Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 94bdd463d8 sec-updater: Write to log only if at least one update is found. Andreas Steffen 2017-09-07 14:50:49 +02:00
• 311d931aef android: New release after adding OCSP, CRL cache and some other stuff Tobias Brunner 2017-09-04 11:27:40 +02:00
• 82088028d8 testing: Reduce log level of SSH client Tobias Brunner 2017-08-29 14:11:23 +02:00
• c353996191 ike: Reset local SPI if retrying to connect in state IKE_CONNECTING Tobias Brunner 2017-08-29 09:06:55 +02:00
• eaedcf8c00 ike-sa-manager: Add method to change the initiator SPI of an IKE_SA Tobias Brunner 2017-08-25 16:45:03 +02:00
• bd371590ab ike-init: Fail if DH group in KE payload does not match proposed group Tobias Brunner 2017-08-25 14:42:51 +02:00
• 9c03e8c80b Merge branch 'android-updates' Tobias Brunner 2017-09-04 10:42:00 +02:00
• 1926efadde android: Add disconnect button to dialog if already connected to profile Tobias Brunner 2017-08-22 18:28:39 +02:00
• 037b353d2c android: Load x509 plugin to generate OCSP requests and parse responses Tobias Brunner 2017-08-23 16:15:48 +02:00
• 829cc56a53 android: Add support to POST data via SimpleFetcher Tobias Brunner 2017-08-23 16:14:36 +02:00
• 6e39240a3e android: Add option to clear cached CRLs Tobias Brunner 2017-09-01 19:26:52 +02:00
• 0bebbae9e3 android: Cache CRLs in app directory Tobias Brunner 2017-08-21 15:53:20 +02:00
• 3fe9a436ee android: Pass absolute path to the app's data directory via JNI Tobias Brunner 2017-08-21 15:26:06 +02:00
• 98ab757284 android: Hide app selection in profile editor on Android < 5 Tobias Brunner 2017-08-24 15:18:32 +02:00
• 0b4f7d646b android: Only apply app filter on Android 5 and newer Tobias Brunner 2017-07-11 09:44:35 +02:00
• ac3189f792 android: Catch OutOfMemoryError when importing profiles Tobias Brunner 2017-07-10 12:17:45 +02:00
• 1a9261a923 android: Catch NullPointerException when parsing invalid certificates Tobias Brunner 2017-07-06 15:40:42 +02:00
• e59b78254a android: Catch NullPointerException when calling VpnService.prepare() Tobias Brunner 2017-07-06 15:16:24 +02:00
• d43b84dcb4 Version bump to 5.6.1dr1 Andreas Steffen 2017-09-01 13:49:09 +02:00
• fc373b64a6 imv-os: Updated security update evaluation Andreas Steffen 2017-08-31 18:52:04 +02:00
• 7b75c18696 libimcv: Updated database scheme Andreas Steffen 2017-08-30 13:30:18 +02:00
• b84817375d sec-updater: Checks for security updates Andreas Steffen 2017-08-25 11:23:20 +02:00
• 076aac7069 imv-attestation: Fixed file hash measurements Andreas Steffen 2017-09-01 02:53:28 +02:00
• 66805c7b32 ike-cfg: Fix memory leak when checking for configured address Tobias Brunner 2017-08-29 15:24:32 +02:00
• d2a89e9407 sw-collector.8: Some cleanups Andreas Steffen 2017-08-25 11:28:06 +02:00
• 062a34e722 kernel-netlink: Set usable state whenever an interface appears Tobias Brunner 2017-08-14 17:26:08 +02:00
• b7ad5f777f libimcv: Updated Android.mk after move of swid-gen(-info) Tobias Brunner 2017-08-21 12:17:02 +02:00
• 0d11d7b110 coverage: Use absolute path when removing paths with lcov Tobias Brunner 2017-08-21 11:08:59 +02:00
• 9cf2920512 traffic-selector: Use single buffer for both address families Tobias Brunner 2017-08-16 16:52:13 +02:00
• 936db031c7 testing: Make removal of SWID tags work with different releases Tobias Brunner 2017-08-16 10:38:44 +02:00
• bf31485e1e fuzzing: Also run input that previously caused crashes Tobias Brunner 2017-05-31 14:37:27 +02:00
• 17840fa18e configure: Detect mpz_powm_sec() when built with -Werror Tobias Brunner 2017-05-31 14:33:43 +02:00
