Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 50a43fbb97 ipsec: Quit script quicker for ipsec stop Tobias Brunner 2015-10-06 17:21:01 +02:00
• 8713e32435 testing: Only send two retransmits after 1 second each to fail negative tests earlier Tobias Brunner 2015-09-21 19:32:22 +02:00
• 9a0871ab94 testing: Add a base strongswan.conf file used by all hosts in all scenarios Tobias Brunner 2015-09-21 11:15:20 +02:00
• bd5084ae25 xauth: Call authorize() hook also when xauth-noauth is used Tobias Brunner 2015-10-01 18:15:00 +02:00
• 50e4aeb22f libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen() Tobias Brunner 2015-09-25 12:00:58 +02:00
• 305c4aa82c plugin-loader: Optionally use RTLD_NOW with dlopen() Tobias Brunner 2015-09-25 11:05:24 +02:00
• 7bea8e0f4a windows: Define RTLD_NOW, even if it is not used Tobias Brunner 2015-09-25 17:41:31 +02:00
• dff2d05bb9 kernel-pfkey: Enable ENCR_AES_CTR when it's available Renato Botelho 2015-11-06 17:07:38 -02:00
• 04f22cdabc vici: Add NAT information when listing IKE_SAs Tobias Brunner 2015-11-09 11:39:54 +01:00
• 4fc0a9d40b Merge branch 'iv-gen-null-encr' Tobias Brunner 2015-11-09 11:16:12 +01:00
• 17816515d2 testing: Add libipsec/net2net-null scenario Tobias Brunner 2015-10-23 14:47:54 +02:00
• f6083d350c iv-gen: Use NULL IV generator for NULL encryption Tobias Brunner 2015-10-23 14:34:54 +02:00
• 403acf8614 crypto: Add NULL IV generator Tobias Brunner 2015-10-23 14:16:57 +02:00
• 32ebb56c5b configure: Load sha1 and random plugins in manager by default Tobias Brunner 2015-10-22 11:05:31 +02:00
• 7b95688124 stroke: Make down-nb actually non-blocking Tobias Brunner 2015-11-04 16:44:17 +01:00
• f1f7134ecb Version bump to 5.3.4dr2 Andreas Steffen 2015-11-06 16:07:04 +01:00
• 23a50e66f1 testing: Updated hasher tests Andreas Steffen 2015-11-06 16:05:44 +01:00
• a88d958933 Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes Andreas Steffen 2015-11-06 14:55:10 +01:00
• 6590298dad Version bump to 5.3.4dr1 Andreas Steffen 2015-11-04 19:42:17 +01:00
• 83c1883d0b Use word-aligned XOR in sha3_absorb() Andreas Steffen 2015-11-03 19:06:45 +01:00
• a98360a64c testing: BLISS CA uses SHA-3 in its CRL Andreas Steffen 2015-10-30 07:06:57 +01:00
• f6fede934b Support BLISS signatures with SHA-3 hash Andreas Steffen 2015-10-28 21:00:31 +01:00
• a488584b5f Implemented SHA-3 hash algorithm including test vectors Andreas Steffen 2015-10-28 19:57:14 +01:00
• de61e2cef4 Defined SHA-3 hashers Andreas Steffen 2015-10-15 16:39:50 +02:00
• 92ef3c2f21 testing: Update tkm to version 0.1.3 Tobias Brunner 2015-10-30 11:19:44 +01:00
• 1f3a9fdde5 libipsec: Properly support CAMELLIA in CTR mode Tobias Brunner 2015-09-21 11:12:14 +02:00
• 0af13d2849 ikev2: Fix size of key material for CAMELLIA-CTR Tobias Brunner 2015-09-21 11:11:33 +02:00
• 0e80127691 libipsec: Fix crypter lookup for AES-CTR Tobias Brunner 2015-09-21 11:02:45 +02:00
• 72cc029e24 ike-mobike: Send retransmits to the current local and remote addresses Tobias Brunner 2015-09-23 10:53:20 +02:00
• d7e3433182 Merge branch 'ikev1-cache-informational' Tobias Brunner 2015-10-30 10:33:51 +01:00
• 25863fe1c7 ikev1: Handle queued INFORMATIONAL message after receiving the last AM request Tobias Brunner 2015-09-28 17:39:54 +02:00
• 1c8dfa30d0 ikev1: Queue INFORMATIONAL request if AM is not complete yet Tobias Brunner 2015-09-28 17:37:42 +02:00
• 3805880c8a ikev1: Handle queued TRANSACTION messages only after processing replies Tobias Brunner 2015-09-28 17:35:30 +02:00
• 3f56f73159 ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yet Tobias Brunner 2015-09-28 17:33:46 +02:00
