Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 88b60c3349 osx: Use CodeSignOnCopy for privileged helper, as suggested by XCode Martin Willi 2015-03-24 14:15:36 +01:00
• 0f1d6b34b3 charon-xpc: Use DNS non-append/replace mode in osx-attr plugin Martin Willi 2015-03-24 14:14:59 +01:00
• 61d6cdb926 osx-attr: Optionally replace existing DNS server instead of appending them Martin Willi 2015-03-24 14:14:20 +01:00
• d13c8f8f7f Remove accidentally added stamp-h1 Tobias Brunner 2015-06-15 14:12:14 +02:00
• f146104736 settings: Fix out-of-tree build Tobias Brunner 2015-06-11 12:32:33 +02:00
• 2d5b3d34ec stroke: Add missing include for UINT16_MAX Tobias Brunner 2015-06-09 10:24:25 +02:00
• 3ea5d437fb Version bump to 5.3.2 Andreas Steffen 2015-06-08 09:56:34 +02:00
• 2b19e51707 NEWS: Add info about CVE-2015-4171 Tobias Brunner 2015-06-03 12:33:58 +02:00
• 0020b25a45 ikev2: Enforce remote authentication config before proceeding with own authentication Martin Willi 2015-06-03 10:52:34 +02:00
• a49393954f child-sa: Use any fixed reqid configured on the CHILD_SA config Martin Willi 2015-06-01 10:10:19 +02:00
• 523ea82ed5 unit-tests: Add tests for iv_gen_seq_t Tobias Brunner 2015-06-03 12:29:02 +02:00
• b756eea4f4 ivgen: Allow reusing the same message ID twice in sequential IV gen Martin Willi 2015-06-02 14:08:42 +02:00
• 9bb7307825 Fix timeattack script compilation under ARM Andreas Steffen 2015-06-05 12:09:38 +02:00
• bd60bcc3c2 Updated SWID attribute list Andreas Steffen 2015-06-02 06:51:41 +02:00
• f284c17890 Version bump to 5.3.1 Andreas Steffen 2015-06-01 09:50:48 +02:00
• 099260d8fd NEWS: Add info about CVE-2015-3991 Tobias Brunner 2015-05-21 17:17:51 +02:00
• 541543dbfe message: Log message if unknown/disallowed payload received Tobias Brunner 2015-05-15 12:19:27 +02:00
• e67161fe9e message: Log original message type of unknown payloads Tobias Brunner 2015-05-15 11:35:40 +02:00
• 1507647434 unknown-payload: Use a new private payload type and make original type available Tobias Brunner 2015-05-15 11:15:57 +02:00
• 62e0abe759 ikev2: Include fragment number into message ID passed to IV gen Martin Willi 2015-04-17 14:19:37 +02:00
• ef31254d34 iv-gen: Fail getting shorter IV values than the used counter size Martin Willi 2015-04-17 16:16:45 +02:00
• d0ed107910 iv-gen: Ensure external sequential IVs are actually sequential Martin Willi 2015-04-17 14:08:14 +02:00
• 823a8a9b46 message: Show the fragmentation numbers in message stringification Martin Willi 2015-04-17 14:19:05 +02:00
• b8399a2edc testing: use a decent PSK Andreas Steffen 2015-05-30 16:56:41 +02:00
• 1047d44b57 testing: Added ha/active-passive scenario Andreas Steffen 2015-05-30 16:48:17 +02:00
• eb423ebb54 Added 5.3.1 caption to NEWS Andreas Steffen 2015-05-28 06:26:43 +02:00
• 711cb586fa ha: Document tunnel parameter Tobias Brunner 2015-05-27 12:59:39 +02:00
• 06a5b0e2e8 ha: Skip SA for sync messages when resyncing HA segments Tobias Brunner 2015-05-26 15:43:46 +02:00
• 0de116cadc ha: Move plugin initialization from constructor to plugin callback Tobias Brunner 2015-05-26 12:47:17 +02:00
• 47e96391f2 libtls: As client, reject DH exchanges using primes smaller than 1024 bit Martin Willi 2015-05-20 10:56:23 +02:00
• dedd0ad07c Check for NULL installed packages enumerator Andreas Steffen 2015-05-24 11:15:36 +02:00
• 5d5a74b077 Fixed os_info path in strongswan.conf Andreas Steffen 2015-05-24 11:13:51 +02:00
• d6b75c9563 List attribute request entries also during build Andreas Steffen 2015-05-24 09:17:29 +02:00
• 13497e6cc1 testing: Include iperf and htop in base image Tobias Brunner 2015-05-22 13:30:10 +02:00
