Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 61587aa6fc pool: Use correct name to remove index for CHILD_SA TS in SQLite script Tobias Brunner 2016-04-18 10:07:15 +02:00
• 254726b59e kernel-pfkey: Add support for manual priorities Tobias Brunner 2016-04-06 15:17:06 +02:00
• 4e59618382 kernel-pfkey: Update priority calculation formula to the new one in kernel-netlink Tobias Brunner 2016-04-11 11:19:26 +02:00
• 869f4e90b1 kernel-netlink: Order policies with equal priorities by their automatic priority Tobias Brunner 2016-04-06 14:40:28 +02:00
• ea27163ee1 Merge branch 'boringssl' Tobias Brunner 2016-04-15 10:33:23 +02:00
• 689bb34958 curl: Add TLS support if libcurl is built against BoringSSL Tobias Brunner 2016-04-11 11:33:41 +02:00
• 47a46be597 openssl: BoringSSL does not support configuration Tobias Brunner 2016-04-08 15:56:25 +02:00
• c8a219a28d openssl: The member storing the DH exponent length has been renamed in BoringSSL Tobias Brunner 2016-04-08 15:55:05 +02:00
• 77df573a95 openssl: Use proper EVP macro to determine size of a hash Tobias Brunner 2016-04-08 15:54:08 +02:00
• 9b85a6853b android: Remove OPENSSL_NO_EC* defines Tobias Brunner 2016-04-13 09:31:50 +02:00
• cb65e95d4a android: OPENSSL_NO_ENGINE is now properly defined in the headers Tobias Brunner 2016-04-08 15:52:58 +02:00
• de9b3491ad curl: Handle LibreSSL like OpenSSL in regards to multi-threading Tobias Brunner 2016-04-08 14:37:21 +02:00
• e8c73c1cf0 configure: Replace two remaining usages of AC_HAVE_LIBRARY with AC_CHECK_LIB Tobias Brunner 2016-04-08 14:35:47 +02:00
• 960632ffb0 thread: Don't hold mutex when calling cleanup handlers while terminating Tobias Brunner 2016-04-13 11:58:32 +02:00
• 0ff486f507 testing: Added swanctl/rw-multi-ciphers-ikev1 scenario Andreas Steffen 2016-04-12 18:50:58 +02:00
• 4af7aa18f0 Ignore Qt Creator project files Tobias Brunner 2016-04-11 16:11:16 +02:00
• c407f163e6 Version bump to 5.4.1dr1 Andreas Steffen 2016-04-11 10:24:12 +02:00
• b1c89bb0f9 Merge branch 'kernel-policies' Andreas Steffen 2016-04-11 10:19:21 +02:00
• d3af3b799f Extended IPsec kernel policy scheme Andreas Steffen 2016-04-09 16:46:37 +02:00
• d3edc8aa0f testing: Added swanctl/manual_prio scenario Andreas Steffen 2016-04-06 16:08:38 +02:00
• e9704e90cf Include manual policy priorities and restriction to interfaces in vici list-conn command Andreas Steffen 2016-03-28 09:03:21 +02:00
• c26e4330e7 Implemented IPsec policies restricted to given network interface Andreas Steffen 2016-03-27 10:18:19 +02:00
• 7f57c4f9fb Support manually-set IPsec policy priorities Andreas Steffen 2016-03-24 18:35:27 +01:00
• 2ba5dadb12 peer-cfg: Use struct to pass data to constructor Tobias Brunner 2016-04-04 18:41:17 +02:00
• 8a00a8452d child-cfg: Use struct to pass data to constructor Tobias Brunner 2016-04-04 16:09:23 +02:00
• fd8f1194f3 kernel-pfkey: Prefer policies with reqid over those without Tobias Brunner 2016-04-04 15:06:44 +02:00
• 0ff8ce9452 kernel-pfkey: Only install templates for regular IPsec policies with reqid Tobias Brunner 2016-04-04 15:06:11 +02:00
• 638b4638e3 testing: Add swanctl/net2net-gw scenario Tobias Brunner 2016-04-01 19:05:02 +02:00
• 23f25f9647 shunt-manager: Install "outbound" FWD policy Tobias Brunner 2016-04-04 10:49:35 +02:00
• 83312ee5e4 kernel-netlink: Prefer policies with reqid over those without Tobias Brunner 2016-04-01 17:06:10 +02:00
• f7e9e6a3fd kernel-netlink: Only associate templates with inbound FWD policies Tobias Brunner 2016-04-01 16:51:51 +02:00
• 9c12635252 child-sa: Install "outbound" FWD policy Tobias Brunner 2016-04-01 16:41:05 +02:00
• c4387e991a kernel-netlink: Associate routes with IN policies instead of FWD policies Tobias Brunner 2016-04-01 16:26:07 +02:00
