Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• b7fac1d96e ike-sa-manager: Make sure rng is defined before destroying it in flush() Tobias Brunner 2016-05-26 16:35:18 +02:00
• 851ee4eeb7 ike-rekey: Establish new IKE_SA earlier as responder, but only if no collision Tobias Brunner 2016-05-26 15:08:09 +02:00
• b6a3c444e4 unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collision Tobias Brunner 2016-05-26 11:21:45 +02:00
• 7a23226c32 child-delete: Check if the deleted CHILD_SA is the redundant SA of a collision Tobias Brunner 2016-05-25 19:12:53 +02:00
• 4f1012b3e1 child-rekey: Add method to check for the redundant SA created in a collision Tobias Brunner 2016-05-25 19:11:51 +02:00
• f97bac5594 unit-tests: Test for rekeying if INVALID_KE_PAYLOAD notifies are received Tobias Brunner 2016-05-25 15:15:51 +02:00
• 5ef033c53b child-rekey: Don't change state to INSTALLED if it was already REKEYING Tobias Brunner 2016-05-25 14:55:16 +02:00
• 557e262f04 unit-tests: Make IKE and ESP proposals configurable Tobias Brunner 2016-05-24 14:14:05 +02:00
• 42af3b4cce unit-tests: Add tests for CHILD_SA rekeying/deletion collisions Tobias Brunner 2016-05-21 12:22:06 +02:00
• 62a2567b06 unit-tests: Add asserts against job scheduling Tobias Brunner 2016-05-21 11:12:16 +02:00
• cdbf942889 ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeying Tobias Brunner 2016-05-20 10:49:21 +02:00
• b79beba518 unit-tests: Add asserts against task queues of IKE_SAs Tobias Brunner 2016-05-19 19:25:12 +02:00
• 5bbb9d703c child-rekey: Use more appropriate error notifies if CHILD_SA is not found or getting deleted Tobias Brunner 2016-05-19 17:23:32 +02:00
• 334b0bc84a child-rekey: Recreate the CHILD_SA if we receive a CHILD_SA_NOT_FOUND notify Tobias Brunner 2016-05-19 15:31:02 +02:00
• b7b414463d child-create: Handle TEMPORARY_FAILURE notify as failure Tobias Brunner 2016-05-19 15:06:27 +02:00
• fa098aa97c unit-tests: Add unit tests for basic CHILD_SA rekeying Tobias Brunner 2016-05-17 20:07:09 +02:00
• 14588d99a4 unit-tests: Add asserts against ike|child_rekey hooks Tobias Brunner 2016-05-18 17:16:29 +02:00
• 5d7f03dcaa unit-tests: Match in and outbound SPIs in SA asserts Tobias Brunner 2016-05-18 17:15:12 +02:00
• dda5aab0f4 unit-tests: Register nonce generator and make first nonce byte configurable Tobias Brunner 2016-05-17 20:06:24 +02:00
• 990c62cdcc crypto-factory: Stop after successfully creating one nonce generator Tobias Brunner 2016-05-17 20:05:06 +02:00
• c1289eb578 unit-tests: Add mock nonce generator Tobias Brunner 2016-05-17 20:03:59 +02:00
• fbb0b3cb0a unit-tests: Make message asserts more flexible Tobias Brunner 2016-05-17 13:49:58 +02:00
• 32cfe1e00c unit-tests: Add another CHILD_SA delete collision Tobias Brunner 2016-05-16 19:35:14 +02:00
• 7e5424868d unit-tests: Register mock DH implementation as static plugin feature Tobias Brunner 2016-05-13 12:16:45 +02:00
• 1f73a74be0 unit-tests: Add mock DH implementation that's basically a noop Tobias Brunner 2016-05-13 12:12:51 +02:00
• 29f1637b9a unit-tests: Make IKE SPIs predictable Tobias Brunner 2016-05-13 08:50:17 +02:00
• 5d97e5c30f unit-tests: Call methods on IKE_SAs in their context Tobias Brunner 2016-05-13 08:44:13 +02:00
• 33e2620b8c unit-tests: Add a unit test for CHILD_SA DELETE collisions Tobias Brunner 2016-05-12 17:25:42 +02:00
• 94012e3f42 child-delete: Remove unnecessary call to destroy_child_sa() Tobias Brunner 2016-05-12 12:22:35 +02:00
• 632ba2a21e unit-tests: Add asserts against hooks on listener_t and messages captured there Tobias Brunner 2016-05-13 20:48:44 +02:00
• 735b0cdd01 unit-tests: Add asserts against SAs (e.g. their states) Tobias Brunner 2016-05-12 17:59:42 +02:00
• d3c4d55391 unit-tests: Add separate test runner to test IKEv2 exchanges Tobias Brunner 2016-05-13 11:57:11 +02:00
