Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• af37fac9a8 constraints: Add inhibitPolicyMapping tests Martin Willi 2014-10-14 14:56:46 +02:00
• 69232e2d3d constraints: Don't reject certificates with invalid certificate policies Martin Willi 2014-10-10 16:33:56 +02:00
• 885646acd3 constraints: Add certificate policy and policy mapping unit tests Martin Willi 2014-10-10 15:23:21 +02:00
• 34fed1538b Merge branch 'id-type-prefix' Martin Willi 2014-10-30 11:21:22 +01:00
• 045501d598 NEWS: Mention identity prefixes Martin Willi 2014-10-30 11:21:01 +01:00
• 9da2b19189 swanctl: Document identity type prefixes Martin Willi 2014-10-29 12:15:39 +01:00
• 9388bf1363 man: Document identification type prefixes in ipsec.conf(5) Martin Willi 2014-10-29 12:06:04 +01:00
• 6528338753 identification: Support custom types in string constructor prefixes Martin Willi 2014-10-29 11:53:03 +01:00
• c0da835a9f identification: Support prefixes in string constructors for an explicit type Martin Willi 2014-10-29 11:18:35 +01:00
• 46001e1131 unit-tests: Re-align identification_create_from_string() unit test table data Martin Willi 2014-10-29 11:12:38 +01:00
• 61e29aca0d threading: Support rwlock try_write_lock() on Windows Martin Willi 2014-10-22 11:24:51 +02:00
• 6a3f0467e4 threading: Add a more explicit rwlock try_write_lock() testing Martin Willi 2014-10-22 11:23:49 +02:00
• b089169752 message: Include encrypted fragment payload in payload (order) rules Tobias Brunner 2014-10-28 16:42:06 +01:00
• a9f87d118e cert-cache: Prevent that a cached issuer is freed too early Tobias Brunner 2014-10-24 11:14:51 +02:00
• e7c582e652 unit-tests: Fix internet checksum tests on big-endian systems Tobias Brunner 2014-10-22 19:43:22 +02:00
• eb218ff80b chunk: Fix internet checksum calculation on big-endian systems Tobias Brunner 2014-10-22 19:41:40 +02:00
• 4736ba0657 updown: Explicitly pass caller PATH to updown script Martin Willi 2014-10-22 14:50:09 +02:00
• 9e20fdbaf6 ip-packet: Fix length in IPv6 header of generated packets Tobias Brunner 2014-10-20 15:32:01 +02:00
• a521ef3b8e Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario Andreas Steffen 2014-10-18 14:05:53 +02:00
• 09b46cdb6a Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario Andreas Steffen 2014-10-18 14:05:18 +02:00
• 4b1b91913a Version bump to 5.2.1 Andreas Steffen 2014-10-18 12:12:17 +02:00
• 05b835c587 Remove unneeded get_count() method Andreas Steffen 2014-10-17 17:59:43 +02:00
• 1c2416013c Process TCG/PTS File Measurement attribute incrementally Andreas Steffen 2014-10-17 16:11:40 +02:00
• 82d2142f98 Exempt TCG/SEG attributes from unsupported case statement Andreas Steffen 2014-10-16 13:38:51 +02:00
• 08385de6e2 Request IF-M segmentation contract for TCG/PTS subtype Andreas Steffen 2014-10-16 07:49:14 +02:00
• cbb86a2df3 tls: Fix an invalid free on CBC encryption failure Martin Willi 2014-10-15 14:26:03 +02:00
• 867d04b72e tls: Fix a memory leak if AEAD encryption fails Martin Willi 2014-10-15 14:20:36 +02:00
• c0bf721357 tls: Check all bytes of the padding if they equal the padding length Martin Willi 2014-10-15 14:17:30 +02:00
• fdeda63df0 android: Fix PA-TNC construction based on data passed via JNI Tobias Brunner 2014-10-13 18:18:56 +02:00
• da241b6c75 libimcv: Add generic constructor for PA-TNC attributes Tobias Brunner 2014-10-13 18:17:30 +02:00
• c71e6820ab backtrace: Fix symbol lookup in dynamic symtab via libbfd Tobias Brunner 2014-10-14 17:26:48 +02:00
• 6de42cd323 swid-inventory: Remove unused variable end_of_tag Tobias Brunner 2014-10-14 17:10:59 +02:00
• f8dc376c77 swanctl: Fix man page build on FreeBSD Tobias Brunner 2014-10-14 16:46:07 +02:00
