Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 1fafc56b95 Fixed some typos, courtesy of codespell Tobias Brunner 2016-06-29 16:14:17 +02:00
• 5e5dee36b6 testing: Remove obsolete openssl-fips recipe Tobias Brunner 2016-06-29 14:39:06 +02:00
• 7b879874d7 Revert "testing: Only load selected plugins in swanctl" Tobias Brunner 2016-07-01 17:18:11 +02:00
• 8fafbffdb7 Version bump to 5.5.0rc1 Andreas Steffen 2016-06-30 16:28:28 +02:00
• 37ffa99cf2 imcv: Added EFI HCRTM event Andreas Steffen 2016-06-30 16:20:00 +02:00
• ee2644dd3f testing: Version bump to 4.6.3 kernel and strongSwan 5.5.0 Andreas Steffen 2016-06-30 16:18:38 +02:00
• a8d6501036 aikgen: Fix computation of key ID of the AIK public key Tobias Brunner 2016-06-30 12:56:41 +02:00
• c05d49632f libtpmtss: Define missing Doxygen group and fix some comments Tobias Brunner 2016-06-30 10:56:25 +02:00
• a23bde26bd libimcv: Fix Doxygen comment Tobias Brunner 2016-06-30 10:54:45 +02:00
• c3e5109c37 testing: Add ikev1/net2net-esn scenario Tobias Brunner 2016-06-21 10:40:33 +02:00
• 40bb4677f7 ikev1: Add support for extended sequence numbers Thomas Egerer 2016-06-20 18:19:51 +02:00
• 7c81219bb8 plugin-loader: Allow selective modification of the default plugin list Tobias Brunner 2016-06-21 11:12:18 +02:00
• 114075c8d8 Merge branch 'openssl-1.1.0' Tobias Brunner 2016-06-29 11:10:07 +02:00
• 505c318701 leak-detective: Try to properly free allocations after deinitialization Tobias Brunner 2016-06-27 18:04:39 +02:00
• c1410cb045 openssl: Whitelist OPENSSL_init_crypto() and others in leak detective Tobias Brunner 2016-06-27 17:44:57 +02:00
• fedec33f5a openssl: Update GCM/crypter API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 17:33:58 +02:00
• 97b1a27f43 openssl: Update HMAC API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 17:31:31 +02:00
• cd08eb84cb openssl: Don't use deprecated RAND_pseudo_bytes() Tobias Brunner 2016-06-27 17:27:54 +02:00
• 985d7b1c67 openssl: Update PKCS#12 API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 17:26:16 +02:00
• a9f388e368 openssl: Update PKCS#7 API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 17:22:34 +02:00
• 989ba4b6cd openssl: Update CRL API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 16:56:22 +02:00
• 08d7e1f190 openssl: Update x509 API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 15:49:19 +02:00
• 6688f7986e openssl: Update ECDSA API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 12:36:32 +02:00
• 3fb2c8edb7 openssl: Update RSA API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 12:08:29 +02:00
• 375a5ed240 openssl: Make some utilities take const BIGNUM pointers Tobias Brunner 2016-06-27 12:07:50 +02:00
• 6d5df086f7 openssl: Add macro to define fallback functions for non-opaque OpenSSL versions Tobias Brunner 2016-06-28 15:19:57 +02:00
• 54d629b7ad openssl: Update DH API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 11:47:26 +02:00
• 1b36fbedf5 openssl: Update crypter API to OpenSSL 1.1.0 Tobias Brunner 2016-06-27 11:17:56 +02:00
• faa904fb0b openssl: Fix mapping from ASN1 to chunk_t with OpenSSL 1.1.0 Tobias Brunner 2016-06-27 11:17:31 +02:00
• e2abe7ae97 openssl: Update initialization and cleanup for OpenSSL 1.1.0 Tobias Brunner 2016-06-27 11:02:36 +02:00
• a6c43a8d8a openssl: OpenSSL 1.1.0 is thread-safe so we don't have to setup callbacks Tobias Brunner 2016-06-27 11:01:43 +02:00
• c01df20ebf testing: Ignore tests/local directory Tobias Brunner 2016-06-29 10:36:10 +02:00
• 08fe609ce2 android: Actually add Android.mk for libtpmtss Tobias Brunner 2016-06-28 14:34:13 +02:00
• e4fd163a5a travis: Disable tss-tss2 and aikpub2 but enable TrouSerS and build aikgen Tobias Brunner 2016-06-24 12:18:28 +02:00
