Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 2eef6b242b github: Use AWS-LC 1.61.1 for tests Tobias Brunner 2025-09-18 08:29:39 +02:00
• ac0272cad1 host: Don't try to resolve %any* keywords with mismatched address family Tobias Brunner 2025-09-15 15:56:26 +02:00
• e33dddffea github: Use latest SonarQube action Tobias Brunner 2025-09-15 17:46:03 +02:00
• 45f5a7a698 curl: Fix types enforced by compiler check in newer libcurl headers Tobias Brunner 2025-09-15 16:50:26 +02:00
• cfb5e46a98 Merge branch 'plugin-versions' Tobias Brunner 2025-08-22 16:46:10 +02:00
• c4b32aab04 plugin-loader: Check version of loaded plugins Tobias Brunner 2025-08-11 16:28:46 +02:00
• 5cab5672e7 Define plugin version in all existing plugins Tobias Brunner 2025-08-11 16:35:32 +02:00
• d087c349b4 plugin: Add macro to define plugin version and constructor Tobias Brunner 2025-08-11 16:28:14 +02:00
• 1b551a9bfd plugin-loader: Don't prevent dynamic linking in addition to static constructors Tobias Brunner 2025-08-11 15:55:03 +02:00
• e9fa338e23 pkcs11: Improve detection of already unwrapped CKA_EC_POINTs Tobias Brunner 2025-08-21 10:24:37 +02:00
• abadd47736 charon-cmd: Cache shared secret under identities if available Tobias Brunner 2025-08-11 15:37:51 +02:00
• d662a69d9d ike-sa-manager: Avoid deadlock due to race condition during shutdown Tobias Brunner 2025-08-11 14:24:16 +02:00
• 3e0123526f trap-manager: Migrate tracked IKE SA in case of redirect during IKE_AUTH Tobias Brunner 2025-08-11 10:33:00 +02:00
• ee668ae91e controller: Migrate tracked IKE SA in case of redirect during IKE_AUTH Tobias Brunner 2025-08-11 10:26:55 +02:00
• 3a9120373d ike-sa: Avoid reusing established IKE_SAs that got redirected Tobias Brunner 2025-08-07 11:56:25 +02:00
• 2f0a0fef3d vici: Fix indentation for some add_kv() calls Tobias Brunner 2025-08-21 15:53:40 +02:00
• a24dc2e9ad vici: Include configured local and remote ports in list-conns Mathias Aerts 2025-08-21 12:59:00 +02:00
• b36da850b5 github: Only run CI for latest commit in a branch, cancel old runs Tobias Brunner 2025-08-22 12:21:50 +02:00
• 7b90dc93c0 libipsec: Run unit tests with TESTS_PLUGINS if specified Tobias Brunner 2025-08-22 12:11:11 +02:00
• 9da68ec9f5 libtls: Fix double-free when enumerating private keys Tobias Brunner 2025-08-22 11:46:52 +02:00
• dcb53e076b testing: Disable deprecated features in Botan Tobias Brunner 2025-08-22 08:34:01 +02:00
• 8139256aae botan: Replace calls to deprecated botan_privkey|pubkey_export() Tobias Brunner 2025-05-12 16:14:17 +02:00
• 5e4ff88849 github: Use OpenSSL 3.5.2 for tests Tobias Brunner 2025-08-08 10:28:06 +02:00
• d973106eed github: Use AWS-LC 1.58.1 for tests Tobias Brunner 2025-07-28 10:30:02 +02:00
• 052a939553 openssl: Add support for Ed25519 via AWS-LC Tobias Brunner 2025-08-08 17:17:12 +02:00
• 4096a911a0 github: Check active transforms against reference files Tobias Brunner 2025-08-08 11:49:48 +02:00
• 545eb2416a unit-tests: Add option to collect active crypto transforms Tobias Brunner 2025-08-08 11:10:29 +02:00
• 4c85b9d21b credential-factory: Avoid deadlock during unit tests Tobias Brunner 2025-08-04 10:16:31 +02:00
• 135ed6aada openssl: Simplify wrapping private key objects Tobias Brunner 2025-07-24 16:03:15 +02:00
• 0391450376 openssl: Support EdDSA keys in PKCS#12 containers Tobias Brunner 2025-07-24 15:52:37 +02:00
• f02033664e vici: Add support for P-CSCF server attributes Tobias Brunner 2025-07-11 08:04:26 +02:00
• ea05033319 eap-authenticator: Assume IKE identity as EAP-Identity if client doesn't send one Tobias Brunner 2025-07-14 18:13:04 +02:00
