Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 726a45b2f2 Corrected the description of the swanctl/dhcp-dynamic scenario Andreas Steffen 2016-02-16 18:17:17 +01:00
• 4d83c5b4a6 Fix of the mutual TNC measurement use case Andreas Steffen 2016-02-16 18:00:27 +01:00
• 70934d9436 kernel-netlink: Allow Netlink send buffer size to be configured via compile option Tobias Brunner 2016-02-12 15:08:34 +01:00
• 10c5981d3b utils: Add enum name for pseudo log group 'any' Tobias Brunner 2016-02-05 15:41:39 +01:00
• e8140531fc libipsec: Pass the same data to del_policy() as to add_policy() Tobias Brunner 2016-02-04 10:57:31 +01:00
• e1e88d5add libipsec: Don't attempt deletion of any non-IPsec policies Tobias Brunner 2016-02-04 10:14:22 +01:00
• ac134b470a testing: Added swanctl/dhcp-dynamic scenario Andreas Steffen 2016-02-03 12:10:59 +01:00
• 3d15269af9 ikev2: Add debug message about failed IKE authentication Thomas Egerer 2016-02-02 16:13:46 +01:00
• beb4a07ea8 ikev1: Log successful authentication with signature scheme Thomas Egerer 2016-02-01 15:33:38 +01:00
• b4ae9e81f5 peer-cfg: Set DPD timeout to at least DPD delay Tobias Brunner 2016-02-01 15:29:25 +01:00
• 24ab8530e5 ikev1: Always enable charon.reuse_ikesa Tobias Brunner 2015-12-18 15:23:30 +01:00
• db57f5702b load-tester: Register kernel-ipsec implementation as plugin feature Tobias Brunner 2016-01-18 17:03:46 +01:00
• 7f2a20a4f4 child-rekey: Suppress updown event when deleting redundant CHILD_SAs Tobias Brunner 2015-12-15 17:15:32 +01:00
• 4cfcbe97a4 testing: Don't attempt to start the daemon twice in ha/active-passive scenario Tobias Brunner 2016-01-26 11:24:36 +01:00
• 9c773f8d11 ha: Properly sync IKEv1 IV if gateway is initiator Tobias Brunner 2016-01-26 11:13:13 +01:00
• b5c2ed5016 ha: Add DH group to CHILD_ADD message Tobias Brunner 2016-01-19 15:00:23 +01:00
• f1e908837a ha: Add DH group to IKE_ADD message Tobias Brunner 2016-01-19 14:42:17 +01:00
• e663d8e2bf ike-sa-manager: Don't update entries for init messages after unlocking segment Tobias Brunner 2016-01-18 17:33:29 +01:00
• fbbbe43ec1 unit-tests: The pseudonym RDN is now recognized, so use something more exotic Tobias Brunner 2016-01-28 15:56:49 +01:00
• 927f733159 Version bump to 5.4.0dr5 Andreas Steffen 2016-01-28 09:41:05 +01:00
• 7c81942357 Support pseudonym RDN Andreas Steffen 2016-01-27 11:38:18 +01:00
• 67a38ac6f1 testing: Added swanctl/config-payload scenario Andreas Steffen 2016-01-14 06:31:28 +01:00
• e7b5171e43 testing: Use include statement in swanctl/rw-pubkey-keyid scenario Andreas Steffen 2016-01-14 01:44:17 +01:00
• 9492e12e61 Version bump to 5.4.0dr4 Andreas Steffen 2016-01-10 01:39:08 +01:00
• ffd29ab30a vici: Support multiple named raw ublic keys Andreas Steffen 2016-01-10 00:12:57 +01:00
• 2aa2b17d41 testing: swanctl/rw-pubkey-anon uses anonymous public keys in remote access scenario Andreas Steffen 2016-01-05 23:54:06 +01:00
• abe6d07463 swanctl: Load pubkeys with load-creds Andreas Steffen 2016-01-05 23:52:55 +01:00
• b83cef2412 testing: added swanctl scenarios net2net-pubkey, rw-pubkey-keyid and rw-dnssec Andreas Steffen 2016-01-05 05:35:21 +01:00
• 4c38c79452 vici: list-cert sends subject, not-before and not-after attributes for pubkeys Andreas Steffen 2016-01-05 05:34:12 +01:00
• 87371460f6 vici: Support of raw public keys Andreas Steffen 2016-01-04 10:34:21 +01:00
• bffbf2f5fd testing: Fixed description of swanctl/frags-iv4 scenario Andreas Steffen 2016-01-09 00:17:31 +01:00
• e333d4c0f1 swanctl.conf: IKEv2 fragmentation supported Andreas Steffen 2016-01-09 00:06:12 +01:00
• 1990eeebfe Version bump to 5.4.0dr3 Andreas Steffen 2016-01-03 06:28:05 +01:00