• aaa37f590d configure: Enable respective TSS if aikgen/-pub2 are enabled Tobias Brunner 2016-06-24 13:03:15 +02:00
• 6b726b6fb2 android: Fix build after adding libtpmtss Tobias Brunner 2016-06-28 11:28:15 +02:00
• 6a24637dcb Version bump to 5.5.0dr1 Andreas Steffen 2016-06-26 18:54:56 +02:00
• 4b1513ed59 Merge branch 'tpm2' Andreas Steffen 2016-06-26 18:40:01 +02:00
• b031593641 libtpmtss: Added to integrity checks Andreas Steffen 2016-06-26 16:00:43 +02:00
• 2343c48341 aikpub2: Output AIK signature algorithm Andreas Steffen 2016-06-23 12:42:22 +02:00
• 721ed31b39 Refactoring to tpm_tss_quote_info object Andreas Steffen 2016-06-20 10:47:27 +02:00
• 12e1a06987 libimcv: Changed debug level for functional components from 2 to 3 Andreas Steffen 2016-06-16 17:41:03 +02:00
• 57e80492eb libtpmtss: Implemented TSS2 quote() method Andreas Steffen 2016-06-16 17:40:10 +02:00
• bc67802ac8 libtpmtss: Implemented TSS2 read_pcr() method Andreas Steffen 2016-06-14 23:34:29 +02:00
• 30d4989aec libimcv: migrate pts to tpm_tss Andreas Steffen 2016-06-05 20:39:41 +02:00
• 8301dc859c libtpmtss: Get TPM 2.0 capabilities Andreas Steffen 2016-06-05 20:31:13 +02:00
• fedc6769dc libtpmtss: Retrieve TPM 1.2 version info Andreas Steffen 2016-06-04 20:13:52 +02:00
• c08753bdf4 Created libtpmtss library handling access to v1.2 and v2.0 TPMs Andreas Steffen 2016-06-02 23:01:11 +02:00
• 6337770845 aikpub2: --handle option retrieves public key from TPM 2.0 NVRAM Andreas Steffen 2016-05-31 23:48:28 +02:00
• 87d356dc47 aikpub2: Convert TSS 2.0 AIK public key blob into PKCS#1 format Andreas Steffen 2016-05-16 10:53:44 +02:00
• 5a09734c2c testing: Start charon before Apache in tnc/tnccs-20-pdp-pt-tls Tobias Brunner 2016-06-20 18:31:13 +02:00
• dee01d019b testing: Only load selected plugins in swanctl Tobias Brunner 2016-06-20 18:18:46 +02:00
• 95a5806a8f Merge branch 'exchange-collisions' Tobias Brunner 2016-06-17 18:53:51 +02:00
• 5435a9a062 unit-tests: Add tests for expires after CHILD_SA rekeying Tobias Brunner 2016-06-10 16:41:47 +02:00
• 15cea08adc child-rekey: Only rekey installed CHILD_SAs Tobias Brunner 2016-06-10 16:00:25 +02:00
• de4e4687ff Report test coverage of libcharon and starter Tobias Brunner 2016-06-02 18:15:27 +02:00
• d707a19733 unit-tests: Add test for CHILD_SA rekey if a retry due to an INVALID_KE_PAYLOAD is delayed Tobias Brunner 2016-06-02 17:28:03 +02:00
• 6d8041d46b child-rekey: Ignore failed colliding CHILD_SA rekeyings Tobias Brunner 2016-06-02 17:23:35 +02:00
• b4f24ac0f6 unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creation Tobias Brunner 2016-06-02 16:03:30 +02:00
• b92f11c3bd child-create: Retry creating the CHILD_SA if TEMPORARY_FAILURE is received Tobias Brunner 2016-06-02 16:01:48 +02:00
• 208678e6e1 ikev2: Add possibility to delay initiation of a queued task Tobias Brunner 2016-06-02 15:50:11 +02:00
• 4e2e7d4fec ike: Reduce RETRY_INTERVAL a bit Tobias Brunner 2016-06-02 15:24:36 +02:00
• 2045cadc1c ike-rekey: Return TEMPORARY_FAILURE when concurrently creating a CHILD_SA Tobias Brunner 2016-06-02 15:13:24 +02:00
• 46cbdcace9 unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are received Tobias Brunner 2016-06-01 15:49:45 +02:00
• 0a954d6789 ike: Add configuration option to switch to preferring supplied proposals over local ones Tobias Brunner 2016-06-01 12:18:56 +02:00
• f2ea230b91 child-cfg: Add option to prefer supplied proposals over locally configured ones Tobias Brunner 2016-06-01 12:03:21 +02:00
• 3a40d572c6 ike-cfg: Add option to prefer supplied proposals over locally configured ones Tobias Brunner 2016-06-01 11:44:33 +02:00
• f5e8bc18fd proposal: Remove MODP_NONE from IKE proposals parsed from strings Tobias Brunner 2016-06-01 14:53:23 +02:00
• aae9510148 proposal: Handle MODP_NONE in both directions when selecting proposals Tobias Brunner 2016-06-01 11:28:30 +02:00
