Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 419528f2ac ipsec-types: Add new mode for IP-TFS Tobias Brunner 2025-05-14 10:11:12 +02:00
• 72e3b7dcc8 Merge branch 'per-cpu-sas' Tobias Brunner 2025-05-28 16:36:10 +02:00
• b7d3349000 testing: Add ikev2/per-cpu-sas-encap-transport scenario Tobias Brunner 2021-06-16 09:45:57 +02:00
• 3b2f8cf282 testing: Add ikev2/per-cpu-sas-encap scenario Tobias Brunner 2021-06-15 11:13:35 +02:00
• d83fbe82e4 kernel-netlink: Suppress NAT mapping updates for per-CPU SAs Tobias Brunner 2025-04-22 11:19:34 +02:00
• 14e1ec2b77 child-sa: Configure UDP encapsulation for per-CPU SAs Tobias Brunner 2021-06-15 11:11:14 +02:00
• 73083503f2 vici: Make UDP encapsulation for per-CPU SAs configurable Tobias Brunner 2021-06-15 11:10:40 +02:00
• d594171d9e child-cfg: Add flag to enable UDP encapsulation for per-CPU SAs Tobias Brunner 2021-06-15 09:46:31 +02:00
• bf34484d24 testing: Add per-CPU SA test scenario Tobias Brunner 2021-06-02 17:07:01 +02:00
• e24edb2991 testing: Configure multiple virtual CPUs for moon and sun Tobias Brunner 2021-05-31 16:46:41 +02:00
• 0edaadfc94 testing: Enable SMP support for latest kernels Tobias Brunner 2021-05-31 17:09:28 +02:00
• f95bdb6fb0 swanctl: Report per-CPU information in --list-sas Tobias Brunner 2021-05-20 10:32:09 +02:00
• c176d32a73 vici: Report per-CPU SA information Tobias Brunner 2021-05-20 10:19:41 +02:00
• fbfae44dd1 vici: Make per-CPU CHILD_SAs configurable Tobias Brunner 2021-05-20 10:12:30 +02:00
• a950ca3ec2 kernel-netlink: Forward CPU ID from acquires Tobias Brunner 2021-05-20 10:04:46 +02:00
• 4a595508b7 trap-manager: Add support to handle acquires for per-CPU SAs Tobias Brunner 2021-05-20 09:46:55 +02:00
• 65b7f9d563 kernel-handler: Log CPU ID that's passed with an acquire Tobias Brunner 2022-09-26 16:55:00 +02:00
• d6eed3979b kernel-interface: Optionally pass CPU ID for which an acquire was triggered Tobias Brunner 2022-09-26 16:47:46 +02:00
• 2082fa5dd2 ike-sa: Accept optional CPU ID when initiating CHILD_SAs Tobias Brunner 2021-05-19 15:11:53 +02:00
• 8e7f379f71 ike-sa: Sort CHILD_SAs by CPU ID Tobias Brunner 2021-05-20 09:41:54 +02:00
• af34b5b1dc child-rekey: Maintain per-CPU values during rekeying Tobias Brunner 2021-05-19 12:00:39 +02:00
• bdf882d3af child-create: Add support to negotiate per-CPU SAs Tobias Brunner 2021-05-19 10:59:03 +02:00
• 3a8bb93761 updown: Don't call the script for per-CPU SAs Tobias Brunner 2021-05-31 16:12:27 +02:00
• 297be45275 ha: Ignore per-CPU CHILD_SAs Tobias Brunner 2021-05-31 15:26:27 +02:00
• 17f2188756 forecast: Ignore per-CPU CHILD_SAs Tobias Brunner 2021-05-31 15:21:46 +02:00
• 5faf884285 connmark: Ignore per-CPU CHILD_SAs Tobias Brunner 2021-05-31 15:06:41 +02:00
• a505f4b9b0 child-sa: Add support for per-CPU SAs Tobias Brunner 2021-05-11 17:55:21 +02:00
• bdfcfea1f2 kernel-netlink: Add support to enable per-CPU acquires on policies Tobias Brunner 2021-05-11 16:24:38 +02:00
• 53be94d06c kernel-netlink: Add support to set CPU ID on SA Tobias Brunner 2021-05-11 16:07:39 +02:00
• 12395cedf3 ipsec-types: Add identifier for the maximum (=no) CPU ID Tobias Brunner 2021-05-10 16:28:15 +02:00
• aa1322aed5 include: Add XFRM identifiers for per-CPU SAs/acquires Tobias Brunner 2021-05-10 16:23:20 +02:00
• d4575da53c child-cfg: Add flag to enable per-CPU SAs Tobias Brunner 2021-05-11 14:46:29 +02:00
• 749814a75f notify-payload: Add notify types for per-resource CHILD_SAs Tobias Brunner 2021-05-11 14:21:25 +02:00
• 8f6e3c164a testing: Include the kernel build number Tobias Brunner 2025-04-17 10:03:56 +02:00
• b6a4cfc705 Merge branch 'acquires-seq' Tobias Brunner 2025-05-28 16:30:56 +02:00
