Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 1ce32c9cdc kernel-netlink: Unlock mutex in del_policy() if mark can't be added to message Tobias Brunner 2015-07-31 11:20:24 +02:00
• 36bc52b441 sql: Fix memory leak in SQL logger Tobias Brunner 2015-07-28 14:53:14 +02:00
• 41458e3362 Version bump to 5.3.3dr2 Andreas Steffen 2015-07-28 14:28:13 +02:00
• 1d3e69c6da android: New release fixing roaming on 5+ and adding new advanced options Tobias Brunner 2015-07-28 13:57:13 +02:00
• f14feed014 Merge branch 'android-updates' Tobias Brunner 2015-07-28 13:29:03 +02:00
• 1e323dc1b7 android: Keep NDK API level at 19 Tobias Brunner 2015-07-27 17:46:06 +02:00
• acc8948fa5 android: Apply split tunneling options when creating TUN device Tobias Brunner 2015-07-24 14:14:07 +02:00
• 3390092c76 include: Remove linux/types.h header Tobias Brunner 2015-07-21 11:57:56 +02:00
• bb40498df3 android: Build against the android-21 target Tobias Brunner 2015-07-21 11:37:33 +02:00
• 3ee84fa976 android: Extend GUI so the split tunneling options can be set Tobias Brunner 2015-07-24 11:47:53 +02:00
• f3d8da7644 android: Add field for split tunneling config to data model Tobias Brunner 2015-07-24 11:33:07 +02:00
• 030bcee1b0 android: Retrigger a roam event if reportedly connected but no source address found Tobias Brunner 2015-07-21 11:14:53 +02:00
• 41b59a3443 android: Add method to check for connectivity to NetworkManager Tobias Brunner 2015-07-21 11:05:10 +02:00
• 5da31733de android: Fix kernel-net implementation on Android 4.3 and earlier Tobias Brunner 2015-06-22 17:15:33 +02:00
• 1082372448 android: Add a custom kernel-net implementation to replace kernel-netlink Tobias Brunner 2015-06-17 17:21:21 +02:00
• 69e0215b9d android: Manually load libraries with dlopen() and RTLD_GLOBAL on Android M Tobias Brunner 2015-06-17 15:31:24 +02:00
• cda167c8c4 android: Apply configured server port Tobias Brunner 2015-06-16 16:44:29 +02:00
• 6c0ec35c53 android: Extend GUI so the server port can be entered Tobias Brunner 2015-06-16 16:42:40 +02:00
• 5b11855f26 android: Add field for server port to data model Tobias Brunner 2015-06-16 16:39:08 +02:00
• 4d02c49ead android: Apply configured MTU Tobias Brunner 2015-06-16 16:06:13 +02:00
• c682205113 android: Extend GUI so the MTU can be entered Tobias Brunner 2015-06-15 16:59:12 +02:00
• 7e2a6c4a41 android: Add field for MTU to data model Tobias Brunner 2015-06-15 15:36:46 +02:00
• 6830cb1c1b android: Set preferred language for remediation instructions Tobias Brunner 2015-06-12 14:14:46 +02:00
• 79af70c66e android: Encode connection settings as single Java string argument Tobias Brunner 2015-06-10 14:59:48 +02:00
• fd16adb765 android: Add simple utility class to generate settings_t compatible config snippets Tobias Brunner 2015-06-05 16:01:31 +02:00
• d29a4a5e20 unit-tests: Add unit tests for settings_t.load_string[_section] Tobias Brunner 2014-10-23 17:03:52 +02:00
• 08b45fc516 settings: Add methods and a constructor to parse settings from strings Tobias Brunner 2014-10-23 16:57:47 +02:00
• 0dba2690c4 settings: Extend parser so we can parse settings from a string Tobias Brunner 2014-10-23 16:57:24 +02:00
• 019ebdafae starter: Add support for multi-line strings in ipsec.conf Tobias Brunner 2015-06-08 17:49:02 +02:00
• 764960e8b9 settings: Add support for multi-line strings Tobias Brunner 2015-06-08 17:47:51 +02:00
• d918410add starter: Don't replace rarely used special characters in strings in ipsec.conf Tobias Brunner 2015-06-05 15:49:39 +02:00
• 9577b2d148 settings: Don't replace rarely used special characters Tobias Brunner 2015-06-05 15:42:58 +02:00
• 41594a7bb7 android: Don't pass null as root view to inflate() Tobias Brunner 2015-06-22 17:26:10 +02:00
