Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• d3beae1311 newhope: Properly release allocated arrays if RNG can't be created Tobias Brunner 2016-10-14 15:24:04 +02:00
• b9c4b15a53 nm: Add D-Bus policy to the distribution Tobias Brunner 2016-10-14 14:11:23 +02:00
• 542b464e25 nm: Version bump to 1.4.1 Tobias Brunner 2016-10-14 09:50:31 +02:00
• a63a7af197 kernel-netlink: Fix get_route() interface determination Christophe Gouault 2016-10-12 18:12:08 +02:00
• a617223ed5 Version bump to 5.5.1rc1 Andreas Steffen 2016-10-11 19:21:36 +02:00
• 8a56405a82 Merge branch 'cache-crls' Andreas Steffen 2016-10-11 17:19:29 +02:00
• 85b5a6ace2 Save both base and delta CRLs to disk Andreas Steffen 2016-09-30 08:05:20 +02:00
• 2a2669ee3e vici: strongswan.conf cache_crls = yes saves fetched CRLs to disk Andreas Steffen 2016-09-27 14:42:08 +02:00
• 9ba6548766 mem-cred: Support storing a delta CRL together with its base Tobias Brunner 2016-10-07 10:56:06 +02:00
• cee01fc9bf revocation: Cache valid CRL also if certificate is revoked Tobias Brunner 2016-10-03 12:40:24 +02:00
• 790847d17c pki: Don't remove zero bytes in CRL serials anymore Tobias Brunner 2016-10-03 12:15:10 +02:00
• 49d9266c31 pki: Use serial of base CRL for delta CRLs Tobias Brunner 2016-10-03 12:10:40 +02:00
• c72c6e9225 openssl: Fix AES-GCM with BoringSSL Tobias Brunner 2016-10-11 10:54:06 +02:00
• 8b35d5f162 android: Identifiers for SHA2-base RSA signature schemes got renamed Tobias Brunner 2016-10-10 17:52:35 +02:00
• befe6e6c7e android: MGF1 implementation was moved to a plugin Tobias Brunner 2016-10-10 17:48:01 +02:00
• 5f97b73554 ldap: Fix crash in case of empty LDAP response for CRL fetch Yannick CANN 2016-10-06 15:40:47 +02:00
• bd815325a6 libimcv: Add Debian 8.6 to database Tobias Brunner 2016-10-05 15:53:32 +02:00
• 0ddda7ca56 task-manager: Only trigger retransmit cleared alert if there was at least one retransmit Tobias Brunner 2016-10-04 17:44:14 +02:00
• 26df5e9aa4 Merge branch 'proposal-checks' Tobias Brunner 2016-10-05 14:58:41 +02:00
• 89054d9dcb unit-tests: Enable optional logging in libcharon unit tests Tobias Brunner 2016-10-05 14:22:37 +02:00
• 9e5065d877 unit-tests: Add more tests for proposal creation Tobias Brunner 2016-10-04 12:01:36 +02:00
• a65a282fd1 proposal: Correctly add AES-GMAC for AH proposals Tobias Brunner 2016-10-04 11:58:28 +02:00
• 6a5e6579ea proposal: Enforce separate proposals for AEAD and classic encryption algorithms Tobias Brunner 2016-10-04 11:57:30 +02:00
• e98414ea9c proposal: Make sure there is a PRF defined in IKE proposals Tobias Brunner 2016-10-04 10:58:18 +02:00
• 9b191d5975 proposal: Make DH groups mandatory in IKE proposals parsed from strings Tobias Brunner 2016-07-13 12:37:29 +02:00
• fcca7d2904 ikev2: Respond with NO_PROPOSAL_CHOSEN if proposal without DH group was selected Tobias Brunner 2016-07-13 12:24:39 +02:00
• 597e057b9e testing: Remove ikev2/default-keys scenario Tobias Brunner 2016-10-05 12:25:29 +02:00
• bfc595a36a kernel-netlink: Consider RTA_SRC when looking for a source address Tobias Brunner 2016-08-23 12:48:37 +02:00
• 1bfa3f2a10 Merge branch 'priv-key-any' Tobias Brunner 2016-10-05 11:36:11 +02:00
• 7caba2eb55 swanctl: Add 'private' directory/section to load any type of private key Tobias Brunner 2016-09-30 15:16:42 +02:00
• 05ccde0a8b pki: Add generic 'priv' key type that loads any type of private key Tobias Brunner 2016-08-31 17:57:12 +02:00
• 4a6f97d00b openssl: Add a generic private key loader Tobias Brunner 2016-09-22 16:21:22 +02:00
• 437610ace5 pkcs1: Support building of KEY_ANY private keys Tobias Brunner 2016-08-31 17:34:00 +02:00
