brunner 2017-09-14 18:04:38 +02:00
• f4bd467641 travis: Use Clang 4.0 instead of 3.9 due to va_start() warnings Tobias Brunner 2017-09-14 15:33:59 +02:00
• 7cecc98e8a settings: Fix possible undefined behavior with va_start() and bool Tobias Brunner 2017-09-14 15:31:00 +02:00
• 46a62f0126 Define MODP_CUSTOM constructors as variadic functions Tobias Brunner 2017-09-14 14:03:08 +02:00
• f871b341d7 libtnccs: Correctly read dlopen_use_rtld_now option Tobias Brunner 2017-09-14 18:07:08 +02:00
• ddfb5dd44a plugin-loader: Correctly read dlopen_use_rtld_now option Tobias Brunner 2017-09-14 12:43:54 +02:00
• d3e1beaad5 android: New release after adding delta CRL support and some bug fixes Tobias Brunner 2017-09-18 11:04:46 +02:00
• 66b7a08884 android: Ignore IllegalArgumentException for multicast addresses Tobias Brunner 2017-09-11 19:14:31 +02:00
• 86c10a958f openssl: Add support for delta CRLs Tobias Brunner 2017-09-07 12:07:32 +02:00
• 4e7b7db62f certificates: Use shared destructor for x509_cdp_t Tobias Brunner 2017-09-07 11:45:23 +02:00
• e7276f78aa child-create: Don't consider a DH group mismatch as failure as responder Tobias Brunner 2017-09-06 16:41:42 +02:00
• 6e861947a0 libipsec: Make sure to expire the right SA Tobias Brunner 2017-08-14 16:03:54 +02:00
• e138003de9 Merge branch 'libipsec-ip-frag' Tobias Brunner 2017-09-18 10:31:58 +02:00
• 98e7285394 testing: Add libipsec/net2net-cert-ipv6 scenario Tobias Brunner 2017-09-01 10:03:11 +02:00
• bdcaca76c5 ip-packet: Correctly determine protocol in fragmented IPv6 packets Tobias Brunner 2017-09-01 09:47:29 +02:00
• b3cc46381d ip-packet: Fix "packet too short" error when parsing fragmented IPv4 packets Tobias Brunner 2017-09-01 08:57:56 +02:00
• 42aa569617 Merge branch 'tkm-cid-ref' Tobias Brunner 2017-09-15 12:17:07 +02:00
• fc08e6af8a charon-tkm: Reset ESA on child SA create failure Adrian-Ken Rueegsegger 2017-09-05 15:56:12 +02:00
• 59e7298ff9 charon-tkm: Check for error when acquiring ESA ID Adrian-Ken Rueegsegger 2017-09-04 15:00:42 +02:00
• 8e823bb8b1 charon-tkm: Fix AE context life-cycle handling Adrian-Ken Rueegsegger 2017-09-01 18:46:05 +02:00
• c198ddcb3f charon-tkm: Return current refcount when releasing ID Adrian-Ken Rueegsegger 2017-09-01 17:21:05 +02:00
• 1b2a8d963a charon-tkm: Add acquire_ref method to ID manager Adrian-Ken Rueegsegger 2017-09-01 17:15:41 +02:00
• fcde9686f6 charon-tkm: Store context ids as int instead of bool Adrian-Ken Rueegsegger 2017-09-01 16:58:15 +02:00
• d35ebfbce1 charon-tkm: Add missing whitespace log message Adrian-Ken Rueegsegger 2017-09-01 16:30:49 +02:00
• da479ae2c9 child-delete: Only let SAs expire naturally if they not already did Tobias Brunner 2017-09-04 18:11:39 +02:00
• c80cec2d5e Version bump to 5.6.1dr2 Andreas Steffen 2017-09-13 16:56:45 +02:00
• 8aad7ffb11 sec-updater: Import SWID tags of updated packages Andreas Steffen 2017-09-09 13:13:28 +02:00
• 33a729fac2 libimcv: Corrected caption Andreas Steffen 2017-09-09 13:10:45 +02:00
• 165d28174d pt-tls-client: Introduced --options as a synonym for --optionsfrom Andreas Steffen 2017-09-09 10:31:02 +02:00