• 16e9efc092 android: Fix a potential NullPointerException in the IMC state fragment Tobias Brunner 2015-06-22 17:22:05 +02:00
• 4dc6275be5 android: EAP-TNC does not require a client certificate Tobias Brunner 2015-06-12 15:13:46 +02:00
• 9d957bacfc android: Enable charon.initiator_only option Tobias Brunner 2015-06-04 10:35:03 +02:00
• 5f613590b0 android: Increase the minSdkVersion to 15 and targetSdkVersion to 22 Tobias Brunner 2015-06-10 15:13:49 +02:00
• fbcac07043 testing: Regenerated BLISS certificates due to oracle changes Andreas Steffen 2015-07-27 19:51:18 +02:00
• e57190c312 Use MGF1 with SHA-512 as BLISS random oracle Andreas Steffen 2015-07-27 14:50:14 +02:00
• 7b7c510eec Generalize c_indices generation using SHA-512 random oracle. Markku-Juhani Olavi Saarinen 2015-06-18 12:46:16 +02:00
• 68d8a16830 Fixed several bugs in the BLISS signature generation/verification step. Markku-Juhani Olavi Saarinen 2015-06-17 12:00:32 +02:00
• faebdeac8e ike: Fix memory leak if remote address is kept Tobias Brunner 2015-07-27 19:37:41 +02:00
• 81f1aa8dc3 ike-rekey: Fix cleanup() call Tobias Brunner 2015-07-27 15:20:01 +02:00
• 2efcc95867 ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA response Tobias Brunner 2015-06-15 11:52:16 +02:00
• 86d20b0b40 ike-rekey: Reset IKE_SA on the bus after destroying new IKE_SA Tobias Brunner 2015-06-15 11:46:33 +02:00
• 5af74bcb84 Merge branch 'trap-shunt-updates' Tobias Brunner 2015-07-27 14:00:23 +02:00
• c04345d5ed daemon: Flush shunts before unloading plugins Tobias Brunner 2015-07-14 16:56:33 +02:00
• bc36530670 shunt-manager: Add flush() method to properly uninstall shunts Tobias Brunner 2015-07-14 16:55:36 +02:00
• 616ff9a236 shunt-manager: Remove stored entries if installation fails Tobias Brunner 2015-07-14 16:50:32 +02:00
• f3d39666e0 shunt-manager: Add a lock to safely access the list of shunt policies Tobias Brunner 2015-07-14 16:35:21 +02:00
• 12b3cdba76 trap-manager: Resolve race conditions between flush() and install() Tobias Brunner 2015-07-13 13:20:14 +02:00
• a229bdce62 trap-manager: Changed how acquires we acted on are tracked Tobias Brunner 2015-07-09 12:00:56 +02:00
• 773fcb1605 trap-manager: Properly check-in IKE_SA if initiating fails Tobias Brunner 2015-07-09 14:34:19 +02:00
• 6f7a3b33bc ike: Fall back to the current remote IP if it resolves to %any Tobias Brunner 2015-07-10 10:23:02 +02:00
• f22c655b11 Merge branch 'remote-host-family' Tobias Brunner 2015-07-27 13:42:49 +02:00
• a11048adee ike: Use address family of local address when resolving remote host Tobias Brunner 2015-06-11 15:10:29 +02:00
• 834bf7ca5f ike-cfg: Add unit tests for ike_cfg_get_family() helper Tobias Brunner 2015-06-11 16:10:25 +02:00
• 6bfa660693 ike-cfg: Add helper function to determine address family of IP addresses Tobias Brunner 2015-06-11 15:42:54 +02:00
• 65579569ad host: Properly handle NULL in host_create_from_string[_and_family] Tobias Brunner 2015-06-11 15:07:07 +02:00
• 2096d54198 Improved legibility of swanctl CRL listings Andreas Steffen 2015-07-22 17:46:15 +02:00
• aaeb524cea testing: Updated loop ca certificates Andreas Steffen 2015-07-22 17:11:00 +02:00
• 450c6e8dd9 testing: Added swanctl --list-authorities output to do-tests Andreas Steffen 2015-07-21 23:26:44 +02:00
• 73cbd5c7f8 testing: Updated all swanctl scenarios and added some new ones Andreas Steffen 2015-07-21 23:23:10 +02:00
• db69295d2e tests: Introduced IPV6 flag in tests.conf Andreas Steffen 2015-06-29 13:13:35 +02:00
• 6b265c5e5c tests: Introduced SWANCTL flag in test.conf Andreas Steffen 2015-06-29 12:43:20 +02:00
• 3d9bfb607c tests: fixed evaltest of swanctl/rw-cert scenario Andreas Steffen 2015-06-29 12:42:35 +02:00