• 7421884da1 travis: Use the same ASAN_OPTIONS as used by OSS-Fuzz Tobias Brunner 2017-05-30 19:38:31 +02:00
• ed13c60c4f plugin-loader: Move indent variables into !USE_FUZZING block Tobias Brunner 2017-05-30 19:14:22 +02:00
• 1ce2721d90 travis: Run fuzz targets Tobias Brunner 2017-05-30 18:41:31 +02:00
• 9f2e74cfbb fuzzing: Run local fuzz targets on given corpora during make check Tobias Brunner 2017-05-30 16:46:32 +02:00
• be1beea7a4 fuzzing: Add driver to run fuzz targets on a given list of files Tobias Brunner 2017-05-30 16:44:22 +02:00
• c15dbfaf08 charon-tkm: Build fix for kernel SAD tests Adrian-Ken Rueegsegger 2017-08-14 18:30:15 +02:00
• 9cc37212c6 Version bump to 5.6.0 Andreas Steffen 2017-08-14 10:07:47 +02:00
• 7cc4a92d0b NEWS: Add info about CVE-2017-11185 Tobias Brunner 2017-08-08 20:14:00 +02:00
• ef5c37fcdf gmp: Fix RSA signature verification for m >= n Tobias Brunner 2017-05-29 11:59:34 +02:00
• d35183e33e Version bump to 5.6.0rc2 Andreas Steffen 2017-08-09 14:23:28 +02:00
• e658fd475a sw-collector: Moved info class to libimcv Andreas Steffen 2017-08-09 09:18:20 +02:00
• f237bfcb9e NEWS: Added some news Tobias Brunner 2017-08-08 20:05:30 +02:00
• e66c3d41bc conf: Descriptions of several settings updated Tobias Brunner 2017-08-08 17:17:27 +02:00
• eb3239b921 libimcv: Cast chunk length to int when printing as string Tobias Brunner 2017-08-08 15:32:08 +02:00
• cbade9b6b9 sw-collector: Cast chunk length to int when printing as string Tobias Brunner 2017-08-08 15:31:22 +02:00
• 0392f76804 sw-collector: Fix memory leak after failing to open DB Tobias Brunner 2017-08-08 15:30:44 +02:00
• d093488b96 sw-collector: Use correct variable to report failure to open history file Tobias Brunner 2017-08-08 15:29:41 +02:00
• 3abb6a231d Revert "apidoc: Update Doxyfile" Tobias Brunner 2017-08-07 18:29:07 +02:00
• 285c077d2c Version bump to 5.6.0rc1 Andreas Steffen 2017-08-07 18:25:52 +02:00
• 3295b35c6a imv-database: Improve performance by creating file_hashes index Andreas Steffen 2017-08-07 16:46:27 +02:00
• e64cdb15c5 sw-collector: Add missing Doxygen group Tobias Brunner 2017-08-07 17:33:55 +02:00
• 5d65aad8a6 libimcv: Add missing Doxgen group for SWIMA-related classes Tobias Brunner 2017-08-07 17:31:25 +02:00
• 8ec979fd64 apidoc: Update Doxyfile Tobias Brunner 2017-08-07 17:27:31 +02:00
• ca280574ba Fixed some typos, courtesy of codespell Tobias Brunner 2017-08-07 17:22:01 +02:00
• c11d13c4b9 testing: Add -v option to do-tests to prefix commands with timestamps Tobias Brunner 2017-08-07 16:52:01 +02:00
• f058804df8 testing: Move collector.db in tnc/tnccs-20-ev-pt-tls scenario to /etc/db.d Tobias Brunner 2017-08-07 16:26:38 +02:00
• 6fadc6a859 kernel-netlink: Wipe buffer used to read Netlink messages Tobias Brunner 2017-08-02 11:39:31 +02:00
• 1a75514b76 sha2: Write final hash directly to output buffer Tobias Brunner 2017-08-02 11:33:55 +02:00
• e0c78d7516 prf-plus: Wipe seed and internal buffer Tobias Brunner 2017-07-25 10:15:58 +02:00
• 32e5c49234 child-sa: Allow requesting different unique marks for in/out Eyal Birger 2017-07-28 12:18:52 +03:00
• 00498d78a8 conf: Match more characters in _ and ** Tobias Brunner 2017-08-02 14:32:32 +02:00
• 1a8226429a trap-manager: Don't require that remote is resolvable during installation Tobias Brunner 2017-07-12 11:36:59 +02:00
• 7bcd48d1b1 child-create: Don't log CHILD_SA initiation until we know the unique ID Tobias Brunner 2017-08-07 13:59:37 +02:00
• 663b749c9f child-rekey: Add CHILD_SA name and unique ID to collision log messages Tobias Brunner 2017-08-07 12:14:57 +02:00
• 859dae255c child-sa: Suppress CHILD_SA state changes if there is no change Tobias Brunner 2017-08-07 12:13:06 +02:00
