Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• a4549e5525 iv-gen: Add a generic constructor to create an IV gen from an algorithm Martin Willi 2015-03-31 14:58:17 +02:00
• c2906c8f21 openssl: Don't pre-initialize OpenSSL HMAC with an empty key Martin Willi 2015-03-30 10:25:41 +02:00
• 7394ad92ae thread: Remove unneeded thread startup synchronization Martin Willi 2015-03-27 20:16:58 +01:00
• 101d67440f libsimaka: Link against Winsock2 on Windows Martin Willi 2015-03-30 11:24:47 +02:00
• 280f752c56 fips-prf: Remove superfluous <arpa/inet.h> include Martin Willi 2015-03-30 11:23:06 +02:00
• dad99b5eea kernel-netlink: Fix GCC error about uninitialized variable use Martin Willi 2015-04-08 11:13:04 +02:00
• 12def59617 asn1: Undefine TIME_UTC, which is used by C11 Martin Willi 2015-04-08 08:47:31 +02:00
• ff96400d13 Wipe auxiliary key store Andreas Steffen 2015-03-28 10:44:23 +01:00
• 9310d4250a crypto-tester: Explicitly exclude FIPS-PRF from append mode tests Martin Willi 2015-03-28 08:38:52 +01:00
• b234fdfce8 fips-prf: Fail when trying to use append mode on FIPS-PRF Martin Willi 2015-03-28 08:36:35 +01:00
• b07fb365ef Added PB-TNC test options to strongswan.conf man page Andreas Steffen 2015-03-27 21:05:00 +01:00
• 883c11caa0 Added tnc/tnccs-20-fail-init and tnc/tnccs-20-fail-resp scenarios Andreas Steffen 2015-03-27 20:56:34 +01:00
• ef5f96366e Version bump to 5.3.0 Andreas Steffen 2015-03-27 20:55:48 +01:00
• 619e0b4235 Fixed PB-TNC error handling Andreas Steffen 2015-03-27 14:39:56 +01:00
• 193e057509 Added configurations for 3.18 and 3.19 KMV guest kernels Andreas Steffen 2015-03-27 11:36:34 +01:00
• 8b36323b8c Fixed strongswan.conf man page entry of imc-attestation Andreas Steffen 2015-03-27 11:14:49 +01:00
• 85aa509e84 Added tnc/tnccs-20-pt-tls scenario Andreas Steffen 2015-03-27 10:56:50 +01:00
• bc1876bc9a cmac: Reset state before doing set_key() Martin Willi 2015-03-27 16:07:53 +01:00
• 4075e9d7a4 af-alg: Reset hmac/xcbc state before doing set_key() Martin Willi 2015-03-27 16:06:21 +01:00
• eedd92b53b xcbc: Reset XCBC state in set_key() Martin Willi 2015-03-27 15:51:52 +01:00
• bfb029c82a hmac: Reset the underlying hasher before doing set_key() with longer keys Martin Willi 2015-03-27 15:48:29 +01:00
• 58dda5d6ab crypto-tester: Test set_key() after a doing a partial append on prf/signers Martin Willi 2015-03-27 15:46:24 +01:00
• c063b9cfe9 stroke: Properly parse bliss key strength in public key constraint Tobias Brunner 2015-03-25 13:27:15 +01:00
• 328db935bb eap-tnc: Free eap-tnc object if IKE_SA not found to get IPs Tobias Brunner 2015-03-25 13:24:37 +01:00
• 97c7dc6d14 tnccs-20: Fix error handling in build() Tobias Brunner 2015-03-25 13:23:14 +01:00
• f4c37166f9 android: Add messages/ita directory to tnccs-20 plugin Tobias Brunner 2015-03-25 11:52:41 +01:00
• 48bae7b2ba android: Sync libstrongswan Makefile.am and Android.mk Tobias Brunner 2015-03-25 11:40:04 +01:00
• 4a5d958bc5 libtnccs: Set apidoc category to libtnccs and move plugins Tobias Brunner 2015-03-25 11:23:26 +01:00
• 48087e0944 libtnccs: Fix apidoc category for split IF-TNCCS 2.0 header files Tobias Brunner 2015-03-25 11:21:00 +01:00
• a2ec3b0546 Fixed some typos, courtesy of codespell Tobias Brunner 2015-03-25 10:59:36 +01:00
• a3c2edb19c kernel-netlink: Copy current usage stats to new SA in update_sa() Tobias Brunner 2015-03-23 18:37:48 +01:00
• 70728eb1b6 child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAs Tobias Brunner 2015-03-24 18:36:49 +01:00
• 66147ef670 ikev1: Inverse check when applying received KE value during Quick Mode Martin Willi 2015-03-24 09:37:38 +01:00
• cf9befcba4 Version bump to 5.3.0rc1 Andreas Steffen 2015-03-23 23:15:31 +01:00