• 8cb5918b0c testing: Add ikev2/net2net-route-narrow scenario Tobias Brunner 2025-03-24 14:02:25 +01:00
• 6c7c539eaf child-create: Consider previous TS when checking for duplicates Tobias Brunner 2025-04-02 14:49:58 +02:00
• 58d6778adb child-sa: Add helper to check if a list of TS match negotiated TS Tobias Brunner 2025-04-02 14:39:38 +02:00
• e7fc7a4ecc child-create: Maintain traffic selectors during rekeying/reauthentication Tobias Brunner 2025-04-01 17:33:35 +02:00
• 9205458355 child-create: Use more generic method to pass information from previous SA Tobias Brunner 2025-04-01 17:28:28 +02:00
• ad1ad2159f child-cfg: Use traffic selector list Tobias Brunner 2025-04-01 10:02:31 +02:00
• 4b468126ca traffic-selector-list: Add helper class to manage a collection of TS Tobias Brunner 2025-03-25 12:43:26 +01:00
• 79815b4e67 trap-manager: Set seq. no. for CHILD_SAs not initiated by an acquire Tobias Brunner 2025-03-24 18:03:42 +01:00
• ac0c73a412 child-create: Trigger CHILD_INSTALLING event after setting traffic selectors Tobias Brunner 2025-03-24 17:56:46 +01:00
• 5bb6f636ad child-create: Use helper to compare packet TS against CHILD_SAs Tobias Brunner 2025-03-24 16:48:19 +01:00
• 769d9a12aa child-sa: Add helper to check if two TS match negotiated TS Tobias Brunner 2025-03-24 16:47:54 +01:00
• 65b810e9b0 acquire-job: Use helpers to manage acquire data Tobias Brunner 2025-03-24 15:53:19 +01:00
• c563b0d930 kernel-listener: Add helpers to clone/destroy acquire data Tobias Brunner 2025-03-24 15:53:00 +01:00
• 6ae29af18b child-create: Consider triggering TS when checking for duplicate Tobias Brunner 2025-03-24 15:32:57 +01:00
• 6e274271af vici: Include reqid when listing trap policies Tobias Brunner 2025-03-21 14:51:08 +01:00
• 5624f7ffaa kernel-pfkey: Don't use TS from acquire in tunnel mode Tobias Brunner 2025-04-08 09:02:12 +02:00
• b024b7e9a6 kernel-netlink: Add support for acquire sequence numbers Tobias Brunner 2025-03-19 16:27:39 +01:00
• 46c338a78f kernel-interface: Change reqid if seq. nos. are supported and narrowing occurred Tobias Brunner 2025-03-20 14:52:32 +01:00
• c5b2a8eaa3 child-cfg: Use separate method to get configured traffic selectors Tobias Brunner 2025-03-19 15:34:58 +01:00
• 84da416082 trap-manager: Use sequence numbers to identify acquires Tobias Brunner 2025-03-19 14:20:46 +01:00
• 82c82cbbd6 ike: Support optional acquire sequence numbers when creating CHILD_SAs Tobias Brunner 2025-03-19 13:28:44 +01:00
• 0c9bac73d9 child-sa: Store and propagate optional acquire sequence number Tobias Brunner 2025-03-19 13:28:12 +01:00
• 3e6d7db5e3 kernel-interface: Add members for optional acquire sequence number Tobias Brunner 2025-03-19 13:27:20 +01:00
• 301887b865 Merge branch 'regex-ids' Tobias Brunner 2025-05-28 09:58:46 +02:00
• 981c82ab50 vici: Add support for POSIX regular expressions in identity fields Tobias Brunner 2025-04-16 14:30:30 +02:00
• 10c2985cdd conf: Escape " and \ in man page output Tobias Brunner 2025-04-16 15:30:35 +02:00
• 7de05b918c identification: Add support for POSIX regular expressions Tobias Brunner 2025-04-15 15:09:20 +02:00
• 2b1f0e8c6e debug: Use separate log group for watcher_t Tobias Brunner 2025-05-27 11:27:41 +02:00
• 4703ef00ce github: Use AWS-LC 1.52.0 for tests Tobias Brunner 2025-05-26 17:24:15 +02:00
• 29986dd1e5 wolfssl: Remove unused drbg_t instance when building without testable KE Tobias Brunner 2025-05-23 11:34:35 +02:00
• e3fa72b81a ml: Remove unused drbg_t instance when building without testable KE Tobias Brunner 2025-05-23 11:34:18 +02:00
• 07a9926464 botan: Remove unused drbg_t instance when building without testable KE Tobias Brunner 2025-05-23 11:33:32 +02:00