• 2f211ced9c proposal: Parse modpnone as MODP_NONE(0) Tobias Brunner 2016-06-01 11:14:20 +02:00
• 09711198a7 ike-rekey: Make sure to ignore task when detecting collisions if ike-init subtask failed Tobias Brunner 2016-06-01 15:45:01 +02:00
• 2e33d1f9ae unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is delayed Tobias Brunner 2016-05-31 18:19:17 +02:00
• 566134b25a unit-tests: Add tests for IKE_SA rekeying if collision is not detected by one peer Tobias Brunner 2016-05-31 14:47:05 +02:00
• f67199378d ike-rekey: Handle undetected collisions also if delete is delayed Tobias Brunner 2016-05-31 14:41:19 +02:00
• 7426576184 ike-rekey: There is no passive reauth task, so it will never collide with one Tobias Brunner 2016-05-31 14:35:22 +02:00
• 724d65900c ike-rekey: Ignore colliding rekey tasks that did not create an IKE_SA Tobias Brunner 2016-05-31 14:14:26 +02:00
• 1b989dd4c5 ike-rekey: Properly handle situation if the peer did not notice the rekey collision Tobias Brunner 2016-05-31 12:22:32 +02:00
• 6270bbde6a ike-delete: Handle deletes while rekeying differently if there was a collision Tobias Brunner 2016-05-31 12:21:01 +02:00
• 13da616118 ike-rekey: Add method to check if there was a rekey collision Tobias Brunner 2016-05-31 12:19:53 +02:00
• 1cca20705a ikev2: Check for collisions after handling IKE deletion Tobias Brunner 2016-05-31 12:18:44 +02:00
• 0a2cad40a6 unit-tests: Add tests for IKE/CHILD delete collisions Tobias Brunner 2016-05-31 10:09:29 +02:00
• 144bebe4b2 child-delete: Reply as usual when concurrently rekeying the IKE_SA Tobias Brunner 2016-05-31 10:08:03 +02:00
• 7b3eccfff4 unit-tests: Add tests for IKE/CHILD rekey collisions Tobias Brunner 2016-05-30 18:30:51 +02:00
• 869b7075fc child-create: Respond with TEMPORARY_FAILURE while rekeying/deleting IKE_SA Tobias Brunner 2016-05-30 18:07:53 +02:00
• 83191e56b2 ike-rekey: Respond with TEMPORARY_FAILURE if CHILD_SAs are currently rekeyed/deleted/established Tobias Brunner 2016-05-30 17:59:42 +02:00
• 7015994a94 unit-tests: Add tests for collisions between IKE_SA rekeying and deletion Tobias Brunner 2016-05-30 17:26:28 +02:00
• 8a78e41f29 ike-rekey: Handle TEMPORARY_FAILURE notify Tobias Brunner 2016-05-30 17:10:51 +02:00
• c0976a5e01 ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SA Tobias Brunner 2016-05-30 16:53:37 +02:00
• 72c295df5b unit-tests: Add tests for IKE SA deletion Tobias Brunner 2016-05-30 16:30:56 +02:00
• 78e8152d01 ike-delete: No need to wait for a response in case of concurrent deletes Tobias Brunner 2016-05-30 16:27:47 +02:00
• 40d9a4c892 unit-tests: Only deliver messages to the SA they are addressed to Tobias Brunner 2016-05-30 15:39:38 +02:00
• 498a46d22f unit-tests: Add test for simple IKE rekey collision Tobias Brunner 2016-05-28 10:10:18 +02:00
• bb3899739d ikev2: Add a new state to track rekeyed IKE_SAs Tobias Brunner 2016-05-28 09:34:29 +02:00
• d6ac7496e6 ike-rekey: Add the name/ID of the redundant IKE_SAs to the log messages Tobias Brunner 2016-05-27 19:16:03 +02:00
• b5695bbffc unit-tests: Add tests for IKE_SA rekeying Tobias Brunner 2016-05-27 10:31:42 +02:00
• d7b3ee6cca unit-tests: Add asserts against IKE_SAs Tobias Brunner 2016-05-27 10:31:11 +02:00
• 735bd4ca14 unit-tests: Make sure to flush the IKE_SA manager before destroying the sender Tobias Brunner 2016-05-27 10:17:53 +02:00
• b76c1decd4 unit-tests: Return status from process_message() Tobias Brunner 2016-05-27 10:07:03 +02:00
• 7c6e0c2979 unit-tests: Use wrapper for add_listener in bus_t related asserts Tobias Brunner 2016-05-26 17:00:10 +02:00
• 5d10ef316d unit-tests: Provide a wrapper around bus_t::add_listener and unregister them during cleanup Tobias Brunner 2016-05-26 16:57:31 +02:00