• f335e2f848 tests: fixed description of swanctl ip-pool scenarios Andreas Steffen 2015-06-29 12:41:37 +02:00
• 41aa7eb531 Version bump to 5.3.3dr1 Andreas Steffen 2015-07-21 23:15:36 +02:00
• 63d370387d vici: Certification Authority support added. Andreas Steffen 2015-07-14 14:41:27 +02:00
• e194349148 vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets are defined Andreas Steffen 2015-07-13 18:54:54 +02:00
• 170e8d141c testing: Do not attempt to start the test environment if hosts are still running Tobias Brunner 2015-07-15 16:52:52 +02:00
• 390ae7a2c2 ike-sa-manager: Safely access the RNG instance with an rwlock Tobias Brunner 2015-07-08 15:28:46 +02:00
• 856ea64129 vici: Asynchronize debug logging Martin Willi 2015-07-02 09:10:21 +02:00
• 3232c0e64e Merge branch 'chapoly' Martin Willi 2015-07-12 13:55:08 +02:00
• 396607987a NEWS: Add ChaCha20/Poly1305 news Martin Willi 2015-07-12 13:42:11 +02:00
• 918dfce551 testing: Enable AESNI/PCLMULQD in moon/sun guests, if supported Martin Willi 2015-06-01 10:01:56 +02:00
• 2a75c6e487 testing: Do not overwrite kernel configuration if it already exists Martin Willi 2015-05-29 22:29:59 +02:00
• a4a13d0be2 testing: Extract and patch each kernel version only once Martin Willi 2015-05-29 22:28:05 +02:00
• 6f913def3c testing: Build with --enable-chapoly Martin Willi 2015-05-29 22:42:04 +02:00
• c6d60f4808 libipsec: Add a unit-test for ESP encryption using ChaCha20Poly1305 Martin Willi 2015-04-27 15:40:08 +02:00
• 29e3544f1f libipsec: Add a unit-test test runner Martin Willi 2015-04-27 14:13:58 +02:00
• 98aa6aa344 unit-tests: Add a IKEv2 message encryption test case Martin Willi 2015-04-27 13:11:02 +02:00
• 80d7f44198 unit-tests: Increase failure message buffer to hold larger hex dumps Martin Willi 2015-04-14 10:21:06 +02:00
• ee9f691915 unit-tests: Forward variable argument list in TEST_SUITE_DEPEND Martin Willi 2015-04-27 13:09:25 +02:00
• 88d90c7b4b unit-tests: Load libstrongswan plugins in libcharon tests Martin Willi 2015-04-27 13:06:39 +02:00
• fe5d6eaa9f chapoly: Process two Poly1305 blocks in parallel in SSSE3 driver Martin Willi 2015-04-07 11:28:51 +02:00
• b499777cbf chapoly: Process four ChaCha20 blocks in parallel in SSSE3 driver Martin Willi 2015-04-05 21:50:03 +02:00
• 755dadcfda chapoly: Add an SSSE3 based driver Martin Willi 2015-04-02 15:11:02 +02:00
• 42459b41f0 configure: Check if building against a x86/x64 architecture Martin Willi 2015-04-02 15:08:34 +02:00
• bf86fd7ccc chapoly: Add a ChaCha20/Poly1305 driver implemented in portable C Martin Willi 2015-04-02 12:26:34 +02:00
• 370fb3feb0 chapoly: Provide a generic ChaCha20/Poly1305 AEAD supporting driver backends Martin Willi 2015-04-01 19:17:25 +02:00
• 82f7f5882f test-vectors: Add some initial ChaCha20/Poly1305 AEAD test vector Martin Willi 2015-04-01 19:16:33 +02:00
• 405c5dcd82 kernel-netlink: Add ChaCha20-Poly1305 AEAD support Martin Willi 2015-05-29 22:26:34 +02:00
• 19e0a71c73 libipsec: Create AEAD with four byte salt for ChaCha20-Poly1305 Martin Willi 2015-04-07 14:56:51 +02:00
• 6ffaa8626e ikev2: Derive additional 4 byte CHILD_SA nonce keymat for ChaCha20-Poly1305 Martin Willi 2015-05-29 23:21:39 +02:00
• bbcb76e260 ikev2: Use four byte salt for ChaCha20-Poly1305 AEAD Martin Willi 2015-04-05 14:29:29 +02:00
• b211f283b7 proposal: Add a chacha20poly1305 proposal keyword Martin Willi 2015-04-01 19:15:30 +02:00
• 9e110cc54c crypter: Define a ChaCha20/Poly1305 AEAD algorithm identifier Martin Willi 2015-04-01 19:14:47 +02:00
• b01b331afe capabilities: Handle ERANGE in user and group lookups Tobias Brunner 2015-06-23 09:46:18 +02:00
• 5fbc709224 osx: Version bump to 5.3.2-1 Martin Willi 2015-03-24 14:20:15 +01:00