• 89da06ace9 kernel: Use structs to pass information to the kernel-ipsec interface Tobias Brunner 2016-03-31 16:01:40 +02:00
• ea3a4d3f72 testing: List conntrack table on sun in ikev2/host2host-transport-connmark scenario Tobias Brunner 2016-04-06 13:56:36 +02:00
• aa65b8c147 testing: Version bump to 5.4.0 Tobias Brunner 2016-04-06 11:17:27 +02:00
• 76397efa21 testing: Disable leak detective when generating CRLs Tobias Brunner 2015-11-24 15:28:11 +01:00
• 7316a13bd1 pkcs11: Skip zero-padding of r and s when preparing EC signature Tobias Brunner 2016-04-04 15:35:43 +02:00
• b82b5f6398 chunk: Skip all leading zero bytes in chunk_skip_zero() not just the first Tobias Brunner 2016-04-04 15:29:16 +02:00
• 85597f2983 string: Gracefully handle NULL in str*eq() macros Tobias Brunner 2016-04-01 19:03:22 +02:00
• 90c8cf6819 byteorder: Explicitly check for htoXeXX macros Tobias Brunner 2016-03-31 19:47:31 +02:00
• be41d5cba2 vici: Fix documentation of some dictionary keys of two request messages Cameron McCord 2016-03-30 05:01:37 -06:00
• e8bddd64fc proposal: Use standard integer types for static keywords Tobias Brunner 2016-03-30 13:48:51 +02:00
• c545688788 utils: Remove nonsensical typedefs for standard uint types Tobias Brunner 2016-03-30 09:12:09 +02:00
• aaa4e478b1 Use u_int32_t legacy type in blowfish header file Andreas Steffen 2016-03-24 20:58:32 +01:00
• b12c53ce77 Use standard unsigned integer types Andreas Steffen 2016-03-22 13:22:01 +01:00
• b210369314 updown: Get value for PLUTO_MARK_{IN,OUT} from CHILD_SA Shota Fukumori 2016-03-13 00:05:01 +09:00
• b39be996cc connmark: Explicitly include xt_mark.h for older kernels Tobias Brunner 2016-03-23 14:40:29 +01:00
• 2f3879c3fe android: Enable 64-bit ABIs Tobias Brunner 2016-01-26 17:26:04 +01:00
• 17e36cd48c android: Enable build against API level 21 Tobias Brunner 2016-01-26 17:23:02 +01:00
• ab88f22f78 libcharon: Add missing header file to Android.mk Tobias Brunner 2016-03-23 14:16:32 +01:00
• a9f9598ed0 testing: Updated updown scripts in libipsec scenarios to latest version Tobias Brunner 2016-03-23 14:13:07 +01:00
• 958c0e8e5c ike-sa-manager: Avoid memory leak if IKE_SAs get checked in after flush() was called Tobias Brunner 2016-03-22 14:22:19 +01:00
• 90a7a68488 ha: Delete cache entry inside the locked mutex Thomas Egerer 2016-03-21 14:46:11 +01:00
• b31e8c04f2 swanctl: Fix documented directory name for remote pubkeys Tobias Brunner 2016-03-22 18:06:22 +01:00
• 7a117eeaec Version bump to 5.4.0 Andreas Steffen 2016-03-22 11:20:36 +01:00
• 0ed9430d10 kernel-netlink: Fix lookup of next hops for destinations with prefix Tobias Brunner 2016-03-11 18:39:35 +01:00
• b0c6869967 imc-os: Terminate buffer after fread(3) call to make Coverity happy Tobias Brunner 2016-03-11 14:40:55 +01:00
• 8c3bcebaa6 imc-os: Correctly check return value of ftell(2) Tobias Brunner 2016-03-11 14:22:19 +01:00
• 755d076fec Fix some Doxygen issues Tobias Brunner 2016-03-11 11:25:25 +01:00
• bebccf9876 Updated NEWS Andreas Steffen 2016-03-11 11:31:02 +01:00
• 8e3940f59c man: Updated default proposals in ipsec.conf(5) Tobias Brunner 2016-03-11 10:24:36 +01:00
• 0fc8b1d03e identification: Make written signed to fix error checking when printing ranges Tobias Brunner 2016-03-11 10:06:58 +01:00
• 20df9d315c vici: Don't hold write lock while running or undoing start actions Tobias Brunner 2016-02-10 12:09:37 +01:00
• 35babdf43f Initialize ts variable Andreas Steffen 2016-03-11 08:29:15 +01:00
• 7d22a75b12 forecast: Compare the complete rules when deleting them Tobias Brunner 2016-03-09 12:10:12 +01:00
• c659d369a0 connmark: Don't restore CONNMARK for packets that already have a mark set Tobias Brunner 2016-03-07 16:52:43 +01:00
• 7c9e7eb933 connmark: Compare the complete rules when deleting them Tobias Brunner 2016-03-07 15:32:02 +01:00