• 2560146204 github: Use provided actions for SonarQube installation and scan Tobias Brunner 2025-08-04 16:28:42 +02:00
• ff06159099 certexpire: Double size of internal buffer for identities Tobias Brunner 2025-07-23 17:10:31 +02:00
• ae2e0b6cf2 whitelist: Double the length of the id field in the messages seantywork 2025-07-17 11:29:31 +00:00
• 6c813ddc13 Use wolfSSL 5.8.2 for tests Tobias Brunner 2025-07-19 12:11:29 +02:00
• 011c346b00 wolfssl: Store RNG on object for curve25519 Tobias Brunner 2025-07-19 12:10:25 +02:00
• 1b62e88980 ml: Disable versioning for shared object Rob Shearman 2025-07-14 12:14:57 +01:00
• 58c567da74 Merge branch 'whitelist-watcher' Tobias Brunner 2025-07-18 16:16:17 +02:00
• 85ebf6abd4 whitelist: Add error handling to socket reads and fix a memory leak Tobias Brunner 2025-07-18 12:07:45 +02:00
• 412231eecd whitelist: Use a watcher for control socket reading rather than blocking Rob Shearman 2022-06-01 19:41:08 +01:00
• e98ea89d99 nm: Version bump to 1.6.3 Tobias Brunner 2025-07-14 11:01:14 +02:00
• 23eb1e0945 Version bump to 6.0.2 Andreas Steffen 2025-07-13 09:56:49 +02:00
• 4c54550352 testing: Use alternative approach for retransmits in ikev1/dpd-restart scenario Tobias Brunner 2025-07-11 11:45:37 +02:00
• bab415ec0a child-cfg: Actually force narrowing TS in transport mode only as initiator Tobias Brunner 2025-07-11 08:50:30 +02:00
• 43b805b2da openssl: Don't allocate salt if PRF/hash is unknown Tobias Brunner 2025-07-11 11:42:47 +02:00
• 2c32412594 github: Shorten name for crypto-plugin job and reverse matrix arguments Tobias Brunner 2025-07-10 19:07:13 +02:00
• 2dbeecfc02 openssl: Fix testing KDF_PRF in the constructor with OpenSSL 3.5.1 Tobias Brunner 2025-07-10 18:11:19 +02:00
• a8c2d125f1 Doxyfile: Don't hide set_seed() method Tobias Brunner 2025-07-08 13:13:06 +02:00
• f88d824114 Fixed some typos, courtesy of codespell Tobias Brunner 2025-07-08 10:54:49 +02:00
• bd65a21ce0 Version bump to 6.0.2rc1 Andreas Steffen 2025-07-07 10:57:25 +02:00
• 85c6473a5e NEWS: Add news for 6.0.2 Tobias Brunner 2025-07-07 10:31:56 +02:00
• 36f7c98f4e github: Use AWS-LC 1.55.0 for tests Tobias Brunner 2025-07-01 08:32:46 +02:00
• b46960d80c github: Use OpenSSL 3.5.1 for tests Tobias Brunner 2025-07-01 14:16:49 +02:00
• a339468c93 vici: Allow backlog size configuration via compile option Thomas Egerer 2025-07-02 12:46:30 +02:00
• 9eb5fcd6b6 github: Make sure at least one run with the same content is not skipped Tobias Brunner 2025-07-07 11:55:01 +02:00
• 1f42640c43 Version bump to 6.0.2dr3 Andreas Steffen 2025-07-03 11:43:53 +02:00
• 979c57fc30 nm: Don't set DL_LIBS to 'none required' in configure script orbea 2024-03-05 15:46:30 -08:00
• a666944e65 Merge branch 'android-http-proxy' Tobias Brunner 2025-06-27 09:13:38 +02:00
• bd4cee82ac android: New release after adding HTTP proxy configuration Tobias Brunner 2025-06-06 11:11:34 +02:00
• dbcba117ae android: Apply proxy server setting when creating TUN device Tobias Brunner 2025-06-05 16:34:52 +02:00
• b944159fcf android: Avoid proxy settings in the internal fetcher Tobias Brunner 2025-06-05 16:31:16 +02:00
• c7307ccc52 android: Allow setting proxy settings in managed profiles Tobias Brunner 2025-06-05 16:13:45 +02:00
• 0f2cd032e1 android: Import proxy server settings Tobias Brunner 2025-06-05 16:10:21 +02:00
• c80819c0ad android: Make proxy server configurable Tobias Brunner 2025-06-05 16:09:50 +02:00
• a7cb2fcbf6 android: Add properties to VPN profiles for proxy server configuration Tobias Brunner 2025-06-05 15:15:04 +02:00