• 9121f6cce1 vici: Enable transport encoding of CERT_TRUSTED_PUBKEY objects Andreas Steffen 2016-01-03 03:46:47 +01:00
• 9db530493f testing: Change sql scenarios to swanctl Andreas Steffen 2015-12-28 04:15:27 +01:00
• 1a79525559 testing: Fix some IKEv1 scenarios after listing DH groups for CHILD_SAs Tobias Brunner 2015-12-18 15:22:21 +01:00
• 5d7049b427 stroke: List DH groups for CHILD_SA proposals Tobias Brunner 2015-12-18 13:51:36 +01:00
• a1dfbb7557 vici: Use correct constant when checking for integrity algorithm Tobias Brunner 2015-12-18 13:46:24 +01:00
• ade20d06c6 vici: CHILD_SA proposals never contain a PRF Tobias Brunner 2015-12-18 13:45:58 +01:00
• 67cd3fdce7 strongswan-swanctl.service.in: Match install used by strongswan.service Chris Patterson 2015-12-18 08:31:48 -05:00
• b15f987ddd configure: Support systemd >= 209 Chris Patterson 2015-12-18 08:27:57 -05:00
• 92b051bd4a vici: allow legacy shortcuts in cert queries Andreas Steffen 2015-12-19 10:30:17 +01:00
• 6943db5679 Version bump to 5.4.0dr2 Andreas Steffen 2015-12-18 15:25:50 +01:00
• 490ba67682 testing: Fixed description in swanctl/rw-ntru-bliss scenario Andreas Steffen 2015-12-18 15:24:59 +01:00
• 9463350943 testing: swanctl is enabled by default Andreas Steffen 2015-12-18 15:22:29 +01:00
• f553aea2c2 Use 128 bit security in README.pod examples Andreas Steffen 2015-12-18 15:08:33 +01:00
• a073e4c95e Improvements to the VICI Perl bindings by Andreas Hofmeister Andreas Hofmeister 2015-12-18 14:17:57 +01:00
• 2d9c68b8a8 configure: Enable vici plugin and swanctl by default Andreas Steffen 2015-12-17 17:48:09 +01:00
• 76cbf1df34 testing: Added swanctl/rw-ntru-bliss scenario Andreas Steffen 2015-12-17 15:45:35 +01:00
• cc874350b8 Apply pubkey and signature constraints in vici plugin Andreas Steffen 2015-12-17 13:41:19 +01:00
• a78e1c3b11 128 bit default security strength for IKE and ESP algorithms Andreas Steffen 2015-12-16 07:32:36 +01:00
• 1c3aa9bfc8 stroke: Fix --utc option for list* commands Tobias Brunner 2015-12-17 16:56:20 +01:00
• 891e9e95ea Merge branch 'command-max-lines' Tobias Brunner 2015-12-16 12:28:22 +01:00
• 3f2c305226 swanctl: Slightly change usage summary for --list-certs Tobias Brunner 2015-12-16 12:20:35 +01:00
• b0f00b2a3c swanctl: Never print more than MAX_LINES of usage summary Tobias Brunner 2015-12-16 11:56:44 +01:00
• 50e190e8ad pki: Increase MAX_LINES Tobias Brunner 2015-12-16 11:55:14 +01:00
• 8ea64a78d6 pki: Never print more than MAX_LINES of usage summary Tobias Brunner 2015-12-16 11:53:01 +01:00
• bf5754adcd travis: Enable IPv6 on build hosts Tobias Brunner 2015-12-15 10:10:30 +01:00
• 0f13f719e1 libstrongswan: Updated Android.mk to current Makefile.am Tobias Brunner 2015-12-14 19:05:41 +01:00
• 020d8c8f26 configure: Fix typo when enabling CPAN modules as dependency Tobias Brunner 2015-12-14 10:45:48 +01:00
• 5e2b740a00 128 bit default security strength requires 3072 bit prime DH group Andreas Steffen 2015-12-14 10:39:40 +01:00
• 47e5640378 swanctl --stats lists loaded plugins Andreas Steffen 2015-12-13 17:07:28 +01:00
• 36b6d400d2 testing: swanctl/rw-cert scenario tests password-protected RSA key Andreas Steffen 2015-12-12 17:12:44 +01:00
• 4f7f2538c4 Upgraded IKE and ESP proposals in swanctl scenarios to consistent 128 bit security Andreas Steffen 2015-12-12 15:54:48 +01:00
• 02d431022c Refactored certificate management for the vici and stroke interfaces Andreas Steffen 2015-12-11 18:24:58 +01:00
• 4df09fe563 Modified vici_cert_info class for use with load_creds and vici_cred Andreas Steffen 2015-12-11 17:53:40 +01:00
• 9dd8bfb2ce Changed some certificate_type_names and added x509_flag_names Andreas Steffen 2015-12-09 22:33:57 +01:00