• 6b8acc49ed Merge branch 'subnet-identities' Andreas Steffen 2016-03-10 15:26:03 +01:00
• 3f1de98678 Support of IP address ranges in traffic selectors Andreas Steffen 2016-03-10 12:00:56 +01:00
• 90ef7e8af6 Updated swanctl/rw-psk-ikev1 scenario Andreas Steffen 2016-03-10 08:02:44 +01:00
• 1d86d1d65a Implemented IPv4/IPv6 subnet and range identities Andreas Steffen 2016-03-08 22:27:30 +01:00
• 709998e106 Merge branch 'p-cscf' Tobias Brunner 2016-03-10 12:00:56 +01:00
• 7e854f4d51 attr: Only enumerate attributes matching the IKE version of the current IKE_SA Tobias Brunner 2016-02-11 15:47:32 +01:00
• 98a3ba8a5a attr: Add p-cscf keyword for P-CSCF server addresses Tobias Brunner 2016-02-05 16:47:26 +01:00
• 276acafa2d p-cscf: Make sending requests configurable and disable it by default Tobias Brunner 2016-02-04 18:41:14 +01:00
• e8262251e1 p-cscf: Only send requests if virtual IPs of the same family are requested Tobias Brunner 2016-02-04 18:35:07 +01:00
• 3d91d013cc p-cscf: Add attribute handler for P-CSCF server addresses Tobias Brunner 2016-02-04 18:26:29 +01:00
• 12ac5fac1a p-cscf: Add plugin stub Tobias Brunner 2016-02-03 17:49:48 +01:00
• 319b031a8a payloads: Verify P-CSCF configuration attributes like others carrying IP addresses Tobias Brunner 2016-02-03 17:34:34 +01:00
• 7798284da1 attributes: Define P-CSCF address attributes described in RFC 7651 Tobias Brunner 2016-02-03 17:32:16 +01:00
• f893b47e3d Merge branch 'mbb-reauth-online-revocation' Tobias Brunner 2016-03-10 11:48:12 +01:00
• b4337c5b02 NEWS: Added note on online revocation checks during make-before-break reauthentication Tobias Brunner 2016-03-10 11:46:44 +01:00
• dc57c1b817 testing: Add ikev2/reauth-mbb-revoked scenario Tobias Brunner 2015-10-27 17:42:45 +01:00
• d163aa5eaf testing: Generate a CRL that has moon's actual certificate revoked Tobias Brunner 2015-10-27 17:42:15 +01:00
• e41adf5f05 ike-sa: Improve interaction between flush_auth_cfg and delayed revocation checks Tobias Brunner 2015-10-28 16:09:59 +01:00
• f1cbacc5d1 ikev2: Delay online revocation checks during make-before-break reauthentication Tobias Brunner 2015-10-27 17:34:50 +01:00
• 8ce78e43a4 ikev2: Add task that verifies a peer's certificate Tobias Brunner 2015-10-27 17:31:43 +01:00
• 034a462901 ikev2: Initiate other tasks after a no-op task Tobias Brunner 2015-10-27 17:29:53 +01:00
• a05cff1ec0 ikev2: Don't do online revocation checks in pubkey authenticator if requested Tobias Brunner 2015-10-27 17:28:20 +01:00
• e19162a509 ike-sa: Add condition to suspend online certificate revocation checks for an IKE_SA Tobias Brunner 2015-10-27 17:27:02 +01:00
• 1b9c1ae018 ike-sa: Add method to verify certificates in completed authentication rounds Tobias Brunner 2015-10-27 17:25:22 +01:00
• ef9171ad1e auth-cfg: Add a rule to suspend certificate validation constraints Tobias Brunner 2015-10-27 17:21:18 +01:00
• f371effc5d credential-manager: Check cache queue when destroying trusted certificate enumerator Tobias Brunner 2015-10-27 17:17:54 +01:00
• 5452e3d66e credential-manager: Make online revocation checks optional for public key enumerator Tobias Brunner 2015-10-26 15:35:23 +01:00
• 819da83fcc Merge branch 'charon-conf-fallback' Tobias Brunner 2016-03-08 10:56:27 +01:00
• 2e190dca04 charon-svc: Inherit all settings from the charon section Tobias Brunner 2016-02-08 17:22:23 +01:00
• bc4e689db1 charon-systemd: Inherit all settings from the charon section Tobias Brunner 2016-02-08 17:19:20 +01:00
• 5c8dc908d0 library: Add option to register additional namespaces before calling library_init() Tobias Brunner 2016-03-03 18:12:06 +01:00
• 101abed566 vici: Replace child configs atomically Tobias Brunner 2015-10-16 12:40:10 +02:00