• 059c70e556 android: Don't mention IKEv1 and L2TP in app description Tobias Brunner 2025-06-02 14:58:36 +02:00
• 4143e47462 android: Update dependencies Tobias Brunner 2025-06-02 14:55:19 +02:00
• a153626af7 identification: Clarify that ID_USER_FQDN is just an alias for ID_RFC822_ADDR Tobias Brunner 2025-06-16 09:28:40 +02:00
• e58ef258b5 swanctl: Document that IP-TFS mode is subject to mode negotiation Tobias Brunner 2025-06-06 14:19:09 +02:00
• 9a6aa2530e testing: Make sure ML-KEM scenarios use our ml plugin Tobias Brunner 2025-06-06 11:17:38 +02:00
• faf7ad2331 Version bump to 6.0.2dr2 Andreas Steffen 2025-06-05 13:43:21 +02:00
• f9985d72e4 testing: soup plugin removed from test environment Andreas Steffen 2025-06-05 13:42:41 +02:00
• 2fa8f4a90f Version bump to 6.0.2dr1 Andreas Steffen 2025-06-04 19:45:05 +02:00
• b39311e19e Merge branch 'libsoup3' Tobias Brunner 2025-06-04 19:09:33 +02:00
• b8108a4c3c github: Use libsoup 3 for tests Tobias Brunner 2025-06-04 18:07:35 +02:00
• 9dbb15dea9 leak-detective: Remove whitelisted libsoup2.x functions Tobias Brunner 2025-06-04 17:51:55 +02:00
• 6ddabf52d5 soup: Port to libsoup 3 Mike Gorse 2025-06-03 16:13:41 -05:00
• e864b8a8b1 fetcher: Remove unused FETCH_HTTP_VERSION_1_0 option Tobias Brunner 2025-06-03 17:37:24 +02:00
• 82adb5ce0f unit-tests: Serial number tests depend on X.509 certificate parsing Tobias Brunner 2025-06-04 17:14:08 +02:00
• 71f1091129 wolfssl: Fix build if wolfSSL was built in OpenSSL-compat mode Tobias Brunner 2025-06-04 18:25:22 +02:00
• 3d426cbfee Merge branch 'wolfssl-fips' Tobias Brunner 2025-06-02 11:31:03 +02:00
• f38bb91654 wolfssl: Unlock keys if necessary when using FIPS module Juliusz Sosinowicz 2025-04-23 16:32:52 +02:00
• 85eb5c7812 wolfssl: Properly initialize ECC private key object Juliusz Sosinowicz 2025-04-23 15:56:09 +02:00
• 879e3ce05a wolfssl: Set a dummy key when testing KDF implementations Tobias Brunner 2025-02-21 08:09:31 +01:00
• 757e00c0ae test-vectors: Remove HMAC PRF test vectors with key size 4 Tobias Brunner 2025-02-18 14:24:08 +01:00
• d0292a6f50 wolfssl: Include settings.h in case WOLFSSL_USER_SETTINGS is defined Tobias Brunner 2024-11-29 08:45:53 +01:00
• 217049606b wolfssl: Use consistent defines for ECC public/private key loading Tobias Brunner 2024-11-28 09:28:28 +01:00
• 7bfd81d78a wolfssl: Call wc_SetSeed_Cb() as required for FIPS-mode Tobias Brunner 2024-11-26 10:19:33 +01:00
• 3a5f203958 Merge branch 'iptfs' Tobias Brunner 2025-05-28 16:48:42 +02:00
• dc4fef146a testing: Add ikev2/net2net-iptfs scenario Tobias Brunner 2025-05-16 10:28:16 +02:00
• b4a0eb3603 testing: Add config for Linux 6.14 Tobias Brunner 2025-05-16 10:22:20 +02:00
• a7a3c4a22a conf: Document global IP-TFS settings Tobias Brunner 2025-05-15 12:58:12 +02:00
• 46525cdc4f child-create: Negotiate IP-TFS mode if configured Tobias Brunner 2025-05-15 12:57:38 +02:00
• f5f7424e1d notify-payload: Add notify type for IP-TFS/AGGFRAG Tobias Brunner 2025-05-15 10:37:01 +02:00
• 6372b2890f kernel-netlink: Support IPTFS mode and attributes Tobias Brunner 2025-05-15 09:22:17 +02:00
• f32773b3a8 child-sa: Allow disabling fragmenting packets across AGGFRAG payloads Tobias Brunner 2025-05-15 12:56:00 +02:00
• 33db7a200f kernel-ipsec: Add flag to disable sending fragments across AGGFRAG payloads Tobias Brunner 2025-05-15 09:20:52 +02:00
• 1afc76dd56 vici: Make IP-TFS mode configurable Tobias Brunner 2025-05-14 10:13:44 +02:00
• e175abaf89 include: Add XFRM mode and attributes for IP-TFS Tobias Brunner 2025-05-14 10:16:55 +02:00