• 44d3b02b57 Removed VICI protocol versioning Andreas Steffen 2015-12-09 20:39:59 +01:00
• b6dba6db74 Use of certificate_printer by swanctl --list-certs command Andreas Steffen 2015-12-07 21:24:27 +01:00
• 334119b843 Share vici_cert_info.c with vici_cred.c Andreas Steffen 2015-12-05 23:15:47 +01:00
• ef43df6cbe Allow msSmartcardLogon EKU to be built Andreas Steffen 2015-12-04 06:55:33 +01:00
• fad851e2d3 Use VICI 2.0 protocol version for certificate queries Andreas Steffen 2015-12-03 11:20:04 +01:00
• 5d909303d8 Sort certificate types during enumeration Andreas Steffen 2015-12-03 10:23:42 +01:00
• 75749971e1 Define VICI protocol versions Andreas Steffen 2015-12-03 10:22:06 +01:00
• 6789d79d46 testing: Added swanctl --list-algs output Andreas Steffen 2015-12-01 22:26:03 +01:00
• 6aa7703122 testing: Converted tnc scenarios to swanctl Andreas Steffen 2015-11-23 21:35:16 +01:00
• 74270c8c86 vici: Don't report memory usage via leak-detective Tobias Brunner 2015-11-19 17:56:06 +01:00
• ae37090e65 testing: Use expect-connection in swanctl scenarios Tobias Brunner 2015-11-19 17:53:31 +01:00
• b77e25c381 testing: The expect-connection helper may use swanctl to check for connections Tobias Brunner 2015-11-19 17:49:20 +01:00
• fd90f0613c Print OCSP single responses Andreas Steffen 2015-12-08 21:25:37 +01:00
• 3317d0e77b Standardized printing of certificate information Andreas Steffen 2015-12-06 13:28:03 +01:00
• 36d42daf4d imv-attestation: Fix memory leaks when creating functional components Tobias Brunner 2015-12-11 15:18:38 +01:00
• 7f52715655 ipsec: Fix stop command on systems where sleep(1) only supports integers Tobias Brunner 2015-12-10 11:46:21 +01:00
• bb723f97c7 Merge branch 'vici-undo-on-unload' Martin Willi 2015-12-07 10:29:57 +01:00
• 1a8a420c1c vici: Fix documentation about the initiate/terminate timeout Martin Willi 2015-12-01 09:26:40 +01:00
• eaca77d03e vici: Honor an optionally passed IKE configuration name in initiate/install Martin Willi 2015-11-05 10:09:00 +01:00
• 5e79ae2d65 vici: Support completely asynchronous initiating and termination Martin Willi 2015-11-05 10:04:35 +01:00
• 1db918c4f8 vici: Use an empty local auth round if none given Martin Willi 2015-11-04 17:04:11 +01:00
• b26ba1b4a4 vici: Limit start action undoing to IKE_SAs using the base peer config name Martin Willi 2015-11-04 16:03:14 +01:00
• 23b1f71372 vici: Close empty IKE_SAs after undoing CHILD_SA start actions Martin Willi 2015-11-04 13:25:51 +01:00
• 2facf18833 vici: Use value based array to store CHILD_SA ids during restart Martin Willi 2015-12-04 09:05:31 +01:00
• 01caed533b array: Add an insert/create function for value based arrays Martin Willi 2015-12-04 09:02:28 +01:00
• f3b2d4a9d8 vici: Undo start actions when unloading configs Martin Willi 2015-11-04 13:25:07 +01:00
• 84a3077e78 conf: Add support for escaping dots in section/option names Tobias Brunner 2015-12-02 18:09:29 +01:00
• 63a778a25d vici: Fix clean-local target for Perl bindings if they were not built Tobias Brunner 2015-12-04 11:21:19 +01:00
• 057e6cc524 byteorder: Provide a fallback for le32toh/htole32() Martin Willi 2015-11-10 08:12:35 +01:00
• 8fa0c7bc77 byteorder: Add 32-bit unaligned little-endian conversion functions Martin Willi 2015-11-10 07:57:48 +01:00
• 9709418871 swanctl: Explicitly link against -lpthread and -ldl if required Martin Willi 2015-11-09 17:17:16 +01:00
• 41106e7993 pki: Explicitly link against -lpthread and -ldl if required Martin Willi 2015-11-09 17:15:17 +01:00
• 2b39da2634 configure: Link against potential -ldl when checking for OpenSSL libcrypto Martin Willi 2015-11-09 17:11:21 +01:00