• 1798e490da pki: Drop -priv suffix to specify private key types Tobias Brunner 2016-08-31 15:08:09 +02:00
• 33241871a8 ikev2: Only add NAT-D notifies to DPDs as initiator Tobias Brunner 2016-09-30 10:24:54 +02:00
• 9a7049635e pkcs11: Look for the CKA_ID of the cert if it doesn't match the subjectKeyId Raphael Geissert 2016-08-31 13:22:38 +02:00
• 97c74b565b nm: Make global CA directory configurable Tobias Brunner 2016-08-31 18:08:38 +02:00
• 3713d3024f Merge branch 'ikev1-rekey-deletion' Tobias Brunner 2016-10-04 10:15:11 +02:00
• b56b850251 ikev1: Activate task to delete the IKE_SA in state IKE_REKEYING Tobias Brunner 2016-08-25 09:56:45 +02:00
• 2e06179f7f ikev1: Delete Quick Mode SAs before the ISAKMP SA Tobias Brunner 2016-08-25 09:54:17 +02:00
• ebc6445de8 ikev1: Send DELETE for rekeyed IKE_SAs Tobias Brunner 2016-08-22 12:26:05 +02:00
• 9691e537cd starter: Install an empty ipsec.secrets file Tobias Brunner 2016-09-27 10:08:15 +02:00
• 120729f3f4 starter: Don't generate a key/certificate if ipsec.secrets does not exist Tobias Brunner 2016-09-27 10:07:37 +02:00
• b27663399b watcher: Avoid allocations due to enumerators Tobias Brunner 2016-07-14 18:28:42 +02:00
• dcee481910 Merge branch 'enable-fragmentation' Tobias Brunner 2016-10-04 10:09:03 +02:00
• d5c6a0bac4 vici: Enable IKE fragmentation by default Tobias Brunner 2016-07-18 15:26:16 +02:00
• af662a5170 starter: Enable IKE fragmentation by default Tobias Brunner 2016-07-18 15:25:45 +02:00
• 0642f42bbe ike: Set default IKE fragment size to 1280 Tobias Brunner 2016-07-18 15:01:07 +02:00
• 6b2814ab0e Merge commit 'derived-keys' Tobias Brunner 2016-10-04 10:02:12 +02:00
• 0e80f5c3ff ikev2: Send derived CHILD_SA keys to the bus Tobias Brunner 2016-09-14 15:59:32 +02:00
• 4f373c7f20 ikev2: Send derived IKE_SA keys to bus Tobias Brunner 2016-09-14 15:42:11 +02:00
• c4a286c88a ikev1: Send derived CHILD_SA keys to the bus Tobias Brunner 2016-09-14 15:57:21 +02:00
• a6dc7bf287 ikev1: Send derived IKE_SA keys to bus Tobias Brunner 2016-09-14 15:40:36 +02:00
• f5fe0ffa2a bus: Add new hooks for derived IKE_SA and CHILD_SA keys Tobias Brunner 2016-09-14 12:07:33 +02:00
• a28c6269a4 nm: Remove dummy TUN device Tobias Brunner 2016-09-20 11:45:16 +02:00
• 5b93de43c6 nm: Fix comment in service file in /etc/NetworkManager/VPN Tobias Brunner 2016-09-19 15:03:10 +02:00
• 254099a090 nm: Remove generated service file in make clean Tobias Brunner 2016-09-19 14:56:51 +02:00
• 96aebc1756 nm: Don't add generated AppStream metadata to tarball Tobias Brunner 2016-09-19 14:53:19 +02:00
• dac15e03c8 bus: Fix maximum log levels when mixing log/vlog implementing loggers Tobias Brunner 2016-09-22 15:51:09 +02:00
• 33d3ffde25 kernel-netlink: Pass zero mark to kernel if mask is set Tobias Brunner 2016-08-29 16:39:18 +02:00
• ac9759a532 kernel-netlink: Support configuring XFRM policy hashing thresholds Tobias Brunner 2016-09-21 10:16:00 +02:00
• dbff6373e1 include: Update xfrm.h to Linux v4.3 Martin Willi 2015-12-07 10:55:25 +01:00
• 21c898a1f9 Merge branch 'fwd-out-policies-optional' Tobias Brunner 2016-09-28 17:57:57 +02:00
• ad1b53454e child-sa: Only install outbound FWD policies if explicitly configured Tobias Brunner 2016-08-18 15:09:08 +02:00
• 62636da4f3 testing: Enable outbound FWD policies in swanctl/manual-prio scenario Tobias Brunner 2016-08-18 17:09:15 +02:00
• 50721a61d8 vici: Make installation of outbound FWD policies configurable Tobias Brunner 2016-08-18 16:22:51 +02:00