• d8fe354a0e stroke: Dynamically resize stroke messages Tobias Brunner 2015-05-20 18:21:15 +02:00
• e94aae83d3 vici: Explicitly disable --user-install when installing Ruby Gem Tobias Brunner 2015-03-31 10:51:22 +02:00
• f16f792e17 vici: Make installation of Ruby Gem and Python Egg optional Tobias Brunner 2015-05-21 11:05:05 +02:00
• 5a817407bc vici: Support out-of-tree build of Python Egg Tobias Brunner 2015-03-31 15:40:30 +02:00
• 4112ebad4a ikev1: When a reauth is detected explicitly delete the old IKE_SA Tobias Brunner 2015-05-12 16:59:20 +02:00
• b29c5c0f21 Merge branch 'accounting-fixes' Tobias Brunner 2015-05-21 15:40:05 +02:00
• 240ad7abf5 libipsec: Insert SAs first, so latest SA with the same reqid gets used Tobias Brunner 2015-03-27 14:49:38 +01:00
• 2b51124026 eap-radius: Keep track of stats for SAs migrated during IKEv1 reauthentication Tobias Brunner 2015-03-25 18:20:01 +01:00
• 6a9a69ae58 ikev1: Trigger children_migrate event if CHILD_SAs are adopted Tobias Brunner 2015-03-25 18:11:22 +01:00
• 072d9dc3c6 bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SA Tobias Brunner 2015-03-25 18:05:57 +01:00
• 8dbef6dac8 eap-radius: Remove cache entries for expired SAs during ike/child_rekey Tobias Brunner 2015-03-25 16:47:24 +01:00
• 7fbe79bce7 eap-radius: Add cache for usage stats of expired/rekeyed SAs Tobias Brunner 2015-03-24 17:38:49 +01:00
• d079f6a4f7 libradius: Verify message ID of RADIUS responses Tobias Brunner 2015-04-15 18:03:42 +02:00
• 6716c6526e kernel-netlink: Ignore unusable routes Tobias Brunner 2015-04-09 14:43:07 +02:00
• cc902695e8 kernel-netlink: Make buffer size for received Netlink messages configurable Tobias Brunner 2015-04-14 09:56:10 +02:00
• 682aab205e testing: Don't check parent dir (and subdirs) when downloading OpenSSL packages Tobias Brunner 2015-05-21 09:32:37 +02:00
• e6952442f2 Exempt ignored PA-TNC attributes from error handling Andreas Steffen 2015-05-19 22:54:00 +02:00
• c077642cbd testing: Fix kernel download URL for kernel versions != 4.x Tobias Brunner 2015-05-19 16:59:35 +02:00
• 10b5e8bb45 man: Clarification of ah keyword description Adrian-Ken Rueegsegger 2015-05-19 13:26:28 +02:00
• 95faeaa7ed starter: Ensure the daemon executable exists when starting up Tobias Brunner 2015-05-05 18:11:50 +02:00
• 5923abc6bf starter: Remove START_CHARON compile flag Tobias Brunner 2015-05-05 17:50:27 +02:00
• 9b4f6cfa23 charon-nm: Disable leak-detective in charon-nm Tobias Brunner 2015-05-05 17:52:34 +02:00
• 966efbc10d testing: Fix URL to TNC@FHH project in scenario descriptions Tobias Brunner 2015-05-05 11:48:13 +02:00
• 41e9a261ac testing: Update TKM assert strings Reto Buerki 2015-05-05 10:08:35 +02:00
• 3ff0edd804 testing: Update alog to version 0.3.1 Reto Buerki 2015-05-05 09:29:21 +02:00
• 2fc53e76f8 testing: Update tkm to version 0.1.2 Reto Buerki 2015-05-05 09:27:37 +02:00
• 3c13ff0a97 testing: Update tkm-rpc to version 0.2 Reto Buerki 2015-05-05 09:26:57 +02:00
• 32df0d81fb child-create: Destroy nonceg in migrate() Tobias Brunner 2015-05-05 09:51:19 +02:00
• 252f2ef885 child-create: Fix error handling if nonceg can't be created Tobias Brunner 2015-05-05 09:49:45 +02:00
• 59565ebf60 ike-init: Fix error handling if nonceg can't be created Tobias Brunner 2015-05-05 09:39:11 +02:00
• d648d61375 ike-init: Fix compiler warning Tobias Brunner 2015-05-05 09:37:42 +02:00
• 54d0d20bda swanctl: Fix --uri option Martin Willi 2015-05-05 10:37:34 +02:00
• 5a201e6bd0 Merge branch 'tkm-fixes' Tobias Brunner 2015-05-04 18:19:13 +02:00
