Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0da97f5060 child-sa: Delegate reqid allocation to the kernel interface Martin Willi 2014-10-21 11:36:18 +02:00
• cc08ce83f0 kernel-interface: Add reqid allocation and release functions Martin Willi 2014-11-12 17:22:45 +01:00
• 6d4649573e traffic-selector: Add a hash() method Martin Willi 2014-10-23 11:19:03 +02:00
• 5499473c33 child-sa: Sort traffic selectors after adding CHILD_SA policies Martin Willi 2015-02-19 18:03:08 +01:00
• fc978f192f unit-tests: Add an initial set of traffic selector unit tests Martin Willi 2015-02-19 18:02:25 +01:00
• 373a147fed traffic-selector: Add a compare function to sort traffic selectors Martin Willi 2015-02-19 18:01:38 +01:00
• 698ed656f7 child-sa: Remove the obsolete update logic Martin Willi 2014-10-17 15:44:06 +02:00
• d05d85fe65 kernel-interface: Pass full list of traffic selectors to add_sa() Martin Willi 2014-10-15 18:03:31 +02:00
• fd9417607c libipsec: Remove unused src/dst_ts parameters from ipsec_sa_mgr_t.add_sa() Martin Willi 2014-10-15 18:02:46 +02:00
• 6ad787ca54 kernel-pfkey: Don't update during add_sa(), but delete SPI allocation state Martin Willi 2014-10-17 14:31:32 +02:00
• 2a1c9e20bd kernel-interface: Remove reqid parameter from get_spi/get_cpi() methods Martin Willi 2014-10-15 17:22:55 +02:00
• 3e779ff555 libipsec: Remove unused reqid parameter from ipsec_sa_mgr_t.get_spi() Martin Willi 2014-10-15 17:19:56 +02:00
• 970378c557 libtls: Don't send TLS close notifies in EAP after application succeeds Martin Willi 2015-02-05 09:13:57 +01:00
• 875f7be5fc ha: Perform child rekeying outside of CHILD_SA enumerator Thomas Egerer 2015-02-04 12:47:03 +01:00
• 5cc0b23886 mem-pool: Document reassign_online option Tobias Brunner 2015-02-12 12:17:48 +01:00
• aaf9911aeb man: Document IKEv2 fragmentation in ipsec.conf(5) Tobias Brunner 2015-02-10 18:29:41 +01:00
• 482810141c configure: Load SQL backends after crypto plugins Tobias Brunner 2015-02-10 16:08:09 +01:00
• c6bc167c0b stroke: Double the stroke message string buffer size Martin Willi 2015-02-06 16:43:33 +01:00
• eaa964b34e starter: Fail sending stroke message if a string exceeds the buffer size Martin Willi 2015-02-06 16:37:09 +01:00
• b851f0a105 x509: Fix public key reference leak if authority key identifier does not match Martin Willi 2015-02-06 13:58:58 +01:00
• c8992ea6d2 vici: Fix ruby gem author email Martin Willi 2015-01-22 15:00:45 +01:00
• ecf605c6e1 trusted_enumerate requires an additional argument Andreas Steffen 2015-01-21 23:54:33 +01:00
• 96df0a0ebd vici: Fix README example encoding element type values, off by one Martin Willi 2015-01-21 09:31:24 +01:00
• 780bf2b8e9 libtls: Check for CHANGE_CIPHER_SPEC type only if upper layer returns NEED_MORE Martin Willi 2015-01-08 11:06:45 +01:00
• aa71c19e5c starter: Fix mark_out.mask in starter_cmp_conn() Maks Naumov 2015-01-10 00:44:36 +02:00
• 8284e56d5b _updown: Remove obsolete man pages Tobias Brunner 2015-01-05 13:44:16 +01:00
• 5028644943 Updated RFC3779 certificates Andreas Steffen 2014-12-28 12:53:16 +01:00
• e9878d72db Version bump to 5.2.2 Andreas Steffen 2014-12-19 10:03:54 +01:00
• ee3b135687 unit-tests: Adapted to coverity fixes Andreas Steffen 2014-12-18 15:51:13 +01:00
• 6139c8e524 Fixed bad bit shift and sign extension errors Andreas Steffen 2014-12-17 18:16:26 +01:00
• fd19feefa4 bliss: Remove unnecessary cast to double Tobias Brunner 2014-12-15 18:55:03 +01:00
• 078fe7aae6 bliss: Log type if unsupported Tobias Brunner 2014-12-15 18:54:59 +01:00
• a8e82ace8a bliss: Make sure sampler exists after checking for it earlier Tobias Brunner 2014-12-15 18:30:31 +01:00