• c7f5259cde unit-tests: Add helper class/object to test IKE exchanges Tobias Brunner 2016-05-12 17:03:44 +02:00
• 7a5dd544f6 unit-tests: Add mock kernel_ipsec_t implementation for unit tests Tobias Brunner 2016-05-12 16:14:03 +02:00
• 87539617f1 unit-tests: Add mock sender_t implementation for unit testing Tobias Brunner 2016-05-12 15:33:44 +02:00
• b104b2a737 unit-tests: Defining TESTS_RUNNERS allows to only run specific test runners Tobias Brunner 2016-05-12 14:30:54 +02:00
• 3b50e6fc3e unit-tests: Don't unload plugins before calling libcharon_deinit() Tobias Brunner 2016-05-12 13:49:11 +02:00
• 4082821964 kernel-netlink: Don't set replay window for outbound SAs Tobias Brunner 2016-06-17 14:56:37 +02:00
• 21aa924233 kernel-pfkey: Only set the replay window for inbound SAs Tobias Brunner 2016-06-17 14:52:11 +02:00
• c423d0e8a1 testing: Fix race in tnc/tnccs-20-pdp-pt-tls scenario Tobias Brunner 2016-06-17 11:18:25 +02:00
• 941ac92b95 daemon: Don't hold settings lock while executing start/stop scripts Tobias Brunner 2016-06-17 10:19:37 +02:00
• 44e83f76f3 testing: Use TLS 1.2 in RADIUS test cases Tobias Brunner 2015-11-26 19:06:41 +01:00
• 545e529190 testing: Update FreeRADIUS to 2.2.8 Tobias Brunner 2015-11-26 18:48:43 +01:00
• a35ee9f402 Revert "configure: Cache result of pthread_condattr_setclock() check" Tobias Brunner 2016-06-17 15:04:17 +02:00
• 8d79bfa831 configure: Cache result of pthread_condattr_setclock() check Tobias Brunner 2016-06-16 17:57:37 +02:00
• e827e78483 configure: Fix typo in pthread_condattr_setclock() check Tobias Brunner 2016-06-16 17:19:10 +02:00
• 9e01d7ca32 quick-mode: Fix reporting lifebytes if lifetime is configured Tobias Brunner 2016-06-15 17:43:55 +02:00
• 5947d48fb9 load-tester: Fix load-tester on platforms where plain char is signed Tobias Brunner 2016-06-17 10:22:25 +02:00
• 67b9e151fa testing: Fix firewall rule on alice in tnc/tnccs-20-pdp-pt-tls scenario Tobias Brunner 2016-06-17 10:22:03 +02:00
• 1e71eb848a Merge branch 'testing-jessie' Tobias Brunner 2016-06-16 16:28:51 +02:00
• 1f98c38283 testing: Build hostapd from sources Tobias Brunner 2016-06-15 18:19:23 +02:00
• 63d9370249 testing: Update download URL for wpa_supplicant Tobias Brunner 2016-06-15 17:42:28 +02:00
• 63acd803f0 testing: Wait for packets to be processed by tcpdump Tobias Brunner 2016-06-14 20:41:43 +02:00
• eb25b1a73d testing: Fix expect-connection for tkm tests Tobias Brunner 2016-06-16 14:35:26 +02:00
• aacf84d837 testing: Add expect-connection calls for all tests and hosts Tobias Brunner 2016-06-14 20:41:14 +02:00
• 8f56bbc82b testing: Update test scenarios for Debian jessie Tobias Brunner 2016-06-14 18:58:12 +02:00
• 575a469b95 libimcv: Add Debian 8.5 to database Tobias Brunner 2016-06-14 15:40:24 +02:00
• b71104a3df testing: Fix posttest.dat for ikev2/rw-dnssec scenario Tobias Brunner 2015-12-08 18:14:32 +01:00
• 71424a2f85 testing: Make sure tcpdump is actually terminated before analyzing/collecting logs Tobias Brunner 2015-12-08 16:16:51 +01:00
• 654343d942 testing: Correctly dis-/enable services with systemd Tobias Brunner 2015-12-08 18:15:19 +01:00
• f565f954a7 testing: Install packages like the FIPS-enabled OpenSSL from a custom apt repo Tobias Brunner 2015-12-08 15:22:15 +01:00
• 257e5db0d0 testing: Update base image to Debian jessie Tobias Brunner 2015-11-20 17:50:29 +01:00
• 0889628957 testing: Update 4.x kernel configs to be compatible with Debian 8/systemd Tobias Brunner 2015-11-24 17:28:49 +01:00
• 5c71cbfa94 testing: Add root to fstab Tobias Brunner 2015-11-24 18:33:57 +01:00
• 1c616eccae testing: Update Apache config for newer Debian releases Tobias Brunner 2015-11-24 18:32:23 +01:00
• 2b0a6811ab testing: Explicitly enable RC4 in SSH server config Tobias Brunner 2015-11-24 17:26:16 +01:00
• 6466546f81 testing: Add script to chroot into an image Tobias Brunner 2015-11-24 11:08:57 +01:00