• 76dc329e47 thread: Test for pending cancellation requests before select()ing on OS X Martin Willi 2014-10-14 12:43:16 +02:00
• bdfbecb3e6 vici: Return default value for get_int() if message value is empty string Martin Willi 2014-10-14 12:13:32 +02:00
• 784916e28d process: Don't use the shells built-in echo in tests Martin Willi 2014-10-14 11:57:06 +02:00
• b16ea3415f process: Don't use absolute path names for true/false/cat in unit tests Martin Willi 2014-10-14 11:55:36 +02:00
• 4e37bdbf57 kernel-pfroute: Check for RTM_IFANNOUNCE availability Martin Willi 2014-10-14 11:40:43 +02:00
• 5b2d89b3c3 process: Include missing <signal.h> for raise(3) Martin Willi 2014-10-14 11:40:03 +02:00
• 9d75a28820 ike: Add IKEv2 in description of fragment_size option in strongswan.conf Tobias Brunner 2014-10-14 15:35:08 +02:00
• 15dee933de ip-packet: Fix removal of TFC padding for IPv6 Tobias Brunner 2014-10-14 14:05:48 +02:00
• 283229bcb7 vici: Add vici.gemspec.in and vici.rb to distribution Tobias Brunner 2014-10-14 11:07:32 +02:00
• 05a3f349a7 travis: Build-test updown and ext-auth plugins for Windows Martin Willi 2014-10-14 11:11:34 +02:00
• 3307de1f8d android: Implement get_contracts() method in IMC state object Tobias Brunner 2014-10-14 10:37:55 +02:00
• f4e6f89aa9 android: libpts does not exist anymore, don't attempt to load it Tobias Brunner 2014-10-14 10:12:02 +02:00
• bed09f2baf android: Update receive_message() to new imc_msg_t.receive() signature Tobias Brunner 2014-10-13 18:15:34 +02:00
• 668fbd4907 libimcv: Add fallback if IPSEC_SCRIPT is not defined Tobias Brunner 2014-10-13 18:10:18 +02:00
• ba0355c4ae libimcv: Updated Android.mk to latest Makefile.am Tobias Brunner 2014-10-13 17:59:47 +02:00
• f502e503fb android: Remove references to libpts Tobias Brunner 2014-10-13 17:18:06 +02:00
• ffa800ce9d libimcv: Remove reference to libpts Tobias Brunner 2014-10-13 17:17:45 +02:00
• 17eed801e7 libimcv: Fix Doxygen comments after merging libpts into libimcv Tobias Brunner 2014-10-13 17:11:57 +02:00
• 4bae9ec8d1 watcher: Doxygen comment fixed Tobias Brunner 2014-10-13 16:56:30 +02:00
• 245979abc0 charon-systemd: Typo in log message fixed Tobias Brunner 2014-10-13 16:51:20 +02:00
• c8719a073d libimcv: Fix harcoded IMCV_DEFAULT_POLICY_SCRIPT name Avesh Agarwal 2014-10-13 16:15:33 +02:00
• 504bcf71b5 testing: Enable nat table for iptables on 3.17 kernels Tobias Brunner 2014-10-13 15:48:55 +02:00
• 472156eea5 ike: Do remote address updates also when behind static NATs Tobias Brunner 2014-10-10 12:55:39 +02:00
• f8a565fbcc ike: Remove redundant check for local NAT when handling changed NAT mappings Tobias Brunner 2014-10-10 12:44:15 +02:00
• cb5ad2ba3d testing: Lower batch size to demonstrated segmetation of TCG/SWID Tag ID Inventory attribute Andreas Steffen 2014-10-11 15:01:21 +02:00
• 8b812065f0 Support of multiple directed segmentation contracts Andreas Steffen 2014-10-11 14:49:23 +02:00
• ab99939628 unit-tests: Updated Makefile Andreas Steffen 2014-10-11 14:48:38 +02:00
• a05ca71d07 unit-tests: Added test for seg_contract_manager Andreas Steffen 2014-10-11 14:47:36 +02:00
• a5e6a479d4 Added KVM config for 3.16 and 3.17 kernels Andreas Steffen 2014-10-11 14:46:38 +02:00
• 4af020be37 Updated build-database.sh script to 3.13.0-37 kernel Andreas Steffen 2014-10-11 11:40:32 +02:00
• 83efded313 testing: Ensure no guest is running when modifying images Tobias Brunner 2014-10-10 18:37:13 +02:00
• b7b2f9379d testing: Enable virtio console for guests Tobias Brunner 2014-10-10 17:37:41 +02:00
• ef90d5ab15 Merge branch 'vici-ruby' Martin Willi 2014-10-10 11:42:28 +02:00