• be04f90815 testing: added tnc/tnccs-20-mutual scenario Andreas Steffen 2015-03-23 23:01:13 +01:00
• 7b4a96b2f7 Implemented PB-TNC mutual half-duplex protocol Andreas Steffen 2015-03-22 01:07:31 +01:00
• c6aed8aa21 Optionally announce PB-TNC mutual protocol capability Andreas Steffen 2015-03-21 12:30:24 +01:00
• 80322d2cee Split IF-TNCCS 2.0 protocol processing into separate TNC client and server handlers Andreas Steffen 2015-03-20 22:01:46 +01:00
• e64ddb5daf Merge branch 'dh-checks' Martin Willi 2015-03-23 17:54:20 +01:00
• 41fc94c924 encoding: Remove DH public value verification from KE payload Martin Willi 2015-03-23 14:34:11 +01:00
• 0356089d0f diffie-hellman: Verify public DH values in backends Martin Willi 2015-03-23 14:32:11 +01:00
• a777155ffe diffie-hellman: Add a bool return value to set_other_public_value() Martin Willi 2015-03-23 13:09:32 +01:00
• 42431690e0 diffie-hellman: Add a bool return value to get_my_public_value() Martin Willi 2015-03-23 11:37:27 +01:00
• 8a7dbf3c2a libimcv: Allow pts_t.set_peer_public_value() to fail Martin Willi 2015-03-23 11:28:57 +01:00
• 83cda57e2d libimcv: Allow pts_t.get_my_public_value() to fail Martin Willi 2015-03-23 11:25:37 +01:00
• 520d58e010 encoding: Allow ke_payload_create_from_diffie_hellman() to fail Martin Willi 2015-03-23 11:10:40 +01:00
• bace1d6479 diffie-hellman: Use bool instead of status_t as get_shared_secret() return value Martin Willi 2015-03-23 10:54:24 +01:00
• 4909612c3b load-tester: Migrate NULL DH implementation to INIT/METHOD macros Martin Willi 2015-03-23 10:44:55 +01:00
• a7172ddaff ikev1: Make sure SPIs in an IKEv1 DELETE payload match the current SA Tobias Brunner 2015-03-23 10:58:30 +01:00
• 8a0cc3f362 encoding: Add getter for IKE SPIs in IKEv1 DELETE payloads Tobias Brunner 2015-03-23 10:53:58 +01:00
• 2872f77829 pki: Choose default digest based on the signature key Tobias Brunner 2015-03-17 14:40:02 +01:00
• ae0604f583 pki: Use SHA-256 as default for signatures Tobias Brunner 2015-03-16 18:25:22 +01:00
• 7fa03b308c trap-manager: Add option to ignore traffic selectors from acquire events Tobias Brunner 2015-03-12 11:50:20 +01:00
• cb461de2a2 unit-tests: Fix settings test after merging multi-line strings Tobias Brunner 2015-03-23 10:46:32 +01:00
• d143e7b04b swanctl: Append /ESN to proposal for a CHILD_SA using Extended Sequence Numbers Martin Willi 2015-03-23 10:12:06 +01:00
• e284a861b8 unit-tests: Depend on SHA1/SHA256 features for mgf1 test cases Martin Willi 2015-03-23 09:53:34 +01:00
• a83d1245d8 man: More accurately describe features of the new parser in ipsec.conf(5) Tobias Brunner 2015-03-19 18:34:26 +01:00
• d148c7ab6c settings: Merge quoted strings that span multiple lines Tobias Brunner 2015-03-19 18:34:02 +01:00
• 79ebdc0788 starter: Merge quoted strings that span multiple lines Tobias Brunner 2015-03-19 18:33:19 +01:00
• 2ed5f5693d encoding: Don't verify length of IKEv1 KE payloads Tobias Brunner 2015-03-20 16:32:56 +01:00
• d2f4345b03 charon-systemd: Optionally load plugin list from charon-systemd.load Tobias Brunner 2015-03-19 16:19:24 +01:00
• 945fdeb918 apidoc: Limit INPUT to src subdirectory and README.md Martin Willi 2015-03-19 12:17:03 +01:00
• b546a98e0a utils: Fix enum_flags_to_string parameter name to match Doxygen description Martin Willi 2015-03-19 12:14:30 +01:00
• fd6cc7f243 attr-sql: Rename sql_attribute_t to attr_sql_provider_t Martin Willi 2015-03-19 11:24:31 +01:00
• 31be582399 ikev1: Adopt virtual IPs on new IKE_SA during re-authentication Tobias Brunner 2015-02-20 16:57:13 +01:00
• 5c6a62ceb6 ikev1: Mark rekeyed CHILD_SAs as INSTALLED Tobias Brunner 2015-03-11 15:48:51 +01:00
• 7d02f8dbf4 mem-pool: Remove entries without online or offline leases Tobias Brunner 2015-03-11 11:27:38 +01:00