• 11ddda2ecd Merge commit 'child-sa-rekey-tkm' Tobias Brunner 2017-08-07 10:46:45 +02:00
• 772957778c charon-tkm: Call esa_reset() when the inbound SA is deleted Tobias Brunner 2017-08-04 14:02:42 +02:00
• dbaeaaf605 charon-tkm: Remove unused get_other_esa_id() method Tobias Brunner 2017-08-04 13:59:40 +02:00
• 15e745cf4d child-rekey: Don't install outbound SA in case of lost collisions Tobias Brunner 2017-08-04 13:12:57 +02:00
• f0d051f192 testing: Also capture stderr during test cases Tobias Brunner 2017-07-14 11:22:27 +02:00
• 87c6247e0d testing: Clearly mark the tests that failed Tobias Brunner 2017-07-13 19:09:07 +02:00
• 5163bd4b86 testing: Add tkm/xfrmproxy-rekey scenario Tobias Brunner 2017-07-13 18:41:36 +02:00
• a721b9c53d testing: Add pfkey/net2net-rekey scenario Tobias Brunner 2017-07-14 12:29:04 +02:00
• 37a91758c9 testing: Add ikev2/net2net-rekey scenario Tobias Brunner 2017-07-12 16:58:11 +02:00
• 99cf64e960 testing: Add support for counting matching lines in tests Tobias Brunner 2017-07-12 16:53:13 +02:00
• f9fbcbb1a0 bus: Don't trigger child_updown() for rekeyed CHILD_SAs Tobias Brunner 2017-07-12 13:00:59 +02:00
• d24b831fe7 charon-tkm: Don't select new outbound SA until the policy is installed Tobias Brunner 2017-07-11 14:05:01 +02:00
• 0d42a76275 charon-tkm: Claim to support SPIs on policies Tobias Brunner 2017-07-11 13:49:21 +02:00
• a146b4c9ef child-sa: Install outbound SA immediately if kernel supports SPIs on policies Tobias Brunner 2017-07-11 13:42:06 +02:00
• 2c116ef589 child-sa: Use flags to track installation of outbound SA and policies separately Tobias Brunner 2017-07-11 13:12:02 +02:00
• 2699c8387a kernel-netlink: Set SPI on outbound policy Tobias Brunner 2017-07-11 10:59:11 +02:00
• a46d233c0e kernel-interface: Not all kernel interfaces support SPIs on policies Tobias Brunner 2017-07-11 10:58:15 +02:00
• f0ae8c1761 Version bump to 5.6.0dr4 Andreas Steffen 2017-08-04 21:15:45 +02:00
• 808be1d57f testing: Added tnc/tnccs-20-ev-pt-tls scenario Andreas Steffen 2017-07-31 13:06:59 +02:00
• 88501a64ca swid-gen: Share SWID generator between sw-collector, imc-swima and imc-swid Andreas Steffen 2017-08-03 09:00:59 +02:00
• 073c179a88 sw-collector: Added --full option Andreas Steffen 2017-07-31 17:21:03 +02:00
• bea3f5d07f sw-collector: Added --installed/removed options Andreas Steffen 2017-07-31 14:48:37 +02:00
• 8f63a36b34 Merge branch 'appveyor' Tobias Brunner 2017-08-02 16:51:40 +02:00
• 096626286a appveyor: Build against OpenSSL Tobias Brunner 2017-07-28 10:12:33 +02:00
• 95ecc11774 unit-tests: Double escape backslashes in Windows paths in settings test Tobias Brunner 2017-07-28 09:49:22 +02:00
• 67ad553a2c unit-tests: Stringify direction in message asserts early Tobias Brunner 2017-07-28 09:46:02 +02:00
• 65064cc33b unit-tests: iv_gen_seq has a dependency on RNG_STRONG Tobias Brunner 2017-07-19 14:46:21 +02:00
• 6eb7dd11ec appveyor: Run tests on AppVeyor Windows containers Tobias Brunner 2017-07-19 12:34:35 +02:00
• 8d4ebb3ac4 peer-cfg: Use an rwlock instead of a mutex to safely access child-cfgs Tobias Brunner 2017-07-03 15:57:49 +02:00
• 578d893b4a credential-manager: Log issuer identity if not found Tobias Brunner 2017-07-14 11:23:19 +02:00
• 0b756fbe95 auth-cfg: Don't limit subjectAltName check to received certificates Tobias Brunner 2017-07-05 17:17:13 +02:00
• 4272a3e9d7 swanctl: Read default socket from swanctl.socket option Tobias Brunner 2017-06-29 10:09:47 +02:00
• ae48325a59 swanctl: Include config snippets from conf.d subdirectory Tobias Brunner 2017-06-29 09:32:25 +02:00