• 38b65d7186 charon-tkm: Also store local SPI in SAD Adrian-Ken Rueegsegger 2015-04-21 16:34:06 +02:00
• 0b308faf6d ike-init: Make nonceg a member of ike_init struct Reto Buerki 2015-04-23 11:19:24 +02:00
• 72376234cb child-create: Make nonceg a member of child_create struct Reto Buerki 2015-04-23 08:46:18 +02:00
• 8cdc563258 charon-tkm: Reset stale nonce contexts Reto Buerki 2015-04-23 09:41:12 +02:00
• a8ca50e635 charon-tkm: Drop unneeded nonceg get_id function Reto Buerki 2015-04-23 10:06:49 +02:00
• 5460098cce charon-tkm: Remove ESA nonce mappings from chunk map Adrian-Ken Rueegsegger 2015-04-22 16:37:23 +02:00
• a0cf92a650 charon-tkm: Drop obsolete TKM_LIMIT define Reto Buerki 2015-04-22 15:52:43 +02:00
• 2783bd17a4 charon-tkm: Select other ESA if any is present upon deletion Adrian-Ken Rueegsegger 2015-04-08 18:56:23 +02:00
• c7ce0d96cd charon-tkm: Add get_other_esa_id function to TKM kernel SAD Adrian-Ken Rueegsegger 2015-04-08 18:54:54 +02:00
• ded14df603 charon-tkm: Only skip creation of first child SA Adrian-Ken Rueegsegger 2015-04-08 18:11:20 +02:00
• 8262be3cdc Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alert Adrian-Ken Rueegsegger 2015-04-08 18:06:51 +02:00
• 9ae6b507b9 charon-tkm: Fix SAD insertion when adding ESA Adrian-Ken Rueegsegger 2015-04-08 19:52:44 +02:00
• 17d3435693 vici: Default to certificate subject for identity Timo Teräs 2015-04-29 18:13:19 +03:00
• acbdf8c806 swanctl: Implement monitoring of IKE_SA and CHILD_SA changes Timo Teräs 2015-04-29 18:13:18 +03:00
• a7e4a2d6c2 vici: Add support for ike_sa and child_sa updown notifications Timo Teräs 2015-04-29 18:13:17 +03:00
• 8d96f90a79 vici: Add function to test if an event should be generated Timo Teräs 2015-04-29 18:13:16 +03:00
• ea79cd6ade swanctl: Add missing unit in install-time log Romain Francoise 2015-05-02 21:10:56 +02:00
• f5db98c038 init: Don't build/install legacy systemd service if charon isn't built Romain Francoise 2015-05-01 22:24:38 +02:00
• b821575093 crypt-burn: free() associated data after test Martin Willi 2015-05-04 13:24:33 +02:00
• 362e87e3e0 testing: Updated carol's certificate from research CA and dave's certificate from sales CA Andreas Steffen 2015-04-26 16:52:06 +02:00
• d04e47a9eb testing: Wait for DH crypto tests to complete Andreas Steffen 2015-04-26 11:51:49 +02:00
• 79b5a33c11 imv_policy_manager: Added capability to execute an allow or block shell command string Andreas Steffen 2015-04-26 10:55:24 +02:00
• ce354443bf testing: Migration of KVM framework to Linux 4.x kernel Andreas Steffen 2015-04-25 18:05:00 +02:00
• 17a2e00a31 Version bump to 5.3.1dr1 Andreas Steffen 2015-04-24 11:35:42 +02:00
• c1c6506391 Fixed PB-TNC directionality debug message Andreas Steffen 2015-04-24 11:16:16 +02:00
• c5a41c9162 ike-vendor: Add some Microsoft vendor IDs Tobias Brunner 2015-04-21 15:29:46 +02:00
• 1f3dbb1b67 apidoc: Fix rebuild in out-of-tree builds Tobias Brunner 2015-04-20 17:40:52 +02:00
• e4d2c9f187 leak-detective: Use passed callback to report leaks Tobias Brunner 2015-04-20 11:19:52 +02:00
• f9342fac8f openssl: Don't refer to EVP_des_ecb() if OpenSSL is built without DES support Tobias Brunner 2015-04-17 17:34:22 +02:00
• bef227c580 apidoc: Fix make target dependency find precedence Martin Willi 2015-04-16 17:10:42 +02:00
• d49330a9a8 Merge branch 'utils-split' Martin Willi 2015-04-16 16:50:27 +02:00
• 882c993b89 apidoc: Conditionally run doxygen if any header/Markdown files have changed Martin Willi 2015-04-16 14:37:16 +02:00
• 377f13f794 apidoc: Set QUIET to YES, suppressing any parsing/generating status output Martin Willi 2015-04-16 13:19:59 +02:00