• c98e48cf0e child-cfg: Add setting that controls whether outbound FWD policies are installed Tobias Brunner 2016-08-18 16:11:34 +02:00
• 175d78df60 kernel-netlink: Update cached reqid when updating policies Tobias Brunner 2016-08-18 13:00:41 +02:00
• a9562a3f58 testing: Added swanctl/net2net-multicast scenario Andreas Steffen 2016-09-27 11:45:00 +02:00
• d7e0ce2878 testing: Added ikev2/net2net-multicast scenario Andreas Steffen 2016-07-13 23:50:51 +02:00
• 8486b3b438 travis: Use a more recent OS X image Tobias Brunner 2016-09-23 10:08:13 +02:00
• 6b3e408ba5 Version bump to 5.5.1dr5 Andreas Steffen 2016-09-22 17:36:37 +02:00
• d505658038 testing: Added swanctl/net2net-sha3-rsa-cert and swanctl/rw-eap-tls-sha3-rsa scenarios Andreas Steffen 2016-09-22 14:28:36 +02:00
• 40f2589abf gmp: Support of SHA-3 RSA signatures Andreas Steffen 2016-09-22 08:50:43 +02:00
• c54d1ef12c bliss sampler unit-test: Fixed enumeration type Andreas Steffen 2016-09-22 10:46:39 +02:00
• a3a8b4acae bliss: bliss_sampler expects XOF type Andreas Steffen 2016-09-22 09:23:47 +02:00
• 11140e717f unit-tests: MGF1 tests depend on an XOF implementation not just a hash function Tobias Brunner 2016-09-21 18:36:28 +02:00
• e31ed9ab98 Version bump to 5.5.1dr4 Andreas Steffen 2016-09-21 14:14:42 +02:00
• 188b190a70 mgf1: Refactored MGF1 as an XOF Andreas Steffen 2016-09-20 22:01:07 +02:00
• e9e643b240 leak-detective: Fix compile warning due to unused variable if LD is disabled Tobias Brunner 2016-09-20 17:24:52 +02:00
• f654324e5e Merge branch 'testing-leak-detective' Tobias Brunner 2016-09-20 16:26:58 +02:00
• 95f9fa82d5 leak-detective: Whitelist thread ID getter Tobias Brunner 2016-09-13 17:28:21 +02:00
• 6250e813ca charon-tkm: Build C code with debug information Tobias Brunner 2016-09-13 17:17:09 +02:00
• fd2ade9935 leak-detective: Whitelist functions of the Ada runtime related to Tasking Tobias Brunner 2016-09-13 16:28:01 +02:00
• 8bc2ddb2cc charon-tkm: Free name of the PID file Tobias Brunner 2016-09-13 16:27:12 +02:00
• b71f5f9305 charon-tkm: Deinitialize tkm before libstrongswan Tobias Brunner 2016-09-13 16:24:30 +02:00
• 0b5d490e33 leak-detective: Whitelist some glib/libsoup functions Tobias Brunner 2016-09-13 15:38:43 +02:00
• b69cbacdfb testing: Use curl instead of soup plugin in libipsec/rw-suite-b scenario Tobias Brunner 2016-09-13 15:34:02 +02:00
• 70ac90c552 eap-peap: Fix memory leaks when handling tunneled methods Tobias Brunner 2016-09-13 14:27:54 +02:00
• 0b4ba9c53d ipseckey: Properly free enumerated certificates Tobias Brunner 2016-09-13 14:19:59 +02:00
• c0c14af8c2 ipseckey: Properly free public key after creating certificate Tobias Brunner 2016-09-13 14:15:41 +02:00
• 149b7de35c dnscert: Properly free enumerated certificates Tobias Brunner 2016-09-13 14:13:47 +02:00
• 15cbe526ac unbound: Avoid unnecessary cloning of RR list that caused a memory leak Tobias Brunner 2016-09-13 14:12:49 +02:00
• 3a25032c16 unbound: Fix memory leak Tobias Brunner 2016-09-13 14:12:29 +02:00
• 8c33a1897a pool: Fix (known) memory leak when querying leases Tobias Brunner 2016-09-13 12:33:27 +02:00
• f44e0efb11 leak-detective: Whitelist leak in libldap Tobias Brunner 2016-09-13 12:27:33 +02:00
• 6307a18fe1 testing: Fix totals if post test checks fail Tobias Brunner 2016-09-13 12:26:55 +02:00
• d8b2980aa5 testing: Log leaks and fail tests if any are detected Tobias Brunner 2016-09-13 11:50:09 +02:00
• 4f1c6bc5a6 leak-detective: Optionally write report to a log file Tobias Brunner 2016-09-13 10:06:28 +02:00
• d344474b3d vici: Fix indention of flush_certs() method in Python bindings Tobias Brunner 2016-09-20 13:26:03 +02:00