• b0b0c9137d ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM message Tobias Brunner 2015-09-28 17:30:36 +02:00
• 0cb8752b85 ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about configurable Tobias Brunner 2015-09-22 11:56:44 +02:00
• 3195650180 Fix typo in error handling for sigwaitinfo() in charon-systemd and charon-tkm Tobias Brunner 2015-10-29 17:37:06 +01:00
• 35dbf8af7a random: Properly handle errors when reading from /dev/[u]random Tobias Brunner 2015-10-12 11:04:55 +02:00
• 37a22a166b ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are handled delayed Tobias Brunner 2015-10-07 16:08:22 +02:00
• 758b1caa0e ikev1: Prevent deadlock when checking for duplicate IKEv1 SAs Tobias Brunner 2015-09-02 12:14:35 +02:00
• 858148092d Replace usages of sigwait(3) with sigwaitinfo(2) Tobias Brunner 2015-09-17 17:52:14 +02:00
• c6aa606a65 testing: Actually send an uncompressed packet in the ipv6/rw-compress-ikev2 scenario Tobias Brunner 2015-09-21 10:12:24 +02:00
• 382f8a334a updown: Add rules to allow IP6IP6 traffic used for uncompressed small packets Tobias Brunner 2015-09-21 10:12:17 +02:00
• 08afc33e52 shunt-manager: Resolve %dynamic to %any4/6 before installing policies Tobias Brunner 2015-08-26 18:08:14 +02:00
• 65978f08f4 shunt-manager: Don't install policies in case of an address family or IP protocol mismatch Tobias Brunner 2015-08-26 18:07:06 +02:00
• 5f18e2c371 openssl: Explicitly include openssl/bn.h Tobias Brunner 2015-09-16 11:16:59 +02:00
• dc486823aa unit-tests: Add a test to verify that there is no partial matching of RDNs Tobias Brunner 2015-09-09 14:39:26 +02:00
• 221b0e93ee scepclient: Remove copyright and license from man page Tobias Brunner 2015-09-09 11:45:17 +02:00
• e7143fe998 include: Add linux/socket.h Tobias Brunner 2015-09-07 12:04:55 +02:00
• a215008c11 Version bump to 5.3.3 Andreas Steffen 2015-09-06 15:05:36 +02:00
• 2b5c543051 testing: added ikev2/alg-chacha20poly1305 scenario Andreas Steffen 2015-09-01 17:30:15 +02:00
• 57eb3b2b25 testing: update to Linux 4.2 kernel Andreas Steffen 2015-09-01 17:29:30 +02:00
• 01604016f7 Version bump to 5.3.3rc2 Andreas Steffen 2015-09-01 13:16:43 +02:00
• adb4db475e imv-os: Add some useful usage output to the pacman utility Tobias Brunner 2015-08-31 16:02:11 +02:00
• 7b20ab0a94 kernel-netlink: Properly set port mask for ICMP type/code if only set on one side Tobias Brunner 2015-08-26 17:46:10 +02:00
• d34a82dd57 kernel-pfkey: Properly encode ICMP type/code if only set on one side Tobias Brunner 2015-08-26 16:16:30 +02:00
• e9ea7e6fb7 testing: Updated environment variable documentation in updown scripts Tobias Brunner 2015-08-31 10:59:10 +02:00
• 64ee81cecf libimcv: Updated Android.mk file Tobias Brunner 2015-08-31 10:53:22 +02:00
• 18e0d66b60 NEWS: Added additional news Tobias Brunner 2015-08-28 18:10:37 +02:00
• 00c2c87b06 eap-radius: Fix creation of host_t objects based on Framed-IPv6-Address attributes Tobias Brunner 2015-08-28 16:51:05 +02:00
• 486d7b2671 conf: Add documentation for new osx-attr option Tobias Brunner 2015-08-28 15:49:58 +02:00
• 592f31f5af pki: Add new type options to --issue command usage output Tobias Brunner 2015-08-27 17:53:43 +02:00
• 6b0bdda010 conf: Fix declaration of default values for imc-hcd options Tobias Brunner 2015-08-27 16:59:12 +02:00
• cfd61a963d starter: Remove documentation for starter.load option Tobias Brunner 2015-08-27 16:42:09 +02:00
• fbb593092e eap-ttls: Limit maximum length of tunneled EAP packet to EAP-TTLS packet Tobias Brunner 2015-08-27 15:15:04 +02:00
• 03024f4ca8 trap-manager: Cleanup local address in error cases Tobias Brunner 2015-08-27 14:45:11 +02:00
• 30ac5c331a imv-os: Properly free strings for invalid input in pacman Tobias Brunner 2015-08-27 14:41:13 +02:00