• f30be6a92f kernel-handler: Log new endpoint if NAT mapping changed Tobias Brunner 2015-03-17 13:00:54 +01:00
• 46188b0eb0 child-sa: Remove policies before states to avoid acquire events for untrapped policies Tobias Brunner 2015-03-17 09:58:00 +01:00
• c5f4e7c69e Merge branch 'vici-python' Martin Willi 2015-03-18 15:03:28 +01:00
• 2185c29b65 NEWS: Introduce vici Python Egg Martin Willi 2015-03-06 13:33:13 +01:00
• 75a8457922 travis: Install pip to install pytest in "all" tests Martin Willi 2015-03-18 14:28:17 +01:00
• 2e74aa0a91 vici: Add support for python 3 Björn Schuberg 2015-03-09 12:28:02 +01:00
• c7e3c5943f vici: Execute python tests during "check" if py.test is available Martin Willi 2015-03-11 10:18:56 +01:00
• 07302b2f7c configure: Check optional py.test availability when building with python eggs Martin Willi 2015-03-11 10:01:40 +01:00
• c193b5947a vici: Add test of Packet layer in python library Björn Schuberg 2015-03-09 11:20:02 +01:00
• 9b97029a5f vici: Add test of Message (de)serialization in python library Björn Schuberg 2015-03-09 11:12:30 +01:00
• b5d17e55d7 vici: Evaluate Python streamed command results, and raise CommandException Martin Willi 2015-03-09 12:16:10 +01:00
• 90c5b48c96 vici: Catch Python GeneratorExit to properly cancel streamed event iteration Martin Willi 2015-03-09 12:06:38 +01:00
• 288b654173 vici: Fall back to heap buffer when vararg printing on stack fails Martin Willi 2015-03-06 10:54:34 +01:00
• a47e431ba9 vici: Return a Python generator instead of a list for streamed responses Martin Willi 2015-03-02 15:25:55 +01:00
• 90e16837ba vici: Raise a Python CommandException instead of returning a CommandResult Martin Willi 2015-03-02 15:19:32 +01:00
• 871cffa141 vici: Add initial Python egg documentation to README Martin Willi 2015-02-27 15:37:40 +01:00
• 305023a27d vici: Use OrderedDict to handle vici responses in Python library Martin Willi 2015-02-27 14:30:34 +01:00
• 94bb26fae3 vici: Return authentication rounds with unique names Martin Willi 2015-02-27 14:28:47 +01:00
• d1ad65f7b2 vici: Rebuild ruby gem on source file changes Martin Willi 2015-02-27 14:05:12 +01:00
• fb8b119cfa vici: Use default Unix vici socket if none passed to ruby constructor Martin Willi 2015-02-27 14:03:35 +01:00
• 61fb10c8cf vici: Support non-Unix sockets for vici connections using Python Martin Willi 2015-02-27 13:59:23 +01:00
• 358793389a vici: Add python egg setuptools building and installation using easy_install Martin Willi 2015-02-25 16:20:10 +01:00
• 1e2ec9f96a vici: Generate a version specific setup.py for setuptools installation Martin Willi 2015-02-25 16:18:29 +01:00
• 2c8c52c4e2 vici: Include python package in distribution Martin Willi 2015-02-25 16:04:57 +01:00
• 374b3db191 configure: Add --enable-python-eggs and --with-pythoneggdir options Martin Willi 2015-02-25 14:34:27 +01:00
• 163e15a571 vici: Add python package MIT license Björn Schuberg 2015-02-16 00:17:00 +01:00
• b269c1a89a vici: Expose Session as a top-level symbol in python package Björn Schuberg 2015-02-15 19:18:52 +01:00
• 6a31a0f60c vici: Introduce main API Session class in python package Björn Schuberg 2015-02-15 16:13:44 +01:00
• 8c089cddef vici: Add a python vici command execution handler Björn Schuberg 2015-02-14 15:53:25 +01:00
• b26e142863 vici: Add vici python protocol handler Björn Schuberg 2015-02-14 12:54:31 +01:00
• c7bb1dc3d9 Merge branch 'swanctl-pkcs12' Martin Willi 2015-03-18 13:36:50 +01:00
• 1e366429fd swanctl: Cache entered PKCS#12 decryption secret Martin Willi 2015-03-11 16:52:54 +01:00
• 54cdf847cc swanctl: Support loading PKCS#12 containers from a pkcs12 swanctl directory Martin Willi 2015-03-11 16:23:56 +01:00