• cac9051eed testing: Add a patch to tnc-fhh that avoids building the tncsim package Tobias Brunner 2015-11-20 17:51:54 +01:00
• c857621e70 testing: Don't attempt to stop services when building base image Tobias Brunner 2015-11-20 17:42:55 +01:00
• e0c59faa68 leak-detective: Make sure to actually call malloc() from calloc() hook Tobias Brunner 2016-06-15 11:22:04 +02:00
• 8f1806605d leak-detective: Whitelist __fprintf_chk as seen on newer systems Tobias Brunner 2016-06-15 11:21:16 +02:00
• 518a5b2ece configure: Check for and explicitly link against -latomic Martin Willi 2016-06-08 14:46:35 +02:00
• 796c36ade1 testing: Fix scenarios that check /etc/resolv.conf Tobias Brunner 2016-06-13 16:18:38 +02:00
• 6294f28bd3 android: Catch exception if numbers are too large for Integer Tobias Brunner 2016-06-13 16:12:17 +02:00
• a046f929ce android: Use non-aliased cipher identifiers Tobias Brunner 2016-06-13 10:37:17 +02:00
• 9827380e6f android: Update Gradle plugin Tobias Brunner 2016-06-13 10:19:13 +02:00
• 25b69260fe android: Fix signature of get_nexthop() Tobias Brunner 2016-06-13 10:18:45 +02:00
• b1f7d10800 resolve: Add refcounting for installed DNS servers Tobias Brunner 2016-06-08 19:43:13 +02:00
• f1064ca59a resolve: Use process abstraction when calling resolvconf Tobias Brunner 2016-06-07 16:51:04 +02:00
• f4a20b74fd resolve: Make sure to clean up if calling resolvconf failed Tobias Brunner 2016-06-07 15:58:05 +02:00
• 96b1fab53c Merge branch 'interface-for-routes' Tobias Brunner 2016-06-10 18:15:42 +02:00
• b52e540f43 kernel-pfroute: Return interface to reach destination from get_nexthop() Tobias Brunner 2016-06-10 17:13:22 +02:00
• b98afc0a37 kernel-pfkey: Install routes with OUT policies Tobias Brunner 2016-06-10 10:30:00 +02:00
• aea3c1052e kernel-netlink: Install routes with OUT policies Tobias Brunner 2016-06-10 10:10:09 +02:00
• 85fed13c18 kernel-pfkey: Don't install routes for drop policies and if protocol/ports are in the selector Tobias Brunner 2016-06-09 15:46:32 +02:00
• e7369a9dc5 kernel-netlink: Don't install routes for drop policies and if protocol/ports are in the selector Tobias Brunner 2016-06-09 15:38:37 +02:00
• 50798628c5 kernel-pfkey: Also use interface returned by get_nexthop() for IPsec policies Tobias Brunner 2016-06-06 16:20:34 +02:00
• d1f8628420 kernel-netlink: Also use interface returned by get_nexthop() for IPsec policies Tobias Brunner 2016-06-06 16:01:43 +02:00
• c158331bfc kernel-pfkey: Use interface to next hop for shunt policies Tobias Brunner 2016-03-11 19:17:03 +01:00
• 4ba5ea407b kernel-netlink: Use interface to next hop for shunt policies Tobias Brunner 2016-03-11 19:09:54 +01:00
• 66e9165bc6 kernel-netlink: Return outbound interface in get_nexthop() Tobias Brunner 2016-03-11 19:07:10 +01:00
• 99a57aa5ee kernel-net: Let get_nexthop() return an optional interface name Tobias Brunner 2016-03-11 18:54:31 +01:00
• 436f64d5bc kernel-interface: Always set vip if get_address_by_ts() returns successfully Tobias Brunner 2016-06-10 13:52:30 +02:00
• ebeaac1f2b kernel-netlink: Let only a single thread work on a specific policy Tobias Brunner 2016-05-25 12:15:38 +02:00
• 471b907613 kernel-netlink: Add priority and refcount to policy log Tobias Brunner 2016-05-27 17:31:04 +02:00
• 25178f4594 kernel-netlink: Consistently print mark in log messages only if set Tobias Brunner 2016-05-27 17:03:26 +02:00
• a0178fe26e kernel-netlink: Provide error information for Netlink sockets Tobias Brunner 2016-05-27 13:43:41 +02:00
• fc21465c66 kernel-netlink: Allow definition of a custom priority calculation function Tobias Brunner 2016-04-28 18:05:36 +02:00
• b3a3756abe Merge branch 'ipsec-sa-cfg-equals' Tobias Brunner 2016-06-09 11:46:06 +02:00
• 1ba2b015fa kernel-pfkey: Use ipsec_sa_cfg_equals() Tobias Brunner 2016-06-08 16:11:07 +02:00