Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• efb4b9440a testing: Add missing sim_files file to ikev2/rw-eap-sim-radius scenario Tobias Brunner 2015-08-21 11:37:23 +02:00
• 161d75f403 testing: alice is RADIUS server in the ikev2/rw-eap-sim-radius scenario Tobias Brunner 2015-08-21 11:15:36 +02:00
• 18943c1f1b testing: Print triplets.dat files of clients in EAP-SIM scenarios Tobias Brunner 2015-08-21 11:13:33 +02:00
• 60d4c1ccdd Merge branch 'stroke-ca-sections' Tobias Brunner 2015-08-20 19:37:09 +02:00
• 517cc501ef stroke: Change how CA certificates are stored Tobias Brunner 2015-08-20 15:29:33 +02:00
• 01d3ecbaf0 stroke: Combine CA certificate load methods Tobias Brunner 2015-08-20 10:22:50 +02:00
• 99610f406d stroke: Atomically replace CA and AA certificates when reloading them Tobias Brunner 2015-08-20 10:08:08 +02:00
• 58db4edb2c mem-cred: We don't need a write lock when looking for a certificate Tobias Brunner 2015-08-20 15:11:02 +02:00
• 522b1920b6 mem-cred: Add a method to atomically replace all certificates Tobias Brunner 2015-08-20 09:39:15 +02:00
• 4de361d92c ikev1: Fix handling of overlapping Quick Mode exchanges Tobias Brunner 2015-08-19 15:28:02 +02:00
• e2a252a86f kernel-pfkey: Add support for AES-GCM Tobias Brunner 2015-07-29 11:23:34 +02:00
• e79b0e07e4 auth-cfg: Don't enforce EAP_DYNAMIC Tobias Brunner 2015-08-20 18:35:23 +02:00
• 5fee79d854 ikev2: Compare initiator flag again, partially reverts 17ec1c74de Tobias Brunner 2015-08-19 16:47:45 +02:00
• 47a340e1f7 ikev2: Drop IKE_SA_INIT messages that don't have the initiator flag set Tobias Brunner 2015-06-10 15:53:08 +02:00
• 47ee60177e ikev1: Pass current auth-cfg when looking for key to determine auth method Tobias Brunner 2015-08-19 17:25:30 +02:00
• 49a20ef019 ikev2: Store outer EAP method used to authenticate remote peer in auth-cfg Tobias Brunner 2015-06-08 16:52:03 +02:00
• 64bef354d4 imc: get_default_pwd_status(), as it currently is, works on Windows too Tobias Brunner 2015-08-19 12:10:09 +02:00
• 2d14cb4d6c ike: Use the original port when remote resolves to %any Tobias Brunner 2015-08-18 17:35:39 +02:00
• bb1d9e454d testing: Add ikev2/trap-any scenario Tobias Brunner 2015-07-16 12:53:18 +02:00
• 301a0bad09 trap-manager: Enable auto=route with right=%any for transport mode connections Tobias Brunner 2012-10-30 09:10:05 +01:00
• 46686372c6 Version bump to 5.3.3dr6 Andreas Steffen 2015-08-19 07:18:30 +02:00
• 5f60c55919 Extend HCD attribute data for tnc/tnccs-20-hcd-eap scenario Andreas Steffen 2015-08-17 17:56:39 +02:00
• b19ef52d51 Added reason string support to HCD IMV Andreas Steffen 2015-08-17 17:37:52 +02:00
• 627e4b9659 Fixed patches format delimited by CR/LF Andreas Steffen 2015-08-04 21:43:49 +02:00
• 6a3d035505 Added imc-hcd attributes to strongswan.conf Andreas Steffen 2015-07-27 09:43:40 +02:00
• ac28daac38 testing: Added tnc/tnccs-20-hcd-eap scenario Andreas Steffen 2015-07-26 11:57:39 +02:00
• 18472ac21c Use PWG HCD PA-TNC subtypes to transport HCD attributes Andreas Steffen 2015-07-26 11:41:08 +02:00
• 6b68719dd3 Add default password determination capability to os_info Andreas Steffen 2015-07-26 11:38:06 +02:00
• 9e13c2b2cc Reintroduced ietf_attr_fwd_enabled() Andreas Steffen 2015-07-24 16:49:31 +02:00
• 860df6bf75 Defined PWG HCD PA-TNC subtypes Andreas Steffen 2015-06-17 11:18:37 +02:00
• 9c2e0a50a3 Added os_info support to HCD IMC Andreas Steffen 2015-05-27 10:19:31 +02:00
• 9e88bb987d Subscribed Scanner IMC/IMV to IETF_FIREWALL PA subtype Andreas Steffen 2015-05-24 09:36:16 +02:00
• ebed384887 testing: enable HCD IMC and IMV Andreas Steffen 2015-05-24 08:56:27 +02:00
• b48ffcb1b3 Implemented HCD IMC and IMV Andreas Steffen 2015-05-21 22:01:32 +02:00