• 7431ad0de5 NEWS: Introduce the vici ruby gem Martin Willi 2014-10-10 11:03:47 +02:00
• 67f9f09dd3 swanctl: Fix exit codes based on errno Martin Willi 2014-10-09 16:48:29 +02:00
• d4d85135c5 vici: Cancel processor before calling library_deinit() Martin Willi 2014-10-09 16:15:29 +02:00
• 3db58e837c vici: Reduce debug level during thread spawning Martin Willi 2014-10-09 16:14:38 +02:00
• 046b547a37 vici: Don't include-depend on libstrongswan for boolean types Martin Willi 2014-10-09 16:11:29 +02:00
• 6f55149335 vici: Document the ruby gem and add some simple examples Martin Willi 2014-10-09 17:22:08 +02:00
• dccb2c6eba vici: Add some simple libvici examples to the README Martin Willi 2014-10-09 16:42:01 +02:00
• 56f17733c9 vici: Document the available vici command and event messages Martin Willi 2014-10-08 18:13:31 +02:00
• f684be6583 vici: Use "gem"-assisted vici ruby gem building and installation Martin Willi 2014-10-08 13:46:22 +02:00
• 409f1fc144 configure: Add global --enable-ruby-gems and --with-rubygemdir options Martin Willi 2014-10-08 13:44:44 +02:00
• 1038d96537 vici: Add a ruby gem providing a native vici interface Martin Willi 2014-10-01 15:59:43 +02:00
• 94d9398202 vici: Return a success result for the clear-creds command Martin Willi 2014-10-06 18:13:39 +02:00
• d39e04b557 vici: Fix message encoding type values in documentation Martin Willi 2014-09-30 18:43:20 +02:00
• 05db0f97e3 ikev1: Add fragmentation support for Windows peers Volker Rümelin 2014-09-25 09:18:17 +02:00
• 3633b80147 eap-radius: Add option to set interval for interim accounting updates Tobias Brunner 2014-10-09 10:10:23 +02:00
• 55758bec3a NEWS: IKEv2 fragmentation mentioned Tobias Brunner 2014-10-10 09:48:06 +02:00
• cb9374009f Merge branch 'ikev2-fragmentation' Tobias Brunner 2014-10-10 09:35:27 +02:00
• 1836c1845b testing: Add ikev2/net2net-fragmentation scenario Tobias Brunner 2014-09-16 16:52:23 +02:00
• 144b40e07c testing: Update ikev1/net2net-fragmentation scenario Tobias Brunner 2014-09-16 16:51:58 +02:00
• 8dbe128c8c message: Limit maximum number of IKEv2 fragments Tobias Brunner 2014-09-16 15:51:21 +02:00
• f00a9c1715 packet: Define a global default maximum size for IKE packets Tobias Brunner 2014-09-16 15:38:38 +02:00
• 03512c47bf message: Ensure a minimum fragment length Tobias Brunner 2014-09-15 17:51:22 +02:00
• f1aa18b2e8 ikev2: Send retransmits using the latest known addresses Tobias Brunner 2014-06-23 10:26:04 +02:00
• b678d9e14f ikev2: Send and receive fragmented IKE messages Tobias Brunner 2014-06-16 15:50:08 +02:00
• 1446fd8ac9 ike: IKE_SA may fragment IKEv2 messages Tobias Brunner 2014-06-16 15:48:47 +02:00
• 7a53fe5511 ike: Do not cache MID of IKEv2 fragments Tobias Brunner 2014-06-16 15:47:03 +02:00
• c0f4936a23 message: Fragment and reassemble IKEv2 messages Tobias Brunner 2014-06-16 15:46:33 +02:00
• e8ffb256b3 message: Handle encrypted fragment payload similar to the encrypted payload Tobias Brunner 2014-06-16 15:38:45 +02:00
• 4c345b15c7 ikev2: Add encrypted fragment payload Tobias Brunner 2014-06-16 15:29:45 +02:00
• edfd33455c encrypted_payload: Encrypted payload can be constructed from plaintext Tobias Brunner 2014-06-16 15:01:28 +02:00
• 1e0d8f3ec0 encrypted_payload: Expose generate() to generate the plaintext Tobias Brunner 2014-06-12 21:42:07 +02:00
• 44996b5866 encrypted_payload: Extract some utility functions Tobias Brunner 2014-06-12 19:04:24 +02:00
• 41751a70d9 message: Split generate() in multiple functions Tobias Brunner 2014-06-12 18:39:30 +02:00
• 34dc37f3cb ikev2: Negotiate support for IKEv2 fragmentation Tobias Brunner 2014-06-06 16:19:55 +02:00