• e3e208fb9f ha: Close control FIFO if it is not valid Tobias Brunner 2015-08-27 14:31:42 +02:00
• 0709280175 swanctl: Correctly build man page in out-of-tree builds from the repository Tobias Brunner 2015-08-27 12:42:21 +02:00
• 7a1fed284c Fixed some typos, courtesy of codespell Tobias Brunner 2015-08-27 12:06:31 +02:00
• c605a96d7f Fix some Doxygen issues Tobias Brunner 2015-08-27 12:03:11 +02:00
• 0737e936e0 unit-tests: Additional test cases to increase coverage Tobias Brunner 2015-08-25 11:29:42 +02:00
• fe2443b01c traffic-selector: Use calc_netbits() in RFC 3779 constructor Tobias Brunner 2015-08-25 19:13:59 +02:00
• df62141362 ike: Fix half-open count for initiating SAs when initially checked in Tobias Brunner 2015-08-24 12:27:34 +02:00
• 735f929ca7 ike: Only consider number of half-open SAs as responder when deciding whether COOKIEs are sent Tobias Brunner 2015-08-24 12:18:16 +02:00
• 5de8703ee0 Version bump to 5.3.3rc1 Andreas Steffen 2015-08-25 15:09:19 +02:00
• cdb61c3e88 Added some spaces in swanctl.conf Andreas Steffen 2015-08-25 15:08:52 +02:00
• 78ed330099 vici: Handle closed sockets in the Ruby gem Evan Broder 2015-08-22 19:20:40 -04:00
• ba3298fa8d Merge branch 'starter-kernel-flush' Tobias Brunner 2015-08-21 18:27:12 +02:00
• 9086f060d3 testing: Let test scenarios fail if IPsec SAs or policies are not removed Tobias Brunner 2015-08-21 14:33:26 +02:00
• c91682d1b8 testing: Flush state and policies before every scenario Tobias Brunner 2015-08-21 14:32:29 +02:00
• d8fdd1018e starter: Don't flush SAs in the kernel Tobias Brunner 2015-08-21 13:57:00 +02:00
• bd24f87d35 starter: Don't flush policies in the kernel Tobias Brunner 2015-08-13 11:08:41 +02:00
• 603e3b489b kernel-pfkey: Only flush SAs of types we actually manage Tobias Brunner 2015-08-13 11:01:50 +02:00
• 82b5d1c018 kernel-netlink: Only flush SAs of types we actually manage Tobias Brunner 2015-08-13 10:34:47 +02:00
• d88cec920c Merge branch 'init-limits' Tobias Brunner 2015-08-21 18:21:24 +02:00
• 256e666d22 vici: Optionally check limits when initiating connections Tobias Brunner 2015-07-16 17:56:16 +02:00
• b9d7319fb3 vici: Add get_bool() convenience getter for VICI messages Tobias Brunner 2015-07-16 17:51:40 +02:00
• ff0abde9ed controller: Optionally adhere to init limits also when initiating IKE_SAs Tobias Brunner 2015-07-16 17:21:54 +02:00
• 471a996a3e ike: Also track initiating IKE_SAs as half-open Tobias Brunner 2015-07-17 11:48:53 +02:00
• ffa20bad63 stroke: Allow %any as local address Tobias Brunner 2015-08-03 19:36:45 +02:00
• 8212f3d9a4 stroke: Add an option to disable side-swapping of configuration options Tobias Brunner 2015-08-03 19:26:54 +02:00
• a5c07be058 ikev1: Assign different job priorities for inbound IKEv1 messages Tobias Brunner 2015-07-17 14:08:09 +02:00
• 8923621280 testing: Fix typo in p2pnat/behind-same-nat scenario Tobias Brunner 2015-08-21 17:48:37 +02:00
• 105365eabe child-rekey: Don't add a REKEY_SA notify if the child-create task is deleting the SA Tobias Brunner 2015-08-19 16:16:01 +02:00
• f91bd4b92c child-create: Cache proposed IPsec protocol Tobias Brunner 2015-08-19 15:53:00 +02:00
• ffe0889acd child-create: Don't attempt to delete the SA if we don't have all the information Tobias Brunner 2015-08-19 15:08:02 +02:00
• 70c5f1d40d child-rekey: Remove redundant migrate() call for child-create sub-task Tobias Brunner 2015-07-28 15:28:33 +02:00
• 1729df9275 child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mismatch Tobias Brunner 2015-07-28 15:10:17 +02:00
• fdb90723b7 auth-cfg: Don't enforce EAP_RADIUS Tobias Brunner 2015-08-21 11:40:07 +02:00