• 027c19b097 pts: Do not override status with SUCCESS if length is invalid Tobias Brunner 2014-12-15 18:18:40 +01:00
• 919449a3f1 NEWS: Added info about CVE-2014-9221 Tobias Brunner 2014-12-18 16:15:03 +01:00
• 691d00f166 ikev2: Only touch the DH object if we have a matching proposal Tobias Brunner 2014-12-15 14:25:04 +01:00
• e13ef5c434 crypto: Define MODP_CUSTOM outside of IKE DH range Tobias Brunner 2014-12-01 17:21:59 +01:00
• 6683cf6a5a pki: Document correct output formats for --pkcs12 --export Tobias Brunner 2014-12-19 16:30:47 +01:00
• a6c0dec0e5 pki: Properly clean up if output format for --pkcs12 is wrong Tobias Brunner 2014-12-19 16:30:10 +01:00
• 8edea13a5a kernel-netlink: Add missing documentation for two options Tobias Brunner 2014-12-19 15:36:01 +01:00
• 55e7a0cafb Merge branch 'osx-app' Martin Willi 2014-12-18 09:50:50 +01:00
• 7f82a8f34b osx: Update the README with App related bits Martin Willi 2014-12-16 17:14:38 +01:00
• dacd667c84 osx: Initial import of the Objective-C App graphical user interface Martin Willi 2014-12-16 17:13:44 +01:00
• 04337fed02 apple: Redefine some additional clashing Mach types Martin Willi 2014-12-16 16:55:29 +01:00
• 6fa203b8d4 kernel-pfroute: If a new interface appears, slightly delay address enumeration Martin Willi 2014-10-24 15:21:11 +02:00
• 1c6188a0c2 charon-xpc: Add a work-around to trigger IP address add events after boot Martin Willi 2014-12-16 16:58:17 +01:00
• f9da7ef868 mgf1: Use correct Doxygen groups Tobias Brunner 2014-12-15 17:20:13 +01:00
• a876018e3e bliss: Fix Doxygen comments Tobias Brunner 2014-12-15 17:19:44 +01:00
• 3000f6aada Fixed some typos, courtesy of codespell Tobias Brunner 2014-12-15 17:11:14 +01:00
• d21b01462e kernel-pfkey: Fix replay window size on FreeBSD and Mac OS X Tobias Brunner 2014-12-04 16:21:45 +01:00
• ac0cb2d363 Updated BLISS CA certificate in ikev2/rw-ntru-bliss scenario Andreas Steffen 2014-12-12 13:55:03 +01:00
• 9b4e411c50 Also initialize s_sign Andreas Steffen 2014-12-12 13:24:11 +01:00
• 58cacf0a74 pem: Handle BER indefinite length encoding as binary ASN.1 Martin Willi 2014-12-09 14:19:39 +01:00
• 3a26566fa9 pki: Add command to export certificates and keys from PKCS#12 containers Tobias Brunner 2014-12-09 12:54:03 +01:00
• c20f962732 pki: Reformat PKCS#12 output and add an index for each certificate/key Tobias Brunner 2014-12-09 11:40:12 +01:00
• 374b569ed0 pki: Add simple PKCS#12 display command Tobias Brunner 2014-12-05 10:41:07 +01:00
• a23d3073e3 pki: Load hmac plugin which is required to decrypt PKCS#12 containers Tobias Brunner 2014-12-05 10:39:03 +01:00
• ec846f9e52 pki: Cache entered secrets in case they are needed more than once Tobias Brunner 2014-12-05 10:38:30 +01:00
• 75dd984e9e ike: Allow creation of internally used payloads Tobias Brunner 2014-12-12 12:39:44 +01:00
• 3e654a13ee Cache only support fingerprint types Andreas Steffen 2014-12-12 13:08:40 +01:00
• 8aaf36c6e3 Fix ambiguities and gcc compiler warning Andreas Steffen 2014-12-12 12:48:23 +01:00
• 6e4620adfb apple: Use precancelable poll() to wrap accept/recvmsg calls Martin Willi 2014-12-12 12:05:24 +01:00
• dce6f69546 Version bump to 5.2.2rc1 Andreas Steffen 2014-12-12 12:00:04 +01:00
• c44f481ae0 Updated BLISS scenario keys and certificates to new format Andreas Steffen 2014-12-12 08:25:45 +01:00
• 881cffb826 Use bitspender->get_bytes() method in ntru_trits Andreas Steffen 2014-12-11 22:30:29 +01:00
• 83447555a6 Use Huffman code in BLISS signature Andreas Steffen 2014-12-11 17:11:17 +01:00