• 37ec770758 pki: Reduce indentation in usage output and print command description Tobias Brunner 2025-05-22 15:13:17 +02:00
• 5f4988eb7c swanctl: Reduce indentation in usage output and print command descriptions Tobias Brunner 2025-05-22 14:56:24 +02:00
• 9a9d0a0bf7 swanctl: Document maximum log level of messages received by --log Tobias Brunner 2025-05-22 14:18:49 +02:00
• 362fa94ef5 vici: Document that the log event only receives messages on level 0 and 1 Tobias Brunner 2025-05-22 14:05:51 +02:00
• 688b9e27d5 Merge branch 'initiate-cancel' Tobias Brunner 2025-05-19 17:21:57 +02:00
• f8e5e38b12 vici: Make threads handling requests get canceled explicitly Tobias Brunner 2025-05-13 16:47:13 +02:00
• 8d3855ba31 vici: Don't pass stack variable to thread cleanup handler Tobias Brunner 2025-05-13 16:43:07 +02:00
• 367e782054 controller: Avoid memory leak if initiate job is never executed Tobias Brunner 2025-05-13 16:35:40 +02:00
• 94cc07cab4 uci: Remove obsolete and broken plugin Tobias Brunner 2025-05-19 15:49:58 +02:00
• 2b3a5172d8 configure: Add missing dependency of lib-prefix.m4 Tobias Brunner 2025-05-13 17:51:09 +02:00
• e8e5e2d441 configure: Simplify inclusion of M4 macros Tobias Brunner 2025-05-13 17:50:35 +02:00
• 99fda969b4 openssl: Fix AWS-LC build Gerardo Ravago 2025-05-12 14:17:46 -04:00
• 7ec0101250 Include lib-prefix.m4 directly and remove gettext dependency Tobias Brunner 2025-05-12 17:29:54 +02:00
• 198d112745 github: Use AWS-LC 1.51.2 for tests Tobias Brunner 2025-05-12 15:59:40 +02:00
• 2ee768ec4e ha: Fix arguments in debug statement when destroying incomplete IKE_SAs Tobias Brunner 2025-05-12 15:56:27 +02:00
• a1a477528f Use wolfSSL 5.8.0 for tests Tobias Brunner 2025-04-25 08:26:58 +02:00
• 5863b8d89b wolfssl: Update ML-KEM API for wolfSSL 5.8.0 release Tobias Brunner 2025-04-25 08:26:24 +02:00
• 4249d721ec testing: Add rw-eap-id-switch scenario Tobias Brunner 2025-03-04 13:18:21 +01:00
• 2f2e4abe3c ikev2: Add support to switch peer configs based on EAP-Identities Tobias Brunner 2025-03-04 11:14:14 +01:00
• 651a5b0ded android: Only select default ABIs when building OpenSSL Tobias Brunner 2025-03-21 08:48:34 +01:00
• 09edb565ba android: Skip unknown ABIs when building OpenSSL Tobias Brunner 2025-03-21 08:44:15 +01:00
• 0f1f375a21 android: Protect but don't keep track of sockets used for source address lookups Tobias Brunner 2025-03-07 10:14:29 +01:00
• 77f99df656 android: Remove special handling of legacy Android versions in native code Tobias Brunner 2025-03-07 10:10:56 +01:00
• 523067e6db init: Only install legacy service unit if starter/stroke is enabled Tobias Brunner 2025-03-17 08:10:05 +01:00
• 8ae00c334a charon-nm: Mark VPN connection as persistent Tobias Brunner 2025-03-20 09:26:33 +01:00
• 57e74f64b3 kernel-netlink: Enable UDP GRO Tobias Brunner 2025-03-25 13:44:44 +01:00
• d54a29cc5c github: Use OpenSSL 3.5.0 to test ML-KEM Tobias Brunner 2025-02-21 16:11:04 +01:00
• b914333ab4 openssl: Add support for ML-KEM with OpenSSL 3.5 Tobias Brunner 2025-02-20 14:07:06 +01:00
• f2e88b169f leak-detective: Whitelist OpenSSL 3.5 functions Tobias Brunner 2025-02-20 11:49:37 +01:00
• fd17d154e5 github: Build OpenSSL from the Git repository instead of a tarball Tobias Brunner 2025-02-21 16:05:51 +01:00
• defbabd724 tty: Produce colored output in CI environments Tobias Brunner 2025-04-10 09:06:18 +02:00
• 245ea0597d vici: Increase buffer to hold uint64_t when parsing packet limits Tobias Brunner 2025-04-07 14:59:11 +02:00
• ed8c08fbe7 vici: Improve byte lifetime parsing Thomas Egerer 2025-04-07 11:43:59 +02:00