• 92a9c99c38 Defined HCD PA subtype in PWG namespace Andreas Steffen 2015-05-20 12:26:23 +02:00
• 21b8051c10 Completed implementation of PWG HCD attributes Andreas Steffen 2015-05-18 16:40:27 +02:00
• 981653a437 Defined generic non-nul terminated string PA-TNC attribute Andreas Steffen 2015-05-17 18:16:08 +02:00
• 6a11c8a3f3 Support of HCD Firewall Setting PA-TNC attribute Andreas Steffen 2015-05-17 17:04:46 +02:00
• abb8a1ecd2 Defined generic boolean PA-TNC attribute Andreas Steffen 2015-05-17 08:41:59 +02:00
• 5e1b06ff08 Defined PWG HCD IF-M attributes Andreas Steffen 2015-05-16 22:44:40 +02:00
• 10f25a3dd9 Fixed the implemention of the IF-M segmentation protocol Andreas Steffen 2015-08-18 20:25:26 +02:00
• 6bd1216e7a kernel-netlink: Avoid route dump if routing rule excludes traffic with a certain mark Tobias Brunner 2015-08-05 16:51:38 +02:00
• 7ff7ce3ed6 include: Update (rt)netlink.h to the latest UAPI version Tobias Brunner 2015-08-05 16:46:37 +02:00
• 6927d6224e sql: Also do a reversed ID match Tobias Brunner 2015-07-27 19:16:08 +02:00
• fffee7c759 ha: Recreate the control FIFO if the file exists but is not a FIFO Tobias Brunner 2015-08-13 14:37:15 +02:00
• 636b2e9b2a ikev1: Assume a default key length of 128-bit for AES-CBC Tobias Brunner 2015-08-13 18:54:34 +02:00
• 774c8c3847 auth-cfg: Matching one CA should be enough, similar to peer certificates Tobias Brunner 2015-08-03 13:55:36 +02:00
• 9322e5b398 vici: Add option to disable policy installation for CHILD_SAs Tobias Brunner 2015-08-05 11:01:10 +02:00
• 3665adef19 child-sa: Fix refcounting of allocated reqids Tobias Brunner 2015-07-31 16:51:35 +02:00
• 017dbb1c5e identification: Remove unused ID_USER_ID type Tobias Brunner 2015-07-31 17:14:44 +02:00
• 4a2e17997f man: Clarify identity parsing and identity type prefixes Tobias Brunner 2015-07-20 15:27:57 +02:00
• 6ef4668626 pki: Add --dn command to extract the subject DN of a certificate Tobias Brunner 2015-08-06 18:04:38 +02:00
• 18662e9694 scripts: Add script to extract the ASN.1 subject DN from a certificate Tobias Brunner 2015-07-17 11:46:16 +02:00
• d6f70ff689 plugin-feature: Add vendor specific EAP method registration macros Tobias Brunner 2015-06-25 17:41:09 +02:00
• 39afe6e9d0 eap-radius: Use Framed-IPv6-Address attributes to send IPv6 VIPs in accounting messages Tobias Brunner 2015-06-29 10:43:19 +02:00
• ec490e68ae eap-radius: Add support for some basic IPv6-specific RADIUS attributes Tobias Brunner 2015-06-22 11:36:15 +02:00
• 6d9cd1d66b utils: Check for dirfd(3) Tobias Brunner 2015-08-04 19:17:37 +02:00
• f25f4192c7 utils: Directly use syscall() to close open FDs in closefrom() Tobias Brunner 2015-06-11 12:19:56 +02:00
• b410d7f8ff utils: Don't use directory enumerator to close open FDs in closefrom() Tobias Brunner 2015-08-04 14:43:26 +02:00
• cec1fe8c7d Merge branch 'vici-updown' Tobias Brunner 2015-08-17 11:13:37 +02:00
• b3d91cc64e vici: Add listen methods to receive arbitrary events in Python library Tobias Brunner 2015-08-06 14:51:21 +02:00
• cf4cefee42 vici: Move event (un-)registration to a helper method in Python library Tobias Brunner 2015-08-06 14:41:54 +02:00
• 65ac0851c0 vici: Add ike/child-rekey events Tobias Brunner 2015-06-01 15:36:21 +02:00
• 7f21363ee5 vici: Document the ike/child-updown events Tobias Brunner 2015-05-29 18:43:15 +02:00
• 22842cce0d vici: Don't include a child-sas section in ike-updown event Tobias Brunner 2015-05-29 18:38:47 +02:00
• 085b8f4fb0 vici: Explicitly notify listeners of the type of ike/child-updown event Tobias Brunner 2015-05-29 18:38:28 +02:00
• cdd7d2b197 Version bump to 5.3.3dr5 Andreas Steffen 2015-08-16 09:04:42 +02:00