• 9394e26426 Include design parameters in generated Huffman code files Andreas Steffen 2014-12-11 12:10:23 +01:00
• 700df23886 bliss: Fix monolithic build Tobias Brunner 2014-12-05 16:36:13 +01:00
• f55a03a2de bliss: Fix compilation warning with certain GCC versions Tobias Brunner 2014-12-05 16:37:10 +01:00
• 108e388580 swanctl: Fail loading a connection if loading a cacert constraint fails Martin Willi 2014-12-12 10:08:17 +01:00
• 6855b8b36b vici: Use silent builder destroy function in vici_free_req() Martin Willi 2014-12-12 10:07:31 +01:00
• c04ee43af7 vici: Add a destroy method to builder, allowing cancellation without error Martin Willi 2014-12-12 10:06:39 +01:00
• 971ef077ce eap-radius: Use the single-server legacy server options as fallback Martin Willi 2014-12-11 12:29:53 +01:00
• 443346f56a Pack private key arrays Andreas Steffen 2014-12-10 22:45:13 +01:00
• 48633b1844 dumm: Fix -Wformat warning in ruby extension Martin Willi 2014-12-10 14:26:14 +01:00
• df5b2ade59 Automatic generation of optimized Huffman codes Andreas Steffen 2014-12-09 07:48:51 +01:00
• 7442d2a208 unit-tests: added bliss_sampler test Andreas Steffen 2014-12-09 07:44:36 +01:00
• 03f2a52e9c Expanded bliss_bitpacker to 32 bits Andreas Steffen 2014-12-09 07:31:59 +01:00
• 30a90ccf74 NEWS: Add note about AH algorithm mapping Tobias Brunner 2014-12-05 15:06:31 +01:00
• 728f529c42 ikev1: Use same map for AH and ESP authentication algorithms Tobias Brunner 2014-11-24 17:28:27 +01:00
• 4141f01671 ikev1: Accept IPComp proposals with 4 octet long CPI values Tobias Brunner 2014-11-04 18:24:16 +01:00
• 42e0a317c6 ike: Only parse payloads valid for the current IKE version Tobias Brunner 2014-10-21 14:03:25 +02:00
• fac310a467 ike: Make check for known payloads depend on IKE version Tobias Brunner 2014-10-21 11:22:51 +02:00
• 7bd5548538 pkcs5: Add support for PBES2 encryption schemes other than 3DES Tobias Brunner 2014-10-17 10:16:19 +02:00
• 5743f6df2f asn1: Add OID for Blowfish CBC Tobias Brunner 2014-10-17 12:33:14 +02:00
• 0a5b60db20 diffie-hellman: Handle dh_exponent_ansi_x9_42 as a boolean setting Martin Willi 2014-12-05 13:48:51 +01:00
• 02df52fd2b unity: Only do narrowing of responder's TS if we received 0.0.0.0/0 Tobias Brunner 2014-10-16 16:16:48 +02:00
• bf5d0693ef id-payload: Enable multiple calls to get_ts() for subnet traffic selectors Tobias Brunner 2014-10-16 16:10:41 +02:00
• 7459f3a5ac ikev2: Fix handling of more than one hash-and-URL certificate payloads Tobias Brunner 2014-12-04 11:32:22 +01:00
• e61841a211 Merge branch 'wfp-drop-firewall' Martin Willi 2014-12-04 11:11:47 +01:00
• e1a448314f kernel-wfp: Install outbound ALE connect rules for IPsec Martin Willi 2014-11-28 09:39:40 +01:00
• a8142a17cf kernel-wfp: Install inbound ALE IP-in-IP filters Martin Willi 2014-11-27 19:19:09 +01:00
• 070461b70d kernel-wfp: Add missing IPsec sublayer GUIDs Martin Willi 2014-11-28 15:41:21 +01:00
• a21338a43e kernel-wfp: Define IPsec related ALE layers and callout GUIDs Martin Willi 2014-11-27 19:00:34 +01:00
• 4d48dfd6a3 kernel-wfp: Fix logging of MM/QM/EM NetEvent failures Martin Willi 2014-11-27 19:10:11 +01:00
• b164cc8e15 vici: Make sure to send/recv all requested bytes over socket Martin Willi 2014-11-19 14:20:47 +01:00
• dcae0a3935 updown: Inverse comment of VPN_LOGGING variable, as it is enabled by default Martin Willi 2014-12-02 15:02:41 +01:00
• 32d19652f1 Version bump to 5.2.2dr1 Andreas Steffen 2014-11-29 15:00:10 +01:00
• 9b01a061ec Increased check size du to INITIAL_CONTACT notify Andreas Steffen 2014-11-29 14:57:41 +01:00
• c02ebf1ecd Renewed expired certificates Andreas Steffen 2014-11-29 11:52:49 +01:00