• a330f72ecf Fixed AR identities in mutual TNC measurements case Andreas Steffen 2015-08-15 22:46:21 +02:00
• df085a158a kernel-pfroute: Don't install virtual IPs if charon.install_virtual_ip is disabled Tobias Brunner 2015-08-13 15:52:50 +02:00
• 98c09357d5 load-tester: Include string.h for strcmp() on some platforms Tobias Brunner 2015-08-13 15:10:34 +02:00
• 6967948241 Initialize variables that some compilers seem to warn about Tobias Brunner 2015-08-13 15:09:00 +02:00
• f809e485fb Fixed some typos Tobias Brunner 2015-08-13 15:03:50 +02:00
• dc2fa791e4 kernel-netlink: When adding a policy do an update if it already exists Tobias Brunner 2015-06-03 17:31:30 +02:00
• 695112d7b8 kernel-pfkey: When adding policies do an update if they already exist Tobias Brunner 2015-06-03 17:17:15 +02:00
• 1bc2549914 pki: Optionally extract public key from given private key in --issue Tobias Brunner 2015-07-07 10:53:22 +02:00
• 99b1a1a1d8 conf: Clarify resolution for two time settings Tobias Brunner 2015-08-10 12:01:24 +02:00
• 16c4dd8f26 Version bump to 5.3.3dr4 Andreas Steffen 2015-08-10 07:48:14 +02:00
• 9593b57ca3 identification: Use UTF8String instead of the legacy T61String to encode DNs Tobias Brunner 2015-06-11 17:43:49 +02:00
• 6fe8fe0cfd whitelist: Use hash() method so DNs with different string types match Tobias Brunner 2015-06-11 17:40:10 +02:00
• 520fba4899 identification: Add hash() method Tobias Brunner 2015-06-11 17:38:46 +02:00
• b2efc61818 pkcs11: Fix encoding of RSA keys if unnecessarily zero prefixed Tobias Brunner 2015-07-02 15:58:01 +02:00
• 1de31bcc2b updown: Pass virtual IPs assigned to a peer to the updown script Tobias Brunner 2015-06-25 17:19:12 +02:00
• d04b093374 eap-radius: Don't send RADIUS Accounting Start messages twice Tobias Brunner 2015-06-02 15:18:52 +02:00
• 186d25cbe6 eap-radius: Change trigger for Accounting Start messages for IKEv1 Tobias Brunner 2015-06-02 14:48:31 +02:00
• 626b2e85f0 testing: Update AAA certificate on Freeradius as well Andreas Steffen 2015-08-05 10:01:21 +02:00
• 9b1eaf083f testing: Updated expired AAA server certificate Andreas Steffen 2015-08-04 21:50:01 +02:00
• 3103c68210 configure: Explicitly disable unused parameter warnings in qsort_r test Tobias Brunner 2015-08-04 19:08:30 +02:00
• 7be8965225 printf-hook-builtin: Fix invalid memory access Tobias Brunner 2015-07-27 11:18:53 +02:00
• 197de6e66b kernel-netlink: Use PAGE_SIZE as default size for the netlink receive buffer Tobias Brunner 2015-07-16 11:50:22 +02:00
• a6896b6149 kernel-netlink: Actually verify if the netlink message exceeds the buffer size Tobias Brunner 2015-07-16 11:43:44 +02:00
• a7f381ef00 ha: Properly initialize algo variables when installing CHILD_SAs Tobias Brunner 2015-08-03 13:30:11 +02:00
• 3434709460 ha: Sync remote address in HA_IKE_ADD, too Thomas Egerer 2015-04-24 13:43:18 +02:00
• e095d87bb6 jobs: Don't execute rekey CHILD_SA job on passive IKE_SAs Thomas Egerer 2015-04-24 13:43:14 +02:00
• edaba56ec7 ike: Disable NAT keepalives in state PASSIVE Thomas Egerer 2015-04-24 13:43:11 +02:00
• 008a9ad12c testing: Don't run do-tests when hosts are not running Tobias Brunner 2015-08-03 13:34:05 +02:00
• 50dd7de226 testing: Suppress errors when checking for running hosts Tobias Brunner 2015-08-03 12:54:09 +02:00
• e0d3a2a873 Version bump to 5.3.3dr3 Andreas Steffen 2015-07-31 17:47:14 +02:00
• 493ad293b7 testing: Adapted ha/both-active scenario to new jhash values Andreas Steffen 2015-07-31 14:43:40 +02:00
• 1f406f3e6e testing: Fix initial kernel build Tobias Brunner 2015-07-31 12:22:55 +02:00
• 93caf23e1b ha: Use the same init values for jhash() as Linux 4.1 Tobias Brunner 2015-